@gatwech/auth 1.0.0-beta.20 → 1.0.0-beta.22

package/dist/db/index.d.mts

@@ -1,7 +1,7 @@
 import "../helper-BgOIGHsu.mjs";
-import { $t as mergeSchema, Jt as convertFromDB, Qt as toZodSchema, Sn as createFieldAttribute, Xt as getAdapter, Yt as convertToDB, Zt as FieldAttributeToSchema, _n as InferFieldsInput, an as parseSessionOutput, bn as InferValueType, cn as createInternalAdapter, dn as getMigrations, en as parseAccountInput, fn as matchType, gn as InferFieldsFromPlugins, hn as InferFieldsFromOptions, in as parseSessionInput, ln as getAuthTables, mn as InferAdditionalFieldsFromPluginOptions, nn as parseAdditionalUserInput, on as parseUserInput, pn as FieldAttributeToObject, qt as getWithHooks, rn as parseInputData, sn as parseUserOutput, tn as parseAccountOutput, un as getSchema, vn as InferFieldsInputClient, xn as PluginFieldAttribute, yn as InferFieldsOutput } from "../index-BNhJglHC.mjs";
+import { $t as mergeSchema, Jt as convertFromDB, Qt as toZodSchema, Sn as createFieldAttribute, Xt as getAdapter, Yt as convertToDB, Zt as FieldAttributeToSchema, _n as InferFieldsInput, an as parseSessionOutput, bn as InferValueType, cn as createInternalAdapter, dn as getMigrations, en as parseAccountInput, fn as matchType, gn as InferFieldsFromPlugins, hn as InferFieldsFromOptions, in as parseSessionInput, ln as getAuthTables, mn as InferAdditionalFieldsFromPluginOptions, nn as parseAdditionalUserInput, on as parseUserInput, pn as FieldAttributeToObject, qt as getWithHooks, rn as parseInputData, sn as parseUserOutput, tn as parseAccountOutput, un as getSchema, vn as InferFieldsInputClient, xn as PluginFieldAttribute, yn as InferFieldsOutput } from "../index-DngQlUSI.mjs";
 import "../types-DNQ9XQrB.mjs";
-import "../index-Df0KhQRf-BEa5tdwJ.mjs";
+import "../index-BL_t8cRp-C4QYBsac.mjs";
 import "../plugins-Dy_FrD4Y.mjs";
 export * from "@gatwech/core/db";
 export { FieldAttributeToObject, FieldAttributeToSchema, InferAdditionalFieldsFromPluginOptions, InferFieldsFromOptions, InferFieldsFromPlugins, InferFieldsInput, InferFieldsInputClient, InferFieldsOutput, InferValueType, PluginFieldAttribute, convertFromDB, convertToDB, createFieldAttribute, createInternalAdapter, getAdapter, getAuthTables, getMigrations, getSchema, getWithHooks, matchType, mergeSchema, parseAccountInput, parseAccountOutput, parseAdditionalUserInput, parseInputData, parseSessionInput, parseSessionOutput, parseUserInput, parseUserOutput, toZodSchema };

package/dist/db/index.mjs

@@ -5,7 +5,7 @@ import "../crypto-CCyta8xj.mjs";
 import "../jwt-CmxZAGe2.mjs";
 import "../random-32E3cU5o.mjs";
 import { a as parseAdditionalUserInput, c as parseSessionOutput, i as parseAccountOutput, l as parseUserInput, n as mergeSchema, o as parseInputData, r as parseAccountInput, s as parseSessionInput, u as parseUserOutput } from "../date-CMr04reD.mjs";
-import { a as createInternalAdapter, c as matchType, i as toZodSchema, l as getSchema, n as convertToDB, o as getWithHooks, r as getAdapter, s as getMigrations, t as convertFromDB, u as createFieldAttribute } from "../db-7vHnL1XA.mjs";
+import { a as createInternalAdapter, c as matchType, i as toZodSchema, l as getSchema, n as convertToDB, o as getWithHooks, r as getAdapter, s as getMigrations, t as convertFromDB, u as createFieldAttribute } from "../db-CV59HpEF.mjs";
 import "../dialect-HsWUfpYY.mjs";
 import { t as getAuthTables } from "../get-tables-CKvSyDST.mjs";
 import "../types-DCPpFKUB.mjs";

package/dist/{db-7vHnL1XA.mjs → db-CV59HpEF.mjs}

@@ -384,7 +384,7 @@ function getWithHooks(adapter, ctx) {
 		}) : customUpdated;
 		for (const hook of hooks || []) {
 			const toRun = hook[model]?.update?.after;
-			if (toRun) await toRun(updated, context);
+			if (toRun) await toRun(updated, context, actualData);
 		}
 		return updated;
 	}
@@ -410,7 +410,7 @@ function getWithHooks(adapter, ctx) {
 		}) : customUpdated;
 		for (const hook of hooks || []) {
 			const toRun = hook[model]?.update?.after;
-			if (toRun) await toRun(updated, context);
+			if (toRun) await toRun(updated, context, actualData);
 		}
 		return updated;
 	}

package/dist/{email-otp-Dw0DypjQ.mjs → email-otp-BmgAht1S.mjs}

@@ -1,4 +1,4 @@
-import { t as APIError } from "./api-Dk8Yj_J5.mjs";
+import { t as APIError } from "./api-BV65Y-Rk.mjs";
 import { n as symmetricEncrypt, t as symmetricDecrypt } from "./crypto-CCyta8xj.mjs";
 import { t as generateRandomString } from "./random-32E3cU5o.mjs";
 import { c as setSessionCookie, s as setCookieCache } from "./cookies-BuvlgcA-.mjs";

package/dist/{generic-oauth-DFj27JY8.mjs → generic-oauth-C5_AXj2z.mjs}

@@ -1,5 +1,5 @@
 import { i as parseState, r as generateState } from "./utils-B03WRaGi.mjs";
-import { O as handleOAuthUserInfo } from "./api-Dk8Yj_J5.mjs";
+import { O as handleOAuthUserInfo } from "./api-BV65Y-Rk.mjs";
 import { c as setSessionCookie } from "./cookies-BuvlgcA-.mjs";
 import { u as sessionMiddleware } from "./session-BB3oqApE.mjs";
 import { BASE_ERROR_CODES } from "@gatwech/core/error";

package/dist/{haveibeenpwned-CzNda7Tn.mjs → haveibeenpwned-_3a5amT-.mjs}

@@ -1,4 +1,4 @@
-import { t as APIError } from "./api-Dk8Yj_J5.mjs";
+import { t as APIError } from "./api-BV65Y-Rk.mjs";
 import { defineErrorCodes } from "@gatwech/core/utils";
 import { createHash } from "@gatwech/utils/hash";
 import { betterFetch } from "@better-fetch/fetch";

package/dist/{index-D57DuhZR.d.mts → index-AiKdOFSd.d.mts}

@@ -1,10 +1,10 @@
-import { g as User$1 } from "./index-BNhJglHC.mjs";
-import { n as DBPrimitive } from "./index-Df0KhQRf-BEa5tdwJ.mjs";
+import { g as User$1 } from "./index-DngQlUSI.mjs";
+import { n as DBPrimitive } from "./index-BL_t8cRp-C4QYBsac.mjs";
 import { t as InferOptionSchema } from "./plugins-Dy_FrD4Y.mjs";
 import { o as Statements } from "./index-CxlWnL9c.mjs";
-import * as _gatwech_core53 from "@gatwech/core";
+import * as _gatwech_core57 from "@gatwech/core";
 import { AuthContext, GenericEndpointContext, HookEndpointContext } from "@gatwech/core";
-import * as better_call229 from "better-call";
+import * as better_call271 from "better-call";
 import { AuthEndpoint, AuthMiddleware, createAuthEndpoint as createAuthEndpoint$1, createAuthMiddleware as createAuthMiddleware$1, optionsMiddleware } from "@gatwech/core/api";
 import * as zod381 from "zod";
 import * as _gatwech_core_db14 from "@gatwech/core/db";
@@ -547,8 +547,8 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
   };
   hooks: {
     before: {
-      matcher: (ctx: _gatwech_core53.HookEndpointContext) => boolean;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+      matcher: (ctx: _gatwech_core57.HookEndpointContext) => boolean;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
         user: {
           id: string;
           createdAt: Date;
@@ -569,7 +569,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
           expiresAt: Date;
         };
       } | {
-        context: better_call229.MiddlewareContext<better_call229.MiddlewareOptions, _gatwech_core53.AuthContext<_gatwech_core53.PayvoAuthOptions> & {
+        context: better_call271.MiddlewareContext<better_call271.MiddlewareOptions, _gatwech_core57.AuthContext<_gatwech_core57.PayvoAuthOptions> & {
           returned?: unknown | undefined;
           responseHeaders?: Headers | undefined;
         }>;
@@ -621,7 +621,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -855,7 +855,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -933,7 +933,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -993,7 +993,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
         query: zod381.ZodObject<{
           id: zod381.ZodString;
         }, zod_v4_core51.$strip>;
-        use: ((inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1186,7 +1186,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -1416,7 +1416,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -1434,7 +1434,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
         body: zod381.ZodObject<{
           keyId: zod381.ZodString;
         }, zod_v4_core51.$strip>;
-        use: ((inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1533,7 +1533,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -1590,7 +1590,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       }[]>;
       options: {
         method: "GET";
-        use: ((inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1769,7 +1769,7 @@ declare const apiKey: (options?: ApiKeyOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -1959,7 +1959,7 @@ interface LastLoginMethodOptions {
  */
 declare const lastLoginMethod: <O extends LastLoginMethodOptions>(userConfig?: O | undefined) => {
   id: "last-login-method";
-  init(ctx: _gatwech_core53.AuthContext<_gatwech_core53.PayvoAuthOptions>): {
+  init(ctx: _gatwech_core57.AuthContext<_gatwech_core57.PayvoAuthOptions>): {
     options: {
       databaseHooks: {
         user: {
@@ -1972,7 +1972,7 @@ declare const lastLoginMethod: <O extends LastLoginMethodOptions>(userConfig?: O
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<{
+            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<{
               data: {
                 lastLoginMethod: any;
                 id: string;
@@ -1997,7 +1997,7 @@ declare const lastLoginMethod: <O extends LastLoginMethodOptions>(userConfig?: O
               token: string;
               ipAddress?: string | null | undefined;
               userAgent?: string | null | undefined;
-            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<void>;
+            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<void>;
           };
         };
       };
@@ -2006,7 +2006,7 @@ declare const lastLoginMethod: <O extends LastLoginMethodOptions>(userConfig?: O
   hooks: {
     after: {
       matcher(): true;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<void>;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<void>;
     }[];
   };
   schema: O["storeInDatabase"] extends true ? {
@@ -2230,6 +2230,10 @@ interface AuditLogOptions {
     headers?: Record<string, string> | undefined;
     /**
      * Configure how events are batched before they are sent
+     *
+     * @deprecated Ignored: each event is sent as it's recorded, in the
+     * background. Use `advanced.backgroundTasks` to keep serverless
+     * functions alive until it's sent.
      */
     batch?: {
       /**
@@ -2276,6 +2280,24 @@ interface AuditLogOptions {
    * @default ["admin"]
    */
   adminRoles?: string[] | undefined;
+  /**
+   * Organization member roles allowed to read the events of their
+   * organization through `/audit-log/get-all-audit-logs`
+   *
+   * @default ["owner", "admin"]
+   */
+  organizationAdminRoles?: string[] | undefined;
+  /**
+   * Include failed sign-ins and security decisions made on a user's account
+   * before they were signed in in their own events. They are matched by the
+   * email that was typed, in lower case or as the user's email is stored, so
+   * anyone's attempt shows up; the IP address, user agent, visitor id and
+   * details are left out. Only the latest 50 events since the account was
+   * created are included.
+   *
+   * @default true
+   */
+  showAttemptsOnOwnAccount?: boolean | undefined;
   /**
    * Custom schema for the audit log plugin
    */
@@ -2361,6 +2383,10 @@ declare const schema$1: {
         type: "string";
         required: true;
       };
+      path: {
+        type: "string";
+        required: false;
+      };
       ipAddress: {
         type: "string";
         required: false;
@@ -2634,9 +2660,37 @@ interface SentinelOptions {
        * @default "block"
        */
       action?: SecurityAction | undefined;
+      /**
+       * Maximum accounts per IP address within `ipWindowSeconds`. This
+       * limit catches sign-ups that send no visitor id, or a different
+       * one each time, so it is higher than the per-visitor limit to
+       * allow for networks that share an address. Acts with `action`.
+       *
+       * @default 10
+       */
+      maxAccountsPerIp?: number | undefined;
+      /**
+       * How long sign-ups are remembered per IP address, in seconds.
+       * Clamped to between 1 and 365 days.
+       *
+       * @default 86400 (1 day)
+       */
+      ipWindowSeconds?: number | undefined;
+      /**
+       * Challenge sign-ups whose visitor id is missing or wasn't
+       * verified by the identification service. Without the service
+       * (`kvUrl` and an API key), every visitor id is unverified.
+       *
+       * Visitor limits are only reliable with the identification
+       * service, since a client can send any id otherwise.
+       *
+       * @default false
+       */
+      requireVerifiedVisitor?: boolean | undefined;
     } | undefined;
     /**
-     * Detect automated clients. `true` challenges them.
+     * Detect automated clients on sign-in, sign-up, password reset and
+     * verification requests. `true` challenges them.
      */
     botBlocking?: (boolean | {
       action: SecurityAction;
@@ -2842,7 +2896,7 @@ declare function parsePowHeader(value: string | null | undefined): {
 //#region src/plugins/sentinel/index.d.ts
 declare const sentinel: (options?: SentinelOptions | undefined) => {
   id: "sentinel";
-  init(ctx: AuthContext<_gatwech_core53.PayvoAuthOptions>): {
+  init(ctx: AuthContext<_gatwech_core57.PayvoAuthOptions>): {
     options: {
       databaseHooks: {
         user: {
@@ -2855,7 +2909,7 @@ declare const sentinel: (options?: SentinelOptions | undefined) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<{
+            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<{
               data: {
                 normalizedEmail: string;
                 id: string;
@@ -2875,7 +2929,7 @@ declare const sentinel: (options?: SentinelOptions | undefined) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<void>;
+            } & Record<string, unknown>, context: GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<void>;
           };
           update: {
             before(data: Partial<{
@@ -2903,28 +2957,28 @@ declare const sentinel: (options?: SentinelOptions | undefined) => {
       };
     };
   } | undefined;
-  onRequest(request: Request, ctx: AuthContext<_gatwech_core53.PayvoAuthOptions>): Promise<{
+  onRequest(request: Request, ctx: AuthContext<_gatwech_core57.PayvoAuthOptions>): Promise<{
     response: Response;
   } | undefined>;
   hooks: {
     before: ({
-      matcher(context: _gatwech_core53.HookEndpointContext): boolean;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+      matcher(context: _gatwech_core57.HookEndpointContext): boolean;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
         context: {
           body: any;
         };
       } | undefined>;
     } | {
-      matcher(context: _gatwech_core53.HookEndpointContext): boolean;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<void>;
+      matcher(context: _gatwech_core57.HookEndpointContext): boolean;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<void>;
     })[];
     after: ({
-      matcher(context: _gatwech_core53.HookEndpointContext): boolean;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<void>;
+      matcher(context: _gatwech_core57.HookEndpointContext): boolean;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<void>;
     } | {
-      matcher(context: _gatwech_core53.HookEndpointContext): boolean;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<({
-        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_call229.Status;
+      matcher(context: _gatwech_core57.HookEndpointContext): boolean;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<({
+        status: ("OK" | "CREATED" | "ACCEPTED" | "NO_CONTENT" | "MULTIPLE_CHOICES" | "MOVED_PERMANENTLY" | "FOUND" | "SEE_OTHER" | "NOT_MODIFIED" | "TEMPORARY_REDIRECT" | "BAD_REQUEST" | "UNAUTHORIZED" | "PAYMENT_REQUIRED" | "FORBIDDEN" | "NOT_FOUND" | "METHOD_NOT_ALLOWED" | "NOT_ACCEPTABLE" | "PROXY_AUTHENTICATION_REQUIRED" | "REQUEST_TIMEOUT" | "CONFLICT" | "GONE" | "LENGTH_REQUIRED" | "PRECONDITION_FAILED" | "PAYLOAD_TOO_LARGE" | "URI_TOO_LONG" | "UNSUPPORTED_MEDIA_TYPE" | "RANGE_NOT_SATISFIABLE" | "EXPECTATION_FAILED" | "I'M_A_TEAPOT" | "MISDIRECTED_REQUEST" | "UNPROCESSABLE_ENTITY" | "LOCKED" | "FAILED_DEPENDENCY" | "TOO_EARLY" | "UPGRADE_REQUIRED" | "PRECONDITION_REQUIRED" | "TOO_MANY_REQUESTS" | "REQUEST_HEADER_FIELDS_TOO_LARGE" | "UNAVAILABLE_FOR_LEGAL_REASONS" | "INTERNAL_SERVER_ERROR" | "NOT_IMPLEMENTED" | "BAD_GATEWAY" | "SERVICE_UNAVAILABLE" | "GATEWAY_TIMEOUT" | "HTTP_VERSION_NOT_SUPPORTED" | "VARIANT_ALSO_NEGOTIATES" | "INSUFFICIENT_STORAGE" | "LOOP_DETECTED" | "NOT_EXTENDED" | "NETWORK_AUTHENTICATION_REQUIRED") | better_call271.Status;
         body: ({
           message?: string;
           code?: string;
@@ -3019,6 +3073,10 @@ declare const sentinel: (options?: SentinelOptions | undefined) => {
           type: "string";
           required: true;
         };
+        path: {
+          type: "string";
+          required: false;
+        };
         ipAddress: {
           type: "string";
           required: false;
@@ -3111,6 +3169,9 @@ declare const sentinel: (options?: SentinelOptions | undefined) => {
         maxAccountsPerVisitor?: number | undefined;
         retentionSeconds?: number | undefined;
         action?: SecurityAction | undefined;
+        maxAccountsPerIp?: number | undefined;
+        ipWindowSeconds?: number | undefined;
+        requireVerifiedVisitor?: boolean | undefined;
       } | undefined;
       botBlocking?: (boolean | {
         action: SecurityAction;
@@ -3164,7 +3225,7 @@ declare const AUDIT_LOG_ERROR_CODES: {
 };
 declare const auditLog: (options?: AuditLogOptions | undefined) => {
   id: "audit-log";
-  init(ctx: AuthContext<_gatwech_core53.PayvoAuthOptions>): {
+  init(ctx: AuthContext<_gatwech_core57.PayvoAuthOptions>): {
     options: {
       databaseHooks: {
         user: {
@@ -3177,10 +3238,10 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, context: _gatwech_core53.GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<void>;
+            } & Record<string, unknown>, context: _gatwech_core57.GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<void>;
           };
           update: {
-            before(data: Partial<{
+            after(user: {
               id: string;
               createdAt: Date;
               updatedAt: Date;
@@ -3188,18 +3249,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            }> & Record<string, unknown>, context: _gatwech_core53.GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<{
-              data: Partial<{
-                id: string;
-                createdAt: Date;
-                updatedAt: Date;
-                email: string;
-                emailVerified: boolean;
-                name: string;
-                image?: string | null | undefined;
-              }> & Record<string, unknown>;
-            }>;
-            after(user: {
+            } & Record<string, unknown>, context: _gatwech_core57.GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined, data: (Partial<{
               id: string;
               createdAt: Date;
               updatedAt: Date;
@@ -3207,7 +3257,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, context: _gatwech_core53.GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<void>;
+            }> & Record<string, unknown>) | undefined): Promise<void>;
           };
           delete: {
             after(user: {
@@ -3218,7 +3268,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, context: _gatwech_core53.GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<void>;
+            } & Record<string, unknown>, context: _gatwech_core57.GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<void>;
           };
         };
         session: {
@@ -3232,7 +3282,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
               token: string;
               ipAddress?: string | null | undefined;
               userAgent?: string | null | undefined;
-            } & Record<string, unknown>, context: _gatwech_core53.GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<void>;
+            } & Record<string, unknown>, context: _gatwech_core57.GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<void>;
           };
         };
         account: {
@@ -3251,7 +3301,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
               refreshTokenExpiresAt?: Date | null | undefined;
               scope?: string | null | undefined;
               password?: string | null | undefined;
-            }, context: _gatwech_core53.GenericEndpointContext<_gatwech_core53.PayvoAuthOptions> | undefined): Promise<void>;
+            }, context: _gatwech_core57.GenericEndpointContext<_gatwech_core57.PayvoAuthOptions> | undefined): Promise<void>;
           };
         };
       };
@@ -3259,12 +3309,12 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
   };
   hooks: {
     before: {
-      matcher(context: _gatwech_core53.HookEndpointContext): boolean;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<void>;
+      matcher(context: _gatwech_core57.HookEndpointContext): boolean;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<void>;
     }[];
     after: {
-      matcher(context: _gatwech_core53.HookEndpointContext): boolean;
-      handler: (inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<void>;
+      matcher(context: _gatwech_core57.HookEndpointContext): boolean;
+      handler: (inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<void>;
     }[];
   };
   endpoints: {
@@ -3293,7 +3343,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -3314,7 +3364,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
       }>;
       options: {
         method: "GET";
-        use: ((inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3461,7 +3511,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -3482,7 +3532,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
       }>;
       options: {
         method: "GET";
-        use: ((inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3620,7 +3670,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
       } & {
         asResponse?: boolean;
         returnHeaders?: boolean;
-        use?: better_call229.Middleware[];
+        use?: better_call271.Middleware[];
         path?: string;
       } & {
         asResponse?: AsResponse | undefined;
@@ -3635,7 +3685,7 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
       }>;
       options: {
         method: "GET";
-        use: ((inputContext: better_call229.MiddlewareInputContext<better_call229.MiddlewareOptions>) => Promise<{
+        use: ((inputContext: better_call271.MiddlewareInputContext<better_call271.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3750,6 +3800,8 @@ declare const auditLog: (options?: AuditLogOptions | undefined) => {
     database: boolean;
     trackFailedSignIns: boolean;
     adminRoles: string[];
+    organizationAdminRoles: string[];
+    showAttemptsOnOwnAccount: boolean;
     remote?: {
       apiUrl?: string | undefined;
       apiKey?: string | undefined;