@gatwech/auth 1.0.0-beta.24 → 1.0.0-beta.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (90) hide show
  1. package/dist/adapters/index.d.mts +1 -1
  2. package/dist/api/index.d.mts +1 -1
  3. package/dist/{audit-log-DhRRCMrv.mjs → audit-log-CQnf8nrN.mjs} +442 -46
  4. package/dist/client/index.d.mts +1 -1
  5. package/dist/client/plugins/index.d.mts +46 -46
  6. package/dist/client/plugins/index.mjs +2 -2
  7. package/dist/client/react/index.d.mts +15 -15
  8. package/dist/{client-CMsC6-rl.mjs → client-BkpNva-h.mjs} +3 -2
  9. package/dist/{client-CGV_kj99.d.mts → client-g0OAVuPQ.d.mts} +1 -1
  10. package/dist/{client-CT-acJeN.d.mts → client-zkWmSxqy.d.mts} +7 -4
  11. package/dist/cookies/index.d.mts +2 -2
  12. package/dist/db/index.d.mts +1 -1
  13. package/dist/{index-Czr_eQFE.d.mts → index-B4HTudhm.d.mts} +6 -6
  14. package/dist/{index-DYqQWdEv.d.mts → index-BHiF_ZfZ.d.mts} +13 -13
  15. package/dist/{index-Dmjw6re9.d.mts → index-BX55rZO5.d.mts} +2 -2
  16. package/dist/{index-Clwezlxm.d.mts → index-BfwCJQfM.d.mts} +8 -8
  17. package/dist/{index-DGRGLg16.d.mts → index-BhbilPfs.d.mts} +2 -2
  18. package/dist/{index-JzSy-vFn.d.mts → index-Bi-vEjDm.d.mts} +166 -166
  19. package/dist/{index-Cl9ITXy1.d.mts → index-BifhxQ8O.d.mts} +10 -10
  20. package/dist/{index-DWGj7du8.d.mts → index-BiomZttP.d.mts} +19 -19
  21. package/dist/{index-Hoybqpnt.d.mts → index-BoHrBgTB.d.mts} +9 -9
  22. package/dist/{index-UDzaYKxq.d.mts → index-C5W_sTlp.d.mts} +9 -9
  23. package/dist/{index-CLhlur69.d.mts → index-CNyQFga7.d.mts} +6 -6
  24. package/dist/{index-CZtQ0rUe.d.mts → index-CTjXncwM.d.mts} +113 -113
  25. package/dist/{index-CGGitykk.d.mts → index-CUUaJp3R.d.mts} +7 -7
  26. package/dist/{index-D85KXOKz.d.mts → index-CcJjgkwe.d.mts} +3 -3
  27. package/dist/{index-B-i2ob-C.d.mts → index-Cdfh66xb.d.mts} +9 -9
  28. package/dist/{index-CHMYUshk.d.mts → index-DBtm_waB.d.mts} +13 -13
  29. package/dist/{index-DWSbFJWU.d.mts → index-DD_pxX-h.d.mts} +662 -354
  30. package/dist/{index-BYxt8qOP.d.mts → index-DRoa3BGG.d.mts} +33 -33
  31. package/dist/{index-D5cyFBEb.d.mts → index-M0IQ_DTL.d.mts} +4 -4
  32. package/dist/{index-rcUKPBBy.d.mts → index-gRLqvVoc.d.mts} +6 -6
  33. package/dist/{index-Dt6JhAV4.d.mts → index-i1L-uguJ.d.mts} +6 -6
  34. package/dist/{index-B6to9CaK.d.mts → index-kBEBsEUr.d.mts} +1 -1
  35. package/dist/{index-BRUQHEUF.d.mts → index-mDmrBYrk.d.mts} +5 -5
  36. package/dist/index.d.mts +1 -1
  37. package/dist/integrations/next-js.d.mts +4 -4
  38. package/dist/integrations/node.d.mts +1 -1
  39. package/dist/integrations/react-start.d.mts +2 -2
  40. package/dist/oauth2/index.d.mts +1 -1
  41. package/dist/plugins/admin/index.d.mts +2 -2
  42. package/dist/plugins/anonymous/index.d.mts +2 -2
  43. package/dist/plugins/audit-log/client.d.mts +23 -23
  44. package/dist/plugins/audit-log/index.d.mts +23 -23
  45. package/dist/plugins/audit-log/index.mjs +3 -3
  46. package/dist/plugins/bearer/index.d.mts +1 -1
  47. package/dist/plugins/captcha/index.d.mts +1 -1
  48. package/dist/plugins/custom-session/index.d.mts +2 -2
  49. package/dist/plugins/device-authorization/index.d.mts +1 -1
  50. package/dist/plugins/email-otp/index.d.mts +1 -1
  51. package/dist/plugins/generic-oauth/index.d.mts +2 -2
  52. package/dist/plugins/haveibeenpwned/index.d.mts +1 -1
  53. package/dist/plugins/index.d.mts +23 -23
  54. package/dist/plugins/index.mjs +5 -5
  55. package/dist/plugins/jwt/index.d.mts +2 -2
  56. package/dist/plugins/magic-link/index.d.mts +1 -1
  57. package/dist/plugins/multi-session/index.d.mts +1 -1
  58. package/dist/plugins/oauth-proxy/index.d.mts +1 -1
  59. package/dist/plugins/one-tap/index.d.mts +1 -1
  60. package/dist/plugins/one-time-token/index.d.mts +2 -2
  61. package/dist/plugins/one-time-token/index.mjs +4 -4
  62. package/dist/plugins/organization/index.d.mts +2 -2
  63. package/dist/plugins/passkey/index.d.mts +2 -2
  64. package/dist/plugins/phone-number/index.d.mts +2 -2
  65. package/dist/plugins/sentinel/client.d.mts +23 -23
  66. package/dist/plugins/sentinel/client.mjs +2 -2
  67. package/dist/plugins/sentinel/index.d.mts +22 -22
  68. package/dist/plugins/sentinel/index.mjs +3 -3
  69. package/dist/plugins/two-factor/index.d.mts +2 -2
  70. package/dist/plugins/username/index.d.mts +1 -1
  71. package/dist/{registry-GztLf62p.mjs → registry-BjYhRF79.mjs} +69 -2
  72. package/dist/{sentinel-b8XEetew.mjs → sentinel-BttZLWPD.mjs} +70 -14
  73. package/dist/src/plugins/audit-log/error-codes.d.ts +7 -0
  74. package/dist/src/plugins/audit-log/events.d.ts +13 -0
  75. package/dist/src/plugins/audit-log/index.d.ts +114 -8
  76. package/dist/src/plugins/audit-log/integrity.d.ts +20 -0
  77. package/dist/src/plugins/audit-log/redact.d.ts +18 -0
  78. package/dist/src/plugins/audit-log/remote.d.ts +1 -0
  79. package/dist/src/plugins/audit-log/schema.d.ts +25 -0
  80. package/dist/src/plugins/audit-log/types.d.ts +73 -13
  81. package/dist/src/plugins/sentinel/actions.d.ts +0 -6
  82. package/dist/src/plugins/sentinel/client.d.ts +3 -0
  83. package/dist/src/plugins/sentinel/error-codes.d.ts +6 -0
  84. package/dist/src/plugins/sentinel/index.d.ts +80 -3
  85. package/dist/src/plugins/sentinel/types.d.ts +1 -1
  86. package/dist/test-utils/index.d.mts +2 -2
  87. package/dist/test-utils/index.mjs +4 -4
  88. package/dist/types/index.d.mts +1 -1
  89. package/package.json +3 -3
  90. /package/dist/{pow-DvkUopsK.mjs → pow-Vna_j4hx.mjs} +0 -0
@@ -1,2 +1,2 @@
1
- import { t as captcha } from "../../index-Dmjw6re9.mjs";
1
+ import { t as captcha } from "../../index-BX55rZO5.mjs";
2
2
  export { captcha };
@@ -1,7 +1,7 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
- import { n as customSession, t as CustomSessionPluginOptions } from "../../index-CLhlur69.mjs";
6
+ import { n as customSession, t as CustomSessionPluginOptions } from "../../index-CNyQFga7.mjs";
7
7
  export { CustomSessionPluginOptions, customSession };
@@ -1,4 +1,4 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
2
  import "../../plugins-Dy_FrD4Y.mjs";
3
- import { i as deviceAuthorizationClient, n as DeviceAuthorizationOptions, r as deviceAuthorization, t as $deviceAuthorizationOptionsSchema } from "../../index-rcUKPBBy.mjs";
3
+ import { i as deviceAuthorizationClient, n as DeviceAuthorizationOptions, r as deviceAuthorization, t as $deviceAuthorizationOptionsSchema } from "../../index-gRLqvVoc.mjs";
4
4
  export { $deviceAuthorizationOptionsSchema, DeviceAuthorizationOptions, deviceAuthorization, deviceAuthorizationClient };
@@ -1,3 +1,3 @@
1
1
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
2
- import { n as emailOTP, t as EmailOTPOptions } from "../../index-DYqQWdEv.mjs";
2
+ import { n as emailOTP, t as EmailOTPOptions } from "../../index-BHiF_ZfZ.mjs";
3
3
  export { EmailOTPOptions, emailOTP };
@@ -1,7 +1,7 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
- import { n as genericOAuth, t as GenericOAuthConfig } from "../../index-Clwezlxm.mjs";
6
+ import { n as genericOAuth, t as GenericOAuthConfig } from "../../index-BfwCJQfM.mjs";
7
7
  export { GenericOAuthConfig, genericOAuth };
@@ -1,2 +1,2 @@
1
- import { n as getPasswordBreachCount, r as haveIBeenPwned, t as HaveIBeenPwnedOptions } from "../../index-D85KXOKz.mjs";
1
+ import { n as getPasswordBreachCount, r as haveIBeenPwned, t as HaveIBeenPwnedOptions } from "../../index-CcJjgkwe.mjs";
2
2
  export { HaveIBeenPwnedOptions, getPasswordBreachCount, haveIBeenPwned };
@@ -1,29 +1,29 @@
1
1
  import "../helper-BgOIGHsu.mjs";
2
- import { jn as HIDE_METADATA } from "../index-CZtQ0rUe.mjs";
2
+ import { jn as HIDE_METADATA } from "../index-CTjXncwM.mjs";
3
3
  import "../types-DNQ9XQrB.mjs";
4
4
  import "../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import { n as InferPluginErrorCodes, t as InferOptionSchema } from "../plugins-Dy_FrD4Y.mjs";
6
6
  import "../index-CxlWnL9c.mjs";
7
- import { a as UserWithRole, i as SessionWithImpersonatedBy, n as AdminOptions, r as InferAdminRolesFromOption, t as admin } from "../index-BYxt8qOP.mjs";
8
- import { n as UserWithAnonymous, r as anonymous, t as AnonymousOptions } from "../index-Dt6JhAV4.mjs";
9
- import { A as SECURITY_EVENT_TYPES, C as AuditEvent, D as AuditEventType, E as AUDIT_EVENT_TYPES, F as API_KEY_TABLE_NAME, I as ERROR_CODES, L as apiKey, M as VERIFICATION_PATHS, N as LastLoginMethodOptions, O as CREDENTIAL_SIGN_IN_PATHS, P as lastLoginMethod, R as defaultKeyHasher, S as SentinelOptions, T as ALL_EVENT_TYPES, _ as haversineDistanceKm, a as createAuthEndpoint, b as GeoLocation, c as sentinel, d as POW_SOLUTION_HEADER, f as createNonce, g as verifySolution, h as solveChallenge, i as AuthMiddleware, j as SIGN_IN_PATHS, k as PATH_EVENTS, l as POW_CHALLENGE_HEADER, m as parsePowHeader, n as auditLog, o as createAuthMiddleware, p as hasLeadingZeroBits, r as AuthEndpoint, s as optionsMiddleware, t as AUDIT_LOG_ERROR_CODES, u as POW_REASON_HEADER, v as normalizeEmail, w as AuditLogOptions, x as SecurityAction, y as SENTINEL_ERROR_CODES } from "../index-DWSbFJWU.mjs";
10
- import { t as bearer } from "../index-Czr_eQFE.mjs";
11
- import { t as captcha } from "../index-Dmjw6re9.mjs";
12
- import { n as customSession, t as CustomSessionPluginOptions } from "../index-CLhlur69.mjs";
13
- import { i as deviceAuthorizationClient, n as DeviceAuthorizationOptions, r as deviceAuthorization, t as $deviceAuthorizationOptionsSchema } from "../index-rcUKPBBy.mjs";
14
- import { n as emailOTP, t as EmailOTPOptions } from "../index-DYqQWdEv.mjs";
15
- import { n as genericOAuth, t as GenericOAuthConfig } from "../index-Clwezlxm.mjs";
16
- import { n as getPasswordBreachCount, r as haveIBeenPwned, t as HaveIBeenPwnedOptions } from "../index-D85KXOKz.mjs";
17
- import { a as JWKOptions, c as JwtOptions, i as getJwtToken, n as createJwk, o as JWSAlgorithms, r as generateExportedKeyPair, s as Jwk, t as jwt } from "../index-UDzaYKxq.mjs";
18
- import { t as magicLink } from "../index-D5cyFBEb.mjs";
19
- import { t as multiSession } from "../index-B-i2ob-C.mjs";
20
- import { n as oAuthProxy, t as OAuthProxyOptions } from "../index-Cl9ITXy1.mjs";
21
- import { t as oneTap } from "../index-DGRGLg16.mjs";
22
- import { t as oneTimeToken } from "../index-BRUQHEUF.mjs";
7
+ import { a as UserWithRole, i as SessionWithImpersonatedBy, n as AdminOptions, r as InferAdminRolesFromOption, t as admin } from "../index-DRoa3BGG.mjs";
8
+ import { n as UserWithAnonymous, r as anonymous, t as AnonymousOptions } from "../index-i1L-uguJ.mjs";
9
+ import { A as verifySolution, B as apiKey, C as POW_CHALLENGE_HEADER, D as hasLeadingZeroBits, E as createNonce, F as SentinelOptions, I as LastLoginMethodOptions, L as lastLoginMethod, M as normalizeEmail, N as GeoLocation, O as parsePowHeader, P as SecurityAction, R as API_KEY_TABLE_NAME, S as SENTINEL_ERROR_CODES, T as POW_SOLUTION_HEADER, V as defaultKeyHasher, _ as AuthMiddleware, a as AuditLogOptions, b as optionsMiddleware, c as AuditEventType, d as EVENT_SEVERITIES, f as PATH_EVENTS, g as AuthEndpoint, h as VERIFICATION_PATHS, i as AuditEvent, j as haversineDistanceKm, k as solveChallenge, l as CORE_EVENT_TYPES, m as SIGN_IN_PATHS, n as verifyAuditEvent, o as ALL_EVENT_TYPES, p as SECURITY_EVENT_TYPES, r as AUDIT_LOG_ERROR_CODES, s as AUDIT_EVENT_TYPES, t as auditLog, u as CREDENTIAL_SIGN_IN_PATHS, v as createAuthEndpoint, w as POW_REASON_HEADER, x as sentinel, y as createAuthMiddleware, z as ERROR_CODES } from "../index-DD_pxX-h.mjs";
10
+ import { t as bearer } from "../index-B4HTudhm.mjs";
11
+ import { t as captcha } from "../index-BX55rZO5.mjs";
12
+ import { n as customSession, t as CustomSessionPluginOptions } from "../index-CNyQFga7.mjs";
13
+ import { i as deviceAuthorizationClient, n as DeviceAuthorizationOptions, r as deviceAuthorization, t as $deviceAuthorizationOptionsSchema } from "../index-gRLqvVoc.mjs";
14
+ import { n as emailOTP, t as EmailOTPOptions } from "../index-BHiF_ZfZ.mjs";
15
+ import { n as genericOAuth, t as GenericOAuthConfig } from "../index-BfwCJQfM.mjs";
16
+ import { n as getPasswordBreachCount, r as haveIBeenPwned, t as HaveIBeenPwnedOptions } from "../index-CcJjgkwe.mjs";
17
+ import { a as JWKOptions, c as JwtOptions, i as getJwtToken, n as createJwk, o as JWSAlgorithms, r as generateExportedKeyPair, s as Jwk, t as jwt } from "../index-C5W_sTlp.mjs";
18
+ import { t as magicLink } from "../index-M0IQ_DTL.mjs";
19
+ import { t as multiSession } from "../index-Cdfh66xb.mjs";
20
+ import { n as oAuthProxy, t as OAuthProxyOptions } from "../index-BifhxQ8O.mjs";
21
+ import { t as oneTap } from "../index-BhbilPfs.mjs";
22
+ import { t as oneTimeToken } from "../index-mDmrBYrk.mjs";
23
23
  import { a as memberAc, i as defaultStatements, n as defaultAc, o as ownerAc, r as defaultRoles, t as adminAc } from "../index-QmocqGM-.mjs";
24
- import { A as organizationRoleSchema, C as TeamInput, D as invitationSchema, E as defaultRolesSchema, F as OrganizationOptions, M as roleSchema, N as teamMemberSchema, O as invitationStatus, P as teamSchema, S as Team, T as TeamMemberInput, _ as MemberInput, a as organization, b as OrganizationRole, c as InferMember, d as InferOrganizationZodRolesFromOption, f as InferTeam, g as Member, h as InvitationStatus, i as TeamEndpoints, j as organizationSchema, k as memberSchema, l as InferOrganization, m as InvitationInput, n as OrganizationEndpoints, o as parseRoles, p as Invitation, r as OrganizationPlugin, s as InferInvitation, t as DynamicAccessControlEndpoints, u as InferOrganizationRolesFromOption, v as Organization, w as TeamMember, x as OrganizationSchema, y as OrganizationInput } from "../index-JzSy-vFn.mjs";
25
- import { n as UserWithPhoneNumber, r as phoneNumber, t as PhoneNumberOptions } from "../index-CGGitykk.mjs";
26
- import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactorClient, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactor } from "../index-DWGj7du8.mjs";
27
- import { n as Passkey, r as PasskeyOptions, t as passkey } from "../index-CHMYUshk.mjs";
28
- import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../index-Hoybqpnt.mjs";
29
- export { $deviceAuthorizationOptionsSchema, ALL_EVENT_TYPES, API_KEY_TABLE_NAME, AUDIT_EVENT_TYPES, AUDIT_LOG_ERROR_CODES, AdminOptions, AnonymousOptions, AuditEvent, AuditEventType, AuditLogOptions, AuthEndpoint, AuthMiddleware, CREDENTIAL_SIGN_IN_PATHS, CustomSessionPluginOptions, DeviceAuthorizationOptions, DynamicAccessControlEndpoints, ERROR_CODES, EmailOTPOptions, GenericOAuthConfig, GeoLocation, HIDE_METADATA, HaveIBeenPwnedOptions, InferAdminRolesFromOption, InferInvitation, InferMember, InferOptionSchema, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferPluginErrorCodes, InferTeam, Invitation, InvitationInput, InvitationStatus, JWKOptions, JWSAlgorithms, Jwk, JwtOptions, LastLoginMethodOptions, Member, MemberInput, OAuthProxyOptions, Organization, OrganizationEndpoints, OrganizationInput, OrganizationOptions, OrganizationPlugin, OrganizationRole, OrganizationSchema, PATH_EVENTS, POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, Passkey, PasskeyOptions, PhoneNumberOptions, SECURITY_EVENT_TYPES, SENTINEL_ERROR_CODES, SIGN_IN_PATHS, SecurityAction, SentinelOptions, SessionWithImpersonatedBy, TWO_FACTOR_ERROR_CODES, Team, TeamEndpoints, TeamInput, TeamMember, TeamMemberInput, TwoFactorOptions, TwoFactorProvider, TwoFactorTable, USERNAME_ERROR_CODES, UserWithAnonymous, UserWithPhoneNumber, UserWithRole, UserWithTwoFactor, UsernameOptions, VERIFICATION_PATHS, admin, adminAc, anonymous, apiKey, auditLog, bearer, captcha, createAuthEndpoint, createAuthMiddleware, createJwk, createNonce, customSession, defaultAc, defaultKeyHasher, defaultRoles, defaultRolesSchema, defaultStatements, deviceAuthorization, deviceAuthorizationClient, emailOTP, generateExportedKeyPair, genericOAuth, getJwtToken, getPasswordBreachCount, hasLeadingZeroBits, haveIBeenPwned, haversineDistanceKm, invitationSchema, invitationStatus, jwt, lastLoginMethod, magicLink, memberAc, memberSchema, multiSession, normalizeEmail, oAuthProxy, oneTap, oneTimeToken, optionsMiddleware, organization, organizationRoleSchema, organizationSchema, ownerAc, parsePowHeader, parseRoles, passkey, phoneNumber, roleSchema, sentinel, solveChallenge, teamMemberSchema, teamSchema, twoFactor, twoFactorClient, username, verifySolution };
24
+ import { A as organizationRoleSchema, C as TeamInput, D as invitationSchema, E as defaultRolesSchema, F as OrganizationOptions, M as roleSchema, N as teamMemberSchema, O as invitationStatus, P as teamSchema, S as Team, T as TeamMemberInput, _ as MemberInput, a as organization, b as OrganizationRole, c as InferMember, d as InferOrganizationZodRolesFromOption, f as InferTeam, g as Member, h as InvitationStatus, i as TeamEndpoints, j as organizationSchema, k as memberSchema, l as InferOrganization, m as InvitationInput, n as OrganizationEndpoints, o as parseRoles, p as Invitation, r as OrganizationPlugin, s as InferInvitation, t as DynamicAccessControlEndpoints, u as InferOrganizationRolesFromOption, v as Organization, w as TeamMember, x as OrganizationSchema, y as OrganizationInput } from "../index-Bi-vEjDm.mjs";
25
+ import { n as UserWithPhoneNumber, r as phoneNumber, t as PhoneNumberOptions } from "../index-CUUaJp3R.mjs";
26
+ import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactorClient, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactor } from "../index-BiomZttP.mjs";
27
+ import { n as Passkey, r as PasskeyOptions, t as passkey } from "../index-DBtm_waB.mjs";
28
+ import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../index-BoHrBgTB.mjs";
29
+ export { $deviceAuthorizationOptionsSchema, ALL_EVENT_TYPES, API_KEY_TABLE_NAME, AUDIT_EVENT_TYPES, AUDIT_LOG_ERROR_CODES, AdminOptions, AnonymousOptions, AuditEvent, AuditEventType, AuditLogOptions, AuthEndpoint, AuthMiddleware, CORE_EVENT_TYPES, CREDENTIAL_SIGN_IN_PATHS, CustomSessionPluginOptions, DeviceAuthorizationOptions, DynamicAccessControlEndpoints, ERROR_CODES, EVENT_SEVERITIES, EmailOTPOptions, GenericOAuthConfig, GeoLocation, HIDE_METADATA, HaveIBeenPwnedOptions, InferAdminRolesFromOption, InferInvitation, InferMember, InferOptionSchema, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferPluginErrorCodes, InferTeam, Invitation, InvitationInput, InvitationStatus, JWKOptions, JWSAlgorithms, Jwk, JwtOptions, LastLoginMethodOptions, Member, MemberInput, OAuthProxyOptions, Organization, OrganizationEndpoints, OrganizationInput, OrganizationOptions, OrganizationPlugin, OrganizationRole, OrganizationSchema, PATH_EVENTS, POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, Passkey, PasskeyOptions, PhoneNumberOptions, SECURITY_EVENT_TYPES, SENTINEL_ERROR_CODES, SIGN_IN_PATHS, SecurityAction, SentinelOptions, SessionWithImpersonatedBy, TWO_FACTOR_ERROR_CODES, Team, TeamEndpoints, TeamInput, TeamMember, TeamMemberInput, TwoFactorOptions, TwoFactorProvider, TwoFactorTable, USERNAME_ERROR_CODES, UserWithAnonymous, UserWithPhoneNumber, UserWithRole, UserWithTwoFactor, UsernameOptions, VERIFICATION_PATHS, admin, adminAc, anonymous, apiKey, auditLog, bearer, captcha, createAuthEndpoint, createAuthMiddleware, createJwk, createNonce, customSession, defaultAc, defaultKeyHasher, defaultRoles, defaultRolesSchema, defaultStatements, deviceAuthorization, deviceAuthorizationClient, emailOTP, generateExportedKeyPair, genericOAuth, getJwtToken, getPasswordBreachCount, hasLeadingZeroBits, haveIBeenPwned, haversineDistanceKm, invitationSchema, invitationStatus, jwt, lastLoginMethod, magicLink, memberAc, memberSchema, multiSession, normalizeEmail, oAuthProxy, oneTap, oneTimeToken, optionsMiddleware, organization, organizationRoleSchema, organizationSchema, ownerAc, parsePowHeader, parseRoles, passkey, phoneNumber, roleSchema, sentinel, solveChallenge, teamMemberSchema, teamSchema, twoFactor, twoFactorClient, username, verifyAuditEvent, verifySolution };
@@ -23,8 +23,8 @@ import { t as admin } from "../admin-rd-xHhnP.mjs";
23
23
  import "../has-permission-Bvg8de8g.mjs";
24
24
  import { t as anonymous } from "../anonymous-qSasVeIe.mjs";
25
25
  import { a as lastLoginMethod, c as apiKey, i as oneTimeToken, l as defaultKeyHasher, n as createAuthMiddleware, o as API_KEY_TABLE_NAME, r as optionsMiddleware, s as ERROR_CODES, t as createAuthEndpoint } from "../plugins-RSPSU3ro.mjs";
26
- import { a as CREDENTIAL_SIGN_IN_PATHS, c as SIGN_IN_PATHS, i as AUDIT_EVENT_TYPES, l as VERIFICATION_PATHS, o as PATH_EVENTS, r as ALL_EVENT_TYPES, s as SECURITY_EVENT_TYPES } from "../registry-GztLf62p.mjs";
27
- import { n as auditLog, t as AUDIT_LOG_ERROR_CODES } from "../audit-log-DhRRCMrv.mjs";
26
+ import { a as CORE_EVENT_TYPES, c as PATH_EVENTS, d as VERIFICATION_PATHS, i as AUDIT_EVENT_TYPES, l as SECURITY_EVENT_TYPES, o as CREDENTIAL_SIGN_IN_PATHS, r as ALL_EVENT_TYPES, s as EVENT_SEVERITIES, u as SIGN_IN_PATHS } from "../registry-BjYhRF79.mjs";
27
+ import { n as verifyAuditEvent, r as AUDIT_LOG_ERROR_CODES, t as auditLog } from "../audit-log-CQnf8nrN.mjs";
28
28
  import { t as bearer } from "../bearer-DvQLM00l.mjs";
29
29
  import { t as captcha } from "../captcha-DGP9lCRe.mjs";
30
30
  import { t as customSession } from "../custom-session-DN_-pfi_.mjs";
@@ -42,11 +42,11 @@ import { n as parseRoles, t as organization } from "../organization-BK3ks97y.mjs
42
42
  import "../access-CrwEFPHE.mjs";
43
43
  import "../permission-CDDWgA_O.mjs";
44
44
  import { t as phoneNumber } from "../phone-number-Dqz8aeyF.mjs";
45
- import { a as hasLeadingZeroBits, c as verifySolution, i as createNonce, n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "../pow-DvkUopsK.mjs";
46
- import { i as SENTINEL_ERROR_CODES, n as haversineDistanceKm, r as normalizeEmail, t as sentinel } from "../sentinel-b8XEetew.mjs";
45
+ import { i as SENTINEL_ERROR_CODES, n as haversineDistanceKm, r as normalizeEmail, t as sentinel } from "../sentinel-BttZLWPD.mjs";
46
+ import { a as hasLeadingZeroBits, c as verifySolution, i as createNonce, n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "../pow-Vna_j4hx.mjs";
47
47
  import { n as TWO_FACTOR_ERROR_CODES, t as twoFactor } from "../two-factor-CDVjxx4f.mjs";
48
48
  import { t as twoFactorClient } from "../client-BuveH3MN.mjs";
49
49
  import { t as passkey } from "../passkey-JNQTz5a0.mjs";
50
50
  import { n as USERNAME_ERROR_CODES, t as username } from "../username-DCp6yugu.mjs";
51
51
 
52
- export { $deviceAuthorizationOptionsSchema, ALL_EVENT_TYPES, API_KEY_TABLE_NAME, AUDIT_EVENT_TYPES, AUDIT_LOG_ERROR_CODES, CREDENTIAL_SIGN_IN_PATHS, ERROR_CODES, HIDE_METADATA, PATH_EVENTS, POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SECURITY_EVENT_TYPES, SENTINEL_ERROR_CODES, SIGN_IN_PATHS, TWO_FACTOR_ERROR_CODES, USERNAME_ERROR_CODES, VERIFICATION_PATHS, admin, anonymous, apiKey, auditLog, bearer, captcha, createAuthEndpoint, createAuthMiddleware, createJwk, createNonce, customSession, defaultKeyHasher, deviceAuthorization, deviceAuthorizationClient, emailOTP, generateExportedKeyPair, genericOAuth, getJwtToken, getPasswordBreachCount, hasLeadingZeroBits, haveIBeenPwned, haversineDistanceKm, jwt, lastLoginMethod, magicLink, multiSession, normalizeEmail, oAuthProxy, oneTap, oneTimeToken, optionsMiddleware, organization, parsePowHeader, parseRoles, passkey, phoneNumber, sentinel, solveChallenge, twoFactor, twoFactorClient, username, verifySolution };
52
+ export { $deviceAuthorizationOptionsSchema, ALL_EVENT_TYPES, API_KEY_TABLE_NAME, AUDIT_EVENT_TYPES, AUDIT_LOG_ERROR_CODES, CORE_EVENT_TYPES, CREDENTIAL_SIGN_IN_PATHS, ERROR_CODES, EVENT_SEVERITIES, HIDE_METADATA, PATH_EVENTS, POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SECURITY_EVENT_TYPES, SENTINEL_ERROR_CODES, SIGN_IN_PATHS, TWO_FACTOR_ERROR_CODES, USERNAME_ERROR_CODES, VERIFICATION_PATHS, admin, anonymous, apiKey, auditLog, bearer, captcha, createAuthEndpoint, createAuthMiddleware, createJwk, createNonce, customSession, defaultKeyHasher, deviceAuthorization, deviceAuthorizationClient, emailOTP, generateExportedKeyPair, genericOAuth, getJwtToken, getPasswordBreachCount, hasLeadingZeroBits, haveIBeenPwned, haversineDistanceKm, jwt, lastLoginMethod, magicLink, multiSession, normalizeEmail, oAuthProxy, oneTap, oneTimeToken, optionsMiddleware, organization, parsePowHeader, parseRoles, passkey, phoneNumber, sentinel, solveChallenge, twoFactor, twoFactorClient, username, verifyAuditEvent, verifySolution };
@@ -1,7 +1,7 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
- import { a as JWKOptions, c as JwtOptions, i as getJwtToken, n as createJwk, o as JWSAlgorithms, r as generateExportedKeyPair, s as Jwk, t as jwt } from "../../index-UDzaYKxq.mjs";
6
+ import { a as JWKOptions, c as JwtOptions, i as getJwtToken, n as createJwk, o as JWSAlgorithms, r as generateExportedKeyPair, s as Jwk, t as jwt } from "../../index-C5W_sTlp.mjs";
7
7
  export { JWKOptions, JWSAlgorithms, Jwk, JwtOptions, createJwk, generateExportedKeyPair, getJwtToken, jwt };
@@ -1,2 +1,2 @@
1
- import { t as magicLink } from "../../index-D5cyFBEb.mjs";
1
+ import { t as magicLink } from "../../index-M0IQ_DTL.mjs";
2
2
  export { magicLink };
@@ -1,3 +1,3 @@
1
1
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
2
- import { t as multiSession } from "../../index-B-i2ob-C.mjs";
2
+ import { t as multiSession } from "../../index-Cdfh66xb.mjs";
3
3
  export { multiSession };
@@ -1,2 +1,2 @@
1
- import { n as oAuthProxy, t as OAuthProxyOptions } from "../../index-Cl9ITXy1.mjs";
1
+ import { n as oAuthProxy, t as OAuthProxyOptions } from "../../index-BifhxQ8O.mjs";
2
2
  export { OAuthProxyOptions, oAuthProxy };
@@ -1,2 +1,2 @@
1
- import { t as oneTap } from "../../index-DGRGLg16.mjs";
1
+ import { t as oneTap } from "../../index-BhbilPfs.mjs";
2
2
  export { oneTap };
@@ -1,7 +1,7 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
- import { t as oneTimeToken } from "../../index-BRUQHEUF.mjs";
6
+ import { t as oneTimeToken } from "../../index-mDmrBYrk.mjs";
7
7
  export { oneTimeToken };
@@ -23,8 +23,8 @@ import "../../admin-rd-xHhnP.mjs";
23
23
  import "../../has-permission-Bvg8de8g.mjs";
24
24
  import "../../anonymous-qSasVeIe.mjs";
25
25
  import { i as oneTimeToken } from "../../plugins-RSPSU3ro.mjs";
26
- import "../../registry-GztLf62p.mjs";
27
- import "../../audit-log-DhRRCMrv.mjs";
26
+ import "../../registry-BjYhRF79.mjs";
27
+ import "../../audit-log-CQnf8nrN.mjs";
28
28
  import "../../bearer-DvQLM00l.mjs";
29
29
  import "../../captcha-DGP9lCRe.mjs";
30
30
  import "../../custom-session-DN_-pfi_.mjs";
@@ -42,8 +42,8 @@ import "../../organization-BK3ks97y.mjs";
42
42
  import "../../access-CrwEFPHE.mjs";
43
43
  import "../../permission-CDDWgA_O.mjs";
44
44
  import "../../phone-number-Dqz8aeyF.mjs";
45
- import "../../pow-DvkUopsK.mjs";
46
- import "../../sentinel-b8XEetew.mjs";
45
+ import "../../sentinel-BttZLWPD.mjs";
46
+ import "../../pow-Vna_j4hx.mjs";
47
47
  import "../../two-factor-CDVjxx4f.mjs";
48
48
  import "../../client-BuveH3MN.mjs";
49
49
  import "../../passkey-JNQTz5a0.mjs";
@@ -1,9 +1,9 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
6
  import "../../index-CxlWnL9c.mjs";
7
7
  import { a as memberAc, i as defaultStatements, n as defaultAc, o as ownerAc, r as defaultRoles, t as adminAc } from "../../index-QmocqGM-.mjs";
8
- import { A as organizationRoleSchema, C as TeamInput, D as invitationSchema, E as defaultRolesSchema, F as OrganizationOptions, M as roleSchema, N as teamMemberSchema, O as invitationStatus, P as teamSchema, S as Team, T as TeamMemberInput, _ as MemberInput, a as organization, b as OrganizationRole, c as InferMember, d as InferOrganizationZodRolesFromOption, f as InferTeam, g as Member, h as InvitationStatus, i as TeamEndpoints, j as organizationSchema, k as memberSchema, l as InferOrganization, m as InvitationInput, n as OrganizationEndpoints, o as parseRoles, p as Invitation, r as OrganizationPlugin, s as InferInvitation, t as DynamicAccessControlEndpoints, u as InferOrganizationRolesFromOption, v as Organization, w as TeamMember, x as OrganizationSchema, y as OrganizationInput } from "../../index-JzSy-vFn.mjs";
8
+ import { A as organizationRoleSchema, C as TeamInput, D as invitationSchema, E as defaultRolesSchema, F as OrganizationOptions, M as roleSchema, N as teamMemberSchema, O as invitationStatus, P as teamSchema, S as Team, T as TeamMemberInput, _ as MemberInput, a as organization, b as OrganizationRole, c as InferMember, d as InferOrganizationZodRolesFromOption, f as InferTeam, g as Member, h as InvitationStatus, i as TeamEndpoints, j as organizationSchema, k as memberSchema, l as InferOrganization, m as InvitationInput, n as OrganizationEndpoints, o as parseRoles, p as Invitation, r as OrganizationPlugin, s as InferInvitation, t as DynamicAccessControlEndpoints, u as InferOrganizationRolesFromOption, v as Organization, w as TeamMember, x as OrganizationSchema, y as OrganizationInput } from "../../index-Bi-vEjDm.mjs";
9
9
  export { DynamicAccessControlEndpoints, InferInvitation, InferMember, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferTeam, Invitation, InvitationInput, InvitationStatus, Member, MemberInput, Organization, OrganizationEndpoints, OrganizationInput, OrganizationOptions, OrganizationPlugin, OrganizationRole, OrganizationSchema, Team, TeamEndpoints, TeamInput, TeamMember, TeamMemberInput, adminAc, defaultAc, defaultRoles, defaultRolesSchema, defaultStatements, invitationSchema, invitationStatus, memberAc, memberSchema, organization, organizationRoleSchema, organizationSchema, ownerAc, parseRoles, roleSchema, teamMemberSchema, teamSchema };
@@ -1,7 +1,7 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
- import { n as Passkey, r as PasskeyOptions, t as passkey } from "../../index-CHMYUshk.mjs";
6
+ import { n as Passkey, r as PasskeyOptions, t as passkey } from "../../index-DBtm_waB.mjs";
7
7
  export { Passkey, PasskeyOptions, passkey };
@@ -1,7 +1,7 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
- import { n as UserWithPhoneNumber, r as phoneNumber, t as PhoneNumberOptions } from "../../index-CGGitykk.mjs";
6
+ import { n as UserWithPhoneNumber, r as phoneNumber, t as PhoneNumberOptions } from "../../index-CUUaJp3R.mjs";
7
7
  export { PhoneNumberOptions, UserWithPhoneNumber, phoneNumber };
@@ -1,30 +1,30 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
6
  import "../../index-CxlWnL9c.mjs";
7
- import "../../index-BYxt8qOP.mjs";
8
- import "../../index-Dt6JhAV4.mjs";
9
- import "../../index-DWSbFJWU.mjs";
10
- import "../../index-Czr_eQFE.mjs";
11
- import "../../index-Dmjw6re9.mjs";
12
- import "../../index-CLhlur69.mjs";
13
- import "../../index-rcUKPBBy.mjs";
14
- import "../../index-DYqQWdEv.mjs";
15
- import "../../index-Clwezlxm.mjs";
16
- import "../../index-D85KXOKz.mjs";
17
- import "../../index-UDzaYKxq.mjs";
18
- import "../../index-D5cyFBEb.mjs";
19
- import "../../index-B-i2ob-C.mjs";
20
- import "../../index-Cl9ITXy1.mjs";
21
- import "../../index-DGRGLg16.mjs";
22
- import "../../index-BRUQHEUF.mjs";
7
+ import "../../index-DRoa3BGG.mjs";
8
+ import "../../index-i1L-uguJ.mjs";
9
+ import "../../index-DD_pxX-h.mjs";
10
+ import "../../index-B4HTudhm.mjs";
11
+ import "../../index-BX55rZO5.mjs";
12
+ import "../../index-CNyQFga7.mjs";
13
+ import "../../index-gRLqvVoc.mjs";
14
+ import "../../index-BHiF_ZfZ.mjs";
15
+ import "../../index-BfwCJQfM.mjs";
16
+ import "../../index-CcJjgkwe.mjs";
17
+ import "../../index-C5W_sTlp.mjs";
18
+ import "../../index-M0IQ_DTL.mjs";
19
+ import "../../index-Cdfh66xb.mjs";
20
+ import "../../index-BifhxQ8O.mjs";
21
+ import "../../index-BhbilPfs.mjs";
22
+ import "../../index-mDmrBYrk.mjs";
23
23
  import "../../index-QmocqGM-.mjs";
24
- import "../../index-JzSy-vFn.mjs";
25
- import "../../index-CGGitykk.mjs";
26
- import "../../index-DWGj7du8.mjs";
27
- import "../../index-CHMYUshk.mjs";
28
- import "../../index-Hoybqpnt.mjs";
29
- import { t as sentinelClient } from "../../client-CT-acJeN.mjs";
24
+ import "../../index-Bi-vEjDm.mjs";
25
+ import "../../index-CUUaJp3R.mjs";
26
+ import "../../index-BiomZttP.mjs";
27
+ import "../../index-DBtm_waB.mjs";
28
+ import "../../index-BoHrBgTB.mjs";
29
+ import { t as sentinelClient } from "../../client-zkWmSxqy.mjs";
30
30
  export { sentinelClient };
@@ -1,5 +1,5 @@
1
1
  import "../../random-32E3cU5o.mjs";
2
- import "../../pow-DvkUopsK.mjs";
3
- import { t as sentinelClient } from "../../client-CMsC6-rl.mjs";
2
+ import "../../pow-Vna_j4hx.mjs";
3
+ import { t as sentinelClient } from "../../client-BkpNva-h.mjs";
4
4
 
5
5
  export { sentinelClient };
@@ -1,29 +1,29 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
6
  import "../../index-CxlWnL9c.mjs";
7
- import "../../index-BYxt8qOP.mjs";
8
- import "../../index-Dt6JhAV4.mjs";
9
- import { S as SentinelOptions, _ as haversineDistanceKm, b as GeoLocation, c as sentinel, d as POW_SOLUTION_HEADER, f as createNonce, g as verifySolution, h as solveChallenge, l as POW_CHALLENGE_HEADER, m as parsePowHeader, p as hasLeadingZeroBits, u as POW_REASON_HEADER, v as normalizeEmail, x as SecurityAction, y as SENTINEL_ERROR_CODES } from "../../index-DWSbFJWU.mjs";
10
- import "../../index-Czr_eQFE.mjs";
11
- import "../../index-Dmjw6re9.mjs";
12
- import "../../index-CLhlur69.mjs";
13
- import "../../index-rcUKPBBy.mjs";
14
- import "../../index-DYqQWdEv.mjs";
15
- import "../../index-Clwezlxm.mjs";
16
- import "../../index-D85KXOKz.mjs";
17
- import "../../index-UDzaYKxq.mjs";
18
- import "../../index-D5cyFBEb.mjs";
19
- import "../../index-B-i2ob-C.mjs";
20
- import "../../index-Cl9ITXy1.mjs";
21
- import "../../index-DGRGLg16.mjs";
22
- import "../../index-BRUQHEUF.mjs";
7
+ import "../../index-DRoa3BGG.mjs";
8
+ import "../../index-i1L-uguJ.mjs";
9
+ import { A as verifySolution, C as POW_CHALLENGE_HEADER, D as hasLeadingZeroBits, E as createNonce, F as SentinelOptions, M as normalizeEmail, N as GeoLocation, O as parsePowHeader, P as SecurityAction, S as SENTINEL_ERROR_CODES, T as POW_SOLUTION_HEADER, j as haversineDistanceKm, k as solveChallenge, w as POW_REASON_HEADER, x as sentinel } from "../../index-DD_pxX-h.mjs";
10
+ import "../../index-B4HTudhm.mjs";
11
+ import "../../index-BX55rZO5.mjs";
12
+ import "../../index-CNyQFga7.mjs";
13
+ import "../../index-gRLqvVoc.mjs";
14
+ import "../../index-BHiF_ZfZ.mjs";
15
+ import "../../index-BfwCJQfM.mjs";
16
+ import "../../index-CcJjgkwe.mjs";
17
+ import "../../index-C5W_sTlp.mjs";
18
+ import "../../index-M0IQ_DTL.mjs";
19
+ import "../../index-Cdfh66xb.mjs";
20
+ import "../../index-BifhxQ8O.mjs";
21
+ import "../../index-BhbilPfs.mjs";
22
+ import "../../index-mDmrBYrk.mjs";
23
23
  import "../../index-QmocqGM-.mjs";
24
- import "../../index-JzSy-vFn.mjs";
25
- import "../../index-CGGitykk.mjs";
26
- import "../../index-DWGj7du8.mjs";
27
- import "../../index-CHMYUshk.mjs";
28
- import "../../index-Hoybqpnt.mjs";
24
+ import "../../index-Bi-vEjDm.mjs";
25
+ import "../../index-CUUaJp3R.mjs";
26
+ import "../../index-BiomZttP.mjs";
27
+ import "../../index-DBtm_waB.mjs";
28
+ import "../../index-BoHrBgTB.mjs";
29
29
  export { GeoLocation, POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SENTINEL_ERROR_CODES, SecurityAction, SentinelOptions, createNonce, hasLeadingZeroBits, haversineDistanceKm, normalizeEmail, parsePowHeader, sentinel, solveChallenge, verifySolution };
@@ -14,9 +14,9 @@ import "../../get-tables-CKvSyDST.mjs";
14
14
  import "../../types-DCPpFKUB.mjs";
15
15
  import "../../misc-fKH4d5XQ.mjs";
16
16
  import "../../session-BB3oqApE.mjs";
17
- import "../../registry-GztLf62p.mjs";
17
+ import "../../registry-BjYhRF79.mjs";
18
18
  import "../../haveibeenpwned-_3a5amT-.mjs";
19
- import { a as hasLeadingZeroBits, c as verifySolution, i as createNonce, n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "../../pow-DvkUopsK.mjs";
20
- import { i as SENTINEL_ERROR_CODES, n as haversineDistanceKm, r as normalizeEmail, t as sentinel } from "../../sentinel-b8XEetew.mjs";
19
+ import { i as SENTINEL_ERROR_CODES, n as haversineDistanceKm, r as normalizeEmail, t as sentinel } from "../../sentinel-BttZLWPD.mjs";
20
+ import { a as hasLeadingZeroBits, c as verifySolution, i as createNonce, n as POW_REASON_HEADER, o as parsePowHeader, r as POW_SOLUTION_HEADER, s as solveChallenge, t as POW_CHALLENGE_HEADER } from "../../pow-Vna_j4hx.mjs";
21
21
 
22
22
  export { POW_CHALLENGE_HEADER, POW_REASON_HEADER, POW_SOLUTION_HEADER, SENTINEL_ERROR_CODES, createNonce, hasLeadingZeroBits, haversineDistanceKm, normalizeEmail, parsePowHeader, sentinel, solveChallenge, verifySolution };
@@ -1,7 +1,7 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
- import "../../index-CZtQ0rUe.mjs";
2
+ import "../../index-CTjXncwM.mjs";
3
3
  import "../../types-DNQ9XQrB.mjs";
4
4
  import "../../index-BL_t8cRp-C4QYBsac.mjs";
5
5
  import "../../plugins-Dy_FrD4Y.mjs";
6
- import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactorClient, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactor } from "../../index-DWGj7du8.mjs";
6
+ import { a as TwoFactorProvider, i as TwoFactorOptions, n as twoFactorClient, o as TwoFactorTable, r as TWO_FACTOR_ERROR_CODES, s as UserWithTwoFactor, t as twoFactor } from "../../index-BiomZttP.mjs";
7
7
  export { TWO_FACTOR_ERROR_CODES, TwoFactorOptions, TwoFactorProvider, TwoFactorTable, UserWithTwoFactor, twoFactor, twoFactorClient };
@@ -1,4 +1,4 @@
1
1
  import "../../helper-BgOIGHsu.mjs";
2
2
  import "../../plugins-Dy_FrD4Y.mjs";
3
- import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../../index-Hoybqpnt.mjs";
3
+ import { n as username, r as USERNAME_ERROR_CODES, t as UsernameOptions } from "../../index-BoHrBgTB.mjs";
4
4
  export { USERNAME_ERROR_CODES, UsernameOptions, username };
@@ -66,7 +66,9 @@ const AUDIT_EVENT_TYPES = {
66
66
  TEAM_MEMBER_ADDED: "team_member_added",
67
67
  TEAM_MEMBER_REMOVED: "team_member_removed",
68
68
  USER_SIGN_IN_FAILED: "user_sign_in_failed",
69
- VERIFICATION_FAILED: "verification_failed"
69
+ VERIFICATION_FAILED: "verification_failed",
70
+ AUDIT_READ: "audit_read",
71
+ AUDIT_EVENTS_DELETED: "audit_events_deleted"
70
72
  };
71
73
  /**
72
74
  * Security event types recorded by the sentinel plugin
@@ -89,6 +91,34 @@ const SECURITY_EVENT_TYPES = {
89
91
  UNBLOCKED: "security_unblocked"
90
92
  };
91
93
  const ALL_EVENT_TYPES = [...Object.values(AUDIT_EVENT_TYPES), ...Object.values(SECURITY_EVENT_TYPES)];
94
+ /**
95
+ * The events that can't be excluded: who signed in or out and who failed to,
96
+ * changes to credentials, roles, bans and sessions, impersonation, reads and
97
+ * deletions of the audit log itself, and every security decision.
98
+ */
99
+ const CORE_EVENT_TYPES = [
100
+ AUDIT_EVENT_TYPES.USER_SIGNED_UP,
101
+ AUDIT_EVENT_TYPES.USER_SIGNED_IN,
102
+ AUDIT_EVENT_TYPES.USER_SIGNED_OUT,
103
+ AUDIT_EVENT_TYPES.USER_SIGN_IN_FAILED,
104
+ AUDIT_EVENT_TYPES.VERIFICATION_FAILED,
105
+ AUDIT_EVENT_TYPES.SESSION_REVOKED,
106
+ AUDIT_EVENT_TYPES.SESSIONS_REVOKED_ALL,
107
+ AUDIT_EVENT_TYPES.USER_BANNED,
108
+ AUDIT_EVENT_TYPES.USER_UNBANNED,
109
+ AUDIT_EVENT_TYPES.USER_DELETED,
110
+ AUDIT_EVENT_TYPES.USER_ROLE_UPDATED,
111
+ AUDIT_EVENT_TYPES.USER_EMAIL_CHANGED,
112
+ AUDIT_EVENT_TYPES.PASSWORD_CHANGED,
113
+ AUDIT_EVENT_TYPES.PASSWORD_RESET_COMPLETED,
114
+ AUDIT_EVENT_TYPES.TWO_FACTOR_ENABLED,
115
+ AUDIT_EVENT_TYPES.TWO_FACTOR_DISABLED,
116
+ AUDIT_EVENT_TYPES.USER_IMPERSONATED,
117
+ AUDIT_EVENT_TYPES.USER_IMPERSONATION_STOPPED,
118
+ AUDIT_EVENT_TYPES.AUDIT_READ,
119
+ AUDIT_EVENT_TYPES.AUDIT_EVENTS_DELETED,
120
+ ...Object.values(SECURITY_EVENT_TYPES)
121
+ ];
92
122
  /** Endpoints that complete a sign-in by creating a session */
93
123
  const SIGN_IN_PATHS = [
94
124
  "/sign-in/email",
@@ -185,6 +215,43 @@ const PATH_EVENTS = {
185
215
  "/organization/add-team-member": AUDIT_EVENT_TYPES.TEAM_MEMBER_ADDED,
186
216
  "/organization/remove-team-member": AUDIT_EVENT_TYPES.TEAM_MEMBER_REMOVED
187
217
  };
218
+ /**
219
+ * The severity of each event type that isn't `info`. A failed, blocked or
220
+ * challenged event is at least `warning`.
221
+ */
222
+ const EVENT_SEVERITIES = {
223
+ [AUDIT_EVENT_TYPES.USER_BANNED]: "critical",
224
+ [AUDIT_EVENT_TYPES.USER_DELETED]: "critical",
225
+ [AUDIT_EVENT_TYPES.USER_ROLE_UPDATED]: "critical",
226
+ [AUDIT_EVENT_TYPES.USER_IMPERSONATED]: "critical",
227
+ [AUDIT_EVENT_TYPES.TWO_FACTOR_DISABLED]: "critical",
228
+ [AUDIT_EVENT_TYPES.USER_EMAIL_CHANGED]: "warning",
229
+ [AUDIT_EVENT_TYPES.PASSWORD_CHANGED]: "warning",
230
+ [AUDIT_EVENT_TYPES.PASSWORD_RESET_COMPLETED]: "warning",
231
+ [AUDIT_EVENT_TYPES.SESSIONS_REVOKED_ALL]: "warning",
232
+ [AUDIT_EVENT_TYPES.ACCOUNT_UNLINKED]: "warning",
233
+ [AUDIT_EVENT_TYPES.PASSKEY_REMOVED]: "warning",
234
+ [AUDIT_EVENT_TYPES.API_KEY_CREATED]: "warning",
235
+ [AUDIT_EVENT_TYPES.API_KEY_DELETED]: "warning",
236
+ [AUDIT_EVENT_TYPES.MEMBER_ROLE_UPDATED]: "warning",
237
+ [AUDIT_EVENT_TYPES.ORGANIZATION_DELETED]: "critical",
238
+ [AUDIT_EVENT_TYPES.USER_SIGN_IN_FAILED]: "warning",
239
+ [AUDIT_EVENT_TYPES.VERIFICATION_FAILED]: "warning",
240
+ [SECURITY_EVENT_TYPES.BLOCKED]: "warning",
241
+ [SECURITY_EVENT_TYPES.CREDENTIAL_STUFFING]: "warning",
242
+ [SECURITY_EVENT_TYPES.IMPOSSIBLE_TRAVEL]: "critical",
243
+ [SECURITY_EVENT_TYPES.GEO_BLOCKED]: "warning",
244
+ [SECURITY_EVENT_TYPES.BOT_BLOCKED]: "warning",
245
+ [SECURITY_EVENT_TYPES.SUSPICIOUS_IP]: "warning",
246
+ [SECURITY_EVENT_TYPES.VELOCITY_EXCEEDED]: "warning",
247
+ [SECURITY_EVENT_TYPES.FREE_TRIAL_ABUSE]: "warning",
248
+ [SECURITY_EVENT_TYPES.COMPROMISED_PASSWORD]: "critical",
249
+ [SECURITY_EVENT_TYPES.STALE_ACCOUNT]: "warning",
250
+ [SECURITY_EVENT_TYPES.INVALID_EMAIL]: "warning",
251
+ [SECURITY_EVENT_TYPES.UNBLOCKED]: "warning",
252
+ [AUDIT_EVENT_TYPES.AUDIT_READ]: "warning",
253
+ [AUDIT_EVENT_TYPES.AUDIT_EVENTS_DELETED]: "critical"
254
+ };
188
255
 
189
256
  //#endregion
190
257
  //#region src/plugins/audit-log/registry.ts
@@ -203,4 +270,4 @@ function getAuditRecorder(context) {
203
270
  }
204
271
 
205
272
  //#endregion
206
- export { CREDENTIAL_SIGN_IN_PATHS as a, SIGN_IN_PATHS as c, AUDIT_EVENT_TYPES as i, VERIFICATION_PATHS as l, registerAuditRecorder as n, PATH_EVENTS as o, ALL_EVENT_TYPES as r, SECURITY_EVENT_TYPES as s, getAuditRecorder as t, hasRole as u };
273
+ export { CORE_EVENT_TYPES as a, PATH_EVENTS as c, VERIFICATION_PATHS as d, hasRole as f, AUDIT_EVENT_TYPES as i, SECURITY_EVENT_TYPES as l, registerAuditRecorder as n, CREDENTIAL_SIGN_IN_PATHS as o, ALL_EVENT_TYPES as r, EVENT_SEVERITIES as s, getAuditRecorder as t, SIGN_IN_PATHS as u };