@glinr/theauth 0.4.2 → 0.5.0

package/dist/index.d.ts

@@ -1,16 +1,16 @@
 export { and, eq, like } from 'drizzle-orm';
 export { createAgentModule } from './agent/index.js';
-import { D as Database, a as DatabaseConfig, K as KavachConfig, b as DelegateInput, P as Permission, c as DelegationChain, d as DidDocument, e as DidKeyPair, f as DidWebConfig, g as AgentDid, S as SignedPayload, V as VerificationResult, C as CreateAgentInput, A as AgentIdentity, h as AgentFilter, U as UpdateAgentInput, i as AuthorizeRequest, R as RequestContext, j as AuthorizeResult, k as AuditFilter, l as AuditEntry, m as AuditExportOptions, M as McpServerInput, n as McpServer, o as ResolvedUser, p as SessionManager, q as ApprovalRequest, r as MagicLinkModule, E as EmailOtpModule, T as TotpModule, s as PasskeyModule, O as OrgModule, t as SsoModule, u as AdminModule, v as ApiKeyManagerModule, w as UsernameAuthModule, x as PasswordResetModule, y as EmailVerificationModule, z as OneTimeTokenModule, B as SessionFreshnessModule, F as PhoneAuthModule, G as CaptchaModule, W as WebhookModule$1, H as EvaluateInput, I as PolicyDecision, J as InvalidateScope, L as PolicyCacheStats, N as PluginEndpoint, Q as EndpointContext, X as KavachPlugin, Y as SessionConfig, Z as Session } from './types-D1sBnWrs.js';
-export { _ as AdminConfig, $ as AdminUser, a0 as AgentConfig, a1 as ApiKey, a2 as ApiKeyManagerConfig, a3 as ApprovalConfig, a4 as ApprovalModule, a5 as AuthAdapter, a6 as CaptchaConfig, a7 as CaptchaVerifyResult, a8 as CreateTokenInput, a9 as D1DatabaseBinding, aa as EmailOtpConfig, ab as EmailVerificationConfig, ac as KavachHooks, ad as KavachInstance, ae as MagicLinkConfig, af as McpMiddleware, ag as OidcProvider, ah as OneTimeTokenConfig, ai as OneTimeTokenPurpose, aj as OrgConfig, ak as OrgInvitation, al as OrgMember, am as OrgRole, an as Organization, ao as PasskeyConfig, ap as PasskeyCredential, aq as PasswordResetConfig, ar as PermissionConstraints, as as PhoneAuthConfig, at as PluginContext, au as PluginInitResult, av as RevokeTokensResult, aw as SSO_ERROR, ax as SamlProvider, ay as ServiceEndpoint, az as SessionFreshnessConfig, aA as SsoAuditEvent, aB as SsoConfig, aC as SsoConnection, aD as SsoError, aE as TokenValidationResult, aF as TotpConfig, aG as TotpSetup, aH as UsernameAuthConfig, aI as ValidateTokenResult, aJ as VerificationMethod, aK as agentCards, aL as agentDids, aM as agents, aN as apiKeysTable, aO as approvalRequests, aP as auditLogs, aQ as budgetPolicies, aR as classifyViolation, aS as createAdminModule, aT as createApiKeyManagerModule, aU as createApprovalModule, aV as createCaptchaModule, aW as createDatabase, aX as createDatabaseSync, aY as createEmailOtpModule, aZ as createEmailVerificationModule, a_ as createMagicLinkModule, a$ as createOneTimeTokenModule, b0 as createOrgModule, b1 as createPasskeyModule, b2 as createPasswordResetModule, b3 as createPhoneAuthModule, b4 as createSessionFreshnessModule, b5 as createSessionManager, b6 as createSsoModule, b7 as createTotpModule, b8 as createUsernameAuthModule, b9 as delegationChains, ba as emailOtps, bb as magicLinks, bc as mcpServers, bd as oauthAccessTokens, be as oauthAuthorizationCodes, bf as oauthClients, bg as orgInvitations, bh as orgMembers, bi as orgRoles, bj as organizations, bk as passkeyChallenges, bl as passkeyCredentials, bm as permissions, bn as rateLimits, bo as sessions, bp as ssoConnections, bq as tenants, br as totpRecords, bs as trustScores, bt as users } from './types-D1sBnWrs.js';
+import { D as Database, a as DatabaseConfig, K as KavachConfig, b as DelegateInput, P as Permission, c as DelegationChain, d as DidDocument, e as DidKeyPair, f as DidWebConfig, g as AgentDid, S as SignedPayload, V as VerificationResult, T as TheAuthConfig, C as CreateAgentInput, A as AgentIdentity, h as AgentFilter, U as UpdateAgentInput, i as AuthorizeRequest, R as RequestContext, j as AuthorizeResult, k as AuditFilter, l as AuditEntry, m as AuditExportOptions, M as McpServerInput, n as McpServer, o as ResolvedUser, p as SessionManager, q as ApprovalRequest, r as MagicLinkModule, E as EmailOtpModule, s as TotpModule, t as PasskeyModule, O as OrgModule, u as SsoModule, v as AdminModule, w as ApiKeyManagerModule, x as UsernameAuthModule, y as PasswordResetModule, z as EmailVerificationModule, B as OneTimeTokenModule, F as SessionFreshnessModule, G as PhoneAuthModule, H as CaptchaModule, W as WebhookModule$1, I as EvaluateInput, J as PolicyDecision, L as InvalidateScope, N as PolicyCacheStats, Q as PluginEndpoint, X as EndpointContext, Y as TheAuthPlugin, Z as SessionConfig, _ as Session } from './types-D1dTo8-m.js';
+export { $ as AdminConfig, a0 as AdminUser, a1 as AgentConfig, a2 as ApiKey, a3 as ApiKeyManagerConfig, a4 as ApprovalConfig, a5 as ApprovalModule, a6 as AuthAdapter, a7 as AuthConfig, a8 as AuthHooks, a9 as AuthInstance, aa as AuthPlugin, ab as CaptchaConfig, ac as CaptchaVerifyResult, ad as CreateTokenInput, ae as D1DatabaseBinding, af as EmailOtpConfig, ag as EmailVerificationConfig, ah as KavachHooks, ai as KavachInstance, aj as KavachPlugin, ak as MagicLinkConfig, al as McpMiddleware, am as OidcProvider, an as OneTimeTokenConfig, ao as OneTimeTokenPurpose, ap as OrgConfig, aq as OrgInvitation, ar as OrgMember, as as OrgRole, at as Organization, au as PasskeyConfig, av as PasskeyCredential, aw as PasswordResetConfig, ax as PermissionConstraints, ay as PhoneAuthConfig, az as PluginContext, aA as PluginInitResult, aB as RevokeTokensResult, aC as SSO_ERROR, aD as SamlProvider, aE as ServiceEndpoint, aF as SessionFreshnessConfig, aG as SsoAuditEvent, aH as SsoConfig, aI as SsoConnection, aJ as SsoError, aK as TheAuthHooks, aL as TheAuthInstance, aM as TokenValidationResult, aN as TotpConfig, aO as TotpSetup, aP as UsernameAuthConfig, aQ as ValidateTokenResult, aR as VerificationMethod, aS as agentCards, aT as agentDids, aU as agents, aV as apiKeysTable, aW as approvalRequests, aX as auditLogs, aY as budgetPolicies, aZ as classifyViolation, a_ as createAdminModule, a$ as createApiKeyManagerModule, b0 as createApprovalModule, b1 as createCaptchaModule, b2 as createDatabase, b3 as createDatabaseSync, b4 as createEmailOtpModule, b5 as createEmailVerificationModule, b6 as createMagicLinkModule, b7 as createOneTimeTokenModule, b8 as createOrgModule, b9 as createPasskeyModule, ba as createPasswordResetModule, bb as createPhoneAuthModule, bc as createSessionFreshnessModule, bd as createSessionManager, be as createSsoModule, bf as createTotpModule, bg as createUsernameAuthModule, bh as delegationChains, bi as emailOtps, bj as magicLinks, bk as mcpServers, bl as oauthAccessTokens, bm as oauthAuthorizationCodes, bn as oauthClients, bo as orgInvitations, bp as orgMembers, bq as orgRoles, br as organizations, bs as passkeyChallenges, bt as passkeyCredentials, bu as permissions, bv as rateLimits, bw as sessions, bx as ssoConnections, by as tenants, bz as totpRecords, bA as trustScores, bB as users } from './types-D1dTo8-m.js';
 export { createAuditModule } from './audit/index.js';
 export { AccessTokenClaims, AdditionalFieldsConfig, AdditionalFieldsModule, AnonymousAuthConfig, AnonymousAuthModule, AuthorizeParams, BearerAuthOptions, BudgetCheckResult, CheckParams, CheckResult, CheckoutOptions, CostAlert, CostAttributionConfig, CostAttributionModule, CostReport, CreateEphemeralSessionInput, CustomSessionConfig, CustomSessionModule, DEFAULT_ATLASSIAN_SCOPES, DEFAULT_DISCORD_SCOPES, DEFAULT_DROPBOX_SCOPES, DEFAULT_FIGMA_SCOPES, DEFAULT_NOTION_SCOPES, DEFAULT_REDDIT_SCOPES, DEFAULT_SLACK_SCOPES, DEFAULT_SPOTIFY_SCOPES, DEFAULT_TWITCH_SCOPES, DEFAULT_ZOOM_SCOPES, DeleteOptions, DeleteResult, DeviceAuthConfig, DeviceAuthModule, DeviceAuthStatus, DeviceCodeResponse, EVENT_TYPES, EndpointGroup, EndpointLimit, EphemeralSession, EphemeralSessionConfig, EphemeralSessionModule, EphemeralSessionValidateResult, EventStreamConfig, EventStreamModule, EventType, ExpandParams, FederatedAgent, FederationConfig, FederationModule, FederationToken, FederationWellKnown, FieldDefinition, GdprModule, GenericOIDCConfig, GetUserClaimsFn, GoogleUser, HeaderAuthOptions, HibpApiError, HibpBreachedError, HibpConfig, HibpModule, InstanceIdentity, IssueFederationTokenInput, JsonWebKeySet, JwtSessionConfig, JwtSessionModule, KVNamespace, KVStore, LastLoginConfig, LastLoginModule, ListObjectsParams, ListSubjectsParams, LoginEvent, LoginMethod, MemoryStore, OAuthAccount, OAuthCallbackResult, OAuthModule, OAuthModuleConfig, OAuthPluginConfig, OAuthProvider, OAuthProviderConfig, OAuthProxyConfig, OAuthProxyError, OAuthProxyModule, OAuthProxyPluginConfig, OAuthTokens, OAuthUserInfo, OidcClient, OidcDiscoveryDocument, OidcProviderConfig, OidcProviderModule, OneTapConfig, OneTapModule, OneTapVerifyError, OpenApiComponents, OpenApiConfig, OpenApiDocument, OpenApiInfo, OpenApiMediaType, OpenApiModule, OpenApiOperation, OpenApiParameter, OpenApiPathItem, OpenApiRequestBody, OpenApiResponse, OpenApiSchema, OpenApiSecurityRequirement, OpenApiSecurityScheme, OpenApiServer, PermissionRuleSet, PolarConfig, PolarModule, PolarSubscription, ProxyTokens, RateLimitConfig, RateLimitMiddlewareOptions, RateLimitPluginConfig, RateLimitResult, RateLimitStore, RateLimiter, ReBACConfig, ReBACModule, RecordCostInput, RecordLoginInput, RegisterClientInput, Relationship, ResourceNode, ScimConfig, ScimGroup, ScimModule, ScimUser, SessionTokens, SessionUser, SiweConfig, SiweModule, SiweVerifyResult, StreamEvent, StripeConfig, StripeModule, SubscriptionInfo, TokenParams, TokenResponse, TrustLevel, TrustedDevice, TrustedDeviceConfig, TrustedDeviceModule, TrustedInstance, TwoFactorConfig, UserDataExport, UserInfoClaims, ValidationResult, VerifiedSession, additionalFields, admin, anonymousAuth, apiKeys, atlassianProvider, auth0Provider, bearerAuth, bitbucketProvider, cognitoProvider, coinbaseProvider, createAdditionalFieldsModule, createAnonymousAuthModule, createAppleProvider, createAtlassianProvider, createCostAttributionModule, createCustomSessionModule, createDeviceAuthModule, createDiscordProvider, createDropboxProvider, createEphemeralSessionModule, createEventStreamModule, createFederationModule, createFigmaProvider, createGdprModule, createGithubProvider, createGitlabProvider, createGoogleProvider, createHibpModule, createJwtSessionModule, createLastLoginModule, createLinkedInProvider, createMicrosoftProvider, createNotionProvider, createOAuthModule, createOAuthProxyModule, createOidcProviderModule, createOneTapModule, createOpenApiModule, createPolarModule, createRateLimiter, createReBACModule, createRedditProvider, createScimModule, createSiweModule, createSlackProvider, createSpotifyProvider, createStripeModule, createTrustedDeviceModule, createTwitchProvider, createTwitterProvider, createZoomProvider, customAuth, customSession, deviceAuth, deviceLabelFromRequest, dropboxProvider, emailOtp, facebookProvider, figmaProvider, gdpr, genericOIDC, headerAuth, huggingfaceProvider, kakaoProvider, kickProvider, kvStore, lineProvider, linearProvider, magicLink, naverProvider, normalizeAtlassianProfile, normalizeDiscordProfile, normalizeDropboxProfile, normalizeFigmaProfile, normalizeNotionProfile, normalizeRedditProfile, normalizeSlackProfile, normalizeSpotifyProfile, normalizeTwitchProfile, normalizeZoomProfile, notionProvider, oauth, oauthProxy, oktaProvider, oneTap, organization, passkey, paypalProvider, polar, polarProvider, railwayProvider, rateLimit, redditProvider, robloxProvider, salesforceProvider, scim, siwe, spotifyProvider, stripe, tiktokProvider, twitchProvider, twoFactor, vercelProvider, vkProvider, wechatProvider, withRateLimit, yahooProvider, zoomProvider } from './auth/index.js';
 export { constantTimeEqual, fromBase64Url, fromHex, generateId, hmacSha1Raw, hmacSha256, hmacSha256Raw, importHmacKey, pbkdf2Hash, pbkdf2Verify, randomBytes, randomBytesHex, sha1, sha256, sha256Raw, toBase64Url, toHex } from './crypto/index.js';
 import { RedirectChainManager } from './redirect/index.js';
 export { RedirectChainState, RedirectConfig, RedirectEntry, createRedirectChain } from './redirect/index.js';
 export { PermissionTemplateName, createPermissionEngine, getPermissionTemplate, permissionTemplates } from './permission/index.js';
-export { AuditCredentialSubject, AuditExportResult, AuditRecord, CredentialFormat, CredentialStatus, CredentialStatusSchema, CredentialSubject, CredentialSubjectSchema, DelegationLink, ExportAuditOptions, ExtractedPermissions, IssueAgentCredentialInput, IssueDelegationCredentialInput, IssuePermissionCredentialInput, KAVACH_AGENT_CREDENTIAL, KAVACH_DELEGATION_CREDENTIAL, KAVACH_PERMISSION_CREDENTIAL, Proof, ProofSchema, THEAUTH_AUDIT_CONTEXT, THEAUTH_AUDIT_CREDENTIAL, VCIssuer, VCIssuerConfig, VCJwtPayload, VCVerifier, VCVerifierConfig, VC_CONTEXT_V1, VC_CONTEXT_V2, VC_TYPE_CREDENTIAL, VC_TYPE_PRESENTATION, VerifiableCredential, VerifiableCredentialSchema, VerifiablePresentation, VerifiablePresentationSchema, VerifiedCredential, VerifiedPresentation, createVCIssuer, createVCVerifier, exportAuditAsVC, listAuditRecords } from './vc/index.js';
+export { AUTH_AGENT_CREDENTIAL, AUTH_DELEGATION_CREDENTIAL, AUTH_PERMISSION_CREDENTIAL, AuditCredentialSubject, AuditExportResult, AuditRecord, CredentialFormat, CredentialStatus, CredentialStatusSchema, CredentialSubject, CredentialSubjectSchema, DelegationLink, ExportAuditOptions, ExtractedPermissions, IssueAgentCredentialInput, IssueDelegationCredentialInput, IssuePermissionCredentialInput, KAVACH_AGENT_CREDENTIAL, KAVACH_DELEGATION_CREDENTIAL, KAVACH_PERMISSION_CREDENTIAL, Proof, ProofSchema, THEAUTH_AGENT_CREDENTIAL, THEAUTH_AUDIT_CONTEXT, THEAUTH_AUDIT_CREDENTIAL, THEAUTH_DELEGATION_CREDENTIAL, THEAUTH_PERMISSION_CREDENTIAL, VCIssuer, VCIssuerConfig, VCJwtPayload, VCVerifier, VCVerifierConfig, VC_CONTEXT_V1, VC_CONTEXT_V2, VC_TYPE_CREDENTIAL, VC_TYPE_PRESENTATION, VerifiableCredential, VerifiableCredentialSchema, VerifiablePresentation, VerifiablePresentationSchema, VerifiedCredential, VerifiedPresentation, createVCIssuer, createVCVerifier, exportAuditAsVC, listAuditRecords } from './vc/index.js';
 import 'drizzle-orm/sqlite-core';
-import './types-BiUe9e8u.js';
+import './types-IkWVkOVv.js';
 import 'zod';
 import './standards/index.js';
 import 'jose';
@@ -302,23 +302,23 @@ declare const zh: TranslationKeys;
  *
  * @example SQLite (simplest)
  * ```typescript
- * import { createKavach } from '@glinr/theauth';
+ * import { createTheAuth } from '@glinr/theauth';
  *
- * const kavach = await createKavach({
- *   database: { provider: 'sqlite', url: 'kavach.db' },
+ * const auth = await createTheAuth({
+ *   database: { provider: 'sqlite', url: 'theauth.db' },
  * });
  * ```
  *
  * @example Postgres
  * ```typescript
- * const kavach = await createKavach({
+ * const auth = await createTheAuth({
  *   database: { provider: 'postgres', url: process.env.DATABASE_URL },
  * });
  * ```
  *
- * @example MySQL – skip auto-migration (tables managed externally)
+ * @example MySQL - skip auto-migration (tables managed externally)
  * ```typescript
- * const kavach = await createKavach({
+ * const auth = await createTheAuth({
  *   database: {
  *     provider: 'mysql',
  *     url: process.env.DATABASE_URL,
@@ -327,7 +327,7 @@ declare const zh: TranslationKeys;
  * });
  * ```
  */
-declare function createKavach(config: KavachConfig): Promise<{
+declare function createTheAuth(config: TheAuthConfig): Promise<{
     agent: {
         create(input: CreateAgentInput): ReturnType<(input: CreateAgentInput) => Promise<AgentIdentity & {
             token: string;
@@ -402,7 +402,7 @@ declare function createKavach(config: KavachConfig): Promise<{
      * `resolveUser` extracts the authenticated human from an inbound HTTP
      * request via the configured adapter.  `session` is a full session
      * manager (create / validate / revoke) when `auth.session` was passed
-     * to `createKavach()`.
+     * to `createTheAuth()`.
      *
      * @example
      * ```typescript
@@ -841,7 +841,23 @@ declare function createKavach(config: KavachConfig): Promise<{
         registry: PluginRegistry;
     };
 }>;
-type Kavach = Awaited<ReturnType<typeof createKavach>>;
+type TheAuth = Awaited<ReturnType<typeof createTheAuth>>;
+/**
+ * @deprecated Use `createTheAuth` instead. Will be removed in a future major version.
+ */
+declare const createAuth: typeof createTheAuth;
+/**
+ * @deprecated Use `createTheAuth` instead. Will be removed in a future major version.
+ */
+declare const createKavach: typeof createTheAuth;
+/**
+ * @deprecated Use `TheAuth` instead. Will be removed in a future major version.
+ */
+type Auth = TheAuth;
+/**
+ * @deprecated Use `TheAuth` instead. Will be removed in a future major version.
+ */
+type Kavach = TheAuth;
 
 /**
  * OpenAPI 3.1 specification generator for TheAuth REST API.
@@ -935,10 +951,10 @@ interface PluginRegistry {
     endpoints: PluginEndpoint[];
     migrations: string[];
     hooks: {
-        onRequest: Array<NonNullable<KavachPlugin["hooks"]>["onRequest"]>;
-        onAuthenticate: Array<NonNullable<KavachPlugin["hooks"]>["onAuthenticate"]>;
-        onSessionCreate: Array<NonNullable<KavachPlugin["hooks"]>["onSessionCreate"]>;
-        onSessionRevoke: Array<NonNullable<KavachPlugin["hooks"]>["onSessionRevoke"]>;
+        onRequest: Array<NonNullable<TheAuthPlugin["hooks"]>["onRequest"]>;
+        onAuthenticate: Array<NonNullable<TheAuthPlugin["hooks"]>["onAuthenticate"]>;
+        onSessionCreate: Array<NonNullable<TheAuthPlugin["hooks"]>["onSessionCreate"]>;
+        onSessionRevoke: Array<NonNullable<TheAuthPlugin["hooks"]>["onSessionRevoke"]>;
     };
     pluginContext: Record<string, unknown>;
 }
@@ -950,7 +966,7 @@ interface PluginRegistry {
  * during init are executed before the registry is returned so that any
  * subsequent requests can immediately use plugin tables.
  */
-declare function initializePlugins(plugins: KavachPlugin[], db: Database, config: KavachConfig, sessionManager: SessionManager | null): Promise<PluginRegistry>;
+declare function initializePlugins(plugins: TheAuthPlugin[], db: Database, config: TheAuthConfig, sessionManager: SessionManager | null): Promise<PluginRegistry>;
 
 interface BudgetPolicy {
     id: string;
@@ -1708,4 +1724,4 @@ declare function createWebhookModule(config: WebhookConfig): WebhookModule;
  */
 declare function verifyWebhookSignature(secret: string, rawBody: string, signature: string): Promise<boolean>;
 
-export { type AccessTokenPayload, AdminModule, AgentDid, AgentFilter, AgentIdentity, ApiKeyManagerModule, ApprovalRequest, AuditEntry, AuditExportOptions, AuditFilter, AuthorizeRequest, AuthorizeResult, type BudgetLimits, type BudgetPolicy, type BudgetUsage, CaptchaModule, type ConsumeTokenResult, type ConsumeTokenStatus, type CookieOptions, type CookieSessionConfig, type CookieSessionManager, CreateAgentInput, type CreatePolicyInput, type CreateSessionResult, type CreateTenantInput, type CsrfValidationResult, Database, DatabaseConfig, DelegateInput, DelegationChain, DidDocument, DidKeyPair, type DidModule, DidWebConfig, EmailOtpModule, type EmailTemplate, type EmailTemplateConfig, type EmailTemplateName, type EmailTemplates, EmailVerificationModule, EndpointContext, type I18nConfig, type I18nModule, type Kavach, KavachConfig, KavachPlugin, MagicLinkModule, McpServer, McpServerInput, type MultiSessionConfig, MultiSessionLimitError, type MultiSessionModule, OneTimeTokenModule, OrgModule, PasskeyModule, PasswordResetModule, Permission, PhoneAuthModule, PluginEndpoint, type PluginRegistry, type PolicyFilters, type PrivilegeAnalysis, type PrivilegeAnalyzer, type PrivilegeFinding, type PrivilegeSummary, RedirectChainManager, type RefreshError, type RefreshHandleResult, type RefreshResult, type RefreshSessionConfig, RefreshTokenError, ResolvedUser, type SameSite, Session, SessionConfig, SessionFreshnessModule, type SessionInfo, SessionManager, type SessionRefresher, type SessionRefresherConfig, SignedPayload, SsoModule, type Tenant, type TenantSettings, type TokenFamily, type TokenFamilyStore, TotpModule, type TranslationKeys, type TrustConfig, type TrustModule, type TrustScore, UpdateAgentInput, UsernameAuthModule, type ValidateSessionResult, VerificationResult, type WebhookConfig, type WebhookEvent, type WebhookModule, type WebhookSubscription, buildDidDocument, buildSessionMetadata, createCookieSessionManager, createDelegationModule, createDidModule, createEmailTemplates, createI18n, createKavach, createMultiSessionModule, createPluginRouter, createPolicyModule, createPresentation, createPrivilegeAnalyzer, createSessionRefresher, createTables, createTenantModule, createTokenFamilyStore, createTrustModule, createWebhookModule, de, en, es, fr, generateCsrfToken, generateDidKey, generateDidWeb, generateOpenAPISpec, getCookie, getDidWebUrl, initializePlugins, ja, parseCookies, parseCookiesFromRequest, resolveDidKey, resolveDidWeb, serializeCookie, serializeCookieDeletion, signPayload, validateCsrfToken, validateOrigin, verifyPayload, verifyPresentation, verifyWebhookSignature, zh };
+export { type AccessTokenPayload, AdminModule, AgentDid, AgentFilter, AgentIdentity, ApiKeyManagerModule, ApprovalRequest, AuditEntry, AuditExportOptions, AuditFilter, type Auth, AuthorizeRequest, AuthorizeResult, type BudgetLimits, type BudgetPolicy, type BudgetUsage, CaptchaModule, type ConsumeTokenResult, type ConsumeTokenStatus, type CookieOptions, type CookieSessionConfig, type CookieSessionManager, CreateAgentInput, type CreatePolicyInput, type CreateSessionResult, type CreateTenantInput, type CsrfValidationResult, Database, DatabaseConfig, DelegateInput, DelegationChain, DidDocument, DidKeyPair, type DidModule, DidWebConfig, EmailOtpModule, type EmailTemplate, type EmailTemplateConfig, type EmailTemplateName, type EmailTemplates, EmailVerificationModule, EndpointContext, type I18nConfig, type I18nModule, type Kavach, KavachConfig, MagicLinkModule, McpServer, McpServerInput, type MultiSessionConfig, MultiSessionLimitError, type MultiSessionModule, OneTimeTokenModule, OrgModule, PasskeyModule, PasswordResetModule, Permission, PhoneAuthModule, PluginEndpoint, type PluginRegistry, type PolicyFilters, type PrivilegeAnalysis, type PrivilegeAnalyzer, type PrivilegeFinding, type PrivilegeSummary, RedirectChainManager, type RefreshError, type RefreshHandleResult, type RefreshResult, type RefreshSessionConfig, RefreshTokenError, ResolvedUser, type SameSite, Session, SessionConfig, SessionFreshnessModule, type SessionInfo, SessionManager, type SessionRefresher, type SessionRefresherConfig, SignedPayload, SsoModule, type Tenant, type TenantSettings, type TheAuth, TheAuthConfig, TheAuthPlugin, type TokenFamily, type TokenFamilyStore, TotpModule, type TranslationKeys, type TrustConfig, type TrustModule, type TrustScore, UpdateAgentInput, UsernameAuthModule, type ValidateSessionResult, VerificationResult, type WebhookConfig, type WebhookEvent, type WebhookModule, type WebhookSubscription, buildDidDocument, buildSessionMetadata, createAuth, createCookieSessionManager, createDelegationModule, createDidModule, createEmailTemplates, createI18n, createKavach, createMultiSessionModule, createPluginRouter, createPolicyModule, createPresentation, createPrivilegeAnalyzer, createSessionRefresher, createTables, createTenantModule, createTheAuth, createTokenFamilyStore, createTrustModule, createWebhookModule, de, en, es, fr, generateCsrfToken, generateDidKey, generateDidWeb, generateOpenAPISpec, getCookie, getDidWebUrl, initializePlugins, ja, parseCookies, parseCookiesFromRequest, resolveDidKey, resolveDidWeb, serializeCookie, serializeCookieDeletion, signPayload, validateCsrfToken, validateOrigin, verifyPayload, verifyPresentation, verifyWebhookSignature, zh };

package/dist/index.js

@@ -20556,7 +20556,7 @@ function classifyViolation2(reason) {
   if (r.includes("approval")) return "approval_required";
   return "permission_denied";
 }
-async function createKavach(config) {
+async function createTheAuth(config) {
   const authAdapter = config.auth?.adapter ?? null;
   const db = await createDatabase(config.database);
   if (!config.database.skipMigrations) {
@@ -20893,7 +20893,7 @@ async function createKavach(config) {
      * `resolveUser` extracts the authenticated human from an inbound HTTP
      * request via the configured adapter.  `session` is a full session
      * manager (create / validate / revoke) when `auth.session` was passed
-     * to `createKavach()`.
+     * to `createTheAuth()`.
      *
      * @example
      * ```typescript
@@ -21275,6 +21275,8 @@ async function createKavach(config) {
     }
   };
 }
+var createAuth = createTheAuth;
+var createKavach = createTheAuth;
 
 // src/openapi.ts
 function generateOpenAPISpec(options) {
@@ -22344,9 +22346,15 @@ var VC_CONTEXT_V2 = "https://www.w3.org/ns/credentials/v2";
 var VC_CONTEXT_V1 = "https://www.w3.org/2018/credentials/v1";
 var VC_TYPE_CREDENTIAL = "VerifiableCredential";
 var VC_TYPE_PRESENTATION = "VerifiablePresentation";
-var KAVACH_AGENT_CREDENTIAL = "KavachAgentCredential";
-var KAVACH_PERMISSION_CREDENTIAL = "KavachPermissionCredential";
-var KAVACH_DELEGATION_CREDENTIAL = "KavachDelegationCredential";
+var THEAUTH_AGENT_CREDENTIAL = "TheAuthAgentCredential";
+var THEAUTH_PERMISSION_CREDENTIAL = "TheAuthPermissionCredential";
+var THEAUTH_DELEGATION_CREDENTIAL = "TheAuthDelegationCredential";
+var AUTH_AGENT_CREDENTIAL = THEAUTH_AGENT_CREDENTIAL;
+var AUTH_PERMISSION_CREDENTIAL = THEAUTH_PERMISSION_CREDENTIAL;
+var AUTH_DELEGATION_CREDENTIAL = THEAUTH_DELEGATION_CREDENTIAL;
+var KAVACH_AGENT_CREDENTIAL = THEAUTH_AGENT_CREDENTIAL;
+var KAVACH_PERMISSION_CREDENTIAL = THEAUTH_PERMISSION_CREDENTIAL;
+var KAVACH_DELEGATION_CREDENTIAL = THEAUTH_DELEGATION_CREDENTIAL;
 var ProofSchema = z.object({
   type: z.enum(["Ed25519Signature2020", "JsonWebSignature2020"]),
   created: z.string(),
@@ -22401,7 +22409,7 @@ var VerifiablePresentationSchema = z.object({
 
 // src/vc/audit-export.ts
 var THEAUTH_AUDIT_CREDENTIAL = "TheAuthAuditCredential";
-var THEAUTH_AUDIT_CONTEXT = "https://theauth.com/contexts/audit/v1.jsonld";
+var THEAUTH_AUDIT_CONTEXT = "https://theauth.dev/contexts/audit/v1.jsonld";
 var THEAUTH_VERSION = "0.3.0";
 var DEFAULT_TTL_SECONDS2 = 86400;
 function toDecision(result) {
@@ -23155,6 +23163,6 @@ async function verifyWebhookSignature3(secret, rawBody, signature) {
   return diff === 0;
 }
 
-export { CredentialStatusSchema, CredentialSubjectSchema, DEFAULT_ATLASSIAN_SCOPES, DEFAULT_DISCORD_SCOPES, DEFAULT_DROPBOX_SCOPES, DEFAULT_FIGMA_SCOPES, DEFAULT_NOTION_SCOPES, DEFAULT_REDDIT_SCOPES, DEFAULT_SLACK_SCOPES, DEFAULT_SPOTIFY_SCOPES, DEFAULT_TWITCH_SCOPES, DEFAULT_ZOOM_SCOPES, EVENT_TYPES, HibpApiError, HibpBreachedError, KAVACH_AGENT_CREDENTIAL, KAVACH_DELEGATION_CREDENTIAL, KAVACH_PERMISSION_CREDENTIAL, KVStore, MemoryStore, MultiSessionLimitError, OAuthProxyError, OneTapVerifyError, ProofSchema, RefreshTokenError, SSO_ERROR, SsoError, THEAUTH_AUDIT_CONTEXT, THEAUTH_AUDIT_CREDENTIAL, VC_CONTEXT_V1, VC_CONTEXT_V2, VC_TYPE_CREDENTIAL, VC_TYPE_PRESENTATION, VerifiableCredentialSchema, VerifiablePresentationSchema, additionalFields, admin, agentCards, agentDids, agents, anonymousAuth, apiKeys2 as apiKeys, apiKeys as apiKeysTable, approvalRequests, atlassianProvider, auditLogs, auth0Provider, bearerAuth, bitbucketProvider, budgetPolicies, buildDidDocument, buildSessionMetadata, classifyViolation, cognitoProvider, coinbaseProvider, constantTimeEqual, createAdditionalFieldsModule, createAdminModule, createAgentModule, createAnonymousAuthModule, createApiKeyManagerModule, createAppleProvider, createApprovalModule, createAtlassianProvider, createAuditModule, createCaptchaModule, createCookieSessionManager, createCostAttributionModule, createCustomSessionModule, createDatabase, createDatabaseSync, createDelegationModule, createDeviceAuthModule, createDidModule, createDiscordProvider, createDropboxProvider, createEmailOtpModule, createEmailTemplates, createEmailVerificationModule, createEphemeralSessionModule, createEventStreamModule, createFederationModule, createFigmaProvider, createGdprModule, createGithubProvider, createGitlabProvider, createGoogleProvider, createHibpModule, createI18n, createJwtSessionModule, createKavach, createLastLoginModule, createLinkedInProvider, createMagicLinkModule, createMicrosoftProvider, createMultiSessionModule, createNotionProvider, createOAuthModule, createOAuthProxyModule, createOidcProviderModule, createOneTapModule, createOneTimeTokenModule, createOpenApiModule, createOrgModule, createPasskeyModule, createPasswordResetModule, createPermissionEngine, createPhoneAuthModule, createPluginRouter, createPolarModule, createPolicyModule, createPresentation, createPrivilegeAnalyzer, createRateLimiter, createReBACModule, createRedditProvider, createRedirectChain, createScimModule, createSessionFreshnessModule, createSessionManager, createSessionRefresher, createSiweModule, createSlackProvider, createSpotifyProvider, createSsoModule, createStripeModule, createTables, createTenantModule, createTokenFamilyStore, createTotpModule, createTrustModule, createTrustedDeviceModule, createTwitchProvider, createTwitterProvider, createUsernameAuthModule, createVCIssuer, createVCVerifier, createWebhookModule2 as createWebhookModule, createZoomProvider, customAuth, customSession, de, delegationChains, deviceAuth, deviceLabelFromRequest, dropboxProvider, emailOtp, emailOtps, en, es, exportAuditAsVC, facebookProvider, figmaProvider, fr, fromBase64Url, fromHex, gdpr, generateCsrfToken, generateDidKey, generateDidWeb, generateId, generateOpenAPISpec, genericOIDC, getCookie2 as getCookie, getDidWebUrl, getPermissionTemplate, headerAuth, hmacSha1Raw, hmacSha256, hmacSha256Raw, huggingfaceProvider, importHmacKey, initializePlugins, ja, kakaoProvider, kickProvider, kvStore, lineProvider, linearProvider, listAuditRecords, magicLink, magicLinks, mcpServers, naverProvider, normalizeProfile as normalizeAtlassianProfile, normalizeProfile2 as normalizeDiscordProfile, normalizeProfile3 as normalizeDropboxProfile, normalizeProfile4 as normalizeFigmaProfile, normalizeProfile5 as normalizeNotionProfile, normalizeProfile6 as normalizeRedditProfile, normalizeProfile7 as normalizeSlackProfile, normalizeProfile8 as normalizeSpotifyProfile, normalizeProfile9 as normalizeTwitchProfile, normalizeProfile10 as normalizeZoomProfile, notionProvider, oauth, oauthAccessTokens, oauthAuthorizationCodes, oauthClients, oauthProxy, oktaProvider, oneTap, orgInvitations, orgMembers, orgRoles, organization, organizations, parseCookies2 as parseCookies, parseCookiesFromRequest, passkey, passkeyChallenges, passkeyCredentials, paypalProvider, pbkdf2Hash, pbkdf2Verify, permissionTemplates, permissions, polar, polarProvider, railwayProvider, randomBytes, randomBytesHex, rateLimit, rateLimits, redditProvider, resolveDidKey, resolveDidWeb, robloxProvider, salesforceProvider, scim, serializeCookie, serializeCookieDeletion, sessions, sha1, sha256, sha256Raw, signPayload2 as signPayload, siwe, spotifyProvider, ssoConnections, stripe, tenants, tiktokProvider, toBase64Url, toHex, totpRecords, trustScores, twitchProvider, twoFactor, users, validateCsrfToken, validateOrigin, vercelProvider, verifyPayload, verifyPresentation, verifyWebhookSignature3 as verifyWebhookSignature, vkProvider, wechatProvider, withRateLimit, yahooProvider, zh, zoomProvider };
+export { AUTH_AGENT_CREDENTIAL, AUTH_DELEGATION_CREDENTIAL, AUTH_PERMISSION_CREDENTIAL, CredentialStatusSchema, CredentialSubjectSchema, DEFAULT_ATLASSIAN_SCOPES, DEFAULT_DISCORD_SCOPES, DEFAULT_DROPBOX_SCOPES, DEFAULT_FIGMA_SCOPES, DEFAULT_NOTION_SCOPES, DEFAULT_REDDIT_SCOPES, DEFAULT_SLACK_SCOPES, DEFAULT_SPOTIFY_SCOPES, DEFAULT_TWITCH_SCOPES, DEFAULT_ZOOM_SCOPES, EVENT_TYPES, HibpApiError, HibpBreachedError, KAVACH_AGENT_CREDENTIAL, KAVACH_DELEGATION_CREDENTIAL, KAVACH_PERMISSION_CREDENTIAL, KVStore, MemoryStore, MultiSessionLimitError, OAuthProxyError, OneTapVerifyError, ProofSchema, RefreshTokenError, SSO_ERROR, SsoError, THEAUTH_AGENT_CREDENTIAL, THEAUTH_AUDIT_CONTEXT, THEAUTH_AUDIT_CREDENTIAL, THEAUTH_DELEGATION_CREDENTIAL, THEAUTH_PERMISSION_CREDENTIAL, VC_CONTEXT_V1, VC_CONTEXT_V2, VC_TYPE_CREDENTIAL, VC_TYPE_PRESENTATION, VerifiableCredentialSchema, VerifiablePresentationSchema, additionalFields, admin, agentCards, agentDids, agents, anonymousAuth, apiKeys2 as apiKeys, apiKeys as apiKeysTable, approvalRequests, atlassianProvider, auditLogs, auth0Provider, bearerAuth, bitbucketProvider, budgetPolicies, buildDidDocument, buildSessionMetadata, classifyViolation, cognitoProvider, coinbaseProvider, constantTimeEqual, createAdditionalFieldsModule, createAdminModule, createAgentModule, createAnonymousAuthModule, createApiKeyManagerModule, createAppleProvider, createApprovalModule, createAtlassianProvider, createAuditModule, createAuth, createCaptchaModule, createCookieSessionManager, createCostAttributionModule, createCustomSessionModule, createDatabase, createDatabaseSync, createDelegationModule, createDeviceAuthModule, createDidModule, createDiscordProvider, createDropboxProvider, createEmailOtpModule, createEmailTemplates, createEmailVerificationModule, createEphemeralSessionModule, createEventStreamModule, createFederationModule, createFigmaProvider, createGdprModule, createGithubProvider, createGitlabProvider, createGoogleProvider, createHibpModule, createI18n, createJwtSessionModule, createKavach, createLastLoginModule, createLinkedInProvider, createMagicLinkModule, createMicrosoftProvider, createMultiSessionModule, createNotionProvider, createOAuthModule, createOAuthProxyModule, createOidcProviderModule, createOneTapModule, createOneTimeTokenModule, createOpenApiModule, createOrgModule, createPasskeyModule, createPasswordResetModule, createPermissionEngine, createPhoneAuthModule, createPluginRouter, createPolarModule, createPolicyModule, createPresentation, createPrivilegeAnalyzer, createRateLimiter, createReBACModule, createRedditProvider, createRedirectChain, createScimModule, createSessionFreshnessModule, createSessionManager, createSessionRefresher, createSiweModule, createSlackProvider, createSpotifyProvider, createSsoModule, createStripeModule, createTables, createTenantModule, createTheAuth, createTokenFamilyStore, createTotpModule, createTrustModule, createTrustedDeviceModule, createTwitchProvider, createTwitterProvider, createUsernameAuthModule, createVCIssuer, createVCVerifier, createWebhookModule2 as createWebhookModule, createZoomProvider, customAuth, customSession, de, delegationChains, deviceAuth, deviceLabelFromRequest, dropboxProvider, emailOtp, emailOtps, en, es, exportAuditAsVC, facebookProvider, figmaProvider, fr, fromBase64Url, fromHex, gdpr, generateCsrfToken, generateDidKey, generateDidWeb, generateId, generateOpenAPISpec, genericOIDC, getCookie2 as getCookie, getDidWebUrl, getPermissionTemplate, headerAuth, hmacSha1Raw, hmacSha256, hmacSha256Raw, huggingfaceProvider, importHmacKey, initializePlugins, ja, kakaoProvider, kickProvider, kvStore, lineProvider, linearProvider, listAuditRecords, magicLink, magicLinks, mcpServers, naverProvider, normalizeProfile as normalizeAtlassianProfile, normalizeProfile2 as normalizeDiscordProfile, normalizeProfile3 as normalizeDropboxProfile, normalizeProfile4 as normalizeFigmaProfile, normalizeProfile5 as normalizeNotionProfile, normalizeProfile6 as normalizeRedditProfile, normalizeProfile7 as normalizeSlackProfile, normalizeProfile8 as normalizeSpotifyProfile, normalizeProfile9 as normalizeTwitchProfile, normalizeProfile10 as normalizeZoomProfile, notionProvider, oauth, oauthAccessTokens, oauthAuthorizationCodes, oauthClients, oauthProxy, oktaProvider, oneTap, orgInvitations, orgMembers, orgRoles, organization, organizations, parseCookies2 as parseCookies, parseCookiesFromRequest, passkey, passkeyChallenges, passkeyCredentials, paypalProvider, pbkdf2Hash, pbkdf2Verify, permissionTemplates, permissions, polar, polarProvider, railwayProvider, randomBytes, randomBytesHex, rateLimit, rateLimits, redditProvider, resolveDidKey, resolveDidWeb, robloxProvider, salesforceProvider, scim, serializeCookie, serializeCookieDeletion, sessions, sha1, sha256, sha256Raw, signPayload2 as signPayload, siwe, spotifyProvider, ssoConnections, stripe, tenants, tiktokProvider, toBase64Url, toHex, totpRecords, trustScores, twitchProvider, twoFactor, users, validateCsrfToken, validateOrigin, vercelProvider, verifyPayload, verifyPresentation, verifyWebhookSignature3 as verifyWebhookSignature, vkProvider, wechatProvider, withRateLimit, yahooProvider, zh, zoomProvider };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map