@juspay/neurolink 9.54.3 → 9.54.5

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## [9.54.5](https://github.com/juspay/neurolink/compare/v9.54.4...v9.54.5) (2026-04-15)
+
+### Bug Fixes
+
+- **(proxy):** eliminate fabricated 429 storm, harden launchd service lifecycle ([9ef0505](https://github.com/juspay/neurolink/commit/9ef0505af5db801bcadd1a2e47a0c0423957a3c4))
+
+## [9.54.4](https://github.com/juspay/neurolink/compare/v9.54.3...v9.54.4) (2026-04-14)
+
 ## [9.54.3](https://github.com/juspay/neurolink/compare/v9.54.2...v9.54.3) (2026-04-13)
 
 ### Bug Fixes

package/dist/action/actionExecutor.d.ts

@@ -2,7 +2,7 @@
  * CLI execution for GitHub Action
  * @module action/actionExecutor
  */
-import type { ActionInputs, ActionExecutionResult, CliResponse } from "../types/actionTypes.js";
+import type { ActionInputs, ActionExecutionResult, CliResponse } from "../types/index.js";
 /**
  * Transform CLI response to action result format
  */

package/dist/action/actionInputs.d.ts

@@ -2,7 +2,7 @@
  * GitHub Action input parsing and validation
  * @module action/actionInputs
  */
-import type { ActionInputs, ActionProviderKeys, ActionInputValidation, ActionAWSConfig, ActionGoogleCloudConfig } from "../types/actionTypes.js";
+import type { ActionInputs, ActionProviderKeys, ActionInputValidation, ActionAWSConfig, ActionGoogleCloudConfig } from "../types/index.js";
 /**
  * Mask all secrets in logs
  */

package/dist/action/githubIntegration.d.ts

@@ -2,7 +2,7 @@
  * GitHub API integration for comments, outputs, and job summary
  * @module action/githubIntegration
  */
-import type { ActionInputs, ActionExecutionResult, ActionCommentResult, ActionOutput } from "../types/actionTypes.js";
+import type { ActionInputs, ActionExecutionResult, ActionCommentResult, ActionOutput } from "../types/index.js";
 /**
  * Post result as comment on PR or issue
  */

package/dist/action/index.d.ts

@@ -5,4 +5,3 @@
 export { parseActionInputs, validateProviderKey, buildEnvironmentVariables, validateActionInputs, maskSecrets, } from "./actionInputs.js";
 export { buildCliArgs, installNeurolink, executeNeurolink, runNeurolink, transformCliResponse, } from "./actionExecutor.js";
 export { postResultComment, writeJobSummary, setActionOutputs, getActionOutputs, } from "./githubIntegration.js";
-export type { ActionInputs, ActionExecutionResult, ActionCommentResult, ActionOutput, ActionProviderKeys, ActionAWSConfig, ActionGoogleCloudConfig, ActionThinkingConfig, ActionMultimodalInputs, ActionTokenUsage, ActionEvaluation, ActionInputValidation, CliResponse, CliTokenUsage, } from "../types/actionTypes.js";

package/dist/action/index.js

@@ -9,3 +9,4 @@ export { parseActionInputs, validateProviderKey, buildEnvironmentVariables, vali
 export { buildCliArgs, installNeurolink, executeNeurolink, runNeurolink, transformCliResponse, } from "./actionExecutor.js";
 // GitHub integration
 export { postResultComment, writeJobSummary, setActionOutputs, getActionOutputs, } from "./githubIntegration.js";
+// Re-export types for convenience

package/dist/adapters/providerImageAdapter.d.ts

@@ -2,7 +2,7 @@
  * Provider Image Adapter - Smart routing for multimodal content
  * Handles provider-specific image formatting and vision capability validation
  */
-import type { Content, ImageWithAltText } from "../types/multimodal.js";
+import type { Content, ImageWithAltText } from "../types/index.js";
 /**
  * Simplified logger for essential error reporting only
  */

package/dist/adapters/tts/googleTTSHandler.d.ts

@@ -1,5 +1,4 @@
-import type { TTSHandler } from "../../utils/ttsProcessor.js";
-import type { TTSOptions, TTSResult, TTSVoice } from "../../types/ttsTypes.js";
+import type { TTSOptions, TTSResult, TTSVoice, TTSHandler } from "../../types/index.js";
 export declare class GoogleTTSHandler implements TTSHandler {
     private client;
     private voicesCache;

package/dist/adapters/tts/googleTTSHandler.js

@@ -10,8 +10,7 @@ import { TextToSpeechClient } from "@google-cloud/text-to-speech";
 import { TTSError, TTS_ERROR_CODES } from "../../utils/ttsProcessor.js";
 import { ErrorCategory, ErrorSeverity } from "../../constants/enums.js";
 import { logger } from "../../utils/logger.js";
-import { SpanSerializer, SpanType, SpanStatus, } from "../../observability/index.js";
-import { getMetricsAggregator } from "../../observability/index.js";
+import { SpanSerializer, SpanType, SpanStatus, getMetricsAggregator, } from "../../observability/index.js";
 export class GoogleTTSHandler {
     client = null;
     voicesCache = null;

package/dist/adapters/video/directorPipeline.d.ts

@@ -11,7 +11,7 @@
  *
  * @module adapters/video/directorPipeline
  */
-import type { DirectorModeOptions, DirectorSegment, VideoGenerationResult, VideoOutputOptions } from "../../types/multimodal.js";
+import type { DirectorModeOptions, DirectorSegment, VideoGenerationResult, VideoOutputOptions } from "../../types/index.js";
 /** Default timeout for entire Director Mode pipeline (10 minutes) */
 export declare const DIRECTOR_PIPELINE_TIMEOUT_MS = 600000;
 /**

package/dist/adapters/video/vertexVideoHandler.d.ts

@@ -11,7 +11,7 @@
  */
 import { ErrorCategory, ErrorSeverity } from "../../constants/enums.js";
 import { VIDEO_ERROR_CODES } from "../../constants/videoErrors.js";
-import type { VideoGenerationResult, VideoOutputOptions } from "../../types/multimodal.js";
+import type { VideoGenerationResult, VideoOutputOptions } from "../../types/index.js";
 import { NeuroLinkError } from "../../utils/errorHandling.js";
 /**
  * Video error codes - re-exported from constants module for backward compatibility.

package/dist/agent/directTools.d.ts

@@ -101,7 +101,7 @@ export declare const directAgentTools: {
     writeFile: import("ai").Tool<{
         path: string;
         content: string;
-        mode: "append" | "create" | "overwrite";
+        mode: "create" | "overwrite" | "append";
     }, {
         success: boolean;
         error: string;
@@ -112,7 +112,7 @@ export declare const directAgentTools: {
     } | {
         success: boolean;
         path: string;
-        mode: "append" | "create" | "overwrite";
+        mode: "create" | "overwrite" | "append";
         size: number;
         written: number;
         error?: undefined;
@@ -228,21 +228,21 @@ export declare const bashTool: import("ai").Tool<{
 /**
  * Type aliases for specific tool categories
  */
-export type BasicToolsMap = {
+type BasicToolsMap = {
     getCurrentTime: typeof directAgentTools.getCurrentTime;
     calculateMath: typeof directAgentTools.calculateMath;
 };
-export type FilesystemToolsMap = {
+type FilesystemToolsMap = {
     readFile: typeof directAgentTools.readFile;
     listDirectory: typeof directAgentTools.listDirectory;
     writeFile: typeof directAgentTools.writeFile;
 };
-export type UtilityToolsMap = {
+type UtilityToolsMap = {
     getCurrentTime: typeof directAgentTools.getCurrentTime;
     calculateMath: typeof directAgentTools.calculateMath;
     listDirectory: typeof directAgentTools.listDirectory;
 };
-export type AllToolsMap = typeof directAgentTools & {
+type AllToolsMap = typeof directAgentTools & {
     executeBashCommand?: typeof bashTool;
 };
 /**
@@ -260,3 +260,4 @@ export declare function getAvailableToolNames(): string[];
  * Validate that all tools have proper structure
  */
 export declare function validateToolStructure(): boolean;
+export {};

package/dist/artifacts/artifactStore.d.ts

@@ -17,8 +17,7 @@
  *
  * @module artifacts/artifactStore
  */
-import type { ArtifactMeta, ArtifactRef, ArtifactStore } from "../types/artifactTypes.js";
-export type { ArtifactMeta, ArtifactRef, ArtifactStore, } from "../types/artifactTypes.js";
+import type { ArtifactMeta, ArtifactRef, ArtifactStore } from "../types/index.js";
 /**
  * Filesystem-backed artifact store using the OS temp directory.
  *

package/dist/artifacts/artifactStore.js

@@ -22,6 +22,7 @@ import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { logger } from "../utils/logger.js";
+// Re-export so callers can import everything from one place
 // ---------------------------------------------------------------------------
 // LocalTempArtifactStore
 // ---------------------------------------------------------------------------

package/dist/auth/AuthProviderFactory.d.ts

@@ -5,7 +5,7 @@
  * extension, no singleton instance. Providers are registered by
  * AuthProviderRegistry using dynamic imports to avoid circular dependencies.
  */
-import type { AuthProviderConfig, AuthProviderMetadata, MastraAuthProvider } from "../types/authTypes.js";
+import type { AuthProviderConfig, AuthProviderMetadata, MastraAuthProvider } from "../types/index.js";
 type AuthProviderConstructor = (config: AuthProviderConfig) => Promise<MastraAuthProvider>;
 /**
  * AuthProviderFactory - Creates authentication provider instances

package/dist/auth/anthropicOAuth.d.ts

@@ -46,7 +46,7 @@ export declare const DEFAULT_SCOPES: readonly string[];
 export declare const CLAUDE_CODE_VERSION = "2.1.87.6d6";
 export declare const CLAUDE_CODE_ENTRYPOINT = "sdk-cli";
 export declare const CLAUDE_CLI_USER_AGENT = "claude-cli/2.1.87 (external, sdk-cli)";
-export type ClaudeCodeIdentity = {
+type ClaudeCodeIdentity = {
     deviceId: string;
     accountUuid: string;
     sessionId: string;
@@ -81,7 +81,7 @@ export declare const DEFAULT_REDIRECT_URI = "https://console.anthropic.com/oauth
  * Default local callback server port (for local testing only)
  */
 export declare const DEFAULT_CALLBACK_PORT = 8787;
-import type { OAuthFlowTokens, TokenValidationResult, AnthropicOAuthConfig, PKCEParams, CallbackResult } from "../types/index.js";
+import type { OAuthFlowTokens, ClaudeTokenValidationResult, AnthropicOAuthConfig, PKCEParams, CallbackResult } from "../types/index.js";
 /**
  * AnthropicOAuth - OAuth 2.0 authentication for Claude Pro/Max subscriptions
  *
@@ -258,7 +258,7 @@ export declare class AnthropicOAuth {
      * @param accessToken - The access token to validate
      * @returns Promise resolving to detailed validation result
      */
-    validateTokenWithDetails(accessToken: string): Promise<TokenValidationResult>;
+    validateTokenWithDetails(accessToken: string): Promise<ClaudeTokenValidationResult>;
     /**
      * Revokes an access token or refresh token
      *
@@ -400,3 +400,4 @@ export declare function performOAuthFlow(oauth: AnthropicOAuth, options?: {
     /** Whether to automatically open browser (default: true) */
     openBrowser?: boolean;
 }): Promise<OAuthFlowTokens>;
+export {};

package/dist/auth/anthropicOAuth.js

@@ -16,7 +16,7 @@
  */
 import { createHash, createHmac, randomBytes, randomUUID } from "crypto";
 import { createServer } from "http";
-import { OAuthError, OAuthConfigurationError, OAuthTokenExchangeError, OAuthTokenRefreshError, OAuthTokenRevocationError, OAuthCallbackServerError, } from "../types/errors.js";
+import { OAuthError, OAuthConfigurationError, OAuthTokenExchangeError, OAuthTokenRefreshError, OAuthTokenRevocationError, OAuthCallbackServerError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
 /**
  * HTML-escape a string to prevent XSS when embedding in HTML responses.

package/dist/auth/authContext.d.ts

@@ -1,4 +1,4 @@
-import type { AuthUser, AuthSession, AuthenticatedContext, AuthProviderType, AuthRequestContext } from "../types/authTypes.js";
+import type { AuthUser, AuthSession, AuthenticatedContext, AuthProviderType, AuthRequestContext } from "../types/index.js";
 /**
  * Run a function with authentication context
  *

package/dist/auth/errors.d.ts

@@ -55,7 +55,7 @@ export declare const AuthError: {
         readonly JWKS_FETCH_FAILED: "AUTH-070";
         readonly JWKS_KEY_NOT_FOUND: "AUTH-071";
     };
-    create: (code: "SESSION_NOT_FOUND" | "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "RATE_LIMITED" | "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
+    create: (code: "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_ERROR" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CONFIGURATION_ERROR" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "RATE_LIMITED" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
         retryable?: boolean;
         details?: Record<string, unknown>;
         cause?: Error;

package/dist/auth/index.d.ts

@@ -12,23 +12,18 @@
  */
 export { ANTHROPIC_OAUTH_BASE_URL, DEFAULT_SCOPES, DEFAULT_REDIRECT_URI, DEFAULT_CALLBACK_PORT, } from "./anthropicOAuth.js";
 export { AnthropicOAuth } from "./anthropicOAuth.js";
-export { OAuthError, OAuthConfigurationError, OAuthTokenExchangeError, OAuthTokenRefreshError, OAuthTokenValidationError, OAuthTokenRevocationError, OAuthCallbackServerError, } from "../types/errors.js";
+export { OAuthError, OAuthConfigurationError, OAuthTokenExchangeError, OAuthTokenRefreshError, OAuthTokenValidationError, OAuthTokenRevocationError, OAuthCallbackServerError, } from "../types/index.js";
 export { createAnthropicOAuth, createAnthropicOAuthConfig, hasAnthropicOAuthCredentials, startCallbackServer, stopCallbackServer, performOAuthFlow, } from "./anthropicOAuth.js";
-export type { OAuthTokenResponse, OAuthFlowTokens, OAuthFlowTokens as OAuthTokens, TokenValidationResult as OAuthTokenValidationResult, AnthropicOAuthConfig, PKCEParams, CallbackResult, } from "../types/index.js";
 export { TokenStore, tokenStore, defaultTokenStore } from "./tokenStore.js";
-export { TokenStoreError } from "../types/errors.js";
-export type { StoredOAuthTokens, TokenRefresher } from "../types/authTypes.js";
-export type { NeuroLinkAuthOptions, AuthStatus } from "../types/index.js";
+export { TokenStoreError } from "../types/index.js";
 export { AccountPool } from "./accountPool.js";
-export type { ProxyAccount, AccountPoolConfig } from "../types/index.js";
 export { AuthProviderFactory, createAuthProvider, } from "./AuthProviderFactory.js";
 export { AuthProviderRegistry } from "./AuthProviderRegistry.js";
 export { AuthError, AuthErrorCodes } from "./errors.js";
 export { AuthProviderError, BaseAuthProvider, InMemorySessionStorage, } from "./providers/BaseAuthProvider.js";
-export { AuthMiddlewareError, AuthMiddlewareErrorCodes, createAuthMiddleware, createExpressAuthMiddleware, createProtectedMiddleware, createRBACMiddleware, createRequestContext, type ExpressMiddleware, extractToken, type MiddlewareHandler, type MiddlewareResult, type NextFunction, } from "./middleware/AuthMiddleware.js";
-export { createAuthenticatedRateLimitMiddleware, createRateLimitByUserMiddleware, createRateLimitStorage, MemoryRateLimitStorage, type RateLimitConfig, type RateLimitMiddlewareResult, type RateLimitResult, type RateLimitStorage, RedisRateLimitStorage, UserRateLimiter, } from "./middleware/rateLimitByUser.js";
-export { createSessionStorage, MemorySessionStorage, RedisSessionStorage, SessionManager, type SessionManagerStorage as SessionStorageInterface, } from "./sessionManager.js";
+export { AuthMiddlewareError, AuthMiddlewareErrorCodes, createAuthMiddleware, createExpressAuthMiddleware, createProtectedMiddleware, createRBACMiddleware, createRequestContext, extractToken, } from "./middleware/AuthMiddleware.js";
+export { createAuthenticatedRateLimitMiddleware, createRateLimitByUserMiddleware, createRateLimitStorage, MemoryRateLimitStorage, RedisRateLimitStorage, UserRateLimiter, } from "./middleware/rateLimitByUser.js";
+export { createSessionStorage, MemorySessionStorage, RedisSessionStorage, SessionManager, } from "./sessionManager.js";
 export { AuthContextHolder, createAuthenticatedContext, getAuthContext, getCurrentSession, getCurrentUser, globalAuthContext, hasAllPermissions, hasAnyRole, hasPermission, hasRole, isAuthenticated, requireAuth, requirePermission, requireRole, requireUser, runWithAuthContext, } from "./authContext.js";
 export { RequestContext, NEUROLINK_RESOURCE_ID_KEY, NEUROLINK_THREAD_ID_KEY, } from "./RequestContext.js";
-export type { Auth0Config, AuthCacheConfig, AuthErrorInfo as AuthErrorType, AuthErrorCode, AuthEventData, AuthEventHandler, AuthEventType, AuthenticatedContext, AuthMiddlewareConfig, AuthorizationResult, AuthProviderConfig, AuthProviderFactoryFn, AuthProviderHealthCheck, AuthProviderRegistration, AuthProviderType, AuthRequestContext, AuthSession, AuthUser, BaseAuthProviderConfig, BetterAuthConfig, ClerkConfig, CognitoConfig, CustomAuthConfig, FirebaseConfig, JWK, JWKS, JWTConfig, KeycloakConfig, MastraAuthProvider, OAuth2Config, RBACConfig, RBACMiddlewareConfig, SessionConfig, SessionStorage, SessionValidationResult, SupabaseConfig, TokenClaims, TokenExtractionConfig, TokenValidationConfig, TokenValidationResult as AuthTokenValidationResult, WorkOSConfig, } from "../types/authTypes.js";
 export { createAuthValidatorFromProvider } from "./serverBridge.js";

package/dist/auth/index.js

@@ -18,16 +18,21 @@ export { ANTHROPIC_OAUTH_BASE_URL, DEFAULT_SCOPES, DEFAULT_REDIRECT_URI, DEFAULT
 // Main OAuth class
 export { AnthropicOAuth } from "./anthropicOAuth.js";
 // OAuth error classes (canonical definitions in types/errors.ts)
-export { OAuthError, OAuthConfigurationError, OAuthTokenExchangeError, OAuthTokenRefreshError, OAuthTokenValidationError, OAuthTokenRevocationError, OAuthCallbackServerError, } from "../types/errors.js";
+export { OAuthError, OAuthConfigurationError, OAuthTokenExchangeError, OAuthTokenRefreshError, OAuthTokenValidationError, OAuthTokenRevocationError, OAuthCallbackServerError, } from "../types/index.js";
 // OAuth helper functions
 export { createAnthropicOAuth, createAnthropicOAuthConfig, hasAnthropicOAuthCredentials, startCallbackServer, stopCallbackServer, performOAuthFlow, } from "./anthropicOAuth.js";
+// OAuth types (canonical definitions in types/subscriptionTypes.ts)
 // =============================================================================
 // TOKEN STORE - Secure Token Storage
 // =============================================================================
 // Main TokenStore class and instances
 export { TokenStore, tokenStore, defaultTokenStore } from "./tokenStore.js";
 // Token store error class (canonical definition in types/errors.ts)
-export { TokenStoreError } from "../types/errors.js";
+export { TokenStoreError } from "../types/index.js";
+// Token store types (canonical location: types/authTypes.ts)
+// =============================================================================
+// UNIFIED AUTH INTERFACE (canonical definitions in types/subscriptionTypes.ts)
+// =============================================================================
 // =============================================================================
 // ACCOUNT POOL - Multi-account rotation with cooldowns
 // =============================================================================
@@ -57,5 +62,6 @@ export { createSessionStorage, MemorySessionStorage, RedisSessionStorage, Sessio
 export { AuthContextHolder, createAuthenticatedContext, getAuthContext, getCurrentSession, getCurrentUser, globalAuthContext, hasAllPermissions, hasAnyRole, hasPermission, hasRole, isAuthenticated, requireAuth, requirePermission, requireRole, requireUser, runWithAuthContext, } from "./authContext.js";
 // Request Context
 export { RequestContext, NEUROLINK_RESOURCE_ID_KEY, NEUROLINK_THREAD_ID_KEY, } from "./RequestContext.js";
+// Auth Types
 // Server Bridge
 export { createAuthValidatorFromProvider } from "./serverBridge.js";

package/dist/auth/middleware/AuthMiddleware.d.ts

@@ -7,7 +7,7 @@
  * - RBAC enforcement
  * - Public route handling
  */
-import type { AuthenticatedContext, AuthMiddlewareConfig, AuthRequestContext, AuthUser, RBACMiddlewareConfig, TokenExtractionConfig } from "../../types/authTypes.js";
+import type { AuthenticatedContext, AuthMiddlewareConfig, AuthRequestContext, AuthUser, RBACMiddlewareConfig, TokenExtractionConfig } from "../../types/index.js";
 /**
  * Auth middleware error codes
  */
@@ -31,7 +31,7 @@ export declare const AuthMiddlewareError: {
         readonly PROVIDER_ERROR: "AUTH_MIDDLEWARE-005";
         readonly CONFIGURATION_ERROR: "AUTH_MIDDLEWARE-006";
     };
-    create: (code: "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "INVALID_TOKEN" | "MISSING_TOKEN" | "FORBIDDEN" | "UNAUTHORIZED", message: string, options?: {
+    create: (code: "INVALID_TOKEN" | "MISSING_TOKEN" | "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "FORBIDDEN" | "UNAUTHORIZED", message: string, options?: {
         retryable?: boolean;
         details?: Record<string, unknown>;
         cause?: Error;
@@ -43,7 +43,7 @@ export declare const AuthMiddlewareError: {
  * Avoids `any` for Express/Koa/Hono request objects while remaining
  * compatible with any framework that exposes these standard fields.
  */
-export type IncomingRequest = {
+type IncomingRequest = {
     method?: string;
     url?: string;
     path?: string;
@@ -60,18 +60,18 @@ export type IncomingRequest = {
 /**
  * Minimal response object for Express-style middleware.
  */
-export type OutgoingResponse = {
+type OutgoingResponse = {
     status(code: number): OutgoingResponse;
     json(body: unknown): void;
 };
 /**
  * Middleware handler function type
  */
-export type MiddlewareHandler<TContext = AuthRequestContext> = (context: TContext) => Promise<MiddlewareResult>;
+type MiddlewareHandler<TContext = AuthRequestContext> = (context: TContext) => Promise<MiddlewareResult>;
 /**
  * Middleware result
  */
-export type MiddlewareResult = {
+type MiddlewareResult = {
     /** Whether to proceed to next handler */
     proceed: boolean;
     /** Updated context (if authenticated) */
@@ -86,11 +86,11 @@ export type MiddlewareResult = {
 /**
  * Next function for middleware chaining
  */
-export type NextFunction = () => Promise<void>;
+type NextFunction = () => Promise<void>;
 /**
  * Express-style middleware function
  */
-export type ExpressMiddleware = (req: IncomingRequest, res: OutgoingResponse, next: NextFunction) => Promise<void>;
+type ExpressMiddleware = (req: IncomingRequest, res: OutgoingResponse, next: NextFunction) => Promise<void>;
 /**
  * Extract token from request context based on configuration
  */
@@ -179,3 +179,4 @@ export declare function createRequestContext(req: IncomingRequest): AuthRequestC
  * Create Express-compatible middleware
  */
 export declare function createExpressAuthMiddleware(config: AuthMiddlewareConfig): Promise<ExpressMiddleware>;
+export {};

package/dist/auth/middleware/rateLimitByUser.d.ts

@@ -1,4 +1,4 @@
-import type { AuthenticatedContext, AuthRequestContext, AuthUser } from "../../types/authTypes.js";
+import type { AuthenticatedContext, AuthRequestContext, AuthUser } from "../../types/index.js";
 /**
  * Token bucket state for a single user
  */
@@ -13,7 +13,7 @@ type TokenBucket = {
 /**
  * Rate limit configuration per user or role
  */
-export type RateLimitConfig = {
+type RateLimitConfig = {
     /** Maximum requests allowed in the window */
     maxRequests: number;
     /** Time window in milliseconds */
@@ -30,7 +30,7 @@ export type RateLimitConfig = {
 /**
  * Rate limit result
  */
-export type RateLimitResult = {
+type RateLimitResult = {
     /** Whether the request is allowed */
     allowed: boolean;
     /** Remaining requests in the current window */
@@ -45,7 +45,7 @@ export type RateLimitResult = {
 /**
  * Result of an atomic consume operation
  */
-export type AtomicConsumeResult = {
+type AtomicConsumeResult = {
     /** Updated bucket after the operation */
     bucket: TokenBucket;
     /** Whether a token was successfully consumed */
@@ -54,7 +54,7 @@ export type AtomicConsumeResult = {
 /**
  * Interface for rate limit storage backends
  */
-export interface RateLimitStorage {
+type RateLimitStorage = {
     /** Get the current bucket for a user */
     getBucket(userId: string): Promise<TokenBucket | null>;
     /** Set the bucket for a user */
@@ -78,7 +78,7 @@ export interface RateLimitStorage {
      * @returns null when no bucket exists yet (caller should create one)
      */
     atomicConsume?(userId: string, limit: number, windowMs: number, nowMs: number): Promise<AtomicConsumeResult | null>;
-}
+};
 /**
  * In-memory storage for rate limiting (single instance deployments)
  */
@@ -175,7 +175,7 @@ export declare class UserRateLimiter {
 /**
  * Middleware result type
  */
-export type RateLimitMiddlewareResult = {
+type RateLimitMiddlewareResult = {
     /** Whether to proceed with the request */
     proceed: boolean;
     /** Rate limit result */

package/dist/auth/providers/BaseAuthProvider.d.ts

@@ -10,7 +10,7 @@
  * - Error handling via unified AuthError factory
  */
 import { EventEmitter } from "events";
-import type { AuthenticatedContext, AuthHealthCheck, AuthorizationResult, AuthProviderConfig, AuthProviderType, AuthRequestContext, AuthSession, AuthUser, MastraAuthProvider, RBACConfig, SessionConfig, SessionStorage, SessionValidationResult, TokenClaims, TokenValidationResult } from "../../types/authTypes.js";
+import type { AuthenticatedContext, AuthHealthCheck, AuthorizationResult, AuthProviderConfig, AuthProviderType, AuthRequestContext, AuthSession, AuthUser, MastraAuthProvider, RBACConfig, SessionConfig, SessionStorage, SessionValidationResult, TokenClaims, TokenValidationResult } from "../../types/index.js";
 /**
  * @deprecated Use `AuthError` from `../errors.js` instead.
  * Kept for backward compatibility with CognitoProvider / KeycloakProvider.
@@ -44,7 +44,7 @@ export declare const AuthProviderError: {
         readonly JWKS_FETCH_FAILED: "AUTH-070";
         readonly JWKS_KEY_NOT_FOUND: "AUTH-071";
     };
-    create: (code: "SESSION_NOT_FOUND" | "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "RATE_LIMITED" | "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
+    create: (code: "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_ERROR" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CONFIGURATION_ERROR" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "RATE_LIMITED" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
         retryable?: boolean;
         details?: Record<string, unknown>;
         cause?: Error;

package/dist/auth/providers/CognitoProvider.d.ts

@@ -3,7 +3,7 @@
  *
  * Provides JWT validation, session management, and RBAC for AWS Cognito.
  */
-import type { AuthProviderConfig, AuthUser, TokenValidationResult } from "../../types/authTypes.js";
+import type { AuthProviderConfig, AuthUser, TokenValidationResult } from "../../types/index.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
 /**
  * CognitoProvider - AWS Cognito User Pools integration

package/dist/auth/providers/KeycloakProvider.d.ts

@@ -3,7 +3,7 @@
  *
  * Provides JWT validation, session management, and RBAC for Keycloak.
  */
-import type { AuthProviderConfig, AuthUser, TokenValidationResult } from "../../types/authTypes.js";
+import type { AuthProviderConfig, AuthUser, TokenValidationResult } from "../../types/index.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
 /**
  * KeycloakProvider - Keycloak OpenID Connect integration

package/dist/auth/providers/KeycloakProvider.js

@@ -366,8 +366,7 @@ export class KeycloakProvider extends BaseAuthProvider {
             const providerData = {};
             for (const [key, value] of Object.entries(userData)) {
                 if (value !== undefined) {
-                    providerData[key] =
-                        value;
+                    providerData[key] = value;
                 }
             }
             return {

package/dist/auth/providers/auth0.d.ts

@@ -1,5 +1,5 @@
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
-import type { AuthProviderConfig, Auth0Config, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/authTypes.js";
+import type { AuthProviderConfig, Auth0Config, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/index.js";
 /**
  * Auth0 Authentication Provider
  *

package/dist/auth/providers/betterAuth.d.ts

@@ -1,4 +1,4 @@
-import type { AuthProviderConfig, BetterAuthConfig, TokenValidationResult, AuthRequestContext, AuthHealthCheck } from "../../types/authTypes.js";
+import type { AuthProviderConfig, BetterAuthConfig, TokenValidationResult, AuthRequestContext, AuthHealthCheck } from "../../types/index.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
 /**
  * Better Auth Provider

package/dist/auth/providers/clerk.d.ts

@@ -1,5 +1,5 @@
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
-import type { AuthProviderConfig, ClerkConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/authTypes.js";
+import type { AuthProviderConfig, ClerkConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/index.js";
 /**
  * Clerk Authentication Provider
  *

package/dist/auth/providers/custom.d.ts

@@ -1,4 +1,4 @@
-import type { AuthProviderConfig, CustomAuthConfig, AuthUser, AuthSession, TokenValidationResult, AuthRequestContext, AuthHealthCheck } from "../../types/authTypes.js";
+import type { AuthProviderConfig, CustomAuthConfig, AuthUser, AuthSession, TokenValidationResult, AuthRequestContext, AuthHealthCheck } from "../../types/index.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
 /**
  * Custom Authentication Provider

package/dist/auth/providers/firebase.d.ts

@@ -1,5 +1,5 @@
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
-import type { AuthProviderConfig, FirebaseConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/authTypes.js";
+import type { AuthProviderConfig, FirebaseConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/index.js";
 /**
  * Firebase Authentication Provider
  *

package/dist/auth/providers/jwt.d.ts

@@ -1,4 +1,4 @@
-import type { AuthHealthCheck, AuthProviderConfig, AuthRequestContext, JWTConfig, TokenValidationResult } from "../../types/authTypes.js";
+import type { AuthHealthCheck, AuthProviderConfig, AuthRequestContext, JWTConfig, TokenValidationResult } from "../../types/index.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
 /**
  * Generic JWT Provider

package/dist/auth/providers/oauth2.d.ts

@@ -1,4 +1,4 @@
-import type { AuthHealthCheck, AuthProviderConfig, AuthRequestContext, OAuth2Config, TokenValidationResult } from "../../types/authTypes.js";
+import type { AuthHealthCheck, AuthProviderConfig, AuthRequestContext, OAuth2Config, TokenValidationResult } from "../../types/index.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
 /**
  * Generic OAuth2/OIDC Provider

package/dist/auth/providers/supabase.d.ts

@@ -1,5 +1,5 @@
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
-import type { AuthProviderConfig, SupabaseConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/authTypes.js";
+import type { AuthProviderConfig, SupabaseConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/index.js";
 /**
  * Supabase Authentication Provider
  *

package/dist/auth/providers/workos.d.ts

@@ -1,4 +1,4 @@
-import type { AuthProviderConfig, WorkOSConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck } from "../../types/authTypes.js";
+import type { AuthProviderConfig, WorkOSConfig, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck } from "../../types/index.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
 /**
  * WorkOS Authentication Provider

package/dist/auth/serverBridge.d.ts

@@ -3,7 +3,7 @@
  * Converts an auth provider's authenticateToken() into the validate
  * callback expected by the existing createAuthMiddleware.
  */
-import type { MastraAuthProvider } from "../types/authTypes.js";
+import type { MastraAuthProvider } from "../types/index.js";
 /**
  * Create a validate function for server auth middleware from an auth provider.
  */

package/dist/auth/sessionManager.d.ts

@@ -1,30 +1,4 @@
-import type { AuthUser, AuthSession, SessionConfig } from "../types/authTypes.js";
-/**
- * Session storage interface for SessionManager
- *
- * Defines the contract for session storage backends (memory, Redis, custom).
- * Note: This is a SessionManager-specific interface that uses `set()`/`getUserSessions()`/
- * `deleteUserSessions()`/`isHealthy()` method names, which differ from the canonical
- * `SessionStorage` type in `../types/authTypes.js` (which uses `save()`/`getForUser()`/
- * `deleteAllForUser()`/`exists()`/`touch()`). Both interfaces coexist because
- * SessionManager and BaseAuthProvider have separate storage patterns.
- */
-export interface SessionManagerStorage {
-    /** Get a session by ID */
-    get(sessionId: string): Promise<AuthSession | null>;
-    /** Store a session */
-    set(session: AuthSession): Promise<void>;
-    /** Delete a session */
-    delete(sessionId: string): Promise<void>;
-    /** Get all sessions for a user */
-    getUserSessions(userId: string): Promise<AuthSession[]>;
-    /** Delete all sessions for a user */
-    deleteUserSessions(userId: string): Promise<void>;
-    /** Clear all sessions (for cleanup) */
-    clear(): Promise<void>;
-    /** Health check */
-    isHealthy(): Promise<boolean>;
-}
+import type { AuthUser, AuthSession, SessionConfig, SessionManagerStorage } from "../types/index.js";
 /**
  * In-memory session storage
  *

package/dist/auth/tokenStore.d.ts

@@ -12,7 +12,7 @@
  * - Automatic token refresh via configurable refresher functions
  * - Cross-platform support (Unix/macOS/Windows)
  */
-import type { StoredOAuthTokens, TokenRefresher } from "../types/authTypes.js";
+import type { StoredOAuthTokens, TokenRefresher } from "../types/index.js";
 export type { StoredOAuthTokens, TokenRefresher };
 /**
  * Secure token storage for OAuth tokens with multi-provider support