@juspay/neurolink 9.54.6 → 9.54.8

package/CHANGELOG.md

@@ -1,3 +1,11 @@
+## [9.54.8](https://github.com/juspay/neurolink/compare/v9.54.7...v9.54.8) (2026-04-18)
+
+### Bug Fixes
+
+- **(tools):** tool filter not working ([a026921](https://github.com/juspay/neurolink/commit/a0269210c02d6970a51c64e48b9b5c716fcd6e3a))
+
+## [9.54.7](https://github.com/juspay/neurolink/compare/v9.54.6...v9.54.7) (2026-04-18)
+
 ## [9.54.6](https://github.com/juspay/neurolink/compare/v9.54.5...v9.54.6) (2026-04-15)
 
 ## [9.54.5](https://github.com/juspay/neurolink/compare/v9.54.4...v9.54.5) (2026-04-15)

package/dist/action/actionInputs.d.ts

@@ -2,7 +2,7 @@
  * GitHub Action input parsing and validation
  * @module action/actionInputs
  */
-import type { ActionInputs, ActionProviderKeys, ActionInputValidation, ActionAWSConfig, ActionGoogleCloudConfig } from "../types/index.js";
+import type { ActionAWSConfig, ActionGoogleCloudConfig, ActionInputValidation, ActionInputs, ActionProviderKeys } from "../types/index.js";
 /**
  * Mask all secrets in logs
  */

package/dist/adapters/video/directorPipeline.js

@@ -168,6 +168,9 @@ async function readImageFromDisk(filePath, segmentIndex) {
         });
     }
 }
+// ============================================================================
+// PHASE 1: PARALLEL CLIP GENERATION (with circuit breaker)
+// ============================================================================
 /**
  * Process clip completions in order to maintain an accurate consecutive failure count.
  * This prevents out-of-order completions from incorrectly resetting the failure streak.
@@ -307,6 +310,9 @@ async function generateClips(segments, videoOptions, region) {
     });
     return state.results;
 }
+// ============================================================================
+// PHASE 2: PARALLEL TRANSITION GENERATION
+// ============================================================================
 /**
  * Extract boundary frames and generate transition clips in parallel.
  *

package/dist/adapters/video/vertexVideoHandler.js

@@ -437,6 +437,12 @@ export async function generateVideoWithVertex(image, prompt, options = {}, regio
         });
     }
 }
+// ============================================================================
+// POLLING HELPERS
+// ============================================================================
+/**
+ * Vertex AI operation result type for type safety
+ */
 /**
  * Extract video buffer from completed operation result
  *

package/dist/agent/directTools.d.ts

@@ -2,6 +2,7 @@
  * Direct Tool Definitions for NeuroLink CLI Agent
  * Simple, reliable tools that work immediately with Vercel AI SDK
  */
+import type { AllToolsMap, BasicToolsMap, FilesystemToolsMap, UtilityToolsMap } from "../types/index.js";
 /**
  * Direct tool definitions that work immediately with Gemini/AI SDK
  * These bypass MCP complexity and provide reliable agent functionality
@@ -101,7 +102,7 @@ export declare const directAgentTools: {
     writeFile: import("ai").Tool<{
         path: string;
         content: string;
-        mode: "create" | "overwrite" | "append";
+        mode: "append" | "create" | "overwrite";
     }, {
         success: boolean;
         error: string;
@@ -112,7 +113,7 @@ export declare const directAgentTools: {
     } | {
         success: boolean;
         path: string;
-        mode: "create" | "overwrite" | "append";
+        mode: "append" | "create" | "overwrite";
         size: number;
         written: number;
         error?: undefined;
@@ -225,26 +226,6 @@ export declare const bashTool: import("ai").Tool<{
     timeout: number;
     cwd?: string | undefined;
 }, unknown>;
-/**
- * Type aliases for specific tool categories
- */
-type BasicToolsMap = {
-    getCurrentTime: typeof directAgentTools.getCurrentTime;
-    calculateMath: typeof directAgentTools.calculateMath;
-};
-type FilesystemToolsMap = {
-    readFile: typeof directAgentTools.readFile;
-    listDirectory: typeof directAgentTools.listDirectory;
-    writeFile: typeof directAgentTools.writeFile;
-};
-type UtilityToolsMap = {
-    getCurrentTime: typeof directAgentTools.getCurrentTime;
-    calculateMath: typeof directAgentTools.calculateMath;
-    listDirectory: typeof directAgentTools.listDirectory;
-};
-type AllToolsMap = typeof directAgentTools & {
-    executeBashCommand?: typeof bashTool;
-};
 /**
  * Get a subset of tools for specific use cases with improved type safety
  */
@@ -260,4 +241,3 @@ export declare function getAvailableToolNames(): string[];
  * Validate that all tools have proper structure
  */
 export declare function validateToolStructure(): boolean;
-export {};

package/dist/auth/AuthProviderFactory.d.ts

@@ -5,8 +5,7 @@
  * extension, no singleton instance. Providers are registered by
  * AuthProviderRegistry using dynamic imports to avoid circular dependencies.
  */
-import type { AuthProviderConfig, AuthProviderMetadata, MastraAuthProvider } from "../types/index.js";
-type AuthProviderConstructor = (config: AuthProviderConfig) => Promise<MastraAuthProvider>;
+import type { AuthProviderConfig, AuthProviderConstructor, AuthProviderMetadata, MastraAuthProvider } from "../types/index.js";
 /**
  * AuthProviderFactory - Creates authentication provider instances
  *
@@ -68,4 +67,3 @@ export declare class AuthProviderFactory {
  * Create an auth provider using the factory
  */
 export declare function createAuthProvider(type: string, config: AuthProviderConfig): Promise<MastraAuthProvider>;
-export {};

package/dist/auth/anthropicOAuth.d.ts

@@ -15,6 +15,7 @@
  * @module auth/anthropicOAuth
  */
 import type { Server } from "http";
+import type { ClaudeCodeIdentity } from "../types/index.js";
 /**
  * Claude Code's official OAuth client ID
  * Used to authenticate with Anthropic's OAuth system
@@ -46,12 +47,6 @@ export declare const DEFAULT_SCOPES: readonly string[];
 export declare const CLAUDE_CODE_VERSION = "2.1.87.6d6";
 export declare const CLAUDE_CODE_ENTRYPOINT = "sdk-cli";
 export declare const CLAUDE_CLI_USER_AGENT = "claude-cli/2.1.87 (external, sdk-cli)";
-type ClaudeCodeIdentity = {
-    deviceId: string;
-    accountUuid: string;
-    sessionId: string;
-    metadataUserId: string;
-};
 export declare function parseClaudeCodeUserId(userId: unknown): ClaudeCodeIdentity | null;
 export declare function getOrCreateClaudeCodeIdentity(seed: string, options?: {
     existingUserId?: unknown;
@@ -214,6 +209,7 @@ export declare class AnthropicOAuth {
      * ```
      */
     exchangeCodeForTokens(code: string, codeVerifier: string, config?: AnthropicOAuthConfig): Promise<OAuthFlowTokens>;
+    private _exchangeCodeForTokens;
     /**
      * Refreshes an expired access token using a refresh token
      *
@@ -231,6 +227,7 @@ export declare class AnthropicOAuth {
      * ```
      */
     refreshAccessToken(refreshToken: string, config?: AnthropicOAuthConfig): Promise<OAuthFlowTokens>;
+    private _refreshAccessToken;
     /**
      * Validates an access token and returns token information
      *
@@ -268,6 +265,7 @@ export declare class AnthropicOAuth {
      * @throws OAuthTokenRevocationError if revocation fails
      */
     revokeToken(token: string, tokenType?: "access_token" | "refresh_token"): Promise<void>;
+    private _revokeToken;
     /**
      * Build the list of token endpoint URLs to try, with optional fallback.
      *
@@ -400,4 +398,3 @@ export declare function performOAuthFlow(oauth: AnthropicOAuth, options?: {
     /** Whether to automatically open browser (default: true) */
     openBrowser?: boolean;
 }): Promise<OAuthFlowTokens>;
-export {};

package/dist/auth/anthropicOAuth.js

@@ -18,6 +18,8 @@ import { createHash, createHmac, randomBytes, randomUUID } from "crypto";
 import { createServer } from "http";
 import { OAuthError, OAuthConfigurationError, OAuthTokenExchangeError, OAuthTokenRefreshError, OAuthTokenRevocationError, OAuthCallbackServerError, } from "../types/index.js";
 import { logger } from "../utils/logger.js";
+import { withSpan } from "../telemetry/withSpan.js";
+import { tracers } from "../telemetry/tracers.js";
 /**
  * HTML-escape a string to prevent XSS when embedding in HTML responses.
  */
@@ -467,6 +469,13 @@ export class AnthropicOAuth {
      * ```
      */
     async exchangeCodeForTokens(code, codeVerifier, config = {}) {
+        return withSpan({
+            name: "neurolink.auth.oauth.exchange_code",
+            tracer: tracers.auth,
+            attributes: { "auth.oauth.grant_type": "authorization_code" },
+        }, async () => this._exchangeCodeForTokens(code, codeVerifier, config));
+    }
+    async _exchangeCodeForTokens(code, codeVerifier, config = {}) {
         if (!code) {
             throw new OAuthTokenExchangeError("Authorization code is required");
         }
@@ -555,6 +564,13 @@ export class AnthropicOAuth {
      * ```
      */
     async refreshAccessToken(refreshToken, config = {}) {
+        return withSpan({
+            name: "neurolink.auth.oauth.refresh",
+            tracer: tracers.auth,
+            attributes: { "auth.oauth.grant_type": "refresh_token" },
+        }, async () => this._refreshAccessToken(refreshToken, config));
+    }
+    async _refreshAccessToken(refreshToken, config = {}) {
         if (!refreshToken) {
             throw new OAuthTokenRefreshError("Refresh token is required");
         }
@@ -751,6 +767,13 @@ export class AnthropicOAuth {
      * @throws OAuthTokenRevocationError if revocation fails
      */
     async revokeToken(token, tokenType = "access_token") {
+        return withSpan({
+            name: "neurolink.auth.oauth.revoke",
+            tracer: tracers.auth,
+            attributes: { "auth.oauth.token_type": tokenType },
+        }, async () => this._revokeToken(token, tokenType));
+    }
+    async _revokeToken(token, tokenType = "access_token") {
         if (!token) {
             throw new OAuthTokenRevocationError("Token is required for revocation");
         }

package/dist/auth/errors.d.ts

@@ -55,7 +55,7 @@ export declare const AuthError: {
         readonly JWKS_FETCH_FAILED: "AUTH-070";
         readonly JWKS_KEY_NOT_FOUND: "AUTH-071";
     };
-    create: (code: "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_ERROR" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CONFIGURATION_ERROR" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "RATE_LIMITED" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
+    create: (code: "SESSION_NOT_FOUND" | "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "RATE_LIMITED" | "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
         retryable?: boolean;
         details?: Record<string, unknown>;
         cause?: Error;

package/dist/auth/index.d.ts

@@ -27,3 +27,14 @@ export { createSessionStorage, MemorySessionStorage, RedisSessionStorage, Sessio
 export { AuthContextHolder, createAuthenticatedContext, getAuthContext, getCurrentSession, getCurrentUser, globalAuthContext, hasAllPermissions, hasAnyRole, hasPermission, hasRole, isAuthenticated, requireAuth, requirePermission, requireRole, requireUser, runWithAuthContext, } from "./authContext.js";
 export { RequestContext, NEUROLINK_RESOURCE_ID_KEY, NEUROLINK_THREAD_ID_KEY, } from "./RequestContext.js";
 export { createAuthValidatorFromProvider } from "./serverBridge.js";
+export { Auth0Provider } from "./providers/auth0.js";
+export { BetterAuthProvider } from "./providers/betterAuth.js";
+export { ClerkProvider } from "./providers/clerk.js";
+export { CognitoProvider } from "./providers/CognitoProvider.js";
+export { CustomAuthProvider } from "./providers/custom.js";
+export { FirebaseAuthProvider } from "./providers/firebase.js";
+export { JWTProvider } from "./providers/jwt.js";
+export { KeycloakProvider } from "./providers/KeycloakProvider.js";
+export { OAuth2Provider } from "./providers/oauth2.js";
+export { SupabaseAuthProvider } from "./providers/supabase.js";
+export { WorkOSProvider } from "./providers/workos.js";

package/dist/auth/index.js

@@ -65,3 +65,17 @@ export { RequestContext, NEUROLINK_RESOURCE_ID_KEY, NEUROLINK_THREAD_ID_KEY, } f
 // Auth Types
 // Server Bridge
 export { createAuthValidatorFromProvider } from "./serverBridge.js";
+// =============================================================================
+// AUTH PROVIDER CLASSES — public re-exports (match the module docstring above)
+// =============================================================================
+export { Auth0Provider } from "./providers/auth0.js";
+export { BetterAuthProvider } from "./providers/betterAuth.js";
+export { ClerkProvider } from "./providers/clerk.js";
+export { CognitoProvider } from "./providers/CognitoProvider.js";
+export { CustomAuthProvider } from "./providers/custom.js";
+export { FirebaseAuthProvider } from "./providers/firebase.js";
+export { JWTProvider } from "./providers/jwt.js";
+export { KeycloakProvider } from "./providers/KeycloakProvider.js";
+export { OAuth2Provider } from "./providers/oauth2.js";
+export { SupabaseAuthProvider } from "./providers/supabase.js";
+export { WorkOSProvider } from "./providers/workos.js";

package/dist/auth/middleware/AuthMiddleware.d.ts

@@ -7,7 +7,7 @@
  * - RBAC enforcement
  * - Public route handling
  */
-import type { AuthenticatedContext, AuthMiddlewareConfig, AuthRequestContext, AuthUser, RBACMiddlewareConfig, TokenExtractionConfig } from "../../types/index.js";
+import type { AuthMiddlewareConfig, AuthMiddlewareHandler, AuthRequestContext, AuthenticatedContext, ExpressMiddleware, IncomingRequest, RBACMiddlewareConfig, TokenExtractionConfig } from "../../types/index.js";
 /**
  * Auth middleware error codes
  */
@@ -31,66 +31,12 @@ export declare const AuthMiddlewareError: {
         readonly PROVIDER_ERROR: "AUTH_MIDDLEWARE-005";
         readonly CONFIGURATION_ERROR: "AUTH_MIDDLEWARE-006";
     };
-    create: (code: "INVALID_TOKEN" | "MISSING_TOKEN" | "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "FORBIDDEN" | "UNAUTHORIZED", message: string, options?: {
+    create: (code: "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "INVALID_TOKEN" | "MISSING_TOKEN" | "FORBIDDEN" | "UNAUTHORIZED", message: string, options?: {
         retryable?: boolean;
         details?: Record<string, unknown>;
         cause?: Error;
     } | undefined) => import("../../index.js").NeuroLinkFeatureError;
 };
-/**
- * Minimal request object accepted by {@link createRequestContext}.
- *
- * Avoids `any` for Express/Koa/Hono request objects while remaining
- * compatible with any framework that exposes these standard fields.
- */
-type IncomingRequest = {
-    method?: string;
-    url?: string;
-    path?: string;
-    headers?: Record<string, string | string[] | undefined>;
-    cookies?: Record<string, string>;
-    query?: Record<string, string | string[] | undefined>;
-    body?: unknown;
-    ip?: string;
-    /** Populated by auth middleware after successful authentication */
-    user?: AuthUser;
-    /** Populated by auth middleware after successful authentication */
-    authContext?: AuthenticatedContext;
-};
-/**
- * Minimal response object for Express-style middleware.
- */
-type OutgoingResponse = {
-    status(code: number): OutgoingResponse;
-    json(body: unknown): void;
-};
-/**
- * Middleware handler function type
- */
-type MiddlewareHandler<TContext = AuthRequestContext> = (context: TContext) => Promise<MiddlewareResult>;
-/**
- * Middleware result
- */
-type MiddlewareResult = {
-    /** Whether to proceed to next handler */
-    proceed: boolean;
-    /** Updated context (if authenticated) */
-    context?: AuthenticatedContext;
-    /** Error response if not proceeding */
-    error?: {
-        statusCode: number;
-        message: string;
-        code?: string;
-    };
-};
-/**
- * Next function for middleware chaining
- */
-type NextFunction = () => Promise<void>;
-/**
- * Express-style middleware function
- */
-type ExpressMiddleware = (req: IncomingRequest, res: OutgoingResponse, next: NextFunction) => Promise<void>;
 /**
  * Extract token from request context based on configuration
  */
@@ -123,7 +69,7 @@ export declare function extractToken(context: AuthRequestContext, config?: Token
  * }
  * ```
  */
-export declare function createAuthMiddleware(config: AuthMiddlewareConfig): Promise<MiddlewareHandler<AuthRequestContext>>;
+export declare function createAuthMiddleware(config: AuthMiddlewareConfig): Promise<AuthMiddlewareHandler<AuthRequestContext>>;
 /**
  * Create RBAC (Role-Based Access Control) middleware
  *
@@ -146,7 +92,7 @@ export declare function createAuthMiddleware(config: AuthMiddlewareConfig): Prom
  * }
  * ```
  */
-export declare function createRBACMiddleware(config: RBACMiddlewareConfig): MiddlewareHandler<AuthenticatedContext>;
+export declare function createRBACMiddleware(config: RBACMiddlewareConfig): AuthMiddlewareHandler<AuthenticatedContext>;
 /**
  * Create combined auth + RBAC middleware
  *
@@ -170,7 +116,7 @@ export declare function createRBACMiddleware(config: RBACMiddlewareConfig): Midd
 export declare function createProtectedMiddleware(config: {
     auth: AuthMiddlewareConfig;
     rbac?: RBACMiddlewareConfig;
-}): Promise<MiddlewareHandler<AuthRequestContext>>;
+}): Promise<AuthMiddlewareHandler<AuthRequestContext>>;
 /**
  * Create request context from standard request object
  */
@@ -179,4 +125,3 @@ export declare function createRequestContext(req: IncomingRequest): AuthRequestC
  * Create Express-compatible middleware
  */
 export declare function createExpressAuthMiddleware(config: AuthMiddlewareConfig): Promise<ExpressMiddleware>;
-export {};

package/dist/auth/middleware/AuthMiddleware.js

@@ -43,6 +43,9 @@ function createAuthErrorInfo(message, code) {
     return err;
 }
 // =============================================================================
+// TYPES
+// =============================================================================
+// =============================================================================
 // TOKEN EXTRACTION
 // =============================================================================
 /**

package/dist/auth/middleware/rateLimitByUser.d.ts

@@ -1,84 +1,4 @@
-import type { AuthenticatedContext, AuthRequestContext, AuthUser } from "../../types/index.js";
-/**
- * Token bucket state for a single user
- */
-type TokenBucket = {
-    /** Current number of tokens available */
-    tokens: number;
-    /** Last time tokens were added */
-    lastRefill: number;
-    /** User identifier */
-    userId: string;
-};
-/**
- * Rate limit configuration per user or role
- */
-type RateLimitConfig = {
-    /** Maximum requests allowed in the window */
-    maxRequests: number;
-    /** Time window in milliseconds */
-    windowMs: number;
-    /** Optional: Different limits per role (role -> maxRequests) */
-    roleLimits?: Record<string, number>;
-    /** Optional: Different limits per user ID (userId -> maxRequests) */
-    userLimits?: Record<string, number>;
-    /** Skip rate limiting for these roles */
-    skipRoles?: string[];
-    /** Error message when rate limited */
-    message?: string;
-};
-/**
- * Rate limit result
- */
-type RateLimitResult = {
-    /** Whether the request is allowed */
-    allowed: boolean;
-    /** Remaining requests in the current window */
-    remaining: number;
-    /** Time until the bucket resets (ms) */
-    resetIn: number;
-    /** Total limit for this user */
-    limit: number;
-    /** Error message if rate limited */
-    error?: string;
-};
-/**
- * Result of an atomic consume operation
- */
-type AtomicConsumeResult = {
-    /** Updated bucket after the operation */
-    bucket: TokenBucket;
-    /** Whether a token was successfully consumed */
-    consumed: boolean;
-};
-/**
- * Interface for rate limit storage backends
- */
-type RateLimitStorage = {
-    /** Get the current bucket for a user */
-    getBucket(userId: string): Promise<TokenBucket | null>;
-    /** Set the bucket for a user */
-    setBucket(userId: string, bucket: TokenBucket): Promise<void>;
-    /** Delete a bucket (for cleanup) */
-    deleteBucket(userId: string): Promise<void>;
-    /** Check storage health */
-    healthCheck(): Promise<boolean>;
-    /** Cleanup resources */
-    cleanup(): Promise<void>;
-    /**
-     * Atomically refill and consume a token from the bucket.
-     *
-     * Implementations SHOULD perform the refill-and-consume in a single
-     * atomic step (e.g. Lua script for Redis) to prevent race conditions
-     * where parallel requests read the same token count and both succeed.
-     *
-     * The default in-memory implementation is inherently single-threaded,
-     * so atomicity comes for free.
-     *
-     * @returns null when no bucket exists yet (caller should create one)
-     */
-    atomicConsume?(userId: string, limit: number, windowMs: number, nowMs: number): Promise<AtomicConsumeResult | null>;
-};
+import type { AtomicConsumeResult, AuthRateLimitConfig, AuthRequestContext, AuthUser, AuthenticatedContext, RateLimitMiddlewareResult, RateLimitResult, RateLimitStorage, TokenBucket } from "../../types/index.js";
 /**
  * In-memory storage for rate limiting (single instance deployments)
  */
@@ -136,7 +56,7 @@ export declare class RedisRateLimitStorage implements RateLimitStorage {
 export declare class UserRateLimiter {
     private storage;
     private config;
-    constructor(config: RateLimitConfig, storage?: RateLimitStorage);
+    constructor(config: AuthRateLimitConfig, storage?: RateLimitStorage);
     /**
      * Get the rate limit for a specific user based on their roles
      */
@@ -175,14 +95,6 @@ export declare class UserRateLimiter {
 /**
  * Middleware result type
  */
-type RateLimitMiddlewareResult = {
-    /** Whether to proceed with the request */
-    proceed: boolean;
-    /** Rate limit result */
-    rateLimitResult: RateLimitResult;
-    /** Error response if rate limited */
-    response?: Response;
-};
 /**
  * Create rate limiting middleware for authenticated requests
  *
@@ -212,7 +124,7 @@ type RateLimitMiddlewareResult = {
  * });
  * ```
  */
-export declare function createRateLimitByUserMiddleware(config: RateLimitConfig, storage?: RateLimitStorage): (context: AuthenticatedContext) => Promise<RateLimitMiddlewareResult>;
+export declare function createRateLimitByUserMiddleware(config: AuthRateLimitConfig, storage?: RateLimitStorage): (context: AuthenticatedContext) => Promise<RateLimitMiddlewareResult>;
 /**
  * Create a combined auth and rate limit middleware
  *
@@ -242,7 +154,7 @@ export declare function createAuthenticatedRateLimitMiddleware(authMiddleware: (
     proceed: boolean;
     context?: AuthenticatedContext;
     response?: Response;
-}>, rateLimitConfig: RateLimitConfig, storage?: RateLimitStorage): (context: AuthRequestContext) => Promise<{
+}>, rateLimitConfig: AuthRateLimitConfig, storage?: RateLimitStorage): (context: AuthRequestContext) => Promise<{
     proceed: boolean;
     context?: AuthenticatedContext;
     rateLimitResult?: RateLimitResult;
@@ -279,4 +191,3 @@ export declare function createRateLimitStorage(config: {
     };
     cleanupIntervalMs?: number;
 }): RateLimitStorage;
-export {};

package/dist/auth/middleware/rateLimitByUser.js

@@ -217,6 +217,7 @@ export class RedisRateLimitStorage {
         }
     }
 }
+// Type for Redis client (simplified interface)
 /**
  * Token bucket rate limiter implementation
  *
@@ -406,6 +407,9 @@ export class UserRateLimiter {
         await this.storage.cleanup();
     }
 }
+/**
+ * Middleware result type
+ */
 /**
  * Create rate limiting middleware for authenticated requests
  *

package/dist/auth/providers/BaseAuthProvider.d.ts

@@ -44,7 +44,7 @@ export declare const AuthProviderError: {
         readonly JWKS_FETCH_FAILED: "AUTH-070";
         readonly JWKS_KEY_NOT_FOUND: "AUTH-071";
     };
-    create: (code: "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_NOT_FOUND" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_ERROR" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CONFIGURATION_ERROR" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "RATE_LIMITED" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
+    create: (code: "SESSION_NOT_FOUND" | "PROVIDER_ERROR" | "CONFIGURATION_ERROR" | "RATE_LIMITED" | "INVALID_TOKEN" | "EXPIRED_TOKEN" | "MISSING_TOKEN" | "TOKEN_DECODE_FAILED" | "INVALID_SIGNATURE" | "SESSION_EXPIRED" | "SESSION_REVOKED" | "INSUFFICIENT_PERMISSIONS" | "INSUFFICIENT_ROLES" | "ACCESS_DENIED" | "USER_NOT_FOUND" | "USER_DISABLED" | "EMAIL_NOT_VERIFIED" | "MFA_REQUIRED" | "PROVIDER_NOT_FOUND" | "PROVIDER_INIT_FAILED" | "CREATION_FAILED" | "REGISTRATION_FAILED" | "DUPLICATE_REGISTRATION" | "MIDDLEWARE_ERROR" | "JWKS_FETCH_FAILED" | "JWKS_KEY_NOT_FOUND", message: string, options?: {
         retryable?: boolean;
         details?: Record<string, unknown>;
         cause?: Error;

package/dist/auth/providers/CognitoProvider.js

@@ -7,6 +7,9 @@ import { importJWK, jwtVerify } from "jose";
 import { logger } from "../../utils/logger.js";
 import { AuthError } from "../errors.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
+// =============================================================================
+// JWKS CACHE
+// =============================================================================
 const jwksCache = new Map();
 // =============================================================================
 // COGNITO PROVIDER

package/dist/auth/providers/KeycloakProvider.js

@@ -7,6 +7,9 @@ import { importJWK, jwtVerify } from "jose";
 import { logger } from "../../utils/logger.js";
 import { AuthError } from "../errors.js";
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
+// =============================================================================
+// JWKS CACHE
+// =============================================================================
 const jwksCache = new Map();
 // =============================================================================
 // KEYCLOAK PROVIDER

package/dist/auth/providers/auth0.d.ts

@@ -1,5 +1,5 @@
 import { BaseAuthProvider } from "./BaseAuthProvider.js";
-import type { AuthProviderConfig, Auth0Config, AuthUser, TokenValidationResult, AuthRequestContext, AuthHealthCheck, AuthProviderType } from "../../types/index.js";
+import type { Auth0Config, AuthHealthCheck, AuthProviderConfig, AuthProviderType, AuthRequestContext, AuthUser, TokenValidationResult } from "../../types/index.js";
 /**
  * Auth0 Authentication Provider
  *

package/dist/auth/sessionManager.d.ts

@@ -67,12 +67,14 @@ export declare class SessionManager {
         userAgent?: string;
         deviceId?: string;
     }): Promise<AuthSession>;
+    private _createSession;
     /**
      * Get a session by ID
      *
      * Optionally auto-refreshes if close to expiration.
      */
     getSession(sessionId: string, autoRefresh?: boolean | undefined): Promise<AuthSession | null>;
+    private _getSession;
     /**
      * Check if session should be refreshed
      */