@qwickapps/server 1.4.0 → 1.5.1

package/CHANGELOG.md

@@ -0,0 +1,507 @@
+# Changelog
+
+All notable changes to @qwickapps/server will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.5.1] - 2025-12-18
+
+### Fixed
+
+- **npm Package** - Include CHANGELOG.md in published package
+- **README** - Add "What's New" section highlighting v1.5.0 features
+- **Input Validation** - `getByIdentifier()` now throws if no identifiers provided
+- **Zero-value IDs** - Fixed `wp_user_id` and `keap_contact_id` to allow 0 as valid identifier
+- **Memory Leak** - Fixed potential memory leak in NotificationsPage component
+- **Audit Logging** - Disconnect actions now log admin user info (userId, email, IP)
+
+### Added
+
+- **Unit Tests** - Comprehensive tests for postgres store methods (`getByIdentifier`, `linkIdentifiers`, `getByIds`)
+
+## [1.5.0] - 2025-12-18
+
+### Added
+
+- **Notifications Plugin UI** - Stats widget and management UI for notifications (#484)
+  - `NotificationsStatsWidget` - Dashboard widget showing notification statistics
+  - `NotificationsPage` - Full management UI for viewing and managing notifications
+  - `StatCard` component - Reusable statistics display component
+  - `formatters` utility - Number and date formatting helpers
+
+- **Users Plugin Enhancements** - Improved user search and ban management (#491)
+  - Enhanced search functionality in Control Panel users page
+  - Search users by email, name, or external ID
+  - Ban management directly from user list with ban/unban actions
+  - Updated `controlPanelApi` with expanded user management endpoints
+
+### Fixed
+
+- **Profile Sync** - Multi-identifier lookup for Auth0 profile sync (#492)
+  - Improved user matching with multiple identifier support
+
+## [1.4.0] - 2025-12-16
+
+### Added
+
+- **Rate Limit Plugin** (`createRateLimitPlugin`) - API rate limiting with multiple strategies (#401)
+  - Three rate limiting strategies: sliding window (default), fixed window, token bucket
+  - PostgreSQL persistence with Row-Level Security (RLS) for multi-tenant isolation
+  - Redis caching with in-memory fallback (via cache plugin)
+  - Express middleware (`rateLimitMiddleware`) for automatic enforcement
+  - Programmatic API: `isLimited`, `checkLimit`, `incrementLimit`, `getRemainingRequests`, `clearLimit`
+  - Standard rate limit headers: `RateLimit-Limit`, `RateLimit-Remaining`, `RateLimit-Reset`, `Retry-After`
+  - Auto-cleanup of expired limits
+  - Configurable scopes: user, tenant, IP
+  - **Environment Config** (`createRateLimitPluginFromEnv`) for zero-config setup via env vars
+  - **Runtime Config UI** - Control Panel page for live configuration changes
+    - Edit window size, max requests, strategy at runtime
+    - Toggle cleanup job on/off
+    - View store and cache status
+  - **Config API** (`GET/PUT /api/rate-limit/config`) for programmatic runtime updates
+  - **PostgreSQL Store** (`postgresRateLimitStore`) with RLS policies
+  - **Cache Store** (`createRateLimitCache`) with Redis/memory support
+  - Status API endpoints: `GET /rate-limit/status`, `DELETE /rate-limit/clear/:key`
+  - New types: `RateLimitPluginConfig`, `LimitStatus`, `RateLimitMiddlewareOptions`, `RateLimitEnvPluginOptions`
+
+### Fixed
+
+- **Supabase Adapter TypeScript Error** - Fix build failure with `response.json()` returning `unknown`
+  - Added `SupabaseUserResponse` interface for type-safe Supabase API responses
+  - Node.js fetch types (`undici-types`) correctly return `Promise<unknown>` from `json()`
+  - This caused TS18046 errors when accessing properties on the response
+  - Fixes GitHub Actions publish workflow failure
+
+### Added
+
+- **Auth Plugin Runtime Configuration** - Control Panel UI for auth config with hot-reload (#394)
+  - Editable configuration forms for all auth providers (Auth0, Supabase, SuperTokens, Basic)
+  - PostgreSQL-backed config store with `pg_notify` for cross-instance sync
+  - Adapter wrapper pattern enables hot-reload without server restart
+  - Test connection feature validates provider before saving
+  - API endpoints: `PUT /api/auth/config`, `DELETE /api/auth/config`, `POST /api/auth/test-provider`
+  - New exports: `postgresAuthConfigStore()`, `setAuthConfigStore()`, `createAdapterWrapper()`, `getAdapterWrapper()`
+  - New types: `RuntimeAuthConfig`, `UpdateAuthConfigRequest`, `TestProviderRequest`, `TestProviderResponse`, `AuthConfigStore`, `PostgresAuthConfigStoreConfig`
+  - Social providers panel for SuperTokens (Google, GitHub, Apple)
+  - Reset to environment variables functionality
+  - SQL injection protection with identifier validation
+  - URL validation for SSRF protection in test connections
+  - Exponential backoff for pg_notify reconnection (1s → 60s max)
+  - **Note**: Hot-reload swaps `isAuthenticated/getUser` methods immediately; Express middleware routes (e.g., OAuth callbacks) require server restart to fully apply
+
+- **Auth Plugin Environment Configuration** - Zero-code auth setup via environment variables (#393)
+  - New `createAuthPluginFromEnv()` factory function
+  - Supports ALL 4 adapters: Auth0, Supabase, Supertokens, Basic
+  - Plugin states: disabled (no config), enabled (valid config), error (invalid config)
+  - Clear error messages listing missing environment variables
+  - Control Panel Auth page showing configuration status
+  - `getAuthStatus()` function to check current auth state
+  - API endpoints: `GET /api/auth/config/status`, `GET /api/auth/config`
+  - New types: `AuthPluginState`, `AuthEnvPluginOptions`, `AuthConfigStatus`
+  - Comprehensive env var support (30+ variables across all adapters)
+  - Secrets automatically masked in status responses
+
+- **Supertokens Auth Adapter** - Self-hosted authentication with Supertokens (#392)
+  - Supports email/password authentication via EmailPassword recipe
+  - Supports social logins (Google, Apple, GitHub) via ThirdParty recipe
+  - Uses Supertokens' native session management (HTTP-only cookies)
+  - Lazy initialization - doesn't require supertokens-node unless used
+  - Configurable options: enable/disable email/password, custom API paths
+  - Integrates with existing `requireAuth()` middleware
+  - New types: `SupertokensAdapterConfig`
+  - Requires `supertokens-node` v20+ as optional peer dependency
+
+- **Users Plugin: User Info API** - Comprehensive user information aggregation (#352)
+  - `GET /api/users/:id/info` - Get comprehensive user info from all loaded plugins
+  - `POST /api/users/sync` - Find or create user and return full info (for Auth0/OAuth triggers)
+  - `buildUserInfo()` helper aggregates data in parallel from:
+    - Entitlements plugin (user's entitlements)
+    - Preferences plugin (user's preferences)
+    - Bans plugin (active ban status)
+  - Graceful degradation when plugins are not loaded
+  - Error resilience - partial failures don't break the entire request
+  - New types: `UserInfo`, `UserSyncInput`
+
+- **Preferences Plugin** (`createPreferencesPlugin`) - User preferences management with PostgreSQL RLS (#349)
+  - Row-Level Security (RLS) for database-level data isolation
+  - Foreign key to users table with `ON DELETE CASCADE`
+  - Transaction-safe RLS context setting for connection pooling
+  - Deep merge updates (preserve nested objects on partial updates)
+  - Configurable default preferences
+  - Input validation (100KB size limit, 10-level nesting depth)
+  - **PostgreSQL Store** (`postgresPreferencesStore`)
+    - Creates `user_preferences` table with RLS policies
+    - `WITH CHECK` clause for complete RLS protection on writes
+  - **REST API endpoints**:
+    - `GET /api/preferences` - Get current user's preferences (merged with defaults)
+    - `PUT /api/preferences` - Update preferences (deep merge)
+    - `DELETE /api/preferences` - Reset to defaults
+  - **Helper functions**: `getPreferences()`, `updatePreferences()`, `deletePreferences()`, `getDefaultPreferences()`
+  - **Utility**: `deepMerge()` function exported for custom merge operations
+
+### Changed
+
+- **Logo Configuration**: Consolidated redundant logo properties into single `logoIconUrl` (fixes #336)
+  - Replaced `GatewayConfig.logoUrl` with `logoIconUrl`
+  - Removed `ControlPanelConfig.branding.logo` (was unused by React UI)
+  - Added `ControlPanelConfig.logoIconUrl` for custom logo icons
+  - React UI now renders custom logo when `logoIconUrl` is provided in `/api/info`
+  - **BREAKING**: Migrate from `logoUrl` to `logoIconUrl` in gateway configs
+
+### Added
+
+- **Plugins Overview Page** in Control Panel UI (closes #346)
+  - New core built-in page at `/plugins` showing all registered plugins
+  - Plugin list with status badges (active/stopped/error/starting)
+  - Expandable details showing plugin contributions (routes, menu items, pages, widgets)
+  - Error display for plugins in error state
+  - New `ConfigContribution` type for plugins to provide custom settings UI
+  - `GET /api/plugins/:id` endpoint for detailed plugin info
+  - Enhanced `GET /api/plugins` with contribution counts
+  - `addConfigComponent()` and `getPluginContributions()` methods on PluginRegistry
+
+- **Cache Plugin**: `scanKeys()` method using Redis SCAN for non-blocking key iteration (closes #258)
+  - Cursor-based iteration prevents blocking Redis on large datasets
+  - Accepts optional `count` parameter for batch size hints
+  - Deprecated `keys()` method in favor of `scanKeys()` for production use
+
+## [1.3.0] - 2025-12-10
+
+### Added
+
+- **Entitlements Plugin** (`createEntitlementsPlugin`)
+  - Pluggable entitlement source with adapter pattern
+  - **In-Memory Source** for demo/testing
+  - **PostgreSQL Source** (`postgresEntitlementSource`) for production
+  - REST API endpoints:
+    - `GET /api/entitlements/:email` - Get user entitlements
+    - `GET /api/entitlements/:email/check/:entitlement` - Check specific entitlement
+    - `POST /api/entitlements/:email/refresh` - Force cache refresh
+    - `GET /api/entitlements/available` - List all available entitlements
+    - `POST /api/entitlements/:email` - Grant entitlement (writable sources)
+    - `DELETE /api/entitlements/:email/:entitlement` - Revoke entitlement
+  - Helper functions: `getEntitlements()`, `hasEntitlement()`, `hasAnyEntitlement()`, `hasAllEntitlements()`
+  - Dashboard widget showing entitlement statistics
+
+- **Entitlements Page** in Control Panel UI
+  - View all available entitlements with categories
+  - Search and filter entitlements
+  - Add/edit/delete entitlements (writable sources)
+  - View users with specific entitlements
+
+- **Users Page** in Control Panel UI
+  - View all users with entitlement counts
+  - Lookup user entitlements dialog
+  - Grant/revoke entitlements from user view
+  - Ban/unban users integration
+
+- **Bans Plugin** (`createBansPlugin`)
+  - Separated ban management from Users plugin
+  - Standalone ban store interface
+  - REST API endpoints for ban management
+
+- **Gateway Maintenance Mode**
+  - Configurable maintenance pages for mounted apps
+  - `MaintenanceConfig`: enabled, title, message, expectedBackAt, contactUrl, bypassPaths
+  - Modern responsive design with dark mode support
+  - ETA countdown (ISO date, relative time like "2 hours", or "soon")
+  - Bypass paths for health checks during maintenance
+
+- **Gateway Service Unavailable Pages**
+  - Automatic fallback page when proxied services are unreachable
+  - `FallbackConfig`: title, message, showRetry, autoRefresh
+  - Auto-refresh countdown (default 30 seconds)
+  - Smart content negotiation (JSON for API requests, HTML for browsers)
+
+- **Auth Plugin** (`createAuthPlugin`)
+  - Pluggable authentication with adapter pattern
+  - **Auth0 Adapter** (`auth0Adapter`)
+    - OIDC authentication via express-openid-connect
+    - Role-based access control (RBAC) support
+    - Domain whitelist filtering
+    - Access token exposure for downstream API calls
+  - **Basic Adapter** (`basicAdapter`)
+    - HTTP Basic authentication
+    - Configurable realm
+  - **Supabase Adapter** (`supabaseAdapter`)
+    - JWT token validation
+    - User caching for performance
+  - Fallback adapter chain support
+  - Helper functions: `isAuthenticated()`, `getAuthenticatedUser()`, `getAccessToken()`
+  - Middleware helpers: `requireAuth()`, `requireRoles()`, `requireAnyRole()`
+
+- **Users Plugin** (`createUsersPlugin`)
+  - Storage-agnostic user management with UserStore interface
+  - **PostgreSQL User Store** (`postgresUserStore`)
+    - User CRUD operations
+    - Search with pagination and filtering
+    - External ID mapping for provider sync
+  - **Ban Management** (user-id keyed)
+    - Permanent and temporary bans
+    - Ban history tracking
+    - Automatic cleanup of expired bans
+    - Callbacks: `onBan`, `onUnban`
+  - **Email Ban Management** (email-keyed, for auth-only scenarios)
+    - Ban users by email without storing users locally
+    - Helper functions: `isEmailBanned()`, `getEmailBan()`, `banEmail()`, `unbanEmail()`
+    - REST API endpoints for email bans
+  - REST API endpoints:
+    - `GET/POST /api/users` - List/create users
+    - `GET/PUT/DELETE /api/users/:id` - Get/update/delete user
+    - `GET /api/users/bans` - List active bans
+    - `GET/POST/DELETE /api/users/:id/ban` - Manage user bans
+    - `GET /api/users/email-bans` - List active email bans
+    - `GET/POST /api/users/email-bans/:email` - Get/create email ban
+    - `DELETE /api/users/email-bans/:email` - Remove email ban
+
+- **Plugin Registry** (`PluginRegistry`)
+  - New centralized plugin registration system replacing PluginManager
+  - Cleaner API for plugin lifecycle management
+  - Better type safety for plugin metadata and dependencies
+
+- **Dashboard Widget System** for Control Panel UI
+  - `DashboardWidgetProvider` context for managing widgets
+  - `DashboardWidget` interface for creating custom widgets
+  - Built-in widgets: Service Status, Quick Actions
+  - Consumer apps can register custom dashboard widgets
+
+- **System Page** in Control Panel UI
+  - Displays server version and system information
+  - Shows plugin status and configuration
+
+- **UI Library Export** (`@qwickapps/server/ui`)
+  - `ControlPanelApp` component for building admin UIs
+  - Shared dashboard components
+  - Vite library build configuration
+
+### Changed
+
+- **ControlPanelApp Navigation**: Routes now use relative paths (e.g., `/health` instead of `${basePath}/health`)
+  - Works correctly with React Router's `basename` prop
+  - Integrates with `@qwickapps/react-framework` NavigationContext
+
+- **Control Panel Base Path Injection**
+  - Server now injects `window.__APP_BASE_PATH__` into HTML for reliable base path detection
+  - Simplified client-side detection from ~50 lines to single global read
+  - Works seamlessly behind proxies with X-Forwarded-Prefix support
+
+- **Control Panel Asset Serving**
+  - Dynamic asset path rewriting for non-root mount paths
+  - Apps mounted at subpaths (e.g., `/cpanel`) now work without rebuilding UI
+
+- **Demo Server**
+  - Added `demo-gateway.ts` example with frontend app at `/` and cpanel at `/cpanel`
+  - Uses in-memory stores for Users, Bans, and Entitlements
+
+### Fixed
+
+- Fixed `DashboardWidgetProvider` not wrapping app in built-in UI
+
+### Removed
+
+- **PluginManager** - Replaced by simpler PluginRegistry
+
+## [1.2.0] - 2025-12-08
+
+### Changed
+
+- **Reduced Log Verbosity**
+  - Moved verbose startup messages to debug level
+  - Gateway now logs single concise INFO line: `{productName} started on port {port} (auth: {type})`
+  - Detailed route, port, and configuration info logged at debug level
+  - Control panel start/stop messages moved to debug level
+
+### Notes
+
+This release includes all features from 1.1.7-1.1.9 (PostgreSQL plugin, Cache plugin, Route Guards, Gateway enhancements) which were not published to npm. If upgrading from 1.1.6, see those version entries for full feature list.
+
+## [1.1.9] - 2025-12-07
+
+### Added
+
+- **Configurable Logo for Landing Page**
+  - New `logoUrl` option in `GatewayConfig` to specify a custom product logo
+  - When set, the landing page displays the custom logo instead of the default icon
+  - Supports SVG, PNG, and other image formats
+
+### Changed
+
+- **Default Landing Page**
+  - Logo container now supports both custom images and the default SVG icon
+  - Added CSS classes `.logo.custom` and `.logo.default` for differentiated styling
+
+## [1.1.8] - 2025-12-07
+
+### Changed
+
+- **Default Landing Page**
+  - Removed "Health Check" button (health can be checked via control panel)
+  - Updated footer to "Powered by QwickApps Server - Version x.y.z"
+  - "QwickApps Server" links to https://qwickapps.com
+  - Version links to https://github.com/qwickapps/server
+
+## [1.1.7] - 2025-12-07
+
+### Added
+
+- **PostgreSQL Plugin** (`createPostgresPlugin`)
+  - Connection pooling with configurable max connections
+  - Transaction support with `withTransaction()` callback
+  - Built-in health checks with configurable intervals
+  - Named instances for multi-database support
+  - Exports: `getPostgres()`, `hasPostgres()`
+
+- **Cache Plugin** (`createCachePlugin`)
+  - Redis-based caching using ioredis
+  - Key prefixing and configurable default TTL
+  - Full cache API: `get`, `set`, `delete`, `deletePattern`, `keys`, `flush`, `getStats`
+  - Built-in health checks
+  - Exports: `getCache()`, `hasCache()`
+
+### Changed
+
+- Renamed internal database plugin to postgres-plugin for clarity
+- Added backward compatibility aliases (`createDatabasePlugin`, `getDatabase`)
+
+## [1.1.6] - 2025-12-07
+
+### Added
+
+- **Configurable Mount Paths**
+  - Control panel now mounts at `/cpanel` by default (configurable via `mountPath`)
+  - Root path (`/`) reserved for frontend applications
+  - API routes available at `{mountPath}/api/` (e.g., `/cpanel/api/health`)
+
+- **Route Guards System**
+  - New unified guard system replaces old auth configuration
+  - `BasicAuthGuardConfig` - HTTP Basic authentication
+  - `SupabaseAuthGuardConfig` - Supabase JWT token validation
+  - `Auth0GuardConfig` - Auth0 OpenID Connect integration
+  - `createRouteGuard()` factory function
+  - `isAuthenticated()` and `getAuthenticatedUser()` helper functions
+
+- **Frontend App Plugin**
+  - New `createFrontendAppPlugin()` for handling root path
+  - Support for redirect to another URL
+  - Support for serving static files
+  - Support for custom landing page with links
+
+- **Gateway Enhancements**
+  - `controlPanelPath` - Configurable mount path for control panel
+  - `controlPanelGuard` - Guard configuration for control panel
+  - `frontendApp` - Configuration for root path handling
+
+### Changed
+
+- Default control panel mount path changed from `/` to `/cpanel`
+- Auth configuration replaced with guard-based system
+
+### Removed
+
+- Legacy `auth` configuration in `ControlPanelConfig` (use `guard` instead)
+- Legacy `authMode`, `basicAuthUser`, `basicAuthPassword` in `GatewayConfig` (use `controlPanelGuard` instead)
+
+### Breaking Changes
+
+- Applications using the old `auth` configuration must migrate to `guard`
+- Applications using gateway `authMode` must migrate to `controlPanelGuard`
+
+## [1.1.5] - 2025-12-06
+
+### Fixed
+
+- Fixed `file:` reference for `@qwickapps/react-framework` devDependency that prevented builds in public repo
+
+## [1.1.4] - 2025-12-06
+
+### Changed
+
+- Updated repository and homepage URLs to point to public GitHub org (https://github.com/qwickapps/control-panel)
+
+## [1.1.3] - 2025-12-06
+
+### Fixed
+
+- Fixed `workspace:*` reference in devDependencies that prevented npm publish
+
+## [1.1.2] - 2025-12-06
+
+### Added
+
+- **Gateway Pattern**
+  - New `createGateway()` function for production deployments
+  - Gateway runs control panel on public port (3101) and proxies to internal API (3100)
+  - Control panel remains responsive even when internal service crashes
+  - Built-in HTTP proxy middleware using `http-proxy-middleware`
+  - Auto-generated or configurable basic auth for control panel access
+  - Graceful error responses when internal service is unavailable
+
+### Dependencies
+
+- Added `http-proxy-middleware` ^3.0.3
+
+## [1.1.1] - 2025-11-29
+
+### Changed
+
+- **Removed Supabase OAuth from core package**
+  - Server-side Supabase auth has been removed from @qwickapps/server
+  - Authentication should now be handled client-side using `@qwickapps/auth-client`
+  - This allows for better separation of concerns and reuse of existing auth infrastructure
+
+### Removed
+
+- `SupabaseAuthConfig` type export
+- `supabase-auth.ts` module
+- `@supabase/supabase-js` dependency
+- `cookie-parser` dependency
+- Supabase auth provider option
+
+### Notes
+
+- The `skipBodyParserPaths` feature is retained for proxy middleware support
+- For authentication, use `@qwickapps/auth-client` with `SupabaseAuthProvider` in your React app
+
+## [1.1.0] - 2025-11-29
+
+### Added
+
+- **Proxy Middleware Support**
+  - Added `skipBodyParserPaths` configuration option
+  - Allows control panel to act as a gateway with proxy middleware
+  - Prevents body parsing from consuming request body for proxied routes
+
+### Changed
+
+- Body parsing now conditionally skips configured paths
+
+## [1.0.0] - 2025-11-28
+
+### Added
+
+- **Core Framework**
+  - Express-based control panel with security middleware (Helmet, CORS, compression)
+  - Plugin architecture for extensible functionality
+  - Health check management system
+  - Basic dashboard UI with product branding
+
+- **Authentication**
+  - Basic auth provider with username/password
+  - JWT auth provider
+  - Custom middleware auth provider
+
+- **Plugins**
+  - Health plugin for service monitoring
+  - Diagnostics endpoint for system information
+
+- **Built-in Routes**
+  - `GET /` - Dashboard UI
+  - `GET /api/health` - Aggregated health status
+  - `GET /api/diagnostics` - System diagnostics
+
+### Technical Details
+
+- Written in TypeScript with full type exports
+- ESM module format
+- Express 4.x compatibility

package/README.md

@@ -12,6 +12,15 @@ A flexible, pluggable control panel framework for QwickApps services. Provides a
 - **Frontend App Support**: Handle root path with redirect, static files, or landing page
 - **Theming**: Customizable branding and styling
 
+## What's New in v1.5.0
+
+- **Notifications Plugin UI** - Full management page for SSE notifications with stats widget, connected clients table, and disconnect controls
+- **Users Plugin Enhancements** - Multi-identifier user lookup (`getUserByIdentifier`), batch queries (`getUsersByIds`), and identifier linking
+- **User Search & Ban Management** - Enhanced Control Panel with user search by email/name/ID and ban/unban actions
+- **Audit Logging** - Admin actions now include user context (email, IP) for better traceability
+
+See [CHANGELOG.md](./CHANGELOG.md) for full release history.
+
 ## Installation
 
 ```bash

package/dist/index.d.ts

@@ -17,6 +17,6 @@ export { initializeLogging, getControlPanelLogger, getLoggingSubsystem, } from '
 export type { LoggingConfig } from './core/logging.js';
 export type { ControlPanelConfig, ControlPanelInstance, HealthCheck, HealthCheckType, HealthCheckResult, HealthStatus, LogSource, ConfigDisplayOptions, Logger, DiagnosticsReport, RouteGuardType, RouteGuardConfig, BasicAuthGuardConfig, SupabaseAuthGuardConfig, Auth0GuardConfig, NoAuthGuardConfig, MountConfig, FrontendAppConfig, } from './core/types.js';
 export type { GatewayConfig, GatewayInstance, MountedAppConfig, } from './core/gateway.js';
-export { createHealthPlugin, createLogsPlugin, createConfigPlugin, createDiagnosticsPlugin, createFrontendAppPlugin, createPostgresPlugin, getPostgres, hasPostgres, createCachePlugin, getCache, hasCache, createAuthPlugin, createAuthPluginFromEnv, getAuthStatus, setAuthConfigStore, postgresAuthConfigStore, isAuthenticated, getAuthenticatedUser, getAccessToken, requireAuth, requireRoles, requireAnyRole, auth0Adapter, basicAdapter, supabaseAdapter, supertokensAdapter, isAuthenticatedRequest, createUsersPlugin, getUserStore, getUserById, getUserByEmail, findOrCreateUser, postgresUserStore, createBansPlugin, getBanStore, isUserBanned, isEmailBanned, getActiveBan, banUser, unbanUser, listActiveBans, postgresBanStore, createEntitlementsPlugin, getEntitlementSource, isSourceReadonly, getEntitlements, refreshEntitlements, hasEntitlement, hasAnyEntitlement, hasAllEntitlements, grantEntitlement, revokeEntitlement, setEntitlements, getAvailableEntitlements, getEntitlementStats, invalidateEntitlementCache, storeExternalIdMapping, invalidateByExternalId, requireEntitlement, requireAnyEntitlement, requireAllEntitlements, postgresEntitlementSource, createRateLimitPlugin, createRateLimitPluginFromEnv, getRateLimitConfigStatus, postgresRateLimitStore, createRateLimitCache, createNoOpCache, createSlidingWindowStrategy, createFixedWindowStrategy, createTokenBucketStrategy, getStrategy, rateLimitMiddleware, rateLimitStatusMiddleware, RateLimitService, getRateLimitService, isLimited, checkLimit, incrementLimit, getRemainingRequests, getLimitStatus, clearLimit, createCleanupJob, } from './plugins/index.js';
-export type { HealthPluginConfig, LogsPluginConfig, ConfigPluginConfig, DiagnosticsPluginConfig, FrontendAppPluginConfig, PostgresPluginConfig, PostgresInstance, TransactionCallback, CachePluginConfig, CacheInstance, AuthPluginConfig, AuthAdapter, AuthenticatedUser, AuthenticatedRequest, Auth0AdapterConfig, SupabaseAdapterConfig, BasicAdapterConfig, SupertokensAdapterConfig, AuthPluginState, AuthEnvPluginOptions, AuthConfigStatus, AuthConfigStore, PostgresAuthConfigStoreConfig, UsersPluginConfig, UserStore, User, CreateUserInput, UpdateUserInput, UserSearchParams, UserListResponse, PostgresUserStoreConfig, UserSyncConfig, UsersApiConfig, UsersUiConfig, BansPluginConfig, BanStore, Ban, CreateBanInput, RemoveBanInput, BanCallbacks, PostgresBanStoreConfig, EntitlementsPluginConfig, EntitlementSource, EntitlementResult, EntitlementDefinition, EntitlementCallbacks, EntitlementsCacheConfig, EntitlementsApiConfig, PostgresEntitlementSourceConfig, UserEntitlement, CachedEntitlements, EntitlementStats, RateLimitPluginConfig, RateLimitEnvPluginOptions, RateLimitStrategy, LimitStatus, StoredLimit, IncrementOptions, RateLimitStore, PostgresRateLimitStoreConfig, RateLimitCache, RateLimitCacheConfig, RateLimitMiddlewareOptions, } from './plugins/index.js';
+export { createHealthPlugin, createLogsPlugin, createConfigPlugin, createDiagnosticsPlugin, createFrontendAppPlugin, createPostgresPlugin, getPostgres, hasPostgres, createCachePlugin, getCache, hasCache, createAuthPlugin, createAuthPluginFromEnv, getAuthStatus, setAuthConfigStore, postgresAuthConfigStore, isAuthenticated, getAuthenticatedUser, getAccessToken, requireAuth, requireRoles, requireAnyRole, auth0Adapter, basicAdapter, supabaseAdapter, supertokensAdapter, isAuthenticatedRequest, createUsersPlugin, getUserStore, getUserById, getUserByEmail, getUserByIdentifier, linkUserIdentifiers, findOrCreateUser, postgresUserStore, createBansPlugin, getBanStore, isUserBanned, isEmailBanned, getActiveBan, banUser, unbanUser, listActiveBans, postgresBanStore, createEntitlementsPlugin, getEntitlementSource, isSourceReadonly, getEntitlements, refreshEntitlements, hasEntitlement, hasAnyEntitlement, hasAllEntitlements, grantEntitlement, revokeEntitlement, setEntitlements, getAvailableEntitlements, getEntitlementStats, invalidateEntitlementCache, storeExternalIdMapping, invalidateByExternalId, requireEntitlement, requireAnyEntitlement, requireAllEntitlements, postgresEntitlementSource, createRateLimitPlugin, createRateLimitPluginFromEnv, getRateLimitConfigStatus, postgresRateLimitStore, createRateLimitCache, createNoOpCache, createSlidingWindowStrategy, createFixedWindowStrategy, createTokenBucketStrategy, getStrategy, rateLimitMiddleware, rateLimitStatusMiddleware, RateLimitService, getRateLimitService, isLimited, checkLimit, incrementLimit, getRemainingRequests, getLimitStatus, clearLimit, createCleanupJob, createDevicesPlugin, getDeviceStore, getDeviceAdapter, registerDevice, verifyDeviceToken, getDeviceById, updateDevice, deleteDevice, regenerateToken, listUserDevices, listOrgDevices, deactivateDevice, activateDevice, cleanupExpiredTokens, postgresDeviceStore, computeDeviceAdapter, mobileDeviceAdapter, generateDeviceToken, generatePairingCode, hashToken, verifyToken, isValidTokenFormat, isTokenExpired, getTokenExpiration, DeviceTokens, createProfilesPlugin, getProfileStore, createProfile, getProfileById, updateProfile, deleteProfile, listUserProfiles, getDefaultProfile, setDefaultProfile, getProfilesByAgeGroup, getChildProfiles, getProfileAge, checkTimeRestrictions, getContentFilterLevel, canAccessContent, postgresProfileStore, createSubscriptionsPlugin, getSubscriptionsStore, createTier, getTierBySlug, getTierById, listTiers, getTierEntitlements, setTierEntitlements, getUserSubscription, createUserSubscription, updateUserSubscription, cancelSubscription, getUserTierSlug, getFeatureLimit, hasFeature, checkFeatureLimit, ensureUserSubscription, postgresSubscriptionsStore, createUsagePlugin, getUsageStore, getDailyUsage, incrementUsage, checkUsageLimit, getFeatureUsageStatus, getDailyUsageSummary, resetUsage, getRemainingQuota, canUseFeature, postgresUsageStore, createParentalPlugin, getParentalStore, getParentalAdapter, getGuardianSettings, createGuardianSettings, updateGuardianSettings, setPin, verifyPin, incrementFailedPinAttempts, resetFailedPinAttempts, getRestrictions, createRestriction, updateRestriction, deleteRestriction, pauseProfile, resumeProfile, checkProfileAccess, logActivity, getActivityLog, postgresParentalStore, kidsAdapter, } from './plugins/index.js';
+export type { HealthPluginConfig, LogsPluginConfig, ConfigPluginConfig, DiagnosticsPluginConfig, FrontendAppPluginConfig, PostgresPluginConfig, PostgresInstance, TransactionCallback, CachePluginConfig, CacheInstance, AuthPluginConfig, AuthAdapter, AuthenticatedUser, AuthenticatedRequest, Auth0AdapterConfig, SupabaseAdapterConfig, BasicAdapterConfig, SupertokensAdapterConfig, AuthPluginState, AuthEnvPluginOptions, AuthConfigStatus, AuthConfigStore, PostgresAuthConfigStoreConfig, UsersPluginConfig, UserStore, User, CreateUserInput, UpdateUserInput, UserSearchParams, UserListResponse, PostgresUserStoreConfig, UserSyncConfig, UsersApiConfig, UsersUiConfig, UserIdentifiers, StoredIdentifiers, BansPluginConfig, BanStore, Ban, CreateBanInput, RemoveBanInput, BanCallbacks, PostgresBanStoreConfig, EntitlementsPluginConfig, EntitlementSource, EntitlementResult, EntitlementDefinition, EntitlementCallbacks, EntitlementsCacheConfig, EntitlementsApiConfig, PostgresEntitlementSourceConfig, UserEntitlement, CachedEntitlements, EntitlementStats, RateLimitPluginConfig, RateLimitEnvPluginOptions, RateLimitStrategy, LimitStatus, StoredLimit, IncrementOptions, RateLimitStore, PostgresRateLimitStoreConfig, RateLimitCache, RateLimitCacheConfig, RateLimitMiddlewareOptions, Device, DeviceWithToken, CreateDeviceInput, UpdateDeviceInput, DeviceSearchParams, DeviceListResponse, TokenVerificationResult, DeviceAdapter, DeviceValidationResult, DeviceStore, DevicesPluginConfig, DevicesApiConfig, PostgresDeviceStoreConfig, ComputeDeviceMetadata, MobileDeviceMetadata, IoTDeviceMetadata, ComputeAdapterConfig, MobileAdapterConfig, DeviceTokenPair, Profile, CreateProfileInput, UpdateProfileInput, ProfileSearchParams, ProfileListResponse, TimeRestrictionResult, ContentFilterLevel, AgeGroup, ProfileStore, ProfilesPluginConfig, ProfilesApiConfig, PostgresProfileStoreConfig, AgeThresholds, QwickBotProfileMetadata, GamingProfileMetadata, SubscriptionTier, SubscriptionEntitlement, UserSubscription, UserSubscriptionWithTier, SubscriptionStatus, FeatureLimitResult, CreateTierInput, UpdateTierInput, CreateEntitlementInput, CreateUserSubscriptionInput, UpdateUserSubscriptionInput, SubscriptionsStore, SubscriptionsPluginConfig, SubscriptionsApiConfig, PostgresSubscriptionsStoreConfig, DailyUsage, MonthlyUsage, UsageIncrementResult, UsageStatus, UsageSummary, UsageStore, UsagePluginConfig, UsageApiConfig, UsageCleanupConfig, PostgresUsageStoreConfig, GuardianSettings, ProfileRestriction, ActivityLog, AccessCheckResult, CreateGuardianSettingsInput, UpdateGuardianSettingsInput, CreateRestrictionInput, LogActivityInput, ParentalAdapter, ParentalStore, ParentalPluginConfig, ParentalApiConfig, PostgresParentalStoreConfig, KidsAdapterConfig, } from './plugins/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,MAAM,EACN,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,MAAM,EACN,iBAAiB,EAEjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,aAAa,EACb,eAAe,EACf,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EAEvB,oBAAoB,EACpB,WAAW,EACX,WAAW,EAEX,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EAER,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EAEtB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EAEjB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACT,cAAc,EACd,gBAAgB,EAEhB,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EAEzB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,UAAU,EACV,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EAEvB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EAEnB,iBAAiB,EACjB,aAAa,EAEb,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,6BAA6B,EAE7B,iBAAiB,EACjB,SAAS,EACT,IAAI,EACJ,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,aAAa,EAEb,gBAAgB,EAChB,QAAQ,EACR,GAAG,EACH,cAAc,EACd,cAAc,EACd,YAAY,EACZ,sBAAsB,EAEtB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,EAC/B,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAEhB,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,4BAA4B,EAC5B,cAAc,EACd,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,MAAM,EACN,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,MAAM,EACN,iBAAiB,EAEjB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,EACX,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,aAAa,EACb,eAAe,EACf,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EAEvB,oBAAoB,EACpB,WAAW,EACX,WAAW,EAEX,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EAER,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EAEtB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EAEjB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACT,cAAc,EACd,gBAAgB,EAEhB,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EAEzB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,UAAU,EACV,gBAAgB,EAEhB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,YAAY,EAEZ,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EAEpB,yBAAyB,EACzB,qBAAqB,EACrB,UAAU,EACV,aAAa,EACb,WAAW,EACX,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,UAAU,EACV,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAE1B,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAElB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,MAAM,EACN,SAAS,EACT,0BAA0B,EAC1B,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EAEvB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EAEnB,iBAAiB,EACjB,aAAa,EAEb,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,6BAA6B,EAE7B,iBAAiB,EACjB,SAAS,EACT,IAAI,EACJ,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,aAAa,EACb,eAAe,EACf,iBAAiB,EAEjB,gBAAgB,EAChB,QAAQ,EACR,GAAG,EACH,cAAc,EACd,cAAc,EACd,YAAY,EACZ,sBAAsB,EAEtB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,+BAA+B,EAC/B,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAEhB,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,cAAc,EACd,4BAA4B,EAC5B,cAAc,EACd,oBAAoB,EACpB,0BAA0B,EAE1B,MAAM,EACN,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,sBAAsB,EACtB,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EAEf,OAAO,EACP,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,QAAQ,EACR,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,EAC1B,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EAErB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,EACtB,gCAAgC,EAEhC,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,UAAU,EACV,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EAExB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -25,11 +25,21 @@ createCachePlugin, getCache, hasCache,
 // Auth plugin
 createAuthPlugin, createAuthPluginFromEnv, getAuthStatus, setAuthConfigStore, postgresAuthConfigStore, isAuthenticated, getAuthenticatedUser, getAccessToken, requireAuth, requireRoles, requireAnyRole, auth0Adapter, basicAdapter, supabaseAdapter, supertokensAdapter, isAuthenticatedRequest, 
 // Users plugin
-createUsersPlugin, getUserStore, getUserById, getUserByEmail, findOrCreateUser, postgresUserStore, 
+createUsersPlugin, getUserStore, getUserById, getUserByEmail, getUserByIdentifier, linkUserIdentifiers, findOrCreateUser, postgresUserStore, 
 // Bans plugin (separate from Users, depends on Users)
 createBansPlugin, getBanStore, isUserBanned, isEmailBanned, getActiveBan, banUser, unbanUser, listActiveBans, postgresBanStore, 
 // Entitlements plugin
 createEntitlementsPlugin, getEntitlementSource, isSourceReadonly, getEntitlements, refreshEntitlements, hasEntitlement, hasAnyEntitlement, hasAllEntitlements, grantEntitlement, revokeEntitlement, setEntitlements, getAvailableEntitlements, getEntitlementStats, invalidateEntitlementCache, storeExternalIdMapping, invalidateByExternalId, requireEntitlement, requireAnyEntitlement, requireAllEntitlements, postgresEntitlementSource, 
 // Rate Limit plugin
-createRateLimitPlugin, createRateLimitPluginFromEnv, getRateLimitConfigStatus, postgresRateLimitStore, createRateLimitCache, createNoOpCache, createSlidingWindowStrategy, createFixedWindowStrategy, createTokenBucketStrategy, getStrategy, rateLimitMiddleware, rateLimitStatusMiddleware, RateLimitService, getRateLimitService, isLimited, checkLimit, incrementLimit, getRemainingRequests, getLimitStatus, clearLimit, createCleanupJob, } from './plugins/index.js';
+createRateLimitPlugin, createRateLimitPluginFromEnv, getRateLimitConfigStatus, postgresRateLimitStore, createRateLimitCache, createNoOpCache, createSlidingWindowStrategy, createFixedWindowStrategy, createTokenBucketStrategy, getStrategy, rateLimitMiddleware, rateLimitStatusMiddleware, RateLimitService, getRateLimitService, isLimited, checkLimit, incrementLimit, getRemainingRequests, getLimitStatus, clearLimit, createCleanupJob, 
+// Devices plugin
+createDevicesPlugin, getDeviceStore, getDeviceAdapter, registerDevice, verifyDeviceToken, getDeviceById, updateDevice, deleteDevice, regenerateToken, listUserDevices, listOrgDevices, deactivateDevice, activateDevice, cleanupExpiredTokens, postgresDeviceStore, computeDeviceAdapter, mobileDeviceAdapter, generateDeviceToken, generatePairingCode, hashToken, verifyToken, isValidTokenFormat, isTokenExpired, getTokenExpiration, DeviceTokens, 
+// Profiles plugin
+createProfilesPlugin, getProfileStore, createProfile, getProfileById, updateProfile, deleteProfile, listUserProfiles, getDefaultProfile, setDefaultProfile, getProfilesByAgeGroup, getChildProfiles, getProfileAge, checkTimeRestrictions, getContentFilterLevel, canAccessContent, postgresProfileStore, 
+// Subscriptions plugin
+createSubscriptionsPlugin, getSubscriptionsStore, createTier, getTierBySlug, getTierById, listTiers, getTierEntitlements, setTierEntitlements, getUserSubscription, createUserSubscription, updateUserSubscription, cancelSubscription, getUserTierSlug, getFeatureLimit, hasFeature, checkFeatureLimit, ensureUserSubscription, postgresSubscriptionsStore, 
+// Usage plugin
+createUsagePlugin, getUsageStore, getDailyUsage, incrementUsage, checkUsageLimit, getFeatureUsageStatus, getDailyUsageSummary, resetUsage, getRemainingQuota, canUseFeature, postgresUsageStore, 
+// Parental plugin
+createParentalPlugin, getParentalStore, getParentalAdapter, getGuardianSettings, createGuardianSettings, updateGuardianSettings, setPin, verifyPin, incrementFailedPinAttempts, resetFailedPinAttempts, getRestrictions, createRestriction, updateRestriction, deleteRestriction, pauseProfile, resumeProfile, checkProfileAccess, logActivity, getActivityLog, postgresParentalStore, kidsAdapter, } from './plugins/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAe;AACf,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,2DAA2D;AAC3D,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAcnC,8CAA8C;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,kBAAkB;AAClB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AA8B3B,mBAAmB;AACnB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB;AACvB,kBAAkB;AAClB,oBAAoB,EACpB,WAAW,EACX,WAAW;AACX,eAAe;AACf,iBAAiB,EACjB,QAAQ,EACR,QAAQ;AACR,cAAc;AACd,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,sBAAsB;AACtB,eAAe;AACf,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,iBAAiB;AACjB,sDAAsD;AACtD,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACT,cAAc,EACd,gBAAgB;AAChB,sBAAsB;AACtB,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB;AACzB,oBAAoB;AACpB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,UAAU,EACV,gBAAgB,GACjB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAe;AACf,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,2DAA2D;AAC3D,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAcnC,8CAA8C;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,kBAAkB;AAClB,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AA8B3B,mBAAmB;AACnB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB;AACvB,kBAAkB;AAClB,oBAAoB,EACpB,WAAW,EACX,WAAW;AACX,eAAe;AACf,iBAAiB,EACjB,QAAQ,EACR,QAAQ;AACR,cAAc;AACd,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,WAAW,EACX,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,sBAAsB;AACtB,eAAe;AACf,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB;AACjB,sDAAsD;AACtD,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,OAAO,EACP,SAAS,EACT,cAAc,EACd,gBAAgB;AAChB,sBAAsB;AACtB,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB;AACzB,oBAAoB;AACpB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,WAAW,EACX,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACT,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,UAAU,EACV,gBAAgB;AAChB,iBAAiB;AACjB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,YAAY;AACZ,kBAAkB;AAClB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB;AACpB,uBAAuB;AACvB,yBAAyB,EACzB,qBAAqB,EACrB,UAAU,EACV,aAAa,EACb,WAAW,EACX,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,UAAU,EACV,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B;AAC1B,eAAe;AACf,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB;AAClB,kBAAkB;AAClB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,MAAM,EACN,SAAS,EACT,0BAA0B,EAC1B,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,WAAW,EACX,cAAc,EACd,qBAAqB,EACrB,WAAW,GACZ,MAAM,oBAAoB,CAAC"}

package/dist/plugins/bans/bans-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bans-plugin.d.ts","sourceRoot":"","sources":["../../../src/plugins/bans/bans-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EACV,gBAAgB,EAChB,QAAQ,EACR,GAAG,EACH,cAAc,EACd,cAAc,EACf,MAAM,YAAY,CAAC;AASpB;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CA8UjE;AAMD;;GAEG;AACH,wBAAgB,WAAW,IAAI,QAAQ,GAAG,IAAI,CAE7C;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKnE;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYnE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAKtE;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAoBjE;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBvE;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAC3F,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAKD"}
+{"version":3,"file":"bans-plugin.d.ts","sourceRoot":"","sources":["../../../src/plugins/bans/bans-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EACV,gBAAgB,EAChB,QAAQ,EACR,GAAG,EACH,cAAc,EACd,cAAc,EACf,MAAM,YAAY,CAAC;AASpB;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CA0VjE;AAMD;;GAEG;AACH,wBAAgB,WAAW,IAAI,QAAQ,GAAG,IAAI,CAE7C;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKnE;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYnE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAKtE;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAoBjE;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBvE;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAC3F,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAKD"}

package/dist/plugins/bans/bans-plugin.js

@@ -10,7 +10,7 @@
  *
  * Copyright (c) 2025 QwickApps.com. All rights reserved.
  */
-import { getUserByEmail, getUserById } from '../users/users-plugin.js';
+import { getUserByEmail, getUserById, getUsersByIds } from '../users/users-plugin.js';
 // Store instance for helper access
 let currentStore = null;
 let banCleanupInterval = null;
@@ -75,7 +75,7 @@ export function createBansPlugin(config) {
             });
             // Add API routes if enabled
             if (apiEnabled) {
-                // List active bans
+                // List active bans (enriched with user email)
                 registry.addRoute({
                     method: 'get',
                     path: apiPrefix,
@@ -85,7 +85,16 @@ export function createBansPlugin(config) {
                             const limit = Math.min(parseInt(req.query.limit) || 50, 100);
                             const offset = parseInt(req.query.offset) || 0;
                             const result = await config.store.listActiveBans({ limit, offset });
-                            res.json(result);
+                            // Batch fetch users for all bans (single query instead of N queries)
+                            const userIds = [...new Set(result.bans.map((ban) => ban.user_id))];
+                            const users = await getUsersByIds(userIds);
+                            const userMap = new Map(users.map((u) => [u.id, u]));
+                            // Enrich bans with user email
+                            const enrichedBans = result.bans.map((ban) => ({
+                                ...ban,
+                                email: userMap.get(ban.user_id)?.email || 'Unknown',
+                            }));
+                            res.json({ bans: enrichedBans, total: result.total });
                         }
                         catch (error) {
                             console.error('[BansPlugin] List bans error:', error);