@seamless-auth/express 0.3.5 → 0.4.0

package/README.md

@@ -136,6 +136,7 @@ Routes include:
 - `/auth/login/start`
 - `/auth/login/finish`
 - `/auth/webauthn/*`
+- `/auth/step-up/*`
 - `/auth/registration/*`
 - `/auth/users/me`
 - `/auth/logout`

package/dist/core/src/authFetch.d.ts

@@ -0,0 +1,10 @@
+export interface AuthFetchOptions {
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    headers?: Record<string, string>;
+    body?: unknown;
+    authorization?: string;
+    serviceAuthorization?: string;
+    forwardedClientIp?: string;
+}
+export declare function authFetch(url: string, options: AuthFetchOptions): Promise<Response>;
+//# sourceMappingURL=authFetch.d.ts.map

package/dist/core/src/authFetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authFetch.d.ts","sourceRoot":"","sources":["../../../../core/src/authFetch.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,QAAQ,CAAC,CAqBnB"}

package/dist/core/src/authMessaging.d.ts

@@ -0,0 +1,98 @@
+export type MessagingChannel = "email" | "sms";
+export interface DeliveryResult {
+    accepted: boolean;
+    provider: string;
+    channel: MessagingChannel;
+    messageId?: string;
+    raw?: unknown;
+}
+export interface EmailMessage {
+    to: string;
+    from?: string;
+    subject: string;
+    text: string;
+    html?: string;
+}
+export interface SmsMessage {
+    to: string;
+    from?: string;
+    body: string;
+}
+export interface EmailTransport {
+    readonly name: string;
+    send(message: EmailMessage): Promise<DeliveryResult>;
+}
+export interface SmsTransport {
+    readonly name: string;
+    send(message: SmsMessage): Promise<DeliveryResult>;
+}
+export interface SendOtpEmailInput {
+    to: string;
+    token: string;
+    from?: string;
+    subject?: string;
+}
+export interface SendOtpSmsInput {
+    to: string;
+    token: string | number;
+    from?: string;
+}
+export interface SendMagicLinkEmailInput {
+    to: string;
+    magicLinkUrl: string;
+    token?: string;
+    from?: string;
+    subject?: string;
+}
+export interface SendBootstrapInviteEmailInput {
+    to: string;
+    inviteUrl: string;
+    from?: string;
+    subject?: string;
+}
+export interface AuthMessageOverrideContext {
+    appName?: string;
+}
+export interface AuthMessageOverrides {
+    otpEmail?: (input: SendOtpEmailInput, defaults: EmailMessage, context: AuthMessageOverrideContext) => EmailMessage;
+    otpSms?: (input: SendOtpSmsInput, defaults: SmsMessage, context: AuthMessageOverrideContext) => SmsMessage;
+    magicLinkEmail?: (input: SendMagicLinkEmailInput, defaults: EmailMessage, context: AuthMessageOverrideContext) => EmailMessage;
+    bootstrapInviteEmail?: (input: SendBootstrapInviteEmailInput, defaults: EmailMessage, context: AuthMessageOverrideContext) => EmailMessage;
+}
+export interface AuthMessagingHandlers {
+    sendOtpEmail(input: SendOtpEmailInput): Promise<DeliveryResult>;
+    sendOtpSms(input: SendOtpSmsInput): Promise<DeliveryResult>;
+    sendMagicLinkEmail(input: SendMagicLinkEmailInput): Promise<DeliveryResult>;
+    sendBootstrapInviteEmail(input: SendBootstrapInviteEmailInput): Promise<DeliveryResult>;
+}
+export interface SeamlessAuthMessagingOptions {
+    email?: EmailTransport;
+    sms?: SmsTransport;
+    handlers?: Partial<AuthMessagingHandlers>;
+    overrides?: AuthMessageOverrides;
+    defaults?: {
+        appName?: string;
+        emailFrom?: string;
+        smsFrom?: string;
+    };
+}
+export type AuthDeliveryInstruction = {
+    kind: "otp_email";
+    to: string;
+    token: string;
+} | {
+    kind: "otp_sms";
+    to: string;
+    token: string | number;
+} | {
+    kind: "magic_link_email";
+    to: string;
+    token?: string;
+    magicLinkUrl: string;
+} | {
+    kind: "bootstrap_invite_email";
+    to: string;
+    token?: string;
+    inviteUrl: string;
+};
+//# sourceMappingURL=authMessaging.d.ts.map

package/dist/core/src/authMessaging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authMessaging.d.ts","sourceRoot":"","sources":["../../../../core/src/authMessaging.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,CACT,KAAK,EAAE,iBAAiB,EACxB,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,0BAA0B,KAChC,YAAY,CAAC;IAClB,MAAM,CAAC,EAAE,CACP,KAAK,EAAE,eAAe,EACtB,QAAQ,EAAE,UAAU,EACpB,OAAO,EAAE,0BAA0B,KAChC,UAAU,CAAC;IAChB,cAAc,CAAC,EAAE,CACf,KAAK,EAAE,uBAAuB,EAC9B,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,0BAA0B,KAChC,YAAY,CAAC;IAClB,oBAAoB,CAAC,EAAE,CACrB,KAAK,EAAE,6BAA6B,EACpC,QAAQ,EAAE,YAAY,EACtB,OAAO,EAAE,0BAA0B,KAChC,YAAY,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAChE,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5D,kBAAkB,CAChB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,wBAAwB,CACtB,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,cAAc,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,GAAG,CAAC,EAAE,YAAY,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC1C,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB,GACD;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE,IAAI,EAAE,wBAAwB,CAAC;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/core/src/createServiceToken.d.ts

@@ -0,0 +1,11 @@
+export interface ServiceTokenOptions {
+    issuer: string;
+    audience: string;
+    subject: string;
+    sessionId?: string;
+    refreshToken?: string;
+    serviceSecret: string;
+    keyId: string;
+}
+export declare function createServiceToken(opts: ServiceTokenOptions): string;
+//# sourceMappingURL=createServiceToken.d.ts.map

package/dist/core/src/createServiceToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createServiceToken.d.ts","sourceRoot":"","sources":["../../../../core/src/createServiceToken.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAiBpE"}

package/dist/core/src/ensureCookies.d.ts

@@ -0,0 +1,47 @@
+export interface EnsureCookiesInput {
+    path: string;
+    cookies: Record<string, string | undefined>;
+}
+export interface CookiePayload {
+    sub: string;
+    sessionId?: string;
+    token?: string;
+    refreshToken?: string;
+    roles?: string[];
+    email?: string;
+    phone?: string | null;
+}
+export interface CookieInstruction {
+    name: string;
+    value: CookiePayload;
+    ttl: number;
+    domain?: string;
+}
+export interface EnsureCookiesResult {
+    type: "ok" | "error";
+    status?: number;
+    error?: string;
+    user?: {
+        sub: string;
+        sessionId?: string;
+        roles?: string[];
+    };
+    setCookies?: CookieInstruction[];
+    clearCookies?: string[];
+}
+export interface EnsureCookiesOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    accessCookieName: string;
+    registrationCookieName: string;
+    refreshCookieName: string;
+    preAuthCookieName: string;
+    cookieSecret: string;
+    serviceSecret: string;
+    issuer: string;
+    audience: string;
+    keyId: string;
+    forwardedClientIp?: string;
+}
+export declare function ensureCookies(input: EnsureCookiesInput, opts: EnsureCookiesOptions): Promise<EnsureCookiesResult>;
+//# sourceMappingURL=ensureCookies.d.ts.map

package/dist/core/src/ensureCookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureCookies.d.ts","sourceRoot":"","sources":["../../../../core/src/ensureCookies.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAmGD,wBAAsB,aAAa,CACjC,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,mBAAmB,CAAC,CAsH9B"}

package/dist/core/src/getSeamlessUser.d.ts

@@ -0,0 +1,19 @@
+export interface GetSeamlessUserOptions {
+    authServerUrl: string;
+    cookieSecret: string;
+    authorization: string;
+    cookieName?: string;
+    forwardedClientIp?: string;
+}
+/**
+ * Resolves the authenticated Seamless Auth user from an access cookie.
+ *
+ * This function:
+ * - Verifies the access cookie locally
+ * - Uses the verified token to authenticate a request to the auth server
+ * - Returns the canonical user object, or null if authentication fails
+ *
+ * This is intended for server-side usage (SSR, API routes, edge functions).
+ */
+export declare function getSeamlessUser<T = any>(cookies: Record<string, string | undefined>, opts: GetSeamlessUserOptions): Promise<T | null>;
+//# sourceMappingURL=getSeamlessUser.d.ts.map

package/dist/core/src/getSeamlessUser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getSeamlessUser.d.ts","sourceRoot":"","sources":["../../../../core/src/getSeamlessUser.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,CAAC,GAAG,GAAG,EAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAmBnB"}

package/dist/core/src/handlers/admin.d.ts

@@ -0,0 +1,29 @@
+type BaseOpts = {
+    authServerUrl: string;
+    authorization?: string;
+    forwardedClientIp?: string;
+};
+type WithQuery = BaseOpts & {
+    query?: Record<string, any>;
+};
+type WithBody = BaseOpts & {
+    body?: any;
+};
+type Result = {
+    status: number;
+    body?: any;
+    error?: string;
+};
+export declare const getUsersHandler: (opts: BaseOpts) => Promise<Result>;
+export declare const createUserHandler: (opts: WithBody) => Promise<Result>;
+export declare const deleteUserHandler: (opts: BaseOpts) => Promise<Result>;
+export declare const updateUserHandler: (userId: string, opts: WithBody) => Promise<Result>;
+export declare const getUserDetailHandler: (userId: string, opts: BaseOpts) => Promise<Result>;
+export declare const getUserAnomaliesHandler: (userId: string, opts: BaseOpts) => Promise<Result>;
+export declare const getAuthEventsHandler: (opts: WithQuery) => Promise<Result>;
+export declare const getCredentialCountHandler: (opts: BaseOpts) => Promise<Result>;
+export declare const listAllSessionsHandler: (opts: WithQuery) => Promise<Result>;
+export declare const listUserSessionsHandler: (userId: string, opts: BaseOpts) => Promise<Result>;
+export declare const revokeAllUserSessionsHandler: (userId: string, opts: BaseOpts) => Promise<Result>;
+export {};
+//# sourceMappingURL=admin.d.ts.map

package/dist/core/src/handlers/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/admin.ts"],"names":[],"mappings":"AAEA,KAAK,QAAQ,GAAG;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,KAAK,SAAS,GAAG,QAAQ,GAAG;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC7B,CAAC;AAEF,KAAK,QAAQ,GAAG,QAAQ,GAAG;IACzB,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AA4CF,eAAO,MAAM,eAAe,GAAI,MAAM,QAAQ,oBACR,CAAC;AAEvC,eAAO,MAAM,iBAAiB,GAAI,MAAM,QAAQ,oBACT,CAAC;AAExC,eAAO,MAAM,iBAAiB,GAAI,MAAM,QAAQ,oBACP,CAAC;AAE1C,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM,EAAE,MAAM,QAAQ,oBACd,CAAC;AAEnD,eAAO,MAAM,oBAAoB,GAAI,QAAQ,MAAM,EAAE,MAAM,QAAQ,oBACnB,CAAC;AAEjD,eAAO,MAAM,uBAAuB,GAAI,QAAQ,MAAM,EAAE,MAAM,QAAQ,oBACZ,CAAC;AAE3D,eAAO,MAAM,oBAAoB,GAAI,MAAM,SAAS,oBACR,CAAC;AAE7C,eAAO,MAAM,yBAAyB,GAAI,MAAM,QAAQ,oBACP,CAAC;AAElD,eAAO,MAAM,sBAAsB,GAAI,MAAM,SAAS,oBACb,CAAC;AAE1C,eAAO,MAAM,uBAAuB,GAAI,QAAQ,MAAM,EAAE,MAAM,QAAQ,oBACnB,CAAC;AAEpD,eAAO,MAAM,4BAA4B,GAAI,QAAQ,MAAM,EAAE,MAAM,QAAQ,oBACV,CAAC"}

package/dist/core/src/handlers/bootstrapAdminInvite.d.ts

@@ -0,0 +1,18 @@
+export interface BootstrapAdminInviteOptions {
+    authServerUrl: string;
+    email: string;
+    authorization?: string;
+    externalDelivery?: boolean;
+    forwardedClientIp?: string;
+}
+export interface BootstrapAdminInviteResult {
+    status: number;
+    body?: {
+        url?: string;
+        expiresAt: string;
+        token?: string;
+    };
+    error?: string;
+}
+export declare function bootstrapAdminInviteHandler(opts: BootstrapAdminInviteOptions): Promise<BootstrapAdminInviteResult>;
+//# sourceMappingURL=bootstrapAdminInvite.d.ts.map

package/dist/core/src/handlers/bootstrapAdminInvite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapAdminInvite.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/bootstrapAdminInvite.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,0BAA0B,CAAC,CA+BrC"}

package/dist/core/src/handlers/finishLogin.d.ts

@@ -0,0 +1,25 @@
+import type { CookiePayload } from "../ensureCookies.js";
+export interface FinishLoginInput {
+    body: unknown;
+    authorization?: string;
+    forwardedClientIp?: string;
+}
+export interface FinishLoginOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    accessCookieName: string;
+    refreshCookieName: string;
+}
+export interface FinishLoginResult {
+    status: number;
+    body?: unknown;
+    error?: string;
+    setCookies?: {
+        name: string;
+        value: CookiePayload;
+        ttl: number;
+        domain?: string;
+    }[];
+}
+export declare function finishLoginHandler(input: FinishLoginInput, opts: FinishLoginOptions): Promise<FinishLoginResult>;
+//# sourceMappingURL=finishLogin.d.ts.map

package/dist/core/src/handlers/finishLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finishLogin.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/finishLogin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,aAAa,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,gBAAgB,EACvB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC,CA8D5B"}

package/dist/core/src/handlers/finishRegister.d.ts

@@ -0,0 +1,25 @@
+import type { CookiePayload } from "../ensureCookies.js";
+export interface FinishRegisterInput {
+    authorization?: string;
+    headers?: Record<string, string>;
+    body: unknown;
+    forwardedClientIp?: string;
+}
+export interface FinishRegisterOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    accessCookieName: string;
+    refreshCookieName: string;
+}
+export interface FinishRegisterResult {
+    status: number;
+    error?: unknown;
+    setCookies?: {
+        name: string;
+        value: CookiePayload;
+        ttl: number;
+        domain?: string;
+    }[];
+}
+export declare function finishRegisterHandler(input: FinishRegisterInput, opts: FinishRegisterOptions): Promise<FinishRegisterResult>;
+//# sourceMappingURL=finishRegister.d.ts.map

package/dist/core/src/handlers/finishRegister.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finishRegister.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/finishRegister.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,aAAa,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CA4D/B"}

package/dist/core/src/handlers/internalMetrics.d.ts

@@ -0,0 +1,21 @@
+type BaseOpts = {
+    authServerUrl: string;
+    authorization?: string;
+    forwardedClientIp?: string;
+};
+type WithQuery = BaseOpts & {
+    query?: Record<string, string | number | boolean | undefined>;
+};
+type Result = {
+    status: number;
+    body?: any;
+    error?: string;
+};
+export declare const getAuthEventSummaryHandler: (opts: WithQuery) => Promise<Result>;
+export declare const getAuthEventTimeseriesHandler: (opts: WithQuery) => Promise<Result>;
+export declare const getLoginStatsHandler: (opts: BaseOpts) => Promise<Result>;
+export declare const getSecurityAnomaliesHandler: (opts: BaseOpts) => Promise<Result>;
+export declare const getDashboardMetricsHandler: (opts: BaseOpts) => Promise<Result>;
+export declare const getGroupedEventSummaryHandler: (opts: BaseOpts) => Promise<Result>;
+export {};
+//# sourceMappingURL=internalMetrics.d.ts.map

package/dist/core/src/handlers/internalMetrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internalMetrics.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/internalMetrics.ts"],"names":[],"mappings":"AAEA,KAAK,QAAQ,GAAG;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,KAAK,SAAS,GAAG,QAAQ,GAAG;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC/D,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAsCF,eAAO,MAAM,0BAA0B,GAAI,MAAM,SAAS,oBACd,CAAC;AAE7C,eAAO,MAAM,6BAA6B,GAAI,MAAM,SAAS,oBACd,CAAC;AAEhD,eAAO,MAAM,oBAAoB,GAAI,MAAM,QAAQ,oBACH,CAAC;AAEjD,eAAO,MAAM,2BAA2B,GAAI,MAAM,QAAQ,oBACf,CAAC;AAE5C,eAAO,MAAM,0BAA0B,GAAI,MAAM,QAAQ,oBACf,CAAC;AAE3C,eAAO,MAAM,6BAA6B,GAAI,MAAM,QAAQ,oBAChB,CAAC"}

package/dist/core/src/handlers/login.d.ts

@@ -0,0 +1,27 @@
+import type { CookiePayload } from "../ensureCookies.js";
+export interface LoginInput {
+    body: unknown;
+}
+export interface LoginOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    preAuthCookieName: string;
+    forwardedClientIp?: string;
+}
+export interface LoginResult {
+    status: number;
+    body?: {
+        message?: string;
+        identifierType?: string;
+        loginMethods?: string[];
+    };
+    error?: unknown;
+    setCookies?: {
+        name: string;
+        value: CookiePayload;
+        ttl: number;
+        domain?: string;
+    }[];
+}
+export declare function loginHandler(input: LoginInput, opts: LoginOptions): Promise<LoginResult>;
+//# sourceMappingURL=login.d.ts.map

package/dist/core/src/handlers/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/login.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,aAAa,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,WAAW,CAAC,CAuDtB"}

package/dist/core/src/handlers/logout.d.ts

@@ -0,0 +1,13 @@
+export interface LogoutOptions {
+    authServerUrl: string;
+    accessCookieName: string;
+    registrationCookieName: string;
+    refreshCookieName: string;
+    forwardedClientIp?: string;
+}
+export interface LogoutResult {
+    status: number;
+    clearCookies: string[];
+}
+export declare function logoutHandler(opts: LogoutOptions): Promise<LogoutResult>;
+//# sourceMappingURL=logout.d.ts.map

package/dist/core/src/handlers/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/logout.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,YAAY,CAAC,CAcvB"}

package/dist/core/src/handlers/me.d.ts

@@ -0,0 +1,17 @@
+export interface MeOptions {
+    authServerUrl: string;
+    preAuthCookieName: string;
+    authorization?: string;
+    forwardedClientIp?: string;
+}
+export interface MeResult {
+    status: number;
+    body?: {
+        user: unknown;
+        credentials?: unknown;
+    };
+    error?: string;
+    clearCookies?: string[];
+}
+export declare function meHandler(opts: MeOptions): Promise<MeResult>;
+//# sourceMappingURL=me.d.ts.map

package/dist/core/src/handlers/me.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"me.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/me.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,OAAO,CAAC;QACd,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CA0BlE"}

package/dist/core/src/handlers/pollMagicLinkConfirmationHandler.d.ts

@@ -0,0 +1,24 @@
+import type { CookiePayload } from "../ensureCookies.js";
+export interface PollMagicLinkConfirmationInput {
+    authorization?: string;
+    forwardedClientIp?: string;
+}
+export interface PollMagicLinkConfirmationOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    accessCookieName: string;
+    refreshCookieName: string;
+}
+export interface PollMagicLinkConfirmationResult {
+    status: number;
+    body?: unknown;
+    error?: unknown;
+    setCookies?: {
+        name: string;
+        value: CookiePayload;
+        ttl: number;
+        domain?: string;
+    }[];
+}
+export declare function pollMagicLinkConfirmationHandler(input: PollMagicLinkConfirmationInput, opts: PollMagicLinkConfirmationOptions): Promise<PollMagicLinkConfirmationResult>;
+//# sourceMappingURL=pollMagicLinkConfirmationHandler.d.ts.map

package/dist/core/src/handlers/pollMagicLinkConfirmationHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pollMagicLinkConfirmationHandler.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/pollMagicLinkConfirmationHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,WAAW,8BAA8B;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gCAAgC;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,aAAa,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,8BAA8B,EACrC,IAAI,EAAE,gCAAgC,GACrC,OAAO,CAAC,+BAA+B,CAAC,CA8E1C"}

package/dist/core/src/handlers/register.d.ts

@@ -0,0 +1,24 @@
+import type { CookiePayload } from "../ensureCookies.js";
+export interface RegisterInput {
+    body: unknown;
+}
+export interface RegisterOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    registrationCookieName: string;
+    externalDelivery?: boolean;
+    forwardedClientIp?: string;
+}
+export interface RegisterResult {
+    status: number;
+    body?: unknown;
+    error?: unknown;
+    setCookies?: {
+        name: string;
+        value: CookiePayload;
+        ttl: number;
+        domain?: string;
+    }[];
+}
+export declare function registerHandler(input: RegisterInput, opts: RegisterOptions): Promise<RegisterResult>;
+//# sourceMappingURL=register.d.ts.map

package/dist/core/src/handlers/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/register.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,aAAa,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,aAAa,EACpB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,cAAc,CAAC,CA+DzB"}

package/dist/core/src/handlers/requestMagicLinkHandler.d.ts

@@ -0,0 +1,15 @@
+export interface RequestMagicLinkInput {
+    authorization?: string;
+}
+export interface RequestMagicLinkOptions {
+    authServerUrl: string;
+    externalDelivery?: boolean;
+    forwardedClientIp?: string;
+}
+export interface RequestMagicLinkResult {
+    status: number;
+    body?: unknown;
+    error?: unknown;
+}
+export declare function requestMagicLinkHandler(input: RequestMagicLinkInput, opts: RequestMagicLinkOptions): Promise<RequestMagicLinkResult>;
+//# sourceMappingURL=requestMagicLinkHandler.d.ts.map

package/dist/core/src/handlers/requestMagicLinkHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestMagicLinkHandler.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/requestMagicLinkHandler.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,qBAAqB,EAC5B,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC,CA2BjC"}

package/dist/core/src/handlers/requestOtpHandler.d.ts

@@ -0,0 +1,17 @@
+export interface RequestOtpInput {
+    authorization?: string;
+    flow?: "registration" | "login";
+    kind: "email" | "phone";
+}
+export interface RequestOtpOptions {
+    authServerUrl: string;
+    externalDelivery?: boolean;
+    forwardedClientIp?: string;
+}
+export interface RequestOtpResult {
+    status: number;
+    body?: unknown;
+    error?: unknown;
+}
+export declare function requestOtpHandler(input: RequestOtpInput, opts: RequestOtpOptions): Promise<RequestOtpResult>;
+//# sourceMappingURL=requestOtpHandler.d.ts.map

package/dist/core/src/handlers/requestOtpHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestOtpHandler.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/requestOtpHandler.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;IAChC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,eAAe,EACtB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAqC3B"}

package/dist/core/src/handlers/sessions.d.ts

@@ -0,0 +1,15 @@
+type BaseOpts = {
+    authServerUrl: string;
+    authorization?: string;
+    forwardedClientIp?: string;
+};
+type Result = {
+    status: number;
+    body?: any;
+    error?: string;
+};
+export declare const listSessionsHandler: (opts: BaseOpts) => Promise<Result>;
+export declare const revokeSessionHandler: (id: string, opts: BaseOpts) => Promise<Result>;
+export declare const revokeAllSessionsHandler: (opts: BaseOpts) => Promise<Result>;
+export {};
+//# sourceMappingURL=sessions.d.ts.map

package/dist/core/src/handlers/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/sessions.ts"],"names":[],"mappings":"AAEA,KAAK,QAAQ,GAAG;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,KAAK,MAAM,GAAG;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AA4BF,eAAO,MAAM,mBAAmB,GAAI,MAAM,QAAQ,oBACf,CAAC;AAEpC,eAAO,MAAM,oBAAoB,GAAI,IAAI,MAAM,EAAE,MAAM,QAAQ,oBACnB,CAAC;AAE7C,eAAO,MAAM,wBAAwB,GAAI,MAAM,QAAQ,oBACjB,CAAC"}

package/dist/core/src/handlers/systemConfig.d.ts

@@ -0,0 +1,16 @@
+export interface SystemConfigOptions {
+    authServerUrl: string;
+    authorization?: string;
+    forwardedClientIp?: string;
+}
+export interface SystemConfigResult {
+    status: number;
+    body?: any;
+    error?: string;
+}
+export declare function getAvailableRolesHandler(opts: SystemConfigOptions): Promise<SystemConfigResult>;
+export declare function getSystemConfigAdminHandler(opts: SystemConfigOptions): Promise<SystemConfigResult>;
+export declare function updateSystemConfigHandler(opts: SystemConfigOptions & {
+    payload: any;
+}): Promise<SystemConfigResult>;
+//# sourceMappingURL=systemConfig.d.ts.map

package/dist/core/src/handlers/systemConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemConfig.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/systemConfig.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAoB7B;AAED,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAoB7B;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,mBAAmB,GAAG;IAAE,OAAO,EAAE,GAAG,CAAA;CAAE,GAC3C,OAAO,CAAC,kBAAkB,CAAC,CAqB7B"}

package/dist/core/src/handlers/verifyLoginOtpHandler.d.ts

@@ -0,0 +1,26 @@
+import type { CookiePayload } from "../ensureCookies.js";
+export interface VerifyLoginOtpInput {
+    body: unknown;
+    authorization?: string;
+    forwardedClientIp?: string;
+    kind: "email" | "phone";
+}
+export interface VerifyLoginOtpOptions {
+    authServerUrl: string;
+    cookieDomain?: string;
+    accessCookieName: string;
+    refreshCookieName: string;
+}
+export interface VerifyLoginOtpResult {
+    status: number;
+    body?: unknown;
+    error?: unknown;
+    setCookies?: {
+        name: string;
+        value: CookiePayload;
+        ttl: number;
+        domain?: string;
+    }[];
+}
+export declare function verifyLoginOtpHandler(input: VerifyLoginOtpInput, opts: VerifyLoginOtpOptions): Promise<VerifyLoginOtpResult>;
+//# sourceMappingURL=verifyLoginOtpHandler.d.ts.map

package/dist/core/src/handlers/verifyLoginOtpHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyLoginOtpHandler.d.ts","sourceRoot":"","sources":["../../../../../core/src/handlers/verifyLoginOtpHandler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,aAAa,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CAmE/B"}

package/dist/core/src/handlers/verifyMagicLinkHandler.d.ts

@@ -0,0 +1,14 @@
+export interface VerifyMagicLinkInput {
+    token: string;
+}
+export interface VerifyMagicLinkOptions {
+    authServerUrl: string;
+    forwardedClientIp?: string;
+}
+export interface VerifyMagicLinkResult {
+    status: number;
+    body?: unknown;
+    error?: unknown;
+}
+export declare function verifyMagicLinkHandler(input: VerifyMagicLinkInput, opts: VerifyMagicLinkOptions): Promise<VerifyMagicLinkResult>;
+//# sourceMappingURL=verifyMagicLinkHandler.d.ts.map