@syncello/auth 3.3.1 → 3.4.0

package/dist/index.d.cts

@@ -170,6 +170,93 @@ declare const AUTH_DEFAULTS: {
     readonly APP_NAME: "App";
 };
 
+/**
+ * Email service types for Resend email provider integration
+ */
+interface EmailTemplate {
+    to: string;
+    subject: string;
+    html: string;
+    text?: string;
+    tags?: Record<string, string>;
+}
+interface VerificationEmailData {
+    email: string;
+    token: string;
+    verificationUrl: string;
+    firstName?: string;
+}
+interface PasswordResetEmailData {
+    email: string;
+    token: string;
+    resetUrl: string;
+}
+interface EmailChangeConfirmationData {
+    newEmail: string;
+    confirmUrl: string;
+}
+interface EmailChangeNotificationData {
+    oldEmail: string;
+    newEmail: string;
+    cancelUrl: string;
+}
+interface TwoFactorCodeEmailData {
+    email: string;
+    firstName: string | null;
+    code: string;
+}
+interface TwoFactorEnabledEmailData {
+    email: string;
+    firstName: string | null;
+    method: 'totp' | 'email';
+}
+interface TwoFactorDisabledEmailData {
+    email: string;
+    firstName: string | null;
+}
+type EmailType = 'verification' | 'password_reset' | 'email_change_confirmation' | 'email_change_notification' | '2fa_code' | '2fa_enabled' | '2fa_disabled';
+interface SendEmailResult {
+    success: boolean;
+    emailId?: string;
+    error?: string;
+}
+type ResendEventType = 'email.sent' | 'email.delivered' | 'email.delivery_delayed' | 'email.complained' | 'email.bounced' | 'email.opened' | 'email.clicked' | 'email.failed';
+interface ResendWebhookPayload {
+    type: ResendEventType;
+    created_at: string;
+    data: {
+        email_id: string;
+        from: string;
+        to: string[];
+        subject: string;
+        created_at: string;
+        tags?: Record<string, string>;
+        bounce?: {
+            message: string;
+            subType: string;
+            type: 'Permanent' | 'Transient';
+        };
+        failed?: {
+            reason: string;
+        };
+    };
+}
+/** Consumer-supplied branding tokens for transactional emails. */
+interface EmailBranding {
+    /** Full URL to the header logo. Default: `${appUrl}/email-header-image.png` */
+    logoUrl?: string;
+    /** CTA button background. Default: '#00fe9a' */
+    buttonBgColor?: string;
+    /** CTA button text color. Default: '#000004' */
+    buttonTextColor?: string;
+    /** CTA button font weight. Default: 500 */
+    buttonFontWeight?: number;
+    /** CTA button border-radius. Default: '6px' */
+    buttonRadius?: string;
+    /** Footer band background color. Default: '#1e1b4b' */
+    footerColor?: string;
+}
+
 /**
  * Base type for auth tables.
  *
@@ -241,6 +328,8 @@ interface AuthConfig<TEnv = Record<string, unknown>> {
     schema: AuthSchema;
     /** Environment variables accessor */
     getEnv: (c: Context) => TEnv;
+    /** Optional email branding tokens */
+    emailBranding?: EmailBranding;
 }
 /**
  * Auth context available in all auth operations.
@@ -250,6 +339,7 @@ interface AuthContext<TEnv = Record<string, unknown>> {
     db: AuthDatabase;
     schema: AuthSchema;
     env: TEnv;
+    emailBranding?: EmailBranding;
 }
 /**
  * Creates an auth instance with injected database and schema.
@@ -2457,78 +2547,6 @@ declare function logError(error: Error | unknown, context?: LogMetadata): void;
  */
 declare function logSecurityEvent(event: string, severity: 'low' | 'medium' | 'high' | 'critical', metadata?: LogMetadata): void;
 
-/**
- * Email service types for Resend email provider integration
- */
-interface EmailTemplate {
-    to: string;
-    subject: string;
-    html: string;
-    text?: string;
-    tags?: Record<string, string>;
-}
-interface VerificationEmailData {
-    email: string;
-    token: string;
-    verificationUrl: string;
-    firstName?: string;
-}
-interface PasswordResetEmailData {
-    email: string;
-    token: string;
-    resetUrl: string;
-}
-interface EmailChangeConfirmationData {
-    newEmail: string;
-    confirmUrl: string;
-}
-interface EmailChangeNotificationData {
-    oldEmail: string;
-    newEmail: string;
-    cancelUrl: string;
-}
-interface TwoFactorCodeEmailData {
-    email: string;
-    firstName: string | null;
-    code: string;
-}
-interface TwoFactorEnabledEmailData {
-    email: string;
-    firstName: string | null;
-    method: 'totp' | 'email';
-}
-interface TwoFactorDisabledEmailData {
-    email: string;
-    firstName: string | null;
-}
-type EmailType = 'verification' | 'password_reset' | 'email_change_confirmation' | 'email_change_notification' | '2fa_code' | '2fa_enabled' | '2fa_disabled';
-interface SendEmailResult {
-    success: boolean;
-    emailId?: string;
-    error?: string;
-}
-type ResendEventType = 'email.sent' | 'email.delivered' | 'email.delivery_delayed' | 'email.complained' | 'email.bounced' | 'email.opened' | 'email.clicked' | 'email.failed';
-interface ResendWebhookPayload {
-    type: ResendEventType;
-    created_at: string;
-    data: {
-        email_id: string;
-        from: string;
-        to: string[];
-        subject: string;
-        created_at: string;
-        tags?: Record<string, string>;
-        bounce?: {
-            message: string;
-            subType: string;
-            type: 'Permanent' | 'Transient';
-        };
-        failed?: {
-            reason: string;
-        };
-    };
-}
-
 /**
  * Create the configured email adapter.
  *
@@ -2577,8 +2595,9 @@ type UsersTable$1 = PgTableWithColumns<any>;
 declare class EmailService {
     private adapter;
     private env;
+    private branding?;
     private get fromAddress();
-    constructor(env: Env, adapter?: EmailAdapter);
+    constructor(env: Env, adapter?: EmailAdapter, branding?: EmailBranding);
     /**
      * Check if email address has bounced or complained
      */
@@ -2626,31 +2645,31 @@ declare function extractAppUrl(url: string): string;
 /**
  * Generate email verification email
  */
-declare function generateVerificationEmail(data: VerificationEmailData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generateVerificationEmail(data: VerificationEmailData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate password reset email
  */
-declare function generatePasswordResetEmail(data: PasswordResetEmailData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generatePasswordResetEmail(data: PasswordResetEmailData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate email change confirmation email (sent to NEW email)
  */
-declare function generateEmailChangeConfirmation(data: EmailChangeConfirmationData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generateEmailChangeConfirmation(data: EmailChangeConfirmationData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate email change notification email (sent to OLD email)
  */
-declare function generateEmailChangeNotification(data: EmailChangeNotificationData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generateEmailChangeNotification(data: EmailChangeNotificationData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate 2FA verification code email
  */
-declare function generate2faCodeEmail(data: TwoFactorCodeEmailData, appName?: string, appUrl?: string): EmailTemplate;
+declare function generate2faCodeEmail(data: TwoFactorCodeEmailData, appName?: string, appUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate 2FA enabled confirmation email
  */
-declare function generate2faEnabledEmail(data: TwoFactorEnabledEmailData, appName?: string, appUrl?: string): EmailTemplate;
+declare function generate2faEnabledEmail(data: TwoFactorEnabledEmailData, appName?: string, appUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate 2FA disabled notification email
  */
-declare function generate2faDisabledEmail(data: TwoFactorDisabledEmailData, appName?: string, appUrl?: string): EmailTemplate;
+declare function generate2faDisabledEmail(data: TwoFactorDisabledEmailData, appName?: string, appUrl?: string, branding?: EmailBranding): EmailTemplate;
 
 type EmailEventsTable$1 = PgTableWithColumns<any>;
 type UsersTable = PgTableWithColumns<any>;
@@ -2681,4 +2700,4 @@ declare function calculateBounceRate(db: PostgresJsDatabase<Record<string, unkno
  */
 declare function calculateComplaintRate(db: PostgresJsDatabase<Record<string, unknown>>, emailEventsTable: EmailEventsTable, hoursAgo?: number): Promise<number>;
 
-export { AUTH_DEFAULTS, type AccountLockoutTables, type Auth, type AuthConfig, type AuthContext, type AuthDatabase, type AuthSchema, CHALLENGE_TTL_MS, type ChallengePayload, CloudflareEmailAdapter, type DeviceType, type EmailAdapter, type EmailChangeConfirmationData, type EmailChangeNotificationData, type EmailChangeTables, type EmailSendOptions, type EmailSendResult, EmailService, type EmailTemplate, type EmailType, type Env, type InferNewSession, type InferNewUser, type InferSession, type InferUser, MAX_CHALLENGE_ATTEMPTS, type PasswordResetEmailData, type ProblemDetails, ProblemTypes, ResendAdapter, type ResendEventType, type ResendWebhookPayload, type SendEmailBinding, type SendEmailResult, type SessionData, type SessionTables, TRUSTED_DEVICE_COOKIE_BASE, TRUSTED_DEVICE_TTL_MS, type TotpVerifyResult, type TwoFactorCodeEmailData, type TwoFactorDisabledEmailData, type TwoFactorEnabledEmailData, type ValidationResult, type Variables, type VerificationEmailData, authRoutes, calculateBounceRate, calculateComplaintRate, cancelEmailChange, checkAccountLocked, checkBreachedPassword, clearAccountLockout, clearChallengeCookie, clearSessionCookie, clearTrustedDeviceCookie, confirmEmailChange, createAuth, createAuthMiddleware, createChallengeToken, createDeviceToken, createEmailAdapter, createProblemDetails, createSession, csrf, decryptTotpSecret, deleteAllUserSessions, deleteChallengeToken, deleteSession, encryptTotpSecret, extractAppUrl, formatBackupCode, generate2faCodeEmail, generate2faDisabledEmail, generate2faEnabledEmail, generateApiKey, generateBackupCodes, generateCodeChallenge, generateCodeVerifier, generateEmailChangeConfirmation, generateEmailChangeNotification, generateFingerprint, generatePasswordResetEmail, generateQrCodeUri, generateSecureToken, generateTotpSecret, generateTraceId, generateVerificationEmail, getAllowedOrigins, getAuthContext, getChallengeCookieName, getClientIp, getKeyPrefix, getMinutesUntilUnlock, getSessionCookieName, getTotpCounter, getTrustedDeviceCookieName, handleWebhookEvent, hashApiKey, hashBackupCode, hashPassword, hashToken, incrementFailedAttempts, invalidateAllUserSessions, isCapacitorApp, isCloudflarePreviewUrl, isDeepLinkUri, isValidApiKeyFormat, logError, logSecurityEvent, logger, normalizeBackupCode, optionalAuth, parseDeviceName, parseDeviceType, problemJson, problems, rateLimit, refreshSession, requestEmailChange, requireAuth, requireVerifiedEmail, retrieveChallengeToken, setChallengeCookie, setSessionCookie, setTrustedDeviceCookie, storeChallengeToken, updateChallengeAttempts, validateChallengePayload, validateOrigin, validatePassword, validatePasswordWithBreachCheck, validateSession, validateTrustedDevice, verifyBackupCode, verifyCodeChallenge, verifyPassword, verifyPasswordWithRotation, verifyTotpCode, verifyTurnstileToken, verifyWebhookSignature };
+export { AUTH_DEFAULTS, type AccountLockoutTables, type Auth, type AuthConfig, type AuthContext, type AuthDatabase, type AuthSchema, CHALLENGE_TTL_MS, type ChallengePayload, CloudflareEmailAdapter, type DeviceType, type EmailAdapter, type EmailBranding, type EmailChangeConfirmationData, type EmailChangeNotificationData, type EmailChangeTables, type EmailSendOptions, type EmailSendResult, EmailService, type EmailTemplate, type EmailType, type Env, type InferNewSession, type InferNewUser, type InferSession, type InferUser, MAX_CHALLENGE_ATTEMPTS, type PasswordResetEmailData, type ProblemDetails, ProblemTypes, ResendAdapter, type ResendEventType, type ResendWebhookPayload, type SendEmailBinding, type SendEmailResult, type SessionData, type SessionTables, TRUSTED_DEVICE_COOKIE_BASE, TRUSTED_DEVICE_TTL_MS, type TotpVerifyResult, type TwoFactorCodeEmailData, type TwoFactorDisabledEmailData, type TwoFactorEnabledEmailData, type ValidationResult, type Variables, type VerificationEmailData, authRoutes, calculateBounceRate, calculateComplaintRate, cancelEmailChange, checkAccountLocked, checkBreachedPassword, clearAccountLockout, clearChallengeCookie, clearSessionCookie, clearTrustedDeviceCookie, confirmEmailChange, createAuth, createAuthMiddleware, createChallengeToken, createDeviceToken, createEmailAdapter, createProblemDetails, createSession, csrf, decryptTotpSecret, deleteAllUserSessions, deleteChallengeToken, deleteSession, encryptTotpSecret, extractAppUrl, formatBackupCode, generate2faCodeEmail, generate2faDisabledEmail, generate2faEnabledEmail, generateApiKey, generateBackupCodes, generateCodeChallenge, generateCodeVerifier, generateEmailChangeConfirmation, generateEmailChangeNotification, generateFingerprint, generatePasswordResetEmail, generateQrCodeUri, generateSecureToken, generateTotpSecret, generateTraceId, generateVerificationEmail, getAllowedOrigins, getAuthContext, getChallengeCookieName, getClientIp, getKeyPrefix, getMinutesUntilUnlock, getSessionCookieName, getTotpCounter, getTrustedDeviceCookieName, handleWebhookEvent, hashApiKey, hashBackupCode, hashPassword, hashToken, incrementFailedAttempts, invalidateAllUserSessions, isCapacitorApp, isCloudflarePreviewUrl, isDeepLinkUri, isValidApiKeyFormat, logError, logSecurityEvent, logger, normalizeBackupCode, optionalAuth, parseDeviceName, parseDeviceType, problemJson, problems, rateLimit, refreshSession, requestEmailChange, requireAuth, requireVerifiedEmail, retrieveChallengeToken, setChallengeCookie, setSessionCookie, setTrustedDeviceCookie, storeChallengeToken, updateChallengeAttempts, validateChallengePayload, validateOrigin, validatePassword, validatePasswordWithBreachCheck, validateSession, validateTrustedDevice, verifyBackupCode, verifyCodeChallenge, verifyPassword, verifyPasswordWithRotation, verifyTotpCode, verifyTurnstileToken, verifyWebhookSignature };

package/dist/index.d.ts

@@ -170,6 +170,93 @@ declare const AUTH_DEFAULTS: {
     readonly APP_NAME: "App";
 };
 
+/**
+ * Email service types for Resend email provider integration
+ */
+interface EmailTemplate {
+    to: string;
+    subject: string;
+    html: string;
+    text?: string;
+    tags?: Record<string, string>;
+}
+interface VerificationEmailData {
+    email: string;
+    token: string;
+    verificationUrl: string;
+    firstName?: string;
+}
+interface PasswordResetEmailData {
+    email: string;
+    token: string;
+    resetUrl: string;
+}
+interface EmailChangeConfirmationData {
+    newEmail: string;
+    confirmUrl: string;
+}
+interface EmailChangeNotificationData {
+    oldEmail: string;
+    newEmail: string;
+    cancelUrl: string;
+}
+interface TwoFactorCodeEmailData {
+    email: string;
+    firstName: string | null;
+    code: string;
+}
+interface TwoFactorEnabledEmailData {
+    email: string;
+    firstName: string | null;
+    method: 'totp' | 'email';
+}
+interface TwoFactorDisabledEmailData {
+    email: string;
+    firstName: string | null;
+}
+type EmailType = 'verification' | 'password_reset' | 'email_change_confirmation' | 'email_change_notification' | '2fa_code' | '2fa_enabled' | '2fa_disabled';
+interface SendEmailResult {
+    success: boolean;
+    emailId?: string;
+    error?: string;
+}
+type ResendEventType = 'email.sent' | 'email.delivered' | 'email.delivery_delayed' | 'email.complained' | 'email.bounced' | 'email.opened' | 'email.clicked' | 'email.failed';
+interface ResendWebhookPayload {
+    type: ResendEventType;
+    created_at: string;
+    data: {
+        email_id: string;
+        from: string;
+        to: string[];
+        subject: string;
+        created_at: string;
+        tags?: Record<string, string>;
+        bounce?: {
+            message: string;
+            subType: string;
+            type: 'Permanent' | 'Transient';
+        };
+        failed?: {
+            reason: string;
+        };
+    };
+}
+/** Consumer-supplied branding tokens for transactional emails. */
+interface EmailBranding {
+    /** Full URL to the header logo. Default: `${appUrl}/email-header-image.png` */
+    logoUrl?: string;
+    /** CTA button background. Default: '#00fe9a' */
+    buttonBgColor?: string;
+    /** CTA button text color. Default: '#000004' */
+    buttonTextColor?: string;
+    /** CTA button font weight. Default: 500 */
+    buttonFontWeight?: number;
+    /** CTA button border-radius. Default: '6px' */
+    buttonRadius?: string;
+    /** Footer band background color. Default: '#1e1b4b' */
+    footerColor?: string;
+}
+
 /**
  * Base type for auth tables.
  *
@@ -241,6 +328,8 @@ interface AuthConfig<TEnv = Record<string, unknown>> {
     schema: AuthSchema;
     /** Environment variables accessor */
     getEnv: (c: Context) => TEnv;
+    /** Optional email branding tokens */
+    emailBranding?: EmailBranding;
 }
 /**
  * Auth context available in all auth operations.
@@ -250,6 +339,7 @@ interface AuthContext<TEnv = Record<string, unknown>> {
     db: AuthDatabase;
     schema: AuthSchema;
     env: TEnv;
+    emailBranding?: EmailBranding;
 }
 /**
  * Creates an auth instance with injected database and schema.
@@ -2457,78 +2547,6 @@ declare function logError(error: Error | unknown, context?: LogMetadata): void;
  */
 declare function logSecurityEvent(event: string, severity: 'low' | 'medium' | 'high' | 'critical', metadata?: LogMetadata): void;
 
-/**
- * Email service types for Resend email provider integration
- */
-interface EmailTemplate {
-    to: string;
-    subject: string;
-    html: string;
-    text?: string;
-    tags?: Record<string, string>;
-}
-interface VerificationEmailData {
-    email: string;
-    token: string;
-    verificationUrl: string;
-    firstName?: string;
-}
-interface PasswordResetEmailData {
-    email: string;
-    token: string;
-    resetUrl: string;
-}
-interface EmailChangeConfirmationData {
-    newEmail: string;
-    confirmUrl: string;
-}
-interface EmailChangeNotificationData {
-    oldEmail: string;
-    newEmail: string;
-    cancelUrl: string;
-}
-interface TwoFactorCodeEmailData {
-    email: string;
-    firstName: string | null;
-    code: string;
-}
-interface TwoFactorEnabledEmailData {
-    email: string;
-    firstName: string | null;
-    method: 'totp' | 'email';
-}
-interface TwoFactorDisabledEmailData {
-    email: string;
-    firstName: string | null;
-}
-type EmailType = 'verification' | 'password_reset' | 'email_change_confirmation' | 'email_change_notification' | '2fa_code' | '2fa_enabled' | '2fa_disabled';
-interface SendEmailResult {
-    success: boolean;
-    emailId?: string;
-    error?: string;
-}
-type ResendEventType = 'email.sent' | 'email.delivered' | 'email.delivery_delayed' | 'email.complained' | 'email.bounced' | 'email.opened' | 'email.clicked' | 'email.failed';
-interface ResendWebhookPayload {
-    type: ResendEventType;
-    created_at: string;
-    data: {
-        email_id: string;
-        from: string;
-        to: string[];
-        subject: string;
-        created_at: string;
-        tags?: Record<string, string>;
-        bounce?: {
-            message: string;
-            subType: string;
-            type: 'Permanent' | 'Transient';
-        };
-        failed?: {
-            reason: string;
-        };
-    };
-}
-
 /**
  * Create the configured email adapter.
  *
@@ -2577,8 +2595,9 @@ type UsersTable$1 = PgTableWithColumns<any>;
 declare class EmailService {
     private adapter;
     private env;
+    private branding?;
     private get fromAddress();
-    constructor(env: Env, adapter?: EmailAdapter);
+    constructor(env: Env, adapter?: EmailAdapter, branding?: EmailBranding);
     /**
      * Check if email address has bounced or complained
      */
@@ -2626,31 +2645,31 @@ declare function extractAppUrl(url: string): string;
 /**
  * Generate email verification email
  */
-declare function generateVerificationEmail(data: VerificationEmailData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generateVerificationEmail(data: VerificationEmailData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate password reset email
  */
-declare function generatePasswordResetEmail(data: PasswordResetEmailData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generatePasswordResetEmail(data: PasswordResetEmailData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate email change confirmation email (sent to NEW email)
  */
-declare function generateEmailChangeConfirmation(data: EmailChangeConfirmationData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generateEmailChangeConfirmation(data: EmailChangeConfirmationData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate email change notification email (sent to OLD email)
  */
-declare function generateEmailChangeNotification(data: EmailChangeNotificationData, appName?: string, configuredAppUrl?: string): EmailTemplate;
+declare function generateEmailChangeNotification(data: EmailChangeNotificationData, appName?: string, configuredAppUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate 2FA verification code email
  */
-declare function generate2faCodeEmail(data: TwoFactorCodeEmailData, appName?: string, appUrl?: string): EmailTemplate;
+declare function generate2faCodeEmail(data: TwoFactorCodeEmailData, appName?: string, appUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate 2FA enabled confirmation email
  */
-declare function generate2faEnabledEmail(data: TwoFactorEnabledEmailData, appName?: string, appUrl?: string): EmailTemplate;
+declare function generate2faEnabledEmail(data: TwoFactorEnabledEmailData, appName?: string, appUrl?: string, branding?: EmailBranding): EmailTemplate;
 /**
  * Generate 2FA disabled notification email
  */
-declare function generate2faDisabledEmail(data: TwoFactorDisabledEmailData, appName?: string, appUrl?: string): EmailTemplate;
+declare function generate2faDisabledEmail(data: TwoFactorDisabledEmailData, appName?: string, appUrl?: string, branding?: EmailBranding): EmailTemplate;
 
 type EmailEventsTable$1 = PgTableWithColumns<any>;
 type UsersTable = PgTableWithColumns<any>;
@@ -2681,4 +2700,4 @@ declare function calculateBounceRate(db: PostgresJsDatabase<Record<string, unkno
  */
 declare function calculateComplaintRate(db: PostgresJsDatabase<Record<string, unknown>>, emailEventsTable: EmailEventsTable, hoursAgo?: number): Promise<number>;
 
-export { AUTH_DEFAULTS, type AccountLockoutTables, type Auth, type AuthConfig, type AuthContext, type AuthDatabase, type AuthSchema, CHALLENGE_TTL_MS, type ChallengePayload, CloudflareEmailAdapter, type DeviceType, type EmailAdapter, type EmailChangeConfirmationData, type EmailChangeNotificationData, type EmailChangeTables, type EmailSendOptions, type EmailSendResult, EmailService, type EmailTemplate, type EmailType, type Env, type InferNewSession, type InferNewUser, type InferSession, type InferUser, MAX_CHALLENGE_ATTEMPTS, type PasswordResetEmailData, type ProblemDetails, ProblemTypes, ResendAdapter, type ResendEventType, type ResendWebhookPayload, type SendEmailBinding, type SendEmailResult, type SessionData, type SessionTables, TRUSTED_DEVICE_COOKIE_BASE, TRUSTED_DEVICE_TTL_MS, type TotpVerifyResult, type TwoFactorCodeEmailData, type TwoFactorDisabledEmailData, type TwoFactorEnabledEmailData, type ValidationResult, type Variables, type VerificationEmailData, authRoutes, calculateBounceRate, calculateComplaintRate, cancelEmailChange, checkAccountLocked, checkBreachedPassword, clearAccountLockout, clearChallengeCookie, clearSessionCookie, clearTrustedDeviceCookie, confirmEmailChange, createAuth, createAuthMiddleware, createChallengeToken, createDeviceToken, createEmailAdapter, createProblemDetails, createSession, csrf, decryptTotpSecret, deleteAllUserSessions, deleteChallengeToken, deleteSession, encryptTotpSecret, extractAppUrl, formatBackupCode, generate2faCodeEmail, generate2faDisabledEmail, generate2faEnabledEmail, generateApiKey, generateBackupCodes, generateCodeChallenge, generateCodeVerifier, generateEmailChangeConfirmation, generateEmailChangeNotification, generateFingerprint, generatePasswordResetEmail, generateQrCodeUri, generateSecureToken, generateTotpSecret, generateTraceId, generateVerificationEmail, getAllowedOrigins, getAuthContext, getChallengeCookieName, getClientIp, getKeyPrefix, getMinutesUntilUnlock, getSessionCookieName, getTotpCounter, getTrustedDeviceCookieName, handleWebhookEvent, hashApiKey, hashBackupCode, hashPassword, hashToken, incrementFailedAttempts, invalidateAllUserSessions, isCapacitorApp, isCloudflarePreviewUrl, isDeepLinkUri, isValidApiKeyFormat, logError, logSecurityEvent, logger, normalizeBackupCode, optionalAuth, parseDeviceName, parseDeviceType, problemJson, problems, rateLimit, refreshSession, requestEmailChange, requireAuth, requireVerifiedEmail, retrieveChallengeToken, setChallengeCookie, setSessionCookie, setTrustedDeviceCookie, storeChallengeToken, updateChallengeAttempts, validateChallengePayload, validateOrigin, validatePassword, validatePasswordWithBreachCheck, validateSession, validateTrustedDevice, verifyBackupCode, verifyCodeChallenge, verifyPassword, verifyPasswordWithRotation, verifyTotpCode, verifyTurnstileToken, verifyWebhookSignature };
+export { AUTH_DEFAULTS, type AccountLockoutTables, type Auth, type AuthConfig, type AuthContext, type AuthDatabase, type AuthSchema, CHALLENGE_TTL_MS, type ChallengePayload, CloudflareEmailAdapter, type DeviceType, type EmailAdapter, type EmailBranding, type EmailChangeConfirmationData, type EmailChangeNotificationData, type EmailChangeTables, type EmailSendOptions, type EmailSendResult, EmailService, type EmailTemplate, type EmailType, type Env, type InferNewSession, type InferNewUser, type InferSession, type InferUser, MAX_CHALLENGE_ATTEMPTS, type PasswordResetEmailData, type ProblemDetails, ProblemTypes, ResendAdapter, type ResendEventType, type ResendWebhookPayload, type SendEmailBinding, type SendEmailResult, type SessionData, type SessionTables, TRUSTED_DEVICE_COOKIE_BASE, TRUSTED_DEVICE_TTL_MS, type TotpVerifyResult, type TwoFactorCodeEmailData, type TwoFactorDisabledEmailData, type TwoFactorEnabledEmailData, type ValidationResult, type Variables, type VerificationEmailData, authRoutes, calculateBounceRate, calculateComplaintRate, cancelEmailChange, checkAccountLocked, checkBreachedPassword, clearAccountLockout, clearChallengeCookie, clearSessionCookie, clearTrustedDeviceCookie, confirmEmailChange, createAuth, createAuthMiddleware, createChallengeToken, createDeviceToken, createEmailAdapter, createProblemDetails, createSession, csrf, decryptTotpSecret, deleteAllUserSessions, deleteChallengeToken, deleteSession, encryptTotpSecret, extractAppUrl, formatBackupCode, generate2faCodeEmail, generate2faDisabledEmail, generate2faEnabledEmail, generateApiKey, generateBackupCodes, generateCodeChallenge, generateCodeVerifier, generateEmailChangeConfirmation, generateEmailChangeNotification, generateFingerprint, generatePasswordResetEmail, generateQrCodeUri, generateSecureToken, generateTotpSecret, generateTraceId, generateVerificationEmail, getAllowedOrigins, getAuthContext, getChallengeCookieName, getClientIp, getKeyPrefix, getMinutesUntilUnlock, getSessionCookieName, getTotpCounter, getTrustedDeviceCookieName, handleWebhookEvent, hashApiKey, hashBackupCode, hashPassword, hashToken, incrementFailedAttempts, invalidateAllUserSessions, isCapacitorApp, isCloudflarePreviewUrl, isDeepLinkUri, isValidApiKeyFormat, logError, logSecurityEvent, logger, normalizeBackupCode, optionalAuth, parseDeviceName, parseDeviceType, problemJson, problems, rateLimit, refreshSession, requestEmailChange, requireAuth, requireVerifiedEmail, retrieveChallengeToken, setChallengeCookie, setSessionCookie, setTrustedDeviceCookie, storeChallengeToken, updateChallengeAttempts, validateChallengePayload, validateOrigin, validatePassword, validatePasswordWithBreachCheck, validateSession, validateTrustedDevice, verifyBackupCode, verifyCodeChallenge, verifyPassword, verifyPasswordWithRotation, verifyTotpCode, verifyTurnstileToken, verifyWebhookSignature };