@veloxts/auth 0.3.3 → 0.3.5

package/dist/csrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csrf.js","sourceRoot":"","sources":["../src/csrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA0BvE,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,SAAS;AAC1C,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAC3C,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AACzC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAkBjE;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,UAAU,GAAW,GAAG,CAAC;IACzB,IAAI,CAAgB;IAE7B,YAAY,OAAe,EAAE,IAAmB;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,KAAK,CAAC,iBAAiB,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;CACF;AA+OD,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,+EAA+E;AAC/E,8BAA8B;AAC9B,+EAA+E;AAE/E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IACnC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,gCAAgC,iBAAiB,eAAe;YAC9D,wCAAwC,CAC3C,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC/D,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,IAAI,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAC;IACxF,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,aAAa,IAAI,kBAAkB,CAAC;IAC7E,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,OAAO,IAAI,YAAY,CAAC;IAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,WAAW,IAAI,IAAI,CAAC;IAC3D,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,EAAE,cAAc,IAAI,EAAE,CAAC;IAC/D,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,YAAY,IAAI,EAAE,CAAC;IAE3D,gBAAgB;IAChB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,mBAAmB,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC;IAC9C,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IACpF,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAE3C,0DAA0D;IAC1D,6DAA6D;IAC7D,IAAI,cAAc,KAAK,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,uDAAuD;YACrD,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAiB;QACzE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;QACjD,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,SAAS,aAAa,CAAC,KAA8B;QACnD,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE9D,mDAAmD;QACnD,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,QAAQ,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAE/D,wCAAwC;QACxC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE;YAC9B,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS,UAAU,CAAC,KAAa;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAC5D,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAE7C,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,SAAS,eAAe,CAAC,KAAa;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAE3F,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAE9D,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,SAAS,YAAY,CAAC,OAAuB;QAC3C,kBAAkB;QAClB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,gBAAgB;QAChB,MAAM,IAAI,GAAG,OAAO,CAAC,IAA2C,CAAC;QACjE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,aAAa,CAAW,CAAC;QACvC,CAAC;QAED,8BAA8B;QAC9B,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAA4C,CAAC;YACnE,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC,cAAc,CAAW,CAAC;YACzC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,OAAuB;QAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAElC,gDAAgD;QAChD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;QAC5C,MAAM,cAAc,GAAG,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC;QAC/C,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;YACrC,OAAO;QACT,CAAC;QAED,gCAAgC;QAChC,IAAI,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,SAAS,CAAC,oBAAoB,aAAa,cAAc,EAAE,sBAAsB,CAAC,CAAC;IAC/F,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,IAAY;QAClC,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,IAAI,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAC;YACpC,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,aAAa,CAAC,OAAkC;QACvD,4BAA4B;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,uBAAuB;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,wBAAwB;QACxB,cAAc,CAAC,OAAO,CAAC,CAAC;QAExB,mBAAmB;QACnB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAEhD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;QACtE,CAAC;QAED,oBAAoB;QACpB,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,iCAAiC,EAAE,oBAAoB,CAAC,CAAC;QAC/E,CAAC;QAED,+CAA+C;QAC/C,uDAAuD;QACvD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxD,IACE,YAAY,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;YAC5C,CAAC,eAAe,CAAC,YAAY,EAAE,aAAa,CAAC,EAC7C,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;QACpE,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,8BAA8B,EAAE,wBAAwB,CAAC,CAAC;QAChF,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC3B,MAAM,IAAI,SAAS,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,WAAW,CAAC,KAA8B;QACjD,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE;YAC5B,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,aAAa;QACb,aAAa;QACb,YAAY;QACZ,UAAU;QACV,eAAe;QACf,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE1C;;OAEG;IACH,SAAS,OAAO,CACd,UAAiC,EAAE;QAEnC,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAA2C,CAAC;YAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,OAA+C,CAAC;YAEpE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC;oBACV,GAAG,EAAE;wBACH,GAAG,GAAG;wBACN,IAAI,EAAE;4BACJ,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;4BACjD,KAAK,EAAE,SAAS;yBACjB;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YAED,+CAA+C;YAC/C,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;YAE7D,6BAA6B;YAC7B,OAAO,IAAI,CAAC;gBACV,GAAG,EAAE;oBACH,GAAG,GAAG;oBACN,IAAI,EAAE;wBACJ,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;wBACjD,KAAK;qBACN;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,OAAO;QAMd,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAA2C,CAAC;YAE9D,OAAO,IAAI,CAAC;gBACV,GAAG,EAAE;oBACH,GAAG,GAAG;oBACN,IAAI,EAAE;wBACJ,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;wBACjD,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;qBACtD;iBACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,4BAA4B;QAC5B,OAAO;QACP,+CAA+C;QAC/C,OAAO;QACP,kDAAkD;QAClD,OAAO;QACP,8BAA8B;QAC9B,aAAa,EAAE,CAAC,KAA8B,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;QAC/E,8BAA8B;QAC9B,aAAa,EAAE,CAAC,OAAkC,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;QACrF,wBAAwB;QACxB,WAAW,EAAE,CAAC,KAA8B,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC"}

package/dist/guards.d.ts

@@ -0,0 +1,142 @@
+/**
+ * Authorization guards for @veloxts/auth
+ * @module auth/guards
+ */
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import type { AuthContext, GuardDefinition, GuardFunction, User } from './types.js';
+/**
+ * Creates a guard definition from a check function
+ *
+ * @example
+ * ```typescript
+ * const isAdmin = defineGuard({
+ *   name: 'isAdmin',
+ *   check: (ctx) => ctx.user?.role === 'admin',
+ *   message: 'Admin access required',
+ * });
+ * ```
+ */
+export declare function defineGuard<TContext = unknown>(definition: GuardDefinition<TContext>): GuardDefinition<TContext>;
+/**
+ * Creates a simple guard from a check function
+ *
+ * @example
+ * ```typescript
+ * const isActive = guard('isActive', (ctx) => ctx.user?.status === 'active');
+ * ```
+ */
+export declare function guard<TContext = unknown>(name: string, check: GuardFunction<TContext>): GuardDefinition<TContext>;
+/**
+ * Guard that requires authentication
+ * Rejects requests without a valid user
+ */
+export declare const authenticated: GuardDefinition<{
+    auth?: AuthContext;
+}>;
+/**
+ * Guard that requires a verified email
+ */
+export declare const emailVerified: GuardDefinition<{
+    user?: User;
+}>;
+/**
+ * Creates a guard that checks if user has a specific role
+ *
+ * Checks if the user has ANY of the specified roles.
+ *
+ * @example
+ * ```typescript
+ * const adminOnly = hasRole('admin');
+ * const moderatorOrAdmin = hasRole(['admin', 'moderator']);
+ *
+ * // User with multiple roles
+ * const user = { id: '1', email: 'a@b.com', roles: ['editor', 'moderator'] };
+ * hasRole('moderator') // passes - user has 'moderator' role
+ * hasRole(['admin', 'editor']) // passes - user has 'editor' role
+ * ```
+ */
+export declare function hasRole(roles: string | string[]): GuardDefinition<{
+    user?: User;
+}>;
+/**
+ * Creates a guard that checks if user has specific permissions
+ *
+ * Requires ALL specified permissions (AND logic).
+ *
+ * @example
+ * ```typescript
+ * const canEdit = hasPermission('posts.edit');
+ * const canManageUsers = hasPermission(['users.create', 'users.delete']);
+ * ```
+ */
+export declare function hasPermission(permissions: string | string[]): GuardDefinition<{
+    user?: User;
+}>;
+/**
+ * Creates a guard that checks if user has ANY of the specified permissions
+ *
+ * @example
+ * ```typescript
+ * const canViewOrEdit = hasAnyPermission(['posts.view', 'posts.edit']);
+ * ```
+ */
+export declare function hasAnyPermission(permissions: string[]): GuardDefinition<{
+    user?: User;
+}>;
+/**
+ * Creates a guard that checks a custom condition on the user
+ *
+ * @example
+ * ```typescript
+ * const isPremium = userCan((user) => user.subscription === 'premium');
+ * ```
+ */
+export declare function userCan(check: (user: User) => boolean | Promise<boolean>, name?: string): GuardDefinition<{
+    user?: User;
+}>;
+/**
+ * Creates a guard that combines multiple guards with AND logic
+ *
+ * @example
+ * ```typescript
+ * const adminWithPermission = allOf([hasRole('admin'), hasPermission('users.delete')]);
+ * ```
+ */
+export declare function allOf<TContext = unknown>(guards: GuardDefinition<TContext>[]): GuardDefinition<TContext>;
+/**
+ * Creates a guard that passes if ANY of the guards pass
+ *
+ * @example
+ * ```typescript
+ * const adminOrModerator = anyOf([hasRole('admin'), hasRole('moderator')]);
+ * ```
+ */
+export declare function anyOf<TContext = unknown>(guards: GuardDefinition<TContext>[]): GuardDefinition<TContext>;
+/**
+ * Creates a guard that inverts another guard
+ *
+ * @example
+ * ```typescript
+ * const notAdmin = not(hasRole('admin'));
+ * ```
+ */
+export declare function not<TContext = unknown>(guard: GuardDefinition<TContext>): GuardDefinition<TContext>;
+/**
+ * Executes a guard and returns the result
+ */
+export declare function executeGuard<TContext>(guard: GuardDefinition<TContext>, ctx: TContext, request: FastifyRequest, reply: FastifyReply): Promise<{
+    passed: boolean;
+    message?: string;
+    statusCode?: number;
+}>;
+/**
+ * Executes multiple guards in sequence
+ * Returns on first failure
+ */
+export declare function executeGuards<TContext>(guards: GuardDefinition<TContext>[], ctx: TContext, request: FastifyRequest, reply: FastifyReply): Promise<{
+    passed: boolean;
+    failedGuard?: string;
+    message?: string;
+    statusCode?: number;
+}>;
+//# sourceMappingURL=guards.d.ts.map

package/dist/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE5D,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAMpF;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,QAAQ,GAAG,OAAO,EAC5C,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,GACpC,eAAe,CAAC,QAAQ,CAAC,CAK3B;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,QAAQ,GAAG,OAAO,EACtC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,GAC7B,eAAe,CAAC,QAAQ,CAAC,CAE3B;AAMD;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,eAAe,CAAC;IAAE,IAAI,CAAC,EAAE,WAAW,CAAA;CAAE,CAKhE,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,eAAe,CAAC;IAAE,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE,CAKzD,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,eAAe,CAAC;IAAE,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CAclF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,eAAe,CAAC;IAAE,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CAc9F;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;IAAE,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CAYxF;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CACrB,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EACjD,IAAI,SAAW,GACd,eAAe,CAAC;IAAE,IAAI,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CAUlC;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,QAAQ,GAAG,OAAO,EACtC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,GAClC,eAAe,CAAC,QAAQ,CAAC,CAc3B;AAED;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,QAAQ,GAAG,OAAO,EACtC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,GAClC,eAAe,CAAC,QAAQ,CAAC,CAc3B;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,QAAQ,GAAG,OAAO,EACpC,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,GAC/B,eAAe,CAAC,QAAQ,CAAC,CAS3B;AAMD;;GAEG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EACzC,KAAK,EAAE,eAAe,CAAC,QAAQ,CAAC,EAChC,GAAG,EAAE,QAAQ,EACb,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAerE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAC1C,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,EACnC,GAAG,EAAE,QAAQ,EACb,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAc3F"}

package/dist/guards.js

@@ -0,0 +1,259 @@
+/**
+ * Authorization guards for @veloxts/auth
+ * @module auth/guards
+ */
+// ============================================================================
+// Guard Factory
+// ============================================================================
+/**
+ * Creates a guard definition from a check function
+ *
+ * @example
+ * ```typescript
+ * const isAdmin = defineGuard({
+ *   name: 'isAdmin',
+ *   check: (ctx) => ctx.user?.role === 'admin',
+ *   message: 'Admin access required',
+ * });
+ * ```
+ */
+export function defineGuard(definition) {
+    return {
+        statusCode: 403,
+        ...definition,
+    };
+}
+/**
+ * Creates a simple guard from a check function
+ *
+ * @example
+ * ```typescript
+ * const isActive = guard('isActive', (ctx) => ctx.user?.status === 'active');
+ * ```
+ */
+export function guard(name, check) {
+    return defineGuard({ name, check });
+}
+// ============================================================================
+// Built-in Guards
+// ============================================================================
+/**
+ * Guard that requires authentication
+ * Rejects requests without a valid user
+ */
+export const authenticated = defineGuard({
+    name: 'authenticated',
+    check: (ctx) => ctx.auth?.isAuthenticated === true,
+    message: 'Authentication required',
+    statusCode: 401,
+});
+/**
+ * Guard that requires a verified email
+ */
+export const emailVerified = defineGuard({
+    name: 'emailVerified',
+    check: (ctx) => ctx.user?.emailVerified === true,
+    message: 'Email verification required',
+    statusCode: 403,
+});
+/**
+ * Creates a guard that checks if user has a specific role
+ *
+ * Checks if the user has ANY of the specified roles.
+ *
+ * @example
+ * ```typescript
+ * const adminOnly = hasRole('admin');
+ * const moderatorOrAdmin = hasRole(['admin', 'moderator']);
+ *
+ * // User with multiple roles
+ * const user = { id: '1', email: 'a@b.com', roles: ['editor', 'moderator'] };
+ * hasRole('moderator') // passes - user has 'moderator' role
+ * hasRole(['admin', 'editor']) // passes - user has 'editor' role
+ * ```
+ */
+export function hasRole(roles) {
+    const requiredRoles = Array.isArray(roles) ? roles : [roles];
+    return defineGuard({
+        name: `hasRole:${requiredRoles.join(',')}`,
+        check: (ctx) => {
+            const userRoles = ctx.user?.roles;
+            if (!Array.isArray(userRoles) || userRoles.length === 0) {
+                return false;
+            }
+            return requiredRoles.some((role) => userRoles.includes(role));
+        },
+        message: `Required role: ${requiredRoles.join(' or ')}`,
+    });
+}
+/**
+ * Creates a guard that checks if user has specific permissions
+ *
+ * Requires ALL specified permissions (AND logic).
+ *
+ * @example
+ * ```typescript
+ * const canEdit = hasPermission('posts.edit');
+ * const canManageUsers = hasPermission(['users.create', 'users.delete']);
+ * ```
+ */
+export function hasPermission(permissions) {
+    const required = Array.isArray(permissions) ? permissions : [permissions];
+    return defineGuard({
+        name: `hasPermission:${required.join(',')}`,
+        check: (ctx) => {
+            const userPermissions = ctx.user?.permissions;
+            if (!Array.isArray(userPermissions)) {
+                return false;
+            }
+            return required.every((p) => userPermissions.includes(p));
+        },
+        message: `Required permissions: ${required.join(', ')}`,
+    });
+}
+/**
+ * Creates a guard that checks if user has ANY of the specified permissions
+ *
+ * @example
+ * ```typescript
+ * const canViewOrEdit = hasAnyPermission(['posts.view', 'posts.edit']);
+ * ```
+ */
+export function hasAnyPermission(permissions) {
+    return defineGuard({
+        name: `hasAnyPermission:${permissions.join(',')}`,
+        check: (ctx) => {
+            const userPermissions = ctx.user?.permissions;
+            if (!Array.isArray(userPermissions)) {
+                return false;
+            }
+            return permissions.some((p) => userPermissions.includes(p));
+        },
+        message: `Required one of: ${permissions.join(', ')}`,
+    });
+}
+/**
+ * Creates a guard that checks a custom condition on the user
+ *
+ * @example
+ * ```typescript
+ * const isPremium = userCan((user) => user.subscription === 'premium');
+ * ```
+ */
+export function userCan(check, name = 'custom') {
+    return defineGuard({
+        name: `userCan:${name}`,
+        check: async (ctx) => {
+            if (!ctx.user) {
+                return false;
+            }
+            return check(ctx.user);
+        },
+    });
+}
+/**
+ * Creates a guard that combines multiple guards with AND logic
+ *
+ * @example
+ * ```typescript
+ * const adminWithPermission = allOf([hasRole('admin'), hasPermission('users.delete')]);
+ * ```
+ */
+export function allOf(guards) {
+    return defineGuard({
+        name: `allOf:${guards.map((g) => g.name).join(',')}`,
+        check: async (ctx, request, reply) => {
+            for (const guard of guards) {
+                const result = await guard.check(ctx, request, reply);
+                if (!result) {
+                    return false;
+                }
+            }
+            return true;
+        },
+        message: `All conditions required: ${guards.map((g) => g.name).join(', ')}`,
+    });
+}
+/**
+ * Creates a guard that passes if ANY of the guards pass
+ *
+ * @example
+ * ```typescript
+ * const adminOrModerator = anyOf([hasRole('admin'), hasRole('moderator')]);
+ * ```
+ */
+export function anyOf(guards) {
+    return defineGuard({
+        name: `anyOf:${guards.map((g) => g.name).join(',')}`,
+        check: async (ctx, request, reply) => {
+            for (const guard of guards) {
+                const result = await guard.check(ctx, request, reply);
+                if (result) {
+                    return true;
+                }
+            }
+            return false;
+        },
+        message: `One of required: ${guards.map((g) => g.name).join(', ')}`,
+    });
+}
+/**
+ * Creates a guard that inverts another guard
+ *
+ * @example
+ * ```typescript
+ * const notAdmin = not(hasRole('admin'));
+ * ```
+ */
+export function not(guard) {
+    return defineGuard({
+        name: `not:${guard.name}`,
+        check: async (ctx, request, reply) => {
+            const result = await guard.check(ctx, request, reply);
+            return !result;
+        },
+        message: `Condition must not be met: ${guard.name}`,
+    });
+}
+// ============================================================================
+// Guard Execution
+// ============================================================================
+/**
+ * Executes a guard and returns the result
+ */
+export async function executeGuard(guard, ctx, request, reply) {
+    try {
+        const passed = await guard.check(ctx, request, reply);
+        return {
+            passed,
+            message: passed ? undefined : guard.message,
+            statusCode: passed ? undefined : guard.statusCode,
+        };
+    }
+    catch (error) {
+        return {
+            passed: false,
+            message: error instanceof Error ? error.message : 'Guard check failed',
+            statusCode: 500,
+        };
+    }
+}
+/**
+ * Executes multiple guards in sequence
+ * Returns on first failure
+ */
+export async function executeGuards(guards, ctx, request, reply) {
+    for (const guard of guards) {
+        const result = await executeGuard(guard, ctx, request, reply);
+        if (!result.passed) {
+            return {
+                passed: false,
+                failedGuard: guard.name,
+                message: result.message,
+                statusCode: result.statusCode,
+            };
+        }
+    }
+    return { passed: true };
+}
+//# sourceMappingURL=guards.js.map

package/dist/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CACzB,UAAqC;IAErC,OAAO;QACL,UAAU,EAAE,GAAG;QACf,GAAG,UAAU;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,KAA8B;IAE9B,OAAO,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAA4C,WAAW,CAAC;IAChF,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI;IAClD,OAAO,EAAE,yBAAyB;IAClC,UAAU,EAAE,GAAG;CAChB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAqC,WAAW,CAAC;IACzE,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI;IAChD,OAAO,EAAE,6BAA6B;IACtC,UAAU,EAAE,GAAG;CAChB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,OAAO,CAAC,KAAwB;IAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAE7D,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,WAAW,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC1C,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,kBAAkB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,WAA8B;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAE1E,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,iBAAiB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC3C,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,yBAAyB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAqB;IACpD,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,oBAAoB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACjD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,EAAE,oBAAoB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACtD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CACrB,KAAiD,EACjD,IAAI,GAAG,QAAQ;IAEf,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,WAAW,IAAI,EAAE;QACvB,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CACnB,MAAmC;IAEnC,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACpD,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,4BAA4B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KAC5E,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CACnB,MAAmC;IAEnC,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,SAAS,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACpD,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;gBACtD,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,EAAE,oBAAoB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACpE,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,CACjB,KAAgC;IAEhC,OAAO,WAAW,CAAC;QACjB,IAAI,EAAE,OAAO,KAAK,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC;QACjB,CAAC;QACD,OAAO,EAAE,8BAA8B,KAAK,CAAC,IAAI,EAAE;KACpD,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAgC,EAChC,GAAa,EACb,OAAuB,EACvB,KAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO;YACL,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;YAC3C,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;SAClD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;YACtE,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAmC,EACnC,GAAa,EACb,OAAuB,EACvB,KAAmB;IAEnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,KAAK,CAAC,IAAI;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/hash.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Password hashing utilities for @veloxts/auth
+ * @module auth/hash
+ */
+import type { HashConfig } from './types.js';
+/**
+ * Password hasher with configurable algorithms
+ *
+ * Supports bcrypt and argon2 algorithms. Falls back to scrypt-based
+ * implementation when native modules are not available.
+ *
+ * @example
+ * ```typescript
+ * const hasher = new PasswordHasher({ algorithm: 'bcrypt', bcryptRounds: 12 });
+ *
+ * // Hash a password
+ * const hash = await hasher.hash('mypassword123');
+ *
+ * // Verify a password
+ * const isValid = await hasher.verify('mypassword123', hash);
+ * ```
+ */
+export declare class PasswordHasher {
+    private readonly config;
+    private bcrypt;
+    private argon2;
+    constructor(config?: HashConfig);
+    /**
+     * Lazily load bcrypt module
+     */
+    private loadBcrypt;
+    /**
+     * Lazily load argon2 module
+     */
+    private loadArgon2;
+    /**
+     * Hash a password using the configured algorithm
+     */
+    hash(password: string): Promise<string>;
+    /**
+     * Verify a password against a hash
+     */
+    verify(password: string, hash: string): Promise<boolean>;
+    /**
+     * Hash using bcrypt
+     */
+    private hashWithBcrypt;
+    /**
+     * Verify using bcrypt
+     */
+    private verifyWithBcrypt;
+    /**
+     * Hash using argon2
+     */
+    private hashWithArgon2;
+    /**
+     * Verify using argon2
+     */
+    private verifyWithArgon2;
+    /**
+     * Hash using Node.js built-in scrypt (fallback)
+     */
+    private hashWithScrypt;
+    /**
+     * Verify using scrypt
+     */
+    private verifyWithScrypt;
+    /**
+     * Check if a hash needs rehashing (algorithm or cost changed)
+     */
+    needsRehash(hash: string): boolean;
+}
+/**
+ * Creates a new password hasher instance (succinct API)
+ */
+export declare function passwordHasher(config?: HashConfig): PasswordHasher;
+/**
+ * Creates a new password hasher instance
+ *
+ * @deprecated Use `passwordHasher()` instead. Will be removed in v0.9.
+ */
+export declare const createPasswordHasher: typeof passwordHasher;
+/**
+ * Hash a password using the default hasher
+ */
+export declare function hashPassword(password: string): Promise<string>;
+/**
+ * Verify a password using the default hasher
+ */
+export declare function verifyPassword(password: string, hash: string): Promise<boolean>;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAiB7C;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,MAAM,CAAwC;IACtD,OAAO,CAAC,MAAM,CAAwC;gBAE1C,MAAM,GAAE,UAAe;IAUnC;;OAEG;YACW,UAAU;IAaxB;;OAEG;YACW,UAAU;IAWxB;;OAEG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAO7C;;OAEG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAe9D;;OAEG;YACW,cAAc;IAc5B;;OAEG;YACW,gBAAgB;IAK9B;;OAEG;YACW,cAAc;IAmB5B;;OAEG;YACW,gBAAgB;IAK9B;;OAEG;YACW,cAAc;IAM5B;;OAEG;YACW,gBAAgB;IAa9B;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CA0BnC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,cAAc,CAElE;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,uBAAiB,CAAC;AAOnD;;GAEG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAKpE;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKrF"}