@venturekit/auth 0.0.0-dev.20260307234057 → 0.0.0-dev.20260310105525

package/README.md

@@ -0,0 +1,81 @@
+# @venturekit/auth
+
+> **Warning:** This package is in active development and not production-ready. APIs may change without notice.
+
+Authentication and authorization for [VentureKit](https://venturekit.dev) — Cognito integration, RBAC, scope checking, and JWT utilities.
+
+## Installation
+
+```bash
+npm install @venturekit/auth@dev
+```
+
+## Overview
+
+`@venturekit/auth` provides:
+
+- **Cognito configuration** — `createCognitoConfig()`, `buildUserPoolConfig()`
+- **Role-based access control** — define roles, check scopes, validate permissions
+- **Scope utilities** — `hasScope()`, `hasAnyScope()`, `hasAllScopes()`, `getScopesForRoles()`
+- **Session/JWT utilities** — `decodeToken()`, `extractUserFromToken()`, `isTokenExpired()`
+
+## Roles
+
+Define roles that map to OAuth scopes:
+
+```typescript
+import type { RolesConfig } from '@venturekit/auth';
+
+const roles: RolesConfig = {
+  roles: [
+    { name: 'viewer', description: 'Read only', scopes: ['users.read'] },
+    { name: 'member', description: 'Standard user', scopes: ['users.read', 'users.write'] },
+    { name: 'admin', description: 'Full access', scopes: ['users.read', 'users.write', 'admin.users'], isSystem: true },
+  ],
+  defaultRole: 'viewer',
+  superAdminRole: 'admin',
+};
+```
+
+## Scope Checking
+
+```typescript
+import { hasScope, hasAnyScope, hasAllScopes, getScopesForRoles } from '@venturekit/auth';
+
+const allScopes = getScopesForRoles(['member'], rolesConfig);
+// → ['users.read', 'users.write']
+
+hasScope(['member'], 'users.write', rolesConfig);    // true
+hasAnyScope(['viewer'], ['users.write'], rolesConfig); // false
+hasAllScopes(['admin'], ['users.read', 'admin.users'], rolesConfig); // true
+```
+
+## JWT Utilities
+
+```typescript
+import { decodeToken, extractUserFromToken, isTokenExpired, getTokenExpiry } from '@venturekit/auth';
+
+const claims = decodeToken(jwt);          // Decode WITHOUT verification
+const user = extractUserFromToken(jwt);   // Extract user from ID token
+const expired = isTokenExpired(jwt);      // Check exp claim
+const expiry = getTokenExpiry(jwt);       // Get expiry as Date
+```
+
+> **Security:** `decodeToken` does NOT verify the JWT signature. Signature verification should be handled by API Gateway's Cognito Authorizer.
+
+## Cognito Configuration
+
+```typescript
+import { createCognitoConfig, buildUserPoolConfig } from '@venturekit/auth';
+
+const cognitoConfig = createCognitoConfig(securityConfig);
+const userPoolConfig = buildUserPoolConfig(cognitoConfig);
+```
+
+## API Reference
+
+See the [API reference](https://venturekit.dev/api-reference/auth) for full documentation.
+
+## License
+
+Apache-2.0 — see [LICENSE](../../LICENSE) for details.

package/dist/cognito/config.d.ts

@@ -1,7 +1,7 @@
 /**
  * Cognito Configuration
  */
-import type { CognitoConfig, PasswordPolicy, MfaConfig, TokenConfig } from '../types';
+import type { CognitoConfig, PasswordPolicy, MfaConfig, TokenConfig } from '../types/index.js';
 /**
  * Default password policy
  */

package/dist/cognito/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/cognito/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEtF;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAOrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAGhC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAIlC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAapC,CAAC;AAEF;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG;IAC/B,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC/B,GACA,aAAa,CAuBf"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/cognito/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE/F;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAOrC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAGhC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAIlC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAapC,CAAC;AAEF;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG;IAC/B,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC/B,GACA,aAAa,CAuBf"}

package/dist/cognito/index.d.ts

@@ -3,7 +3,7 @@
  *
  * Creates and configures AWS Cognito User Pool for VentureKit.
  */
-export { createCognitoConfig, DEFAULT_COGNITO_CONFIG } from './config';
-export { buildUserPoolConfig } from './user-pool';
-export type { UserPoolOutputs, UserPoolInfraConfig } from './user-pool';
+export { createCognitoConfig, DEFAULT_COGNITO_CONFIG } from './config.js';
+export { buildUserPoolConfig } from './user-pool.js';
+export type { UserPoolOutputs, UserPoolInfraConfig } from './user-pool.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cognito/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cognito/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cognito/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/cognito/index.js

@@ -3,6 +3,6 @@
  *
  * Creates and configures AWS Cognito User Pool for VentureKit.
  */
-export { createCognitoConfig, DEFAULT_COGNITO_CONFIG } from './config';
-export { buildUserPoolConfig } from './user-pool';
+export { createCognitoConfig, DEFAULT_COGNITO_CONFIG } from './config.js';
+export { buildUserPoolConfig } from './user-pool.js';
 //# sourceMappingURL=index.js.map

package/dist/cognito/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cognito/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cognito/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/cognito/user-pool.d.ts

@@ -13,7 +13,7 @@
  * This file is kept for backward compatibility.
  * New projects should use the intent-based API in @venturekit/infra.
  */
-import type { CognitoConfig } from '../types';
+import type { CognitoConfig } from '../types/index.js';
 /**
  * User Pool outputs
  */

package/dist/cognito/user-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user-pool.d.ts","sourceRoot":"","sources":["../../src/cognito/user-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE;QACb,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;QACf,iBAAiB,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE;QACV,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,cAAc,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,gBAAgB,EAAE,OAAO,CAAC;QAC1B,aAAa,EAAE,OAAO,CAAC;QACvB,cAAc,EAAE,OAAO,CAAC;QACxB,oBAAoB,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KACxC,CAAC;IACF,GAAG,EAAE,IAAI,GAAG,UAAU,GAAG,KAAK,CAAC;IAC/B,eAAe,EAAE;QACf,GAAG,EAAE,OAAO,CAAC;QACb,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;IACF,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1E,MAAM,EAAE;QACN,0BAA0B,EAAE,MAAM,CAAC;QACnC,sBAAsB,EAAE,MAAM,CAAC;QAC/B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC9D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,GAC3D,mBAAmB,CA+CrB"}
+{"version":3,"file":"user-pool.d.ts","sourceRoot":"","sources":["../../src/cognito/user-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE;QACb,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;QACf,iBAAiB,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE;QACV,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,cAAc,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,gBAAgB,EAAE,OAAO,CAAC;QAC1B,aAAa,EAAE,OAAO,CAAC;QACvB,cAAc,EAAE,OAAO,CAAC;QACxB,oBAAoB,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KACxC,CAAC;IACF,GAAG,EAAE,IAAI,GAAG,UAAU,GAAG,KAAK,CAAC;IAC/B,eAAe,EAAE;QACf,GAAG,EAAE,OAAO,CAAC;QACb,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;IACF,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1E,MAAM,EAAE;QACN,0BAA0B,EAAE,MAAM,CAAC;QACnC,sBAAsB,EAAE,MAAM,CAAC;QAC/B,wBAAwB,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC9D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,GAC3D,mBAAmB,CA+CrB"}

package/dist/index.d.ts

@@ -3,9 +3,9 @@
  *
  * Authentication and authorization for VentureKit.
  */
-export * from './types';
-export { createCognitoConfig, DEFAULT_COGNITO_CONFIG, buildUserPoolConfig, } from './cognito';
-export type { UserPoolOutputs, UserPoolInfraConfig } from './cognito/user-pool';
-export { hasScope, hasAnyScope, hasAllScopes, getScopesForRoles, validateRolesConfig, } from './roles';
-export { decodeToken, extractUserFromToken, isTokenExpired, getTokenExpiry, } from './session';
+export * from './types/index.js';
+export { createCognitoConfig, DEFAULT_COGNITO_CONFIG, buildUserPoolConfig, } from './cognito/index.js';
+export type { UserPoolOutputs, UserPoolInfraConfig } from './cognito/user-pool.js';
+export { hasScope, hasAnyScope, hasAllScopes, getScopesForRoles, validateRolesConfig, } from './roles/index.js';
+export { decodeToken, extractUserFromToken, isTokenExpired, getTokenExpiry, } from './session/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,SAAS,CAAC;AAGxB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGnF,OAAO,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -4,11 +4,11 @@
  * Authentication and authorization for VentureKit.
  */
 // Types
-export * from './types';
+export * from './types/index.js';
 // Cognito
-export { createCognitoConfig, DEFAULT_COGNITO_CONFIG, buildUserPoolConfig, } from './cognito';
+export { createCognitoConfig, DEFAULT_COGNITO_CONFIG, buildUserPoolConfig, } from './cognito/index.js';
 // Roles
-export { hasScope, hasAnyScope, hasAllScopes, getScopesForRoles, validateRolesConfig, } from './roles';
+export { hasScope, hasAnyScope, hasAllScopes, getScopesForRoles, validateRolesConfig, } from './roles/index.js';
 // Session
-export { decodeToken, extractUserFromToken, isTokenExpired, getTokenExpiry, } from './session';
+export { decodeToken, extractUserFromToken, isTokenExpired, getTokenExpiry, } from './session/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,QAAQ;AACR,cAAc,SAAS,CAAC;AAExB,UAAU;AACV,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAGnB,QAAQ;AACR,OAAO,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AAEjB,UAAU;AACV,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,QAAQ;AACR,cAAc,kBAAkB,CAAC;AAEjC,UAAU;AACV,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAG5B,QAAQ;AACR,OAAO,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,UAAU;AACV,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,cAAc,EACd,cAAc,GACf,MAAM,oBAAoB,CAAC"}

package/dist/roles/index.d.ts

@@ -3,7 +3,7 @@
  *
  * Utilities for managing roles and scopes.
  */
-import type { RolesConfig } from '../types';
+import type { RolesConfig } from '../types/index.js';
 /**
  * Check if user roles grant a specific scope
  */

package/dist/roles/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/roles/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAQ,WAAW,EAAE,MAAM,UAAU,CAAC;AAElD;;GAEG;AACH,wBAAgB,QAAQ,CACtB,SAAS,EAAE,MAAM,EAAE,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,WAAW,GAClB,OAAO,CAQT;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,MAAM,EAAE,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,MAAM,EAAE,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,WAAW,GAClB,MAAM,EAAE,CAWV;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAejE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/roles/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAQ,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;GAEG;AACH,wBAAgB,QAAQ,CACtB,SAAS,EAAE,MAAM,EAAE,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,WAAW,GAClB,OAAO,CAQT;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,MAAM,EAAE,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,MAAM,EAAE,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EAAE,EACnB,MAAM,EAAE,WAAW,GAClB,MAAM,EAAE,CAWV;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAejE"}

package/dist/session/index.d.ts

@@ -3,7 +3,7 @@
  *
  * Utilities for managing user sessions and tokens.
  */
-import type { User } from '../types';
+import type { User } from '../types/index.js';
 /**
  * Decode JWT token payload (without verification)
  *

package/dist/session/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAkB,MAAM,UAAU,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAWzE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAwBjE;AAuDD;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMrD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAKzD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAkB,MAAM,mBAAmB,CAAC;AAE9D;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAWzE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAwBjE;AAuDD;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMrD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAKzD"}

package/dist/types/config.d.ts

@@ -91,5 +91,5 @@ export interface AuthEnvConfigInput {
     };
     roles?: Partial<RolesConfig>;
 }
-import type { RolesConfig } from './role';
+import type { RolesConfig } from './role.js';
 //# sourceMappingURL=config.d.ts.map

package/dist/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAElB,gCAAgC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAE1B,gCAAgC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAE1B,sBAAsB;IACtB,cAAc,EAAE,OAAO,CAAC;IAExB,iCAAiC;IACjC,cAAc,EAAE,OAAO,CAAC;IAExB,0CAA0C;IAC1C,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,eAAe;IACf,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,CAAC;IAEtC,0BAA0B;IAC1B,OAAO,EAAE,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,0BAA0B,EAAE,MAAM,CAAC;IAEnC,mCAAmC;IACnC,sBAAsB,EAAE,MAAM,CAAC;IAE/B,qCAAqC;IACrC,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,sBAAsB;IACtB,aAAa,EAAE;QACb,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,2BAA2B;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAE3B,wBAAwB;IACxB,eAAe,EAAE,OAAO,CAAC;IAEzB,wBAAwB;IACxB,eAAe,EAAE,OAAO,CAAC;IAEzB,sBAAsB;IACtB,cAAc,EAAE,cAAc,CAAC;IAE/B,wBAAwB;IACxB,GAAG,EAAE,SAAS,CAAC;IAEf,0BAA0B;IAC1B,MAAM,EAAE,WAAW,CAAC;IAEpB,+BAA+B;IAC/B,eAAe,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IAE5C,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,KAAK,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4BAA4B;IAC5B,OAAO,EAAE,aAAa,CAAC;IAEvB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG;QACjC,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,GAAG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;KAC/B,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC9B;AAGD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAElB,gCAAgC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAE1B,gCAAgC;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAE1B,sBAAsB;IACtB,cAAc,EAAE,OAAO,CAAC;IAExB,iCAAiC;IACjC,cAAc,EAAE,OAAO,CAAC;IAExB,0CAA0C;IAC1C,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,eAAe;IACf,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,CAAC;IAEtC,0BAA0B;IAC1B,OAAO,EAAE,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,0BAA0B,EAAE,MAAM,CAAC;IAEnC,mCAAmC;IACnC,sBAAsB,EAAE,MAAM,CAAC;IAE/B,qCAAqC;IACrC,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,sBAAsB;IACtB,aAAa,EAAE;QACb,KAAK,EAAE,OAAO,CAAC;QACf,KAAK,EAAE,OAAO,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,2BAA2B;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAE3B,wBAAwB;IACxB,eAAe,EAAE,OAAO,CAAC;IAEzB,wBAAwB;IACxB,eAAe,EAAE,OAAO,CAAC;IAEzB,sBAAsB;IACtB,cAAc,EAAE,cAAc,CAAC;IAE/B,wBAAwB;IACxB,GAAG,EAAE,SAAS,CAAC;IAEf,0BAA0B;IAC1B,MAAM,EAAE,WAAW,CAAC;IAEpB,+BAA+B;IAC/B,eAAe,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IAE5C,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,KAAK,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4BAA4B;IAC5B,OAAO,EAAE,aAAa,CAAC;IAEvB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG;QACjC,cAAc,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,GAAG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;KAC/B,CAAC;IACF,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC9B;AAGD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/types/index.d.ts

@@ -3,8 +3,8 @@
  *
  * Core authentication and authorization types for VentureKit.
  */
-export * from './user';
-export * from './session';
-export * from './role';
-export * from './config';
+export * from './user.js';
+export * from './session.js';
+export * from './role.js';
+export * from './config.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/types/index.js

@@ -3,8 +3,8 @@
  *
  * Core authentication and authorization types for VentureKit.
  */
-export * from './user';
-export * from './session';
-export * from './role';
-export * from './config';
+export * from './user.js';
+export * from './session.js';
+export * from './role.js';
+export * from './config.js';
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,QAAQ,CAAC;AACvB,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venturekit/auth",
-  "version": "0.0.0-dev.20260307234057",
+  "version": "0.0.0-dev.20260310105525",
   "description": "Authentication and authorization for VentureKit",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,7 +25,7 @@
     }
   },
   "dependencies": {
-    "@venturekit/core": "0.0.0-dev.20260307234057"
+    "@venturekit/core": "0.0.0-dev.20260310105525"
   },
   "devDependencies": {
     "@types/node": "^20.10.0",