@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/runtime/kinds/provider.kind.js

@@ -0,0 +1,96 @@
+/**
+ * Auth Provider Kind Definition
+ *
+ * Registers the auth/provider kind for runtime authentication.
+ * Controls how the runtime authenticates to access resources:
+ * - API: Default, uses HTTP with credentials from auth config
+ * - DB: Direct database access, server-side only
+ *
+ * Consumers query the runtime directly:
+ *   const authProvider = await runtime.query('auth/provider').resolve();
+ *
+ * The runtime picks the appropriate provider based on current scope.
+ */
+import { AuthProviderDescriptorSchema } from "../../schemas/provider.js";
+import { DefaultAuthProvider } from "./provider.default.js";
+import { getLogger } from '@vibesdotdev/logging';
+/**
+ * Resolve the auth provider based on runtime scope
+ *
+ * Resolution:
+ * 1. Filter by scope constraints (hardware, surfaces)
+ * 2. Prefer default provider
+ * 3. Sort by priority
+ *
+ * DB provider is only available server-side (cloud hardware, worker surface).
+ * API provider is the default for CLI/consumer contexts.
+ */
+async function resolveAuthProvider(candidates, scope, context) {
+    const log = getLogger('auth.provider.kind', context.runtime);
+    const typedCandidates = candidates.filter((candidate) => candidate.kind === 'auth/provider');
+    log.debug('Resolving auth/provider', {
+        candidateCount: typedCandidates.length,
+        candidateIds: typedCandidates.map((c) => `${c.id}(${c.type})`),
+        scope: { hardware: scope.hardware, surface: scope.surface }
+    });
+    // Filter to enabled providers
+    let filtered = typedCandidates.filter((c) => c.enabled !== false);
+    if (filtered.length === 0) {
+        log.warn('No enabled auth/provider candidates');
+        return undefined;
+    }
+    // Filter by scope constraints
+    // DB provider has hardware: ['cloud'] and surfaces: ['workers/worker']
+    // So it will only match in those contexts
+    filtered = filtered.filter((c) => {
+        // Check hardware constraint
+        if (c.hardware && c.hardware.length > 0) {
+            if (!c.hardware.includes(scope.hardware)) {
+                return false;
+            }
+        }
+        // Check surface constraint
+        if (c.surfaces && c.surfaces.length > 0) {
+            if (!c.surfaces.includes(scope.surface)) {
+                return false;
+            }
+        }
+        return true;
+    });
+    if (filtered.length === 0) {
+        log.warn('No auth/provider candidates after scope filter');
+        return undefined;
+    }
+    // Prefer default provider
+    const defaultProvider = filtered.find((c) => c.isDefault);
+    if (defaultProvider) {
+        log.debug('Resolved auth/provider', {
+            id: defaultProvider.id,
+            type: defaultProvider.type,
+            tokenSource: defaultProvider.api?.tokenSource,
+            selectionReason: 'isDefault'
+        });
+        return defaultProvider;
+    }
+    // Sort by priority (descending)
+    filtered.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+    const selected = filtered[0];
+    log.debug('Resolved auth/provider', {
+        id: selected.id,
+        type: selected.type,
+        tokenSource: selected.api?.tokenSource,
+        selectionReason: 'priority'
+    });
+    return selected;
+}
+/**
+ * Auth provider kind definition
+ */
+export const authProviderKind = {
+    id: 'auth/provider',
+    descriptorSchema: AuthProviderDescriptorSchema,
+    defaultImplementation: DefaultAuthProvider,
+    resolve: resolveAuthProvider,
+    contexts: []
+};
+//# sourceMappingURL=provider.kind.js.map

package/dist/runtime/kinds/provider.kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.kind.js","sourceRoot":"","sources":["../../../src/runtime/kinds/provider.kind.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACN,4BAA4B,EAE5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,KAAK,UAAU,mBAAmB,CACjC,UAA+B,EAC/B,KAAmB,EACnB,OAAoB;IAEpB,MAAM,GAAG,GAAG,SAAS,CAAC,oBAAoB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,eAAe,GAAG,UAAU,CAAC,MAAM,CACxC,CAAC,SAAS,EAAuC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,eAAe,CACtF,CAAC;IAEF,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE;QACpC,cAAc,EAAE,eAAe,CAAC,MAAM;QACtC,YAAY,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;QAC9D,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;KAC3D,CAAC,CAAC;IAEH,8BAA8B;IAC9B,IAAI,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAElE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,uEAAuE;IACvE,0CAA0C;IAC1C,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,4BAA4B;QAC5B,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,2BAA2B;QAC3B,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,0BAA0B;IAC1B,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,eAAe,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;YACnC,EAAE,EAAE,eAAe,CAAC,EAAE;YACtB,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,WAAW,EAAE,eAAe,CAAC,GAAG,EAAE,WAAW;YAC7C,eAAe,EAAE,WAAW;SAC5B,CAAC,CAAC;QACH,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,gCAAgC;IAChC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;QACnC,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW;QACtC,eAAe,EAAE,UAAU;KAC3B,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAIzB;IACH,EAAE,EAAE,eAAe;IACnB,gBAAgB,EAAE,4BAA4B;IAC9C,qBAAqB,EAAE,mBAAmB;IAC1C,OAAO,EAAE,mBAAmB;IAC5B,QAAQ,EAAE,EAAE;CACZ,CAAC"}

package/dist/runtime/logging/auth.logger.descriptor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Auth Logger Descriptor
+ *
+ * Provides structured logging for the auth application.
+ */
+import type { LoggerDescriptor } from '@vibesdotdev/logging';
+declare const descriptor: LoggerDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.logger.descriptor.d.ts.map

package/dist/runtime/logging/auth.logger.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.logger.descriptor.d.ts","sourceRoot":"","sources":["../../../src/runtime/logging/auth.logger.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,QAAA,MAAM,UAAU,EAAE,gBAUjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/runtime/logging/auth.logger.descriptor.js

@@ -0,0 +1,18 @@
+/**
+ * Auth Logger Descriptor
+ *
+ * Provides structured logging for the auth application.
+ */
+const descriptor = {
+    kind: 'logging/logger',
+    id: 'auth',
+    name: 'Auth Logger',
+    description: 'Structured logging for authentication and identity services',
+    namespace: 'auth',
+    runtime: 'server',
+    sinks: ['console'],
+    outputs: ['auth'],
+    level: 'info'
+};
+export default descriptor;
+//# sourceMappingURL=auth.logger.descriptor.js.map

package/dist/runtime/logging/auth.logger.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.logger.descriptor.js","sourceRoot":"","sources":["../../../src/runtime/logging/auth.logger.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAAqB;IACpC,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,6DAA6D;IAC1E,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,CAAC,SAAS,CAAC;IAClB,OAAO,EAAE,CAAC,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/runtime/logging/auth.output.descriptor.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Auth Output Descriptor
+ */
+import type { OutputDescriptor } from '@vibesdotdev/logging';
+declare const descriptor: OutputDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.output.descriptor.d.ts.map

package/dist/runtime/logging/auth.output.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.output.descriptor.d.ts","sourceRoot":"","sources":["../../../src/runtime/logging/auth.output.descriptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAM7D,QAAA,MAAM,UAAU,EAAE,gBAUjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/runtime/logging/auth.output.descriptor.js

@@ -0,0 +1,17 @@
+/**
+ * Auth Output Descriptor
+ */
+import { DEFAULT_FILE_OUTPUT_ROTATION, DEFAULT_FILE_OUTPUT_BUFFERING } from '@vibesdotdev/logging/schemas/output-defaults';
+const descriptor = {
+    kind: 'logging/output',
+    id: 'auth',
+    name: 'Auth Output',
+    description: 'Log output for auth application',
+    storage: 'file',
+    format: 'jsonl',
+    path: 'logs/auth.jsonl',
+    rotation: DEFAULT_FILE_OUTPUT_ROTATION,
+    buffering: DEFAULT_FILE_OUTPUT_BUFFERING
+};
+export default descriptor;
+//# sourceMappingURL=auth.output.descriptor.js.map

package/dist/runtime/logging/auth.output.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.output.descriptor.js","sourceRoot":"","sources":["../../../src/runtime/logging/auth.output.descriptor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACN,4BAA4B,EAC5B,6BAA6B,EAC7B,MAAM,8CAA8C,CAAC;AAEtD,MAAM,UAAU,GAAqB;IACpC,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,iCAAiC;IAC9C,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,4BAA4B;IACtC,SAAS,EAAE,6BAA6B;CACxC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/runtime/plugin/account-linking.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@vibesdotdev/kernel").RuntimePlugin;
+export default _default;
+//# sourceMappingURL=account-linking.d.ts.map

package/dist/runtime/plugin/account-linking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-linking.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugin/account-linking.ts"],"names":[],"mappings":";AAKA,wBAwBG"}

package/dist/runtime/plugin/account-linking.js

@@ -0,0 +1,30 @@
+import { CapabilityError, createRuntimePlugin, VibesRuntime } from '@vibesdotdev/kernel';
+import authAccountsStorage from "../../storage/auth-accounts.storage.descriptor.js";
+import { accountLinkingKind } from "../kinds/account-linking.kind.js";
+import accountLinkingService from "../../server/services/account-linking.service.descriptor.js";
+export default createRuntimePlugin({
+    id: 'auth-account-linking',
+    name: 'Auth Account Linking',
+    description: 'OAuth account-linking storage manifest and service descriptor.',
+    dependencies: ['storage'],
+    kinds: [accountLinkingKind],
+    descriptors: [authAccountsStorage, accountLinkingService],
+    onRegister(runtime) {
+        // The service reads and writes the `auth.accounts` manifest of the runtime
+        // that composes it, never an ambient one.
+        if (!(runtime instanceof VibesRuntime)) {
+            throw new CapabilityError('Account linking needs the runtime that composes it.', 'INTERNAL', {
+                reason: 'runtime-unavailable',
+                details: { plugin: 'auth-account-linking' }
+            });
+        }
+        runtime.registerLoader('auth/account-linking', 'auth.account-linking', async () => {
+            const [{ AccountLinkingService }, { AuthAccountsManifest }] = await Promise.all([
+                import('../../server/services/account-linking.service.js'),
+                import('../../storage/auth-accounts.storage.manifest.impl.js')
+            ]);
+            return { impl: new AccountLinkingService(runtime, new AuthAccountsManifest(authAccountsStorage.id, { runtime })) };
+        });
+    }
+});
+//# sourceMappingURL=account-linking.js.map

package/dist/runtime/plugin/account-linking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-linking.js","sourceRoot":"","sources":["../../../src/runtime/plugin/account-linking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,mBAAmB,MAAM,mDAAmD,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,qBAAqB,MAAM,6DAA6D,CAAC;AAEhG,eAAe,mBAAmB,CAAC;IAClC,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,gEAAgE;IAC7E,YAAY,EAAE,CAAC,SAAS,CAAC;IACzB,KAAK,EAAE,CAAC,kBAAkB,CAAC;IAC3B,WAAW,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IACzD,UAAU,CAAC,OAAO;QACjB,2EAA2E;QAC3E,0CAA0C;QAC1C,IAAI,CAAC,CAAC,OAAO,YAAY,YAAY,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,UAAU,EAAE;gBAC5F,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE;aAC3C,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,cAAc,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,KAAK,IAAI,EAAE;YACjF,MAAM,CAAC,EAAE,qBAAqB,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC/E,MAAM,CAAC,kDAAkD,CAAC;gBAC1D,MAAM,CAAC,sDAAsD,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,IAAI,qBAAqB,CAAC,OAAO,EAAE,IAAI,oBAAoB,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;QACpH,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAC,CAAC"}

package/dist/runtime/plugin/api-client.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Auth runtime/client plugin slice.
+ *
+ * Registers the canonical `runtime/client` descriptor + scope-gated loader
+ * for `id: 'auth'` per docs/architecture/FEATURE-API-CLIENT-RUNTIME-KIND.md.
+ * Consumers resolve via `getVibesClient<AuthApiClient>('auth', runtime)`.
+ *
+ * No cloud impl is registered: the better-auth instance lives exclusively in
+ * `apps/auth-web` behind `/api/auth/*`. Even workerd-co-located callers reach
+ * that origin over HTTP via the consumer variant.
+ */
+import { type RuntimePlugin } from '@vibesdotdev/kernel';
+/** A host may pin this client to its observed Auth endpoint. */
+export declare function createAuthApiClientPlugin(options?: {
+    baseUrl?: string;
+}): RuntimePlugin;
+declare const defaultExport: RuntimePlugin;
+export default defaultExport;
+//# sourceMappingURL=api-client.d.ts.map

package/dist/runtime/plugin/api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugin/api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAWtF,gEAAgE;AAChE,wBAAgB,yBAAyB,CAAC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,aAAa,CAmC3F;AAGD,QAAA,MAAM,aAAa,eAA8B,CAAC;AAElD,eAAe,aAAa,CAAC"}

package/dist/runtime/plugin/api-client.js

@@ -0,0 +1,59 @@
+/**
+ * Auth runtime/client plugin slice.
+ *
+ * Registers the canonical `runtime/client` descriptor + scope-gated loader
+ * for `id: 'auth'` per docs/architecture/FEATURE-API-CLIENT-RUNTIME-KIND.md.
+ * Consumers resolve via `getVibesClient<AuthApiClient>('auth', runtime)`.
+ *
+ * No cloud impl is registered: the better-auth instance lives exclusively in
+ * `apps/auth-web` behind `/api/auth/*`. Even workerd-co-located callers reach
+ * that origin over HTTP via the consumer variant.
+ */
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import clientApiPlugin from '@vibesdotdev/client/api-client-plugin';
+import requestSessionStore from "../../bearer/request-session.store.descriptor.js";
+import oauthAccountStore from "../../bearer/oauth-account.store.descriptor.js";
+import mobileAuthConfig from "../../schemas/mobile.config.descriptor.js";
+import authApiClientDescriptor from "../../api/auth.api-client.descriptor.js";
+import usersAugmentDescriptor from "../../augmentations/users.descriptor.js";
+import { sessionVerifierKind } from "../../server/session-verifier.js";
+import boundSessionVerifier from "../../server/bound-session-verifier.descriptor.js";
+import appCredentialsConfig from "../../config/auth.app-credentials.config.descriptor.js";
+/** A host may pin this client to its observed Auth endpoint. */
+export function createAuthApiClientPlugin(options = {}) {
+    const clientDescriptor = { ...authApiClientDescriptor, baseUrl: options.baseUrl };
+    return createRuntimePlugin({
+        id: 'auth-api-client',
+        name: 'Auth API Client',
+        description: "Canonical runtime/client for cross-origin auth data access. Svelte components, CLI commands, browser stores all resolve via getVibesClient<AuthApiClient>('auth', runtime).",
+        dependencies: ['runtime-client'],
+        kinds: [sessionVerifierKind],
+        descriptors: [
+            requestSessionStore,
+            oauthAccountStore,
+            clientDescriptor,
+            usersAugmentDescriptor,
+            mobileAuthConfig,
+            appCredentialsConfig,
+            boundSessionVerifier
+        ],
+        async onRegister(runtime) {
+            await runtime.registerPlugin(clientApiPlugin);
+        },
+        async onDispose(runtime) {
+            // Finalization runs after lifecycle abort, so inspect the selected cached
+            // owner directly rather than constructing a new client during shutdown.
+            await runtime.query('runtime/client').withId('auth').peek?.()?.dispose();
+        },
+        loaders: [
+            loader(requestSessionStore.id, { kind: requestSessionStore.kind }, () => import("../../bearer/request-session.store.js")),
+            loader(oauthAccountStore.id, { kind: oauthAccountStore.kind }, () => import("../../bearer/oauth-account.store.js")),
+            loader(boundSessionVerifier.id, { kind: boundSessionVerifier.kind }, () => import("../../server/bound-session-verifier.impl.js")),
+            loader('auth', { kind: 'runtime/client' }, () => import("../../api/auth.api-client.impl.js"))
+        ]
+    });
+}
+// Hoisted const: tsc rewriteRelativeImportExtensions does not rewrite `.ts` specifiers inside `export default <expr>` (TS 6.0.3).
+const defaultExport = createAuthApiClientPlugin();
+export default defaultExport;
+//# sourceMappingURL=api-client.js.map

package/dist/runtime/plugin/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../../src/runtime/plugin/api-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAsB,MAAM,qBAAqB,CAAC;AACtF,OAAO,eAAe,MAAM,uCAAuC,CAAC;AACpE,OAAO,mBAAmB,MAAM,kDAAkD,CAAC;AACnF,OAAO,iBAAiB,MAAM,gDAAgD,CAAC;AAC/E,OAAO,gBAAgB,MAAM,2CAA2C,CAAC;AACzE,OAAO,uBAAuB,MAAM,yCAAyC,CAAC;AAC9E,OAAO,sBAAsB,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,oBAAoB,MAAM,mDAAmD,CAAC;AACrF,OAAO,oBAAoB,MAAM,wDAAwD,CAAC;AAE1F,gEAAgE;AAChE,MAAM,UAAU,yBAAyB,CAAC,UAAgC,EAAE;IAC3E,MAAM,gBAAgB,GAAG,EAAE,GAAG,uBAAuB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAClF,OAAO,mBAAmB,CAAC;QAC1B,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACV,6KAA6K;QAC9K,YAAY,EAAE,CAAC,gBAAgB,CAAC;QAChC,KAAK,EAAE,CAAC,mBAAmB,CAAC;QAC5B,WAAW,EAAE;YACZ,mBAAmB;YAClB,iBAAiB;YAClB,gBAAgB;YAChB,sBAAsB;YACtB,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;SACpB;QACD,KAAK,CAAC,UAAU,CAAC,OAAO;YACvB,MAAM,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAO;YACtB,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,OAAO,CAAC,KAAK,CAA+C,gBAAgB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;QACxH,CAAC;QACD,OAAO,EAAE;YACR,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;YACxH,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;YACpH,MAAM,CAAC,oBAAoB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;YACjI,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAC/C,MAAM,CAAC,mCAAmC,CAAC,CAC3C;SACD;KACD,CAAC,CAAC;AACJ,CAAC;AAED,kIAAkI;AAClI,MAAM,aAAa,GAAG,yBAAyB,EAAE,CAAC;AAElD,eAAe,aAAa,CAAC"}

package/dist/runtime/plugin/core.provider.d.ts

@@ -0,0 +1,3 @@
+declare const defaultExport: import("@vibesdotdev/kernel").RuntimePlugin;
+export default defaultExport;
+//# sourceMappingURL=core.provider.d.ts.map

package/dist/runtime/plugin/core.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.provider.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugin/core.provider.ts"],"names":[],"mappings":"AAcA,QAAA,MAAM,aAAa,6CAyBjB,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/runtime/plugin/core.provider.js

@@ -0,0 +1,38 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import authContext from "../auth.context.descriptor.js";
+import authIdentityPlugin from "./identity.js";
+import callerBearerContext from "../../bearer/caller-bearer.context.descriptor.js";
+import autoVerifyConfig from "../auto-verify.config.descriptor.js";
+import authApiClient from "../../client/auth.legacy-api-client.descriptor.js";
+import authProviderApi from "../providers/auth-provider.api.descriptor.js";
+import authProviderDb from "../providers/db.descriptor.js";
+import authProvidersConfig from "../../config/auth.providers.config.descriptor.js";
+import authCustomProvidersStorage from "../../config/auth.providers.storage.descriptor.js";
+import authProviderResolver from "../../resolvers/auth-provider.resolver.descriptor.js";
+// Hoisted const: tsc rewriteRelativeImportExtensions does not rewrite `.ts` specifiers inside `export default <expr>` (TS 6.0.3).
+const defaultExport = createRuntimePlugin({
+    id: 'auth-core-provider',
+    name: 'Auth Core and Providers',
+    description: 'Authentication context, config, API client, and provider descriptors',
+    descriptors: [
+        authContext,
+        callerBearerContext,
+        autoVerifyConfig,
+        authApiClient,
+        authProviderApi,
+        authProviderDb,
+        authProvidersConfig,
+        authCustomProvidersStorage,
+        authProviderResolver
+    ],
+    async onRegister(runtime) {
+        await runtime.registerPlugin(authIdentityPlugin);
+    },
+    loaders: [
+        loader('auth/context', { kind: 'context' }, () => import("../auth.context.impl.js")),
+        loader('auth', { kind: 'api/client' }, () => import("../../client/auth.api-client.impl.js")),
+        loader('auth/caller-bearer', { kind: 'context' }, () => import("../../bearer/caller-bearer.context.impl.js"))
+    ]
+});
+export default defaultExport;
+//# sourceMappingURL=core.provider.js.map

package/dist/runtime/plugin/core.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.provider.js","sourceRoot":"","sources":["../../../src/runtime/plugin/core.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,WAAW,MAAM,+BAA+B,CAAC;AACxD,OAAO,kBAAkB,MAAM,eAAe,CAAC;AAC/C,OAAO,mBAAmB,MAAM,kDAAkD,CAAC;AACnF,OAAO,gBAAgB,MAAM,qCAAqC,CAAC;AACnE,OAAO,aAAa,MAAM,mDAAmD,CAAC;AAC9E,OAAO,eAAe,MAAM,8CAA8C,CAAC;AAC3E,OAAO,cAAc,MAAM,+BAA+B,CAAC;AAC3D,OAAO,mBAAmB,MAAM,kDAAkD,CAAC;AACnF,OAAO,0BAA0B,MAAM,mDAAmD,CAAC;AAC3F,OAAO,oBAAoB,MAAM,sDAAsD,CAAC;AAExF,kIAAkI;AAClI,MAAM,aAAa,GAAG,mBAAmB,CAAC;IACzC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,sEAAsE;IACnF,WAAW,EAAE;QACZ,WAAW;QACX,mBAAmB;QACnB,gBAAgB;QAChB,aAAa;QACb,eAAe;QACf,cAAc;QACd,mBAAmB;QACnB,0BAA0B;QAC1B,oBAAoB;KACpB;IACD,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,MAAM,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE;QACR,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACpF,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;QAC5F,MAAM,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CACtD,MAAM,CAAC,4CAA4C,CAAC,CACpD;KACD;CACD,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/runtime/plugin/identity.d.ts

@@ -0,0 +1,3 @@
+declare const authIdentityPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default authIdentityPlugin;
+//# sourceMappingURL=identity.d.ts.map

package/dist/runtime/plugin/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugin/identity.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,kBAAkB,6CAQtB,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/runtime/plugin/identity.js

@@ -0,0 +1,14 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import authConfig from "../auth.config.descriptor.js";
+import authIdentity from "../auth.identity.descriptor.js";
+const authIdentityPlugin = createRuntimePlugin({
+    id: 'auth-identity',
+    name: 'Auth Identity',
+    description: 'Stored credential configuration and runtime identity context',
+    descriptors: [authConfig, authIdentity],
+    loaders: [
+        loader('auth/identity', { kind: 'context' }, () => import("../auth.identity.impl.js"))
+    ]
+});
+export default authIdentityPlugin;
+//# sourceMappingURL=identity.js.map

package/dist/runtime/plugin/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/runtime/plugin/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElE,OAAO,UAAU,MAAM,8BAA8B,CAAC;AACtD,OAAO,YAAY,MAAM,gCAAgC,CAAC;AAE1D,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;IAC9C,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,8DAA8D;IAC3E,WAAW,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;IACvC,OAAO,EAAE;QACR,MAAM,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;KACtF;CACD,CAAC,CAAC;AAEH,eAAe,kBAAkB,CAAC"}

package/dist/runtime/plugin/index.d.ts

@@ -0,0 +1,5 @@
+import authCoreProviderPlugin from './core.provider.ts';
+import authSupportPlugin from './support.ts';
+export { authCoreProviderPlugin, authSupportPlugin };
+export declare const authPlugins: readonly [import("@vibesdotdev/kernel").RuntimePlugin, import("@vibesdotdev/kernel").RuntimePlugin];
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/plugin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugin/index.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,MAAM,oBAAoB,CAAC;AACxD,OAAO,iBAAiB,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,CAAC;AAErD,eAAO,MAAM,WAAW,qGAAuD,CAAC"}

package/dist/runtime/plugin/index.js

@@ -0,0 +1,5 @@
+import authCoreProviderPlugin from "./core.provider.js";
+import authSupportPlugin from "./support.js";
+export { authCoreProviderPlugin, authSupportPlugin };
+export const authPlugins = [authCoreProviderPlugin, authSupportPlugin];
+//# sourceMappingURL=index.js.map

package/dist/runtime/plugin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/plugin/index.ts"],"names":[],"mappings":"AAAA,OAAO,sBAAsB,MAAM,oBAAoB,CAAC;AACxD,OAAO,iBAAiB,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,CAAC;AAErD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,sBAAsB,EAAE,iBAAiB,CAAU,CAAC"}

package/dist/runtime/plugin/support.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@vibesdotdev/kernel").RuntimePlugin;
+export default _default;
+//# sourceMappingURL=support.d.ts.map

package/dist/runtime/plugin/support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.d.ts","sourceRoot":"","sources":["../../../src/runtime/plugin/support.ts"],"names":[],"mappings":";AAKA,wBAKG"}

package/dist/runtime/plugin/support.js

@@ -0,0 +1,10 @@
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import authLogger from "../logging/auth.logger.descriptor.js";
+import authOutput from "../logging/auth.output.descriptor.js";
+export default createRuntimePlugin({
+    id: 'auth-support',
+    name: 'Auth Support',
+    description: 'Authentication support descriptors',
+    descriptors: [authLogger, authOutput]
+});
+//# sourceMappingURL=support.js.map

package/dist/runtime/plugin/support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.js","sourceRoot":"","sources":["../../../src/runtime/plugin/support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,UAAU,MAAM,sCAAsC,CAAC;AAC9D,OAAO,UAAU,MAAM,sCAAsC,CAAC;AAE9D,eAAe,mBAAmB,CAAC;IAClC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,oCAAoC;IACjD,WAAW,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;CACrC,CAAC,CAAC"}

package/dist/runtime/providers/auth-provider.api.descriptor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * API Auth Provider Descriptor
+ *
+ * Default authentication provider using HTTP API with credentials from auth config.
+ * Auto-discovered by the runtime.
+ */
+import type { AuthProviderDescriptor } from '../../schemas/provider.ts';
+declare const descriptor: AuthProviderDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth-provider.api.descriptor.d.ts.map

package/dist/runtime/providers/auth-provider.api.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.api.descriptor.d.ts","sourceRoot":"","sources":["../../../src/runtime/providers/auth-provider.api.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAExE,QAAA,MAAM,UAAU,EAAE,sBAkBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/runtime/providers/auth-provider.api.descriptor.js

@@ -0,0 +1,24 @@
+/**
+ * API Auth Provider Descriptor
+ *
+ * Default authentication provider using HTTP API with credentials from auth config.
+ * Auto-discovered by the runtime.
+ */
+const descriptor = {
+    kind: 'auth/provider',
+    id: 'api',
+    name: 'API Authentication',
+    description: 'HTTP-based authentication using credentials from auth config',
+    enabled: true,
+    type: 'api',
+    isDefault: true,
+    api: {
+        tokenSource: 'config',
+        configKey: 'credentials.token',
+        headerName: 'Authorization',
+        tokenPrefix: 'Bearer'
+    },
+    priority: 0
+};
+export default descriptor;
+//# sourceMappingURL=auth-provider.api.descriptor.js.map

package/dist/runtime/providers/auth-provider.api.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.api.descriptor.js","sourceRoot":"","sources":["../../../src/runtime/providers/auth-provider.api.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,UAAU,GAA2B;IAC1C,IAAI,EAAE,eAAe;IACrB,EAAE,EAAE,KAAK;IACT,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,8DAA8D;IAC3E,OAAO,EAAE,IAAI;IAEb,IAAI,EAAE,KAAK;IACX,SAAS,EAAE,IAAI;IAEf,GAAG,EAAE;QACJ,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,mBAAmB;QAC9B,UAAU,EAAE,eAAe;QAC3B,WAAW,EAAE,QAAQ;KACrB;IAED,QAAQ,EAAE,CAAC;CACX,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/runtime/providers/db.descriptor.d.ts

@@ -0,0 +1,11 @@
+/**
+ * DB Auth Provider Descriptor
+ *
+ * Direct database authentication for server-side operations.
+ * Only available when explicitly requested and in server context.
+ * Auto-discovered by the runtime.
+ */
+import type { AuthProviderDescriptor } from '../../schemas/provider.ts';
+declare const descriptor: AuthProviderDescriptor;
+export default descriptor;
+//# sourceMappingURL=db.descriptor.d.ts.map

package/dist/runtime/providers/db.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.descriptor.d.ts","sourceRoot":"","sources":["../../../src/runtime/providers/db.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAExE,QAAA,MAAM,UAAU,EAAE,sBAoBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/runtime/providers/db.descriptor.js

@@ -0,0 +1,26 @@
+/**
+ * DB Auth Provider Descriptor
+ *
+ * Direct database authentication for server-side operations.
+ * Only available when explicitly requested and in server context.
+ * Auto-discovered by the runtime.
+ */
+const descriptor = {
+    kind: 'auth/provider',
+    id: 'db',
+    name: 'Database Authentication',
+    description: 'Direct database access for server-side operations',
+    enabled: true,
+    type: 'db',
+    isDefault: false,
+    // Scope constraint: only available on server-side surfaces
+    hardware: ['cloud'],
+    surfaces: ['workers/worker'],
+    db: {
+        useSessionContext: true,
+        bypassAuth: false
+    },
+    priority: -100 // Lower priority, only used when explicitly requested
+};
+export default descriptor;
+//# sourceMappingURL=db.descriptor.js.map

package/dist/runtime/providers/db.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.descriptor.js","sourceRoot":"","sources":["../../../src/runtime/providers/db.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,UAAU,GAA2B;IAC1C,IAAI,EAAE,eAAe;IACrB,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,mDAAmD;IAChE,OAAO,EAAE,IAAI;IAEb,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,KAAK;IAEhB,2DAA2D;IAC3D,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,QAAQ,EAAE,CAAC,gBAAgB,CAAC;IAE5B,EAAE,EAAE;QACH,iBAAiB,EAAE,IAAI;QACvB,UAAU,EAAE,KAAK;KACjB;IAED,QAAQ,EAAE,CAAC,GAAG,CAAC,sDAAsD;CACrE,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/schemas/account-linking.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Account linking schemas.
+ */
+import * as z from 'zod/v4';
+export declare const supportedProvidersSchema: z.ZodEnum<{
+    github: "github";
+    google: "google";
+    discord: "discord";
+    microsoft: "microsoft";
+    twitter: "twitter";
+}>;
+export type SupportedProvider = z.infer<typeof supportedProvidersSchema>;
+export declare const linkedProviderSchema: z.ZodObject<{
+    providerId: z.ZodString;
+    accountId: z.ZodString;
+    displayName: z.ZodString;
+    linkedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodString]>;
+    isPrimary: z.ZodBoolean;
+}, z.core.$strip>;
+export type LinkedProvider = z.infer<typeof linkedProviderSchema>;
+export declare const linkedProvidersResponseSchema: z.ZodObject<{
+    providers: z.ZodArray<z.ZodObject<{
+        providerId: z.ZodString;
+        accountId: z.ZodString;
+        displayName: z.ZodString;
+        linkedAt: z.ZodUnion<readonly [z.ZodDate, z.ZodString]>;
+        isPrimary: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type LinkedProvidersResponse = z.infer<typeof linkedProvidersResponseSchema>;
+export declare const linkProviderRequestSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        github: "github";
+        google: "google";
+        discord: "discord";
+        microsoft: "microsoft";
+        twitter: "twitter";
+    }>;
+}, z.core.$strip>;
+export type LinkProviderRequest = z.infer<typeof linkProviderRequestSchema>;
+export declare const linkProviderResponseSchema: z.ZodObject<{
+    redirectUrl: z.ZodString;
+}, z.core.$strip>;
+export type LinkProviderResponse = z.infer<typeof linkProviderResponseSchema>;
+export declare const unlinkProviderRequestSchema: z.ZodObject<{
+    providerId: z.ZodString;
+}, z.core.$strip>;
+export type UnlinkProviderRequest = z.infer<typeof unlinkProviderRequestSchema>;
+export declare const unlinkProviderResponseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+}, z.core.$strip>;
+export type UnlinkProviderResponse = z.infer<typeof unlinkProviderResponseSchema>;
+export declare const unlinkSafetyCheckResponseSchema: z.ZodObject<{
+    safe: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodString>;
+    remainingProviders: z.ZodNumber;
+}, z.core.$strip>;
+export type UnlinkSafetyCheckResponse = z.infer<typeof unlinkSafetyCheckResponseSchema>;
+export declare const providerAccountInputSchema: z.ZodObject<{
+    providerId: z.ZodEnum<{
+        github: "github";
+        google: "google";
+        discord: "discord";
+        microsoft: "microsoft";
+        twitter: "twitter";
+    }>;
+    accountId: z.ZodString;
+    accessToken: z.ZodString;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    accessTokenExpiresAt: z.ZodOptional<z.ZodDate>;
+    refreshTokenExpiresAt: z.ZodOptional<z.ZodDate>;
+    scope: z.ZodOptional<z.ZodString>;
+    idToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ProviderAccountInput = z.infer<typeof providerAccountInputSchema>;
+export declare const unlinkSafetyResultSchema: z.ZodObject<{
+    safe: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodString>;
+    remainingProviders: z.ZodNumber;
+}, z.core.$strip>;
+export type UnlinkSafetyResult = z.infer<typeof unlinkSafetyResultSchema>;
+//# sourceMappingURL=account-linking.d.ts.map

package/dist/schemas/account-linking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-linking.d.ts","sourceRoot":"","sources":["../../src/schemas/account-linking.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,wBAAwB;;;;;;EAAsB,CAAC;AAC5D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,eAAO,MAAM,oBAAoB;;;;;;iBAM/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,6BAA6B;;;;;;;;iBAExC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,eAAO,MAAM,yBAAyB;;;;;;;;iBAEpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,2BAA2B;;iBAEtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,+BAA+B;;;;iBAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAExF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;iBASrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}