@warlock.js/auth 5.30.0 → 5.32.0

package/esm/contracts/types.d.mts

@@ -1,12 +1,14 @@
 import { Auth } from "../models/auth.model.mjs";
 import { AccessToken } from "../models/access-token/access-token.model.mjs";
+import "../models/access-token/index.mjs";
 import { OneTimeToken } from "../models/one-time-token/one-time-token.model.mjs";
+import "../models/one-time-token/index.mjs";
 import { OtpConfig, PasskeysConfig, ProvidersConfig } from "./providers.mjs";
+import "../models/refresh-token/index.mjs";
 import { RefreshToken } from "../models/refresh-token/refresh-token.model.mjs";
 import { Request } from "@warlock.js/core";
 import { ChildModel } from "@warlock.js/cascade";
 import { Algorithm } from "fast-jwt";
-
 //#region ../../packages/auth/src/contracts/types.d.ts
 /**
  * Symbol to indicate no expiration for tokens
@@ -27,27 +29,27 @@ import { Algorithm } from "fast-jwt";
  * export default authConfigurations;
  * ```
  */
-declare const NO_EXPIRATION = "100y";
+export declare const NO_EXPIRATION = "100y";
 /**
  * Behavior when logout is called without a refresh token
  * - "revoke-all": Revoke all refresh tokens for the user (secure default)
  * - "error": Return an error requiring the refresh token
  */
-type LogoutWithoutTokenBehavior = "revoke-all" | "error";
+export type LogoutWithoutTokenBehavior = "revoke-all" | "error";
 /** The single request credential source an auth middleware instance accepts. */
-type TokenFrom = "header" | `cookie:${string}`;
+export type TokenFrom = "header" | `cookie:${string}`;
 /** One explicitly named credential location accepted by auth middleware. */
-interface AuthCredentialDescriptor {
+export interface AuthCredentialDescriptor {
   source: "header" | "cookie";
   key?: string;
 }
 /** Cookie credential and bounded duplicate window for automatic renewal. */
-interface AuthRefreshCredentialDescriptor extends AuthCredentialDescriptor {
+export interface AuthRefreshCredentialDescriptor extends AuthCredentialDescriptor {
   /** Milliseconds; the service clamps this to the 0–10 second range (default 5 seconds). */
   overlapMs?: number;
 }
 /** Per-route authentication behavior for the object middleware overload. */
-interface AuthMiddlewareOptions extends Partial<AuthCredentialDescriptor> {
+export interface AuthMiddlewareOptions extends Partial<AuthCredentialDescriptor> {
   optional?: boolean;
   /**
    * Accept both a header and a cookie credential (at most one of each).
@@ -65,9 +67,9 @@ interface AuthMiddlewareOptions extends Partial<AuthCredentialDescriptor> {
   };
 }
 /** Application policy that decides whether a resolved user may authenticate. */
-type CanAuthenticate = (user: Auth) => boolean | Promise<boolean>;
+export type CanAuthenticate = (user: Auth) => boolean | Promise<boolean>;
 /** Password credentials plus the application-defined identity fields. */
-type AuthCredentials = Record<string, unknown> & {
+export type AuthCredentials = Record<string, unknown> & {
   password: string;
 };
 /**
@@ -76,7 +78,7 @@ type AuthCredentials = Record<string, unknown> & {
  * `secret` may also be supplied via the deprecated `jwt.secret` (resolved by a
  * backward-compatible shim); one of the two is required at runtime.
  */
-type AccessTokenConfig = {
+export type AccessTokenConfig = {
   /**
    * Override the persisted access-token model — extend {@link AccessToken} to
    * add columns (e.g. a tenant key) or rename them, then register the subclass
@@ -106,7 +108,7 @@ type AccessTokenConfig = {
 /**
  * Refresh-token configuration.
  */
-type RefreshTokenConfig = {
+export type RefreshTokenConfig = {
   /**
    * Override the persisted refresh-token model — extend {@link RefreshToken}.
    * Defaults to the package's `RefreshToken`.
@@ -152,7 +154,7 @@ type RefreshTokenConfig = {
  *
  * @deprecated Use the top-level `accessToken` / `refreshToken` blocks.
  */
-type LegacyJwtConfig = {
+export type LegacyJwtConfig = {
   secret?: string;
   algorithm?: Algorithm;
   expiresIn?: string;
@@ -173,7 +175,7 @@ type LegacyJwtConfig = {
  * Read at runtime through `authConfig.pageAuth` (`auth.pageAuth.*`). API routes
  * always keep the JSON 401 contract regardless of this setting.
  */
-type PageAuthConfig = {
+export type PageAuthConfig = {
   /**
    * Login path a guarded page route redirects a logged-out browser to (e.g.
    * `"/login"`). Unset ⇒ page-route auth failures keep the JSON 401, so the
@@ -190,26 +192,29 @@ type PageAuthConfig = {
 /**
  * Data every email-verification / password-reset notification receives.
  */
-type OneTimeTokenNotificationData = {
-  /** The raw token — the only place it exists; only its SHA-256 hash is stored. */token: string; /** When the token stops working. */
-  expiresAt: Date; /** The link built by `auth.verification.url` / `auth.passwordReset.url`, when configured. */
+export type OneTimeTokenNotificationData = {
+  /** The raw token — the only place it exists; only its SHA-256 hash is stored. */
+  token: string;
+  /** When the token stops working. */
+  expiresAt: Date;
+  /** The link built by `auth.verification.url` / `auth.passwordReset.url`, when configured. */
   url?: string;
 };
 /**
  * Anything auth can deliver a token through — a `defineNotification(...)`
  * result satisfies it, as does any object with a compatible `send`.
  */
-type AuthNotification = {
+export type AuthNotification = {
   send: (to: Auth, data: OneTimeTokenNotificationData) => unknown;
 };
 /** Builds the link a token notification points at. */
-type OneTimeTokenUrlBuilder = (token: string, user: Auth) => string;
+export type OneTimeTokenUrlBuilder = (token: string, user: Auth) => string;
 /** Persists a new plaintext password for a user during a password reset. */
-type PasswordSetter = (user: Auth, plainPassword: string) => void | Promise<void>;
+export type PasswordSetter = (user: Auth, plainPassword: string) => void | Promise<void>;
 /**
  * Email-verification configuration (`auth.verification`).
  */
-type EmailVerificationConfig = {
+export type EmailVerificationConfig = {
   /**
    * Token lifetime — a positive `ms` duration string.
    * @default "24h"
@@ -220,14 +225,16 @@ type EmailVerificationConfig = {
    * user schema (e.g. `emailVerifiedAt: v.date().optional()`).
    * @default "emailVerifiedAt"
    */
-  field?: string; /** Replace the default verification email. */
-  notification?: AuthNotification; /** Build the verification link passed to the notification as `url`. */
+  field?: string;
+  /** Replace the default verification email. */
+  notification?: AuthNotification;
+  /** Build the verification link passed to the notification as `url`. */
   url?: OneTimeTokenUrlBuilder;
 };
 /**
  * Password-reset configuration (`auth.passwordReset`).
  */
-type PasswordResetConfig = {
+export type PasswordResetConfig = {
   /**
    * Token lifetime — a positive `ms` duration string.
    * @default "60m"
@@ -237,8 +244,10 @@ type PasswordResetConfig = {
    * User attribute `requestPasswordReset` looks the account up by.
    * @default "email"
    */
-  identifierField?: string; /** Replace the default reset email. */
-  notification?: AuthNotification; /** Build the reset link passed to the notification as `url`. */
+  identifierField?: string;
+  /** Replace the default reset email. */
+  notification?: AuthNotification;
+  /** Build the reset link passed to the notification as `url`. */
   url?: OneTimeTokenUrlBuilder;
   /**
    * Persist the new password yourself. By default auth saves a hash made by
@@ -251,17 +260,19 @@ type PasswordResetConfig = {
 /**
  * One-time token storage configuration (`auth.oneTimeToken`).
  */
-type OneTimeTokenConfig = {
-  /** Override the persisted model — extend {@link OneTimeToken}. */model?: typeof OneTimeToken;
+export type OneTimeTokenConfig = {
+  /** Override the persisted model — extend {@link OneTimeToken}. */
+  model?: typeof OneTimeToken;
 };
-type AuthConfigurations = {
+export type AuthConfigurations = {
   /**
    * Define all user types — maps a user-type slug to its `Auth` model class so
    * tokens and the middleware can resolve the right model.
    */
   userType: {
     [userType: string]: ChildModel<Auth>;
-  }; /** Default user type used by `authMiddleware()` and options-only overloads. */
+  };
+  /** Default user type used by `authMiddleware()` and options-only overloads. */
   defaultUserType?: string;
   /**
    * Decide whether a resolved user may authenticate or receive new tokens.
@@ -321,7 +332,7 @@ type AuthConfigurations = {
    */
   jwt?: LegacyJwtConfig;
 };
-type AccessTokenOutput = {
+export type AccessTokenOutput = {
   /**
    * JWT Token
    */
@@ -334,7 +345,7 @@ type AccessTokenOutput = {
 /**
  * Token pair returned after login or token refresh
  */
-type TokenPair = {
+export type TokenPair = {
   /**
    * JWT access token (short-lived)
    */
@@ -347,7 +358,7 @@ type TokenPair = {
 /**
  * Device information for session tracking
  */
-type DeviceInfo = {
+export type DeviceInfo = {
   /**
    * User agent string from request
    */
@@ -370,12 +381,12 @@ type DeviceInfo = {
    */
   payload?: Record<string, unknown>;
 };
-type LoginResult<UserType extends Auth> = {
+export type LoginResult<UserType extends Auth> = {
   user: UserType;
   tokens: TokenPair;
 };
 /** Selects a cookie Domain for one request; return `undefined` for a host-only cookie. */
-type CookieDomainResolver = (request: Request) => string | undefined;
+export type CookieDomainResolver = (request: Request) => string | undefined;
 /**
  * Configuration for the cookie an app opts into via `authService.setAuthCookie`
  * / `clearAuthCookie` and reads back with `authMiddleware([], "cookie:<name>")`.
@@ -384,7 +395,7 @@ type CookieDomainResolver = (request: Request) => string | undefined;
  * same floor every `response.cookie()` call gets, so a cookie auth session can
  * never be weakened to a laxer policy than the framework default.
  */
-type CookieAuthConfig = {
+export type CookieAuthConfig = {
   /**
    * Cookie name `setAuthCookie`/`clearAuthCookie` write and clear, and that a
    * `cookie:<name>` token source must match to read it back.
@@ -400,14 +411,15 @@ type CookieAuthConfig = {
    * Cookie `Path` attribute.
    * @default "/"
    */
-  path?: string; /** Select a request-scoped Domain; `undefined` keeps the cookie host-only. */
+  path?: string;
+  /** Select a request-scoped Domain; `undefined` keeps the cookie host-only. */
   cookieDomain?: CookieDomainResolver;
 };
 /**
  * CSRF Origin-check configuration. Read via
  * `authConfig.csrf.allowedOrigins()`.
  */
-type CsrfConfig = {
+export type CsrfConfig = {
   /**
    * Extra origins allowed on a cookie-authenticated unsafe-method request,
    * in addition to the request's own origin.
@@ -421,9 +433,12 @@ type CsrfConfig = {
  * *attribute* flags (`httpOnly`/`sameSite`/`secure`) are never settable here —
  * see {@link CookieAuthConfig}.
  */
-type SetAuthCookieOptions = {
-  /** Cookie name; defaults to `auth.cookie.name` (package default `"access_token"`). */name?: string; /** Cookie `Path`; defaults to `auth.cookie.path` (package default `"/"`). */
-  path?: string; /** Cookie `Domain` attribute. Omit for a host-only cookie. */
+export type SetAuthCookieOptions = {
+  /** Cookie name; defaults to `auth.cookie.name` (package default `"access_token"`). */
+  name?: string;
+  /** Cookie `Path`; defaults to `auth.cookie.path` (package default `"/"`). */
+  path?: string;
+  /** Cookie `Domain` attribute. Omit for a host-only cookie. */
   domain?: string;
   /**
    * `Max-Age`, in seconds. Overrides the expiry `setAuthCookie` would
@@ -434,10 +449,11 @@ type SetAuthCookieOptions = {
   maxAge?: number;
 };
 /** Per-call overrides for {@link AuthService.clearAuthCookie}. */
-type ClearAuthCookieOptions = {
-  /** Cookie name; defaults to `auth.cookie.name` (package default `"access_token"`). */name?: string; /** Cookie `Path`; defaults to `auth.cookie.path` (package default `"/"`). Must match the `Path` the cookie was set with. */
+export type ClearAuthCookieOptions = {
+  /** Cookie name; defaults to `auth.cookie.name` (package default `"access_token"`). */
+  name?: string;
+  /** Cookie `Path`; defaults to `auth.cookie.path` (package default `"/"`). Must match the `Path` the cookie was set with. */
   path?: string;
 };
 //#endregion
-export { AccessTokenConfig, AccessTokenOutput, AuthConfigurations, AuthCredentialDescriptor, AuthCredentials, AuthMiddlewareOptions, AuthNotification, AuthRefreshCredentialDescriptor, CanAuthenticate, ClearAuthCookieOptions, CookieAuthConfig, CookieDomainResolver, CsrfConfig, DeviceInfo, EmailVerificationConfig, LegacyJwtConfig, LoginResult, LogoutWithoutTokenBehavior, NO_EXPIRATION, OneTimeTokenConfig, OneTimeTokenNotificationData, OneTimeTokenUrlBuilder, PageAuthConfig, PasswordResetConfig, PasswordSetter, RefreshTokenConfig, SetAuthCookieOptions, TokenFrom, TokenPair };
 //# sourceMappingURL=types.d.mts.map

package/esm/contracts/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/contracts/types.ts"],"mappings":";;;;;;;;;;;;;;;AA4BA;;;;AAA0B;AAO1B;;;;AAAsC;AAGtC;;;;cAVa,aAAA;AAab;;;;AAEK;AAFL,KANY,0BAAA;;KAGA,SAAA;;UAGK,wBAAA;EACf,MAAA;EACA,GAAG;AAAA;;UAIY,+BAAA,SAAwC,wBAAwB;EAiBrE;EAfV,SAAS;AAAA;;UAIM,qBAAA,SAA8B,OAAA,CAAQ,wBAAA;EACrD,QAAA;EAAA;;;;;;;EAQA,OAAA,GAAU,wBAAA;EAG6B;EADvC,OAAA,GAAU,+BAAA;EACV,QAAA;IAAa,EAAA;IAAY,cAAA;EAAA;AAAA;;KAIf,eAAA,IAAmB,IAAA,EAAM,IAAA,eAAmB,OAAO;;KAGnD,eAAA,GAAkB,MAAM;EAClC,QAAQ;AAAA;;;AAAA;AASV;;;KAAY,iBAAA;EAMV;;;;;EAAA,KAAA,UAAe,WAAA;EAmBN;AAAA;AAMX;EArBE,MAAA;;;;;EAKA,SAAA,GAAY,SAAS;EA+BrB;;;;;;;AAuB+C;AASjD;EArDE,SAAA;AAAA;;;;KAMU,kBAAA;EAkDV;;;;EA7CA,KAAA,UAAe,YAAA;EAkDb;;;;EA7CF,OAAA;EA+CiD;AAYnD;;;EAtDE,MAAA;EAkEc;AAMhB;;;;;;EAhEE,SAAA;EAsEA;;AAAG;AAOL;EAxEE,QAAA;;;;;EAKA,UAAA;EAoEuB;;;AAA4B;EA/DnD,kBAAA,GAAqB,0BAA0B;AAAA;;;;;;;KASrC,eAAA;EACV,MAAA;EACA,SAAA,GAAY,SAAA;EACZ,SAAA;EACA,OAAA;IACE,MAAA;IACA,OAAA;IACA,SAAA;IACA,QAAA;IACA,UAAA;IACA,kBAAA,GAAqB,0BAA0B;EAAA;AAAA;;;;;;;;;KAYvC,cAAA;EA2DkB;AAM9B;;;;EA3DE,SAAA;EAgFc;;;;;EA1Ed,cAAc;AAAA;;;;KAMJ,4BAAA;EAoEkB,iFAlE5B,KAAA,UAwEU;EAtEV,SAAA,EAAW,IAAI;EAEf,GAAA;AAAA;AAyEF;;;;AAAA,KAlEY,gBAAA;EACV,IAAA,GAAO,EAAA,EAAI,IAAA,EAAM,IAAA,EAAM,4BAA4B;AAAA;;KAIzC,sBAAA,IAA0B,KAAA,UAAe,IAAA,EAAM,IAAI;;KAGnD,cAAA,IAAkB,IAAA,EAAM,IAAA,EAAM,aAAA,oBAAiC,OAAO;;;;KAKtE,uBAAA;EA+GC;;;;EA1GX,SAAA;EAqDA;;;;;EA/CA,KAAA,WAwDkB;EAtDlB,YAAA,GAAe,gBAAA,EA0DD;EAxDd,GAAA,GAAM,sBAAsB;AAAA;;;;KAMlB,mBAAA;EAsEV;;;;EAjEA,SAAA;EAyEgB;;;;EApEhB,eAAA,WAgFA;EA9EA,YAAA,GAAe,gBAAA,EAkFf;EAhFA,GAAA,GAAM,sBAAA;EAoFN;;;AAAqB;AAGvB;;EAhFE,WAAA,GAAc,cAAA;AAAA;AAwFL;AAMX;;AANW,KAlFC,kBAAA;EAgGsB,kEA9FhC,KAAA,UAAe,YAAY;AAAA;AAAA,KAGjB,kBAAA;EA2FK;;AAAiB;AAMlC;EA5FE,QAAA;IAAA,CACG,QAAA,WAAmB,UAAA,CAAW,IAAA;EAAA,GA+FjC;EA5FA,eAAA;EAoGA;;;;EA/FA,eAAA,GAAkB,eAAA;EAwGF;AAGlB;;EAvGE,WAAA,GAAc,iBAAA;EAuGyB;;;EAnGvC,YAAA,GAAe,kBAAA;EAqGE;;;;;EA/FjB,QAAA,GAAW,cAAA;EA+FH;;AAAS;AAInB;;EA7FE,MAAA,GAAS,gBAAA;EA6FkC;AAAO;AAUpD;EAnGE,IAAA,GAAO,UAAA;;;;EAIP,YAAA,GAAe,uBAAA;EA+Gf;;;EA3GA,aAAA,GAAgB,mBAAA;EA6GmB;AAOrC;;EAhHE,YAAA,GAAe,kBAAA;EAsHD;AAAA;AAShB;EA3HE,SAAA,GAAY,eAAA;;;;EAIZ,QAAA,GAAW,cAAA;EA6HX;;;EAzHA,GAAA,GAAM,SAAA;EAoII;;;EAhIV,GAAA,GAAM,eAAA;AAAA;AAAA,KAGI,iBAAA;;;;EAIV,KAAA;;;;EAIA,SAAS;AAAA;;;;KAMC,SAAA;;;;EAIV,WAAA,EAAa,iBAAA;;;;EAIb,YAAA,GAAe,iBAAiB;AAAA;;;;KAMtB,UAAA;;;;EAIV,SAAA;;;;EAIA,EAAA;;;;EAIA,QAAA;;;;;EAKA,QAAA;;;;EAIA,OAAA,GAAU,MAAM;AAAA;AAAA,KAGN,WAAA,kBAA6B,IAAA;EACvC,IAAA,EAAM,QAAA;EACN,MAAA,EAAQ,SAAA;AAAA;;KAIE,oBAAA,IAAwB,OAAgB,EAAP,OAAO;;;;;;;;;KAUxC,gBAAA;;;;;;EAMV,IAAA;;;;;EAKA,WAAA;;;;;EAKA,IAAA;EAEA,YAAA,GAAe,oBAAoB;AAAA;;;;;KAOzB,UAAA;;;;;;EAMV,cAAc;AAAA;;;;;;;KASJ,oBAAA;wFAEV,IAAA;EAEA,IAAA;EAEA,MAAA;;;;;;;EAOA,MAAA;AAAA;;KAIU,sBAAA;wFAEV,IAAA;EAEA,IAAI;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/contracts/types.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA4Ba;;;;;;YAOD;;YAGA;;iBAGK;EACf;EACA;;;iBAIe,wCAAwC;;EAEvD;;;iBAIe,8BAA8B,QAAQ;EACrD;;;;;;;;EAQA,UAAU;;EAEV,UAAU;EACV;IAAa;IAAY;;;;YAIf,mBAAmB,MAAM,mBAAmB;;YAG5C,kBAAkB;EAC5B;;;;;;;;YASU;;;;;;EAMV,eAAe;;;;EAIf;;;;;EAKA,YAAY;;;;;;;;;;EAUZ;;;;;YAMU;;;;;EAKV,eAAe;;;;;EAKf;;;;;EAKA;;;;;;;;EAQA;;;;;EAKA;;;;;EAKA;;;;;EAKA,qBAAqB;;;;;;;;YASX;EACV;EACA,YAAY;EACZ;EACA;IACE;IACA;IACA;IACA;IACA;IACA,qBAAqB;;;;;;;;;;;YAYb;;;;;;EAMV;;;;;;EAMA;;;;;YAMU;;EAEV;;EAEA,WAAW;;EAEX;;;;;;YAOU;EACV,OAAO,IAAI,MAAM,MAAM;;;YAIb,0BAA0B,eAAe,MAAM;;YAG/C,kBAAkB,MAAM,MAAM,iCAAiC;;;;YAK/D;;;;;EAKV;;;;;;EAMA;;EAEA,eAAe;;EAEf,MAAM;;;;;YAMI;;;;;EAKV;;;;;EAKA;;EAEA,eAAe;;EAEf,MAAM;;;;;;;EAON,cAAc;;;;;YAMJ;;EAEV,eAAe;;YAGL;;;;;EAKV;KACG,mBAAmB,WAAW;;;EAGjC;;;;;EAKA,kBAAkB;;;;EAIlB,cAAc;;;;EAId,eAAe;;;;;;EAMf,WAAW;;;;;;EAMX,SAAS;;;;EAIT,OAAO;;;;EAIP,eAAe;;;;EAIf,gBAAgB;;;;EAIhB,eAAe;;;;EAIf,YAAY;;;;EAIZ,WAAW;;;;EAIX,MAAM;;;;EAIN,MAAM;;YAGI;;;;EAIV;;;;EAIA;;;;;YAMU;;;;EAIV,aAAa;;;;EAIb,eAAe;;;;;YAML;;;;EAIV;;;;EAIA;;;;EAIA;;;;;EAKA;;;;EAIA,UAAU;;YAGA,YAAY,iBAAiB;EACvC,MAAM;EACN,QAAQ;;;YAIE,wBAAwB,SAAS;;;;;;;;;YAUjC;;;;;;EAMV;;;;;EAKA;;;;;EAKA;;EAEA,eAAe;;;;;;YAOL;;;;;;EAMV;;;;;;;;YASU;;EAEV;;EAEA;;EAEA;;;;;;;EAOA;;;YAIU;;EAEV;;EAEA"}

package/esm/errors/auth-provider-sdk-missing.error.d.mts

@@ -1,5 +1,4 @@
 import { ServerError } from "@warlock.js/core";
-
 //#region ../../packages/auth/src/errors/auth-provider-sdk-missing.error.d.ts
 /**
  * A login method needs a vendor SDK that is an optional peer of
@@ -7,11 +6,10 @@ import { ServerError } from "@warlock.js/core";
  * the `warlock add` command that installs it; the resolver failure is kept on
  * `cause`.
  */
-declare class AuthProviderSdkMissingError extends ServerError {
+export declare class AuthProviderSdkMissingError extends ServerError {
   readonly packageName: string;
   readonly feature: string;
   constructor(packageName: string, feature: string, cause?: unknown);
 }
 //#endregion
-export { AuthProviderSdkMissingError };
 //# sourceMappingURL=auth-provider-sdk-missing.error.d.mts.map

package/esm/errors/auth-provider-sdk-missing.error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-provider-sdk-missing.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/auth-provider-sdk-missing.error.ts"],"mappings":";;;;;AAQA;;;;cAAa,2BAAA,SAAoC,WAAW;EAAA,SAExC,WAAA;EAAA,SACA,OAAA;cADA,WAAA,UACA,OAAA,UAChB,KAAA;AAAA"}
+{"version":3,"file":"auth-provider-sdk-missing.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/auth-provider-sdk-missing.error.ts"],"mappings":";;;;;;;;qBAQa,oCAAoC;WAE7B;WACA;EAFlB,YACkB,qBACA,iBAChB"}

package/esm/errors/email-not-verified.error.d.mts

@@ -1,16 +1,14 @@
 import { AuthErrorCodes } from "../utils/auth-error-codes.mjs";
 import { ForbiddenError } from "@warlock.js/core";
-
 //#region ../../packages/auth/src/errors/email-not-verified.error.d.ts
 /**
  * The authenticated user has not verified their email address. Thrown by
  * `requireVerifiedEmail()`; core's error handler answers it with `403` and a
  * `payload.errorCode` of `EC007`.
  */
-declare class EmailNotVerifiedError extends ForbiddenError {
+export declare class EmailNotVerifiedError extends ForbiddenError {
   readonly code = AuthErrorCodes.EmailNotVerified;
   constructor(message?: string);
 }
 //#endregion
-export { EmailNotVerifiedError };
 //# sourceMappingURL=email-not-verified.error.d.mts.map

package/esm/errors/email-not-verified.error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"email-not-verified.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/email-not-verified.error.ts"],"mappings":";;;;;;AAQA;;;cAAa,qBAAA,SAA8B,cAAc;EAAA,SACvC,IAAA,GAAI,cAAA,CAAA,gBAAA;cAED,OAAA;AAAA"}
+{"version":3,"file":"email-not-verified.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/email-not-verified.error.ts"],"mappings":";;;;;;;;qBAQa,8BAA8B;WACzB,OAAI,eAAA;EAEpB,YAAmB"}

package/esm/errors/index.d.mts

@@ -4,4 +4,5 @@ import { InvalidOneTimeTokenError } from "./invalid-one-time-token.error.mjs";
 import { InvalidPasskeyError } from "./invalid-passkey.error.mjs";
 import { InvalidProviderCallbackError } from "./invalid-provider-callback.error.mjs";
 import { NotificationsUnavailableError } from "./notifications-unavailable.error.mjs";
-import { ProviderEmailNotVerifiedError } from "./provider-email-not-verified.error.mjs";
+import { ProviderEmailNotVerifiedError } from "./provider-email-not-verified.error.mjs";
+export { AuthProviderSdkMissingError, EmailNotVerifiedError, InvalidOneTimeTokenError, InvalidPasskeyError, InvalidProviderCallbackError, NotificationsUnavailableError, ProviderEmailNotVerifiedError };

package/esm/errors/index.mjs

@@ -6,4 +6,4 @@ import { InvalidProviderCallbackError } from "./invalid-provider-callback.error.
 import { NotificationsUnavailableError } from "./notifications-unavailable.error.mjs";
 import { ProviderEmailNotVerifiedError } from "./provider-email-not-verified.error.mjs";
 
-export {  };
+export { AuthProviderSdkMissingError, EmailNotVerifiedError, InvalidOneTimeTokenError, InvalidPasskeyError, InvalidProviderCallbackError, NotificationsUnavailableError, ProviderEmailNotVerifiedError };

package/esm/errors/invalid-one-time-token.error.d.mts

@@ -1,6 +1,5 @@
 import { AuthErrorCodes } from "../utils/auth-error-codes.mjs";
 import { BadRequestError } from "@warlock.js/core";
-
 //#region ../../packages/auth/src/errors/invalid-one-time-token.error.d.ts
 /**
  * An email-verification or password-reset token was rejected: unknown, issued
@@ -8,10 +7,9 @@ import { BadRequestError } from "@warlock.js/core";
  * concurrent consumption race). Deliberately ONE error for all of them, so a
  * caller cannot probe which case applies. Answers `400` with `EC008`.
  */
-declare class InvalidOneTimeTokenError extends BadRequestError {
+export declare class InvalidOneTimeTokenError extends BadRequestError {
   readonly code = AuthErrorCodes.InvalidOneTimeToken;
   constructor(message?: string);
 }
 //#endregion
-export { InvalidOneTimeTokenError };
 //# sourceMappingURL=invalid-one-time-token.error.d.mts.map

package/esm/errors/invalid-one-time-token.error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"invalid-one-time-token.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/invalid-one-time-token.error.ts"],"mappings":";;;;;;AASA;;;;cAAa,wBAAA,SAAiC,eAAe;EAAA,SAC3C,IAAA,GAAI,cAAA,CAAA,mBAAA;cAED,OAAA;AAAA"}
+{"version":3,"file":"invalid-one-time-token.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/invalid-one-time-token.error.ts"],"mappings":";;;;;;;;;qBASa,iCAAiC;WAC5B,OAAI,eAAA;EAEpB,YAAmB"}

package/esm/errors/invalid-passkey.error.d.mts

@@ -1,6 +1,5 @@
 import { AuthErrorCodes } from "../utils/auth-error-codes.mjs";
 import { BadRequestError } from "@warlock.js/core";
-
 //#region ../../packages/auth/src/errors/invalid-passkey.error.d.ts
 /**
  * A passkey registration or authentication was rejected — unknown, expired
@@ -8,11 +7,10 @@ import { BadRequestError } from "@warlock.js/core";
  * counter that did not advance. `reason` is for logs; the message stays
  * generic. Answers `400` with `EC011`.
  */
-declare class InvalidPasskeyError extends BadRequestError {
+export declare class InvalidPasskeyError extends BadRequestError {
   readonly reason: string;
   readonly code = AuthErrorCodes.InvalidPasskey;
   constructor(reason: string, cause?: unknown);
 }
 //#endregion
-export { InvalidPasskeyError };
 //# sourceMappingURL=invalid-passkey.error.d.mts.map

package/esm/errors/invalid-passkey.error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"invalid-passkey.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/invalid-passkey.error.ts"],"mappings":";;;;;;AASA;;;;cAAa,mBAAA,SAA4B,eAAe;EAAA,SAIpC,MAAA;EAAA,SAHF,IAAA,GAAI,cAAA,CAAA,cAAA;cAGF,MAAA,UAChB,KAAA;AAAA"}
+{"version":3,"file":"invalid-passkey.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/invalid-passkey.error.ts"],"mappings":";;;;;;;;;qBASa,4BAA4B;WAIrB;WAHF,OAAI,eAAA;EAEpB,YACkB,gBAChB"}

package/esm/errors/invalid-provider-callback.error.d.mts

@@ -1,6 +1,5 @@
 import { AuthErrorCodes } from "../utils/auth-error-codes.mjs";
 import { BadRequestError } from "@warlock.js/core";
-
 //#region ../../packages/auth/src/errors/invalid-provider-callback.error.d.ts
 /**
  * A redirect-provider callback was rejected — missing, forged or expired
@@ -8,11 +7,10 @@ import { BadRequestError } from "@warlock.js/core";
  * bad signature, issuer, audience, expiry or nonce. `reason` is for logs;
  * the response message stays generic. Answers `400` with `EC009`.
  */
-declare class InvalidProviderCallbackError extends BadRequestError {
+export declare class InvalidProviderCallbackError extends BadRequestError {
   readonly reason: string;
   readonly code = AuthErrorCodes.InvalidProviderCallback;
   constructor(reason: string, cause?: unknown);
 }
 //#endregion
-export { InvalidProviderCallbackError };
 //# sourceMappingURL=invalid-provider-callback.error.d.mts.map

package/esm/errors/invalid-provider-callback.error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"invalid-provider-callback.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/invalid-provider-callback.error.ts"],"mappings":";;;;;;AASA;;;;cAAa,4BAAA,SAAqC,eAAe;EAAA,SAI7C,MAAA;EAAA,SAHF,IAAA,GAAI,cAAA,CAAA,uBAAA;cAGF,MAAA,UAChB,KAAA;AAAA"}
+{"version":3,"file":"invalid-provider-callback.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/invalid-provider-callback.error.ts"],"mappings":";;;;;;;;;qBASa,qCAAqC;WAI9B;WAHF,OAAI,eAAA;EAEpB,YACkB,gBAChB"}

package/esm/errors/notifications-unavailable.error.d.mts

@@ -1,5 +1,4 @@
 import { ServerError } from "@warlock.js/core";
-
 //#region ../../packages/auth/src/errors/notifications-unavailable.error.d.ts
 /**
  * Email verification / password reset could not send its notification because
@@ -7,9 +6,8 @@ import { ServerError } from "@warlock.js/core";
  * any token is issued — auth never issues a token it cannot deliver, and never
  * skips the send silently. The original failure is kept on `cause`.
  */
-declare class NotificationsUnavailableError extends ServerError {
+export declare class NotificationsUnavailableError extends ServerError {
   constructor(reason: "not-installed" | "not-configured", cause?: unknown);
 }
 //#endregion
-export { NotificationsUnavailableError };
 //# sourceMappingURL=notifications-unavailable.error.d.mts.map

package/esm/errors/notifications-unavailable.error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"notifications-unavailable.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/notifications-unavailable.error.ts"],"mappings":";;;;;AAQA;;;;cAAa,6BAAA,SAAsC,WAAW;cACzC,MAAA,sCAA4C,KAAA;AAAA"}
+{"version":3,"file":"notifications-unavailable.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/notifications-unavailable.error.ts"],"mappings":";;;;;;;;qBAQa,sCAAsC;EACjD,YAAmB,4CAA4C"}

package/esm/errors/provider-email-not-verified.error.d.mts

@@ -1,16 +1,14 @@
 import { AuthErrorCodes } from "../utils/auth-error-codes.mjs";
 import { ForbiddenError } from "@warlock.js/core";
-
 //#region ../../packages/auth/src/errors/provider-email-not-verified.error.d.ts
 /**
  * The provider did not verify the email on a profile with no existing link,
  * so auth refused to link it to (or create) an account. Answers `403` with
  * `EC010`.
  */
-declare class ProviderEmailNotVerifiedError extends ForbiddenError {
+export declare class ProviderEmailNotVerifiedError extends ForbiddenError {
   readonly code = AuthErrorCodes.ProviderEmailNotVerified;
   constructor(message?: string);
 }
 //#endregion
-export { ProviderEmailNotVerifiedError };
 //# sourceMappingURL=provider-email-not-verified.error.d.mts.map

package/esm/errors/provider-email-not-verified.error.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-email-not-verified.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/provider-email-not-verified.error.ts"],"mappings":";;;;;;AAQA;;;cAAa,6BAAA,SAAsC,cAAc;EAAA,SAC/C,IAAA,GAAI,cAAA,CAAA,wBAAA;cAED,OAAA;AAAA"}
+{"version":3,"file":"provider-email-not-verified.error.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/errors/provider-email-not-verified.error.ts"],"mappings":";;;;;;;;qBAQa,sCAAsC;WACjC,OAAI,eAAA;EAEpB,YAAmB"}

package/esm/index.d.mts

@@ -9,6 +9,7 @@ import { AccessTokenConfig, AccessTokenOutput, AuthConfigurations, AuthCredentia
 import { RefreshToken, RefreshTokenIssueOptions, refreshTokenSchema } from "./models/refresh-token/refresh-token.model.mjs";
 import { Authenticable } from "./contracts/auth-contract.mjs";
 import { RequestUser } from "./contracts/request-locals.mjs";
+import "./contracts/index.mjs";
 import { AuthProviderSdkMissingError } from "./errors/auth-provider-sdk-missing.error.mjs";
 import { AuthErrorCodes } from "./utils/auth-error-codes.mjs";
 import { EmailNotVerifiedError } from "./errors/email-not-verified.error.mjs";
@@ -17,6 +18,7 @@ import { InvalidPasskeyError } from "./errors/invalid-passkey.error.mjs";
 import { InvalidProviderCallbackError } from "./errors/invalid-provider-callback.error.mjs";
 import { NotificationsUnavailableError } from "./errors/notifications-unavailable.error.mjs";
 import { ProviderEmailNotVerifiedError } from "./errors/provider-email-not-verified.error.mjs";
+import "./errors/index.mjs";
 import { AuthErrorTranslations, AuthTranslations } from "./localization/auth-translations.type.mjs";
 import { authDefaultTranslations } from "./localization/auth-default-translations.mjs";
 import { registerAuthTranslations } from "./localization/register-auth-translations.mjs";
@@ -26,14 +28,17 @@ import { LoginThrottleIdentifier, LoginThrottleOptions, loginThrottleMiddleware,
 import { tokenConsumeThrottleMiddleware, tokenIssueThrottleMiddleware } from "./middleware/one-time-token-throttle.middleware.mjs";
 import { otpRequestThrottleMiddleware, otpVerifyThrottleMiddleware } from "./middleware/otp-throttle.middleware.mjs";
 import { requireVerifiedEmail } from "./middleware/require-verified-email.middleware.mjs";
+import "./middleware/index.mjs";
 import { AuthTokenFamily, authTokenFamilySchema } from "./models/auth-token-family/auth-token-family.model.mjs";
 import { PasskeyCredential, passkeyCredentialSchema } from "./models/passkey-credential/passkey-credential.model.mjs";
 import { ProviderAccount, providerAccountSchema } from "./models/provider-account/provider-account.model.mjs";
 import { authMigrations } from "./models/index.mjs";
 import { requestOtp, verifyOtp } from "./otp/otp.mjs";
+import "./otp/index.mjs";
 import { PasskeyOptionsJSON, PasskeyResponseJSON } from "./passkeys/simplewebauthn.mjs";
 import { generatePasskeyAuthenticationOptions, verifyPasskeyAuthentication } from "./passkeys/passkey-authentication.mjs";
 import { generatePasskeyRegistrationOptions, verifyPasskeyRegistration } from "./passkeys/passkey-registration.mjs";
+import "./passkeys/index.mjs";
 import { GOOGLE_AUTH_FEATURE, GoogleProvider, JoseModule, pkceChallenge } from "./providers/google-provider.mjs";
 import { APPLE_AUTH_FEATURE, AppleJoseModule, AppleProvider } from "./providers/apple-provider.mjs";
 import { DiscordProvider } from "./providers/discord-provider.mjs";
@@ -42,6 +47,7 @@ import { GitHubProvider } from "./providers/github-provider.mjs";
 import { LINKEDIN_AUTH_FEATURE, LinkedInProvider } from "./providers/linkedin-provider.mjs";
 import { completeProviderLogin, resolveAuthProvider, startProviderLogin } from "./providers/provider-login.mjs";
 import { XProvider } from "./providers/x-provider.mjs";
+import "./providers/index.mjs";
 import { AuthEventCallback, AuthEventName, AuthEventPayloads, authEvents } from "./services/auth-events.mjs";
 import { CookieDomainRequestRequiredError, authService } from "./services/auth.service.mjs";
 import { currentUser } from "./services/current-user.mjs";
@@ -51,7 +57,9 @@ import { isEmailVerified, sendEmailVerification, verifyEmail } from "./services/
 import { IssuedOneTimeToken, consumeOneTimeToken, hashOneTimeToken, issueOneTimeToken, oneTimeTokenModel } from "./services/one-time-tokens.mjs";
 import { requestPasswordReset, resetPassword } from "./services/password-reset.mjs";
 import { RequestUserFailure, RequestUserOutcome, ResolveRequestUserOptions, readCredential, resolveRequestUser, resolveRequestUserOutcome } from "./services/resolve-request-user.mjs";
+import "./services/index.mjs";
 import { PageSessionOptions, PageSessionResolver, SessionMiddlewareOptions, SessionResolverOptions, SessionSource, pageSession, sessionMiddleware } from "./session/page-session.mjs";
+import "./session/index.mjs";
 import { safeEqual } from "./utils/safe-equal.mjs";
 import { isNeverExpiring, isUsableExpiry, tokenHasExpClaim } from "./utils/token-expiry.mjs";
 export { APPLE_AUTH_FEATURE, AUTH_MIDDLEWARE_DESCRIPTOR, AccessToken, AccessTokenConfig, AccessTokenOutput, AppleJoseModule, AppleProvider, AppleProviderConfig, Auth, AuthConfigurations, AuthCredentialDescriptor, AuthCredentials, AuthErrorCodes, AuthErrorTranslations, AuthEventCallback, AuthEventName, AuthEventPayloads, AuthMiddlewareDescriptor, AuthMiddlewareDescriptorSource, AuthMiddlewareOptions, AuthNotification, AuthProvider, AuthProviderSdkMissingError, AuthRefreshCredentialDescriptor, AuthTokenFamily, AuthTranslations, Authenticable, CanAuthenticate, ClearAuthCookieOptions, CookieAuthConfig, CookieDomainRequestRequiredError, CookieDomainResolver, CsrfConfig, CsrfOriginMismatchError, CsrfOriginMismatchReason, DeviceInfo, DiscordProvider, DiscordProviderConfig, EmailNotVerifiedError, EmailVerificationConfig, FacebookProvider, FacebookProviderConfig, GOOGLE_AUTH_FEATURE, GitHubProvider, GitHubProviderConfig, GoogleProvider, GoogleProviderConfig, InvalidOneTimeTokenError, InvalidPasskeyError, InvalidProviderCallbackError, IssuedOneTimeToken, JoseModule, LINKEDIN_AUTH_FEATURE, LegacyJwtConfig, LinkedInProvider, LinkedInProviderConfig, LoginResult, LoginThrottleIdentifier, LoginThrottleOptions, LogoutWithoutTokenBehavior, NO_EXPIRATION, NotificationsUnavailableError, OneTimeToken, OneTimeTokenConfig, OneTimeTokenNotificationData, OneTimeTokenPurpose, OneTimeTokenUrlBuilder, OtpConfig, OtpMessage, OtpSender, PageAuthConfig, PageSessionOptions, PageSessionResolver, PasskeyCredential, type PasskeyOptionsJSON, type PasskeyResponseJSON, PasskeysConfig, PasswordResetConfig, PasswordSetter, ProviderAccount, ProviderAuthorizationState, ProviderCallbackParams, ProviderEmailNotVerifiedError, ProviderProfile, ProviderUserCreator, ProvidersConfig, RefreshToken, RefreshTokenConfig, RefreshTokenIssueOptions, RequestUser, RequestUserFailure, RequestUserOutcome, ResolveRequestUserOptions, SessionMiddlewareOptions, SessionResolverOptions, SessionSource, SetAuthCookieOptions, TokenFrom, TokenPair, TokenType, TokenTypeError, XProvider, XProviderConfig, accessTokenSchema, assertCsrfOriginAllowed, authDefaultTranslations, authEvents, authMiddleware, authMigrations, authService, authTokenFamilySchema, completeProviderLogin, consumeOneTimeToken, currentUser, generateJWTSecret, generatePasskeyAuthenticationOptions, generatePasskeyRegistrationOptions, hashOneTimeToken, isEmailVerified, isInvalidCredentialError, isNeverExpiring, isUsableExpiry, issueOneTimeToken, jwt, loginThrottleMiddleware, oneTimeTokenModel, oneTimeTokenSchema, otpRequestThrottleMiddleware, otpVerifyThrottleMiddleware, pageSession, passkeyCredentialSchema, pkceChallenge, providerAccountSchema, readCredential, refreshTokenSchema, registerAuthCleanupCommand, registerAuthPurgeNeverExpiringCommand, registerAuthTranslations, registerJWTSecretGeneratorCommand, requestOtp, requestPasswordReset, requireVerifiedEmail, requiresCsrfOriginCheck, resetPassword, resolveAuthProvider, resolveRequestUser, resolveRequestUserOutcome, safeEqual, sendEmailVerification, sessionMiddleware, startProviderLogin, throttleIdentifierHash, tokenConsumeThrottleMiddleware, tokenHasExpClaim, tokenIssueThrottleMiddleware, verifyEmail, verifyOtp, verifyPasskeyAuthentication, verifyPasskeyRegistration };

package/esm/localization/auth-default-translations.d.mts

@@ -1,10 +1,8 @@
 import { AuthTranslations } from "./auth-translations.type.mjs";
-
 //#region ../../packages/auth/src/localization/auth-default-translations.d.ts
 /**
  * Every locale auth ships default text for, keyed by locale code.
  */
-declare const authDefaultTranslations: Record<string, AuthTranslations>;
+export declare const authDefaultTranslations: Record<string, AuthTranslations>;
 //#endregion
-export { authDefaultTranslations };
 //# sourceMappingURL=auth-default-translations.d.mts.map

package/esm/localization/auth-default-translations.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-default-translations.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/localization/auth-default-translations.ts"],"mappings":";;;;;AAOA;cAAa,uBAAA,EAAyB,MAAM,SAAS,gBAAA"}
+{"version":3,"file":"auth-default-translations.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/localization/auth-default-translations.ts"],"mappings":";;;;;qBAOa,yBAAyB,eAAe"}

package/esm/localization/auth-translations.type.d.mts

@@ -6,22 +6,26 @@
  * one — translating a new `auth.errors.*` key means adding it here, and the
  * compiler then demands a string in each built-in locale.
  */
-type AuthErrorTranslations = {
-  /** 401 — no credential was sent. */missingAccessToken: string; /** 401 — the credential is malformed, expired, or revoked. */
-  invalidAccessToken: string; /** 401 — the credential is valid but its user type is not allowed here. */
-  unauthorized: string; /** 403 — a cookie-authenticated unsafe request came from a foreign origin. */
-  csrfOriginMismatch: string; /** 429 — login throttle lockout. */
+export type AuthErrorTranslations = {
+  /** 401 — no credential was sent. */
+  missingAccessToken: string;
+  /** 401 — the credential is malformed, expired, or revoked. */
+  invalidAccessToken: string;
+  /** 401 — the credential is valid but its user type is not allowed here. */
+  unauthorized: string;
+  /** 403 — a cookie-authenticated unsafe request came from a foreign origin. */
+  csrfOriginMismatch: string;
+  /** 429 — login throttle lockout. */
   tooManyAttempts: string;
 };
 /**
  * One locale's worth of auth translations, shaped as the keyword tree
  * `@mongez/localization`'s `extend(localeCode, keywords)` accepts.
  */
-type AuthTranslations = {
+export type AuthTranslations = {
   auth: {
     errors: AuthErrorTranslations;
   };
 };
 //#endregion
-export { AuthErrorTranslations, AuthTranslations };
 //# sourceMappingURL=auth-translations.type.d.mts.map

package/esm/localization/auth-translations.type.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-translations.type.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/localization/auth-translations.type.ts"],"mappings":";;AAOA;;;;;;KAAY,qBAAA;EAQV,oCANA,kBAAA,UAQe;EANf,kBAAA,UAaU;EAXV,YAAA;EAEA,kBAAA,UAUA;EARA,eAAA;AAAA;;AAS+B;;;KAFrB,gBAAA;EACV,IAAA;IACE,MAAA,EAAQ,qBAAqB;EAAA;AAAA"}
+{"version":3,"file":"auth-translations.type.d.mts","names":[],"sources":["../../../../../../../../packages/auth/src/localization/auth-translations.type.ts"],"mappings":";;;;;;;;YAOY;;EAEV;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;YAOU;EACV;IACE,QAAQ"}

package/esm/localization/index.mjs

@@ -1,4 +1,4 @@
 import { authDefaultTranslations } from "./auth-default-translations.mjs";
 import { registerAuthTranslations } from "./register-auth-translations.mjs";
 
-export {  };
+export { authDefaultTranslations, registerAuthTranslations };

package/esm/localization/register-auth-translations.d.mts

@@ -11,7 +11,6 @@
  *
  * Runs once at import of `@warlock.js/auth`; safe to call again.
  */
-declare function registerAuthTranslations(): void;
+export declare function registerAuthTranslations(): void;
 //#endregion
-export { registerAuthTranslations };
 //# sourceMappingURL=register-auth-translations.d.mts.map