kroxt 1.2.1 → 1.3.0

package/dist/cli/index.cjs

@@ -0,0 +1,134 @@
+#!/usr/bin/env node
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var import_commander = require("commander");
+var import_enquirer = __toESM(require("enquirer"), 1);
+var import_chalk = __toESM(require("chalk"), 1);
+var import_fs = __toESM(require("fs"), 1);
+var import_path = __toESM(require("path"), 1);
+var import_crypto = __toESM(require("crypto"), 1);
+var import_templates = require("./templates.js");
+const program = new import_commander.Command();
+const enquirer = new import_enquirer.default();
+program.name("kroxt").description("Kroxt CLI for bootstrapping auth engines").version("1.0.0");
+program.command("init").description("Initialize Kroxt in your project").option("-y, --yes", "Skip prompts and use defaults").action(async (options) => {
+  console.log(import_chalk.default.bold.white("\n\u2B22 KROXT AUTH INITIALIZER\n"));
+  try {
+    let response = {
+      adapter: "memory",
+      generateEnv: true,
+      useRateLimit: true,
+      useIPBlocking: true,
+      useStrictRevocation: true,
+      usePepper: true
+    };
+    if (!options.yes) {
+      response = await enquirer.prompt([
+        {
+          type: "select",
+          name: "adapter",
+          message: "Choose your database adapter:",
+          choices: [
+            { name: "memory", message: "In-Memory (Testing)" },
+            { name: "mongoose", message: "Mongoose (MongoDB)" },
+            { name: "prisma", message: "Prisma (PostgreSQL/MySQL)" },
+            { name: "drizzle", message: "Drizzle (SQLite/PostgreSQL)" },
+            { name: "none", message: "None (Manual Setup)" }
+          ]
+        },
+        {
+          type: "confirm",
+          name: "useRateLimit",
+          message: "Enable rate limiting defensive layer?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "useIPBlocking",
+          message: "Enable automatic IP blocking?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "useStrictRevocation",
+          message: "Enforce strict session revocation?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "usePepper",
+          message: "Use server-side password peppering?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "generateEnv",
+          message: "Generate secure secrets in .env?",
+          initial: true
+        }
+      ]);
+    } else {
+      console.log(import_chalk.default.gray("Using default settings (--yes)..."));
+      response = {
+        ...response,
+        useRateLimit: true,
+        useIPBlocking: true,
+        useStrictRevocation: true,
+        usePepper: true
+      };
+    }
+    const secret = import_crypto.default.randomBytes(32).toString("hex");
+    const authContent = (0, import_templates.authTemplate)(response.adapter, secret, response);
+    const authPath = import_path.default.join(process.cwd(), "src", "lib", "auth.ts");
+    const dirPath = import_path.default.dirname(authPath);
+    if (!import_fs.default.existsSync(dirPath)) {
+      import_fs.default.mkdirSync(dirPath, { recursive: true });
+    }
+    import_fs.default.writeFileSync(authPath, authContent);
+    console.log(import_chalk.default.green(`
+\u2714 Created: ${import_chalk.default.white("src/lib/auth.ts")}`));
+    const tsConfigPath = import_path.default.join(process.cwd(), "tsconfig.json");
+    if (!import_fs.default.existsSync(tsConfigPath)) {
+      import_fs.default.writeFileSync(tsConfigPath, import_templates.tsConfigTemplate);
+      console.log(import_chalk.default.green(`\u2714 Created: ${import_chalk.default.white("tsconfig.json")}`));
+    }
+    if (response.generateEnv) {
+      const envPath = import_path.default.join(process.cwd(), ".env");
+      const envContent = (0, import_templates.envTemplate)(secret, response.usePepper);
+      if (import_fs.default.existsSync(envPath)) {
+        import_fs.default.appendFileSync(envPath, envContent);
+        console.log(import_chalk.default.green(`\u2714 Updated: ${import_chalk.default.white(".env")} (Appended JWT_SECRET)`));
+      } else {
+        import_fs.default.writeFileSync(envPath, envContent);
+        console.log(import_chalk.default.green(`\u2714 Created: ${import_chalk.default.white(".env")}`));
+      }
+    }
+    console.log(import_chalk.default.bold.white("\nKroxt is ready. Happy coding! \u{1F680}\n"));
+  } catch (err) {
+    console.error(import_chalk.default.red("\n\u2716 Initialization cancelled."));
+    process.exit(1);
+  }
+});
+program.parse(process.argv);
+//# sourceMappingURL=index.cjs.map

package/dist/cli/index.cjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cli/index.ts"],
+  "sourcesContent": ["#!/usr/bin/env node\nimport { Command } from 'commander';\nimport Enquirer from 'enquirer';\nimport chalk from 'chalk';\nimport fs from 'fs';\nimport path from 'path';\nimport crypto from 'crypto';\nimport { authTemplate, envTemplate, tsConfigTemplate } from './templates.js';\n\nconst program = new Command();\nconst enquirer = new Enquirer();\n\nprogram\n  .name('kroxt')\n  .description('Kroxt CLI for bootstrapping auth engines')\n  .version('1.0.0');\n\nprogram\n  .command('init')\n  .description('Initialize Kroxt in your project')\n  .option('-y, --yes', 'Skip prompts and use defaults')\n  .action(async (options) => {\n    console.log(chalk.bold.white('\\n\u2B22 KROXT AUTH INITIALIZER\\n'));\n\n    try {\n      let response = {\n        adapter: 'memory',\n        generateEnv: true,\n        useRateLimit: true,\n        useIPBlocking: true,\n        useStrictRevocation: true,\n        usePepper: true\n      };\n\n      if (!options.yes) {\n        response = await enquirer.prompt([\n          {\n            type: 'select',\n            name: 'adapter',\n            message: 'Choose your database adapter:',\n            choices: [\n              { name: 'memory', message: 'In-Memory (Testing)' },\n              { name: 'mongoose', message: 'Mongoose (MongoDB)' },\n              { name: 'prisma', message: 'Prisma (PostgreSQL/MySQL)' },\n              { name: 'drizzle', message: 'Drizzle (SQLite/PostgreSQL)' },\n              { name: 'none', message: 'None (Manual Setup)' }\n            ]\n          },\n          {\n            type: 'confirm',\n            name: 'useRateLimit',\n            message: 'Enable rate limiting defensive layer?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'useIPBlocking',\n            message: 'Enable automatic IP blocking?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'useStrictRevocation',\n            message: 'Enforce strict session revocation?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'usePepper',\n            message: 'Use server-side password peppering?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'generateEnv',\n            message: 'Generate secure secrets in .env?',\n            initial: true\n          }\n        ]) as any;\n      } else {\n        console.log(chalk.gray('Using default settings (--yes)...'));\n        response = {\n          ...response,\n          useRateLimit: true,\n          useIPBlocking: true,\n          useStrictRevocation: true,\n          usePepper: true\n        } as any;\n      }\n\n      const secret = crypto.randomBytes(32).toString('hex');\n      const authContent = authTemplate(response.adapter, secret, response);\n\n      // Write auth.ts\n      const authPath = path.join(process.cwd(), 'src', 'lib', 'auth.ts');\n      const dirPath = path.dirname(authPath);\n\n      if (!fs.existsSync(dirPath)) {\n        fs.mkdirSync(dirPath, { recursive: true });\n      }\n\n      fs.writeFileSync(authPath, authContent);\n      console.log(chalk.green(`\\n\u2714 Created: ${chalk.white('src/lib/auth.ts')}`));\n\n      // Write tsconfig.json if not present\n      const tsConfigPath = path.join(process.cwd(), 'tsconfig.json');\n      if (!fs.existsSync(tsConfigPath)) {\n        fs.writeFileSync(tsConfigPath, tsConfigTemplate);\n        console.log(chalk.green(`\u2714 Created: ${chalk.white('tsconfig.json')}`));\n      }\n\n      // Write .env\n      if (response.generateEnv) {\n        const envPath = path.join(process.cwd(), '.env');\n        const envContent = envTemplate(secret, response.usePepper);\n        \n        if (fs.existsSync(envPath)) {\n          fs.appendFileSync(envPath, envContent);\n          console.log(chalk.green(`\u2714 Updated: ${chalk.white('.env')} (Appended JWT_SECRET)`));\n        } else {\n          fs.writeFileSync(envPath, envContent);\n          console.log(chalk.green(`\u2714 Created: ${chalk.white('.env')}`));\n        }\n      }\n\n      console.log(chalk.bold.white('\\nKroxt is ready. Happy coding! \uD83D\uDE80\\n'));\n\n    } catch (err) {\n      console.error(chalk.red('\\n\u2716 Initialization cancelled.'));\n      process.exit(1);\n    }\n  });\n\nprogram.parse(process.argv);\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;AACA,uBAAwB;AACxB,sBAAqB;AACrB,mBAAkB;AAClB,gBAAe;AACf,kBAAiB;AACjB,oBAAmB;AACnB,uBAA4D;AAE5D,MAAM,UAAU,IAAI,yBAAQ;AAC5B,MAAM,WAAW,IAAI,gBAAAA,QAAS;AAE9B,QACG,KAAK,OAAO,EACZ,YAAY,0CAA0C,EACtD,QAAQ,OAAO;AAElB,QACG,QAAQ,MAAM,EACd,YAAY,kCAAkC,EAC9C,OAAO,aAAa,+BAA+B,EACnD,OAAO,OAAO,YAAY;AACzB,UAAQ,IAAI,aAAAC,QAAM,KAAK,MAAM,mCAA8B,CAAC;AAE5D,MAAI;AACF,QAAI,WAAW;AAAA,MACb,SAAS;AAAA,MACT,aAAa;AAAA,MACb,cAAc;AAAA,MACd,eAAe;AAAA,MACf,qBAAqB;AAAA,MACrB,WAAW;AAAA,IACb;AAEA,QAAI,CAAC,QAAQ,KAAK;AAChB,iBAAW,MAAM,SAAS,OAAO;AAAA,QAC/B;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,YACP,EAAE,MAAM,UAAU,SAAS,sBAAsB;AAAA,YACjD,EAAE,MAAM,YAAY,SAAS,qBAAqB;AAAA,YAClD,EAAE,MAAM,UAAU,SAAS,4BAA4B;AAAA,YACvD,EAAE,MAAM,WAAW,SAAS,8BAA8B;AAAA,YAC1D,EAAE,MAAM,QAAQ,SAAS,sBAAsB;AAAA,UACjD;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,cAAQ,IAAI,aAAAA,QAAM,KAAK,mCAAmC,CAAC;AAC3D,iBAAW;AAAA,QACT,GAAG;AAAA,QACH,cAAc;AAAA,QACd,eAAe;AAAA,QACf,qBAAqB;AAAA,QACrB,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,SAAS,cAAAC,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AACpD,UAAM,kBAAc,+BAAa,SAAS,SAAS,QAAQ,QAAQ;AAGnE,UAAM,WAAW,YAAAC,QAAK,KAAK,QAAQ,IAAI,GAAG,OAAO,OAAO,SAAS;AACjE,UAAM,UAAU,YAAAA,QAAK,QAAQ,QAAQ;AAErC,QAAI,CAAC,UAAAC,QAAG,WAAW,OAAO,GAAG;AAC3B,gBAAAA,QAAG,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AAAA,IAC3C;AAEA,cAAAA,QAAG,cAAc,UAAU,WAAW;AACtC,YAAQ,IAAI,aAAAH,QAAM,MAAM;AAAA,kBAAgB,aAAAA,QAAM,MAAM,iBAAiB,CAAC,EAAE,CAAC;AAGzE,UAAM,eAAe,YAAAE,QAAK,KAAK,QAAQ,IAAI,GAAG,eAAe;AAC7D,QAAI,CAAC,UAAAC,QAAG,WAAW,YAAY,GAAG;AAChC,gBAAAA,QAAG,cAAc,cAAc,iCAAgB;AAC/C,cAAQ,IAAI,aAAAH,QAAM,MAAM,mBAAc,aAAAA,QAAM,MAAM,eAAe,CAAC,EAAE,CAAC;AAAA,IACvE;AAGA,QAAI,SAAS,aAAa;AACxB,YAAM,UAAU,YAAAE,QAAK,KAAK,QAAQ,IAAI,GAAG,MAAM;AAC/C,YAAM,iBAAa,8BAAY,QAAQ,SAAS,SAAS;AAEzD,UAAI,UAAAC,QAAG,WAAW,OAAO,GAAG;AAC1B,kBAAAA,QAAG,eAAe,SAAS,UAAU;AACrC,gBAAQ,IAAI,aAAAH,QAAM,MAAM,mBAAc,aAAAA,QAAM,MAAM,MAAM,CAAC,wBAAwB,CAAC;AAAA,MACpF,OAAO;AACL,kBAAAG,QAAG,cAAc,SAAS,UAAU;AACpC,gBAAQ,IAAI,aAAAH,QAAM,MAAM,mBAAc,aAAAA,QAAM,MAAM,MAAM,CAAC,EAAE,CAAC;AAAA,MAC9D;AAAA,IACF;AAEA,YAAQ,IAAI,aAAAA,QAAM,KAAK,MAAM,6CAAsC,CAAC;AAAA,EAEtE,SAAS,KAAK;AACZ,YAAQ,MAAM,aAAAA,QAAM,IAAI,oCAA+B,CAAC;AACxD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,QAAQ,MAAM,QAAQ,IAAI;",
+  "names": ["Enquirer", "chalk", "crypto", "path", "fs"]
+}

package/dist/cli/index.js

@@ -0,0 +1,111 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import Enquirer from "enquirer";
+import chalk from "chalk";
+import fs from "fs";
+import path from "path";
+import crypto from "crypto";
+import { authTemplate, envTemplate, tsConfigTemplate } from "./templates.js";
+const program = new Command();
+const enquirer = new Enquirer();
+program.name("kroxt").description("Kroxt CLI for bootstrapping auth engines").version("1.0.0");
+program.command("init").description("Initialize Kroxt in your project").option("-y, --yes", "Skip prompts and use defaults").action(async (options) => {
+  console.log(chalk.bold.white("\n\u2B22 KROXT AUTH INITIALIZER\n"));
+  try {
+    let response = {
+      adapter: "memory",
+      generateEnv: true,
+      useRateLimit: true,
+      useIPBlocking: true,
+      useStrictRevocation: true,
+      usePepper: true
+    };
+    if (!options.yes) {
+      response = await enquirer.prompt([
+        {
+          type: "select",
+          name: "adapter",
+          message: "Choose your database adapter:",
+          choices: [
+            { name: "memory", message: "In-Memory (Testing)" },
+            { name: "mongoose", message: "Mongoose (MongoDB)" },
+            { name: "prisma", message: "Prisma (PostgreSQL/MySQL)" },
+            { name: "drizzle", message: "Drizzle (SQLite/PostgreSQL)" },
+            { name: "none", message: "None (Manual Setup)" }
+          ]
+        },
+        {
+          type: "confirm",
+          name: "useRateLimit",
+          message: "Enable rate limiting defensive layer?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "useIPBlocking",
+          message: "Enable automatic IP blocking?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "useStrictRevocation",
+          message: "Enforce strict session revocation?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "usePepper",
+          message: "Use server-side password peppering?",
+          initial: true
+        },
+        {
+          type: "confirm",
+          name: "generateEnv",
+          message: "Generate secure secrets in .env?",
+          initial: true
+        }
+      ]);
+    } else {
+      console.log(chalk.gray("Using default settings (--yes)..."));
+      response = {
+        ...response,
+        useRateLimit: true,
+        useIPBlocking: true,
+        useStrictRevocation: true,
+        usePepper: true
+      };
+    }
+    const secret = crypto.randomBytes(32).toString("hex");
+    const authContent = authTemplate(response.adapter, secret, response);
+    const authPath = path.join(process.cwd(), "src", "lib", "auth.ts");
+    const dirPath = path.dirname(authPath);
+    if (!fs.existsSync(dirPath)) {
+      fs.mkdirSync(dirPath, { recursive: true });
+    }
+    fs.writeFileSync(authPath, authContent);
+    console.log(chalk.green(`
+\u2714 Created: ${chalk.white("src/lib/auth.ts")}`));
+    const tsConfigPath = path.join(process.cwd(), "tsconfig.json");
+    if (!fs.existsSync(tsConfigPath)) {
+      fs.writeFileSync(tsConfigPath, tsConfigTemplate);
+      console.log(chalk.green(`\u2714 Created: ${chalk.white("tsconfig.json")}`));
+    }
+    if (response.generateEnv) {
+      const envPath = path.join(process.cwd(), ".env");
+      const envContent = envTemplate(secret, response.usePepper);
+      if (fs.existsSync(envPath)) {
+        fs.appendFileSync(envPath, envContent);
+        console.log(chalk.green(`\u2714 Updated: ${chalk.white(".env")} (Appended JWT_SECRET)`));
+      } else {
+        fs.writeFileSync(envPath, envContent);
+        console.log(chalk.green(`\u2714 Created: ${chalk.white(".env")}`));
+      }
+    }
+    console.log(chalk.bold.white("\nKroxt is ready. Happy coding! \u{1F680}\n"));
+  } catch (err) {
+    console.error(chalk.red("\n\u2716 Initialization cancelled."));
+    process.exit(1);
+  }
+});
+program.parse(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cli/index.ts"],
+  "sourcesContent": ["#!/usr/bin/env node\nimport { Command } from 'commander';\nimport Enquirer from 'enquirer';\nimport chalk from 'chalk';\nimport fs from 'fs';\nimport path from 'path';\nimport crypto from 'crypto';\nimport { authTemplate, envTemplate, tsConfigTemplate } from './templates.js';\n\nconst program = new Command();\nconst enquirer = new Enquirer();\n\nprogram\n  .name('kroxt')\n  .description('Kroxt CLI for bootstrapping auth engines')\n  .version('1.0.0');\n\nprogram\n  .command('init')\n  .description('Initialize Kroxt in your project')\n  .option('-y, --yes', 'Skip prompts and use defaults')\n  .action(async (options) => {\n    console.log(chalk.bold.white('\\n\u2B22 KROXT AUTH INITIALIZER\\n'));\n\n    try {\n      let response = {\n        adapter: 'memory',\n        generateEnv: true,\n        useRateLimit: true,\n        useIPBlocking: true,\n        useStrictRevocation: true,\n        usePepper: true\n      };\n\n      if (!options.yes) {\n        response = await enquirer.prompt([\n          {\n            type: 'select',\n            name: 'adapter',\n            message: 'Choose your database adapter:',\n            choices: [\n              { name: 'memory', message: 'In-Memory (Testing)' },\n              { name: 'mongoose', message: 'Mongoose (MongoDB)' },\n              { name: 'prisma', message: 'Prisma (PostgreSQL/MySQL)' },\n              { name: 'drizzle', message: 'Drizzle (SQLite/PostgreSQL)' },\n              { name: 'none', message: 'None (Manual Setup)' }\n            ]\n          },\n          {\n            type: 'confirm',\n            name: 'useRateLimit',\n            message: 'Enable rate limiting defensive layer?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'useIPBlocking',\n            message: 'Enable automatic IP blocking?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'useStrictRevocation',\n            message: 'Enforce strict session revocation?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'usePepper',\n            message: 'Use server-side password peppering?',\n            initial: true\n          },\n          {\n            type: 'confirm',\n            name: 'generateEnv',\n            message: 'Generate secure secrets in .env?',\n            initial: true\n          }\n        ]) as any;\n      } else {\n        console.log(chalk.gray('Using default settings (--yes)...'));\n        response = {\n          ...response,\n          useRateLimit: true,\n          useIPBlocking: true,\n          useStrictRevocation: true,\n          usePepper: true\n        } as any;\n      }\n\n      const secret = crypto.randomBytes(32).toString('hex');\n      const authContent = authTemplate(response.adapter, secret, response);\n\n      // Write auth.ts\n      const authPath = path.join(process.cwd(), 'src', 'lib', 'auth.ts');\n      const dirPath = path.dirname(authPath);\n\n      if (!fs.existsSync(dirPath)) {\n        fs.mkdirSync(dirPath, { recursive: true });\n      }\n\n      fs.writeFileSync(authPath, authContent);\n      console.log(chalk.green(`\\n\u2714 Created: ${chalk.white('src/lib/auth.ts')}`));\n\n      // Write tsconfig.json if not present\n      const tsConfigPath = path.join(process.cwd(), 'tsconfig.json');\n      if (!fs.existsSync(tsConfigPath)) {\n        fs.writeFileSync(tsConfigPath, tsConfigTemplate);\n        console.log(chalk.green(`\u2714 Created: ${chalk.white('tsconfig.json')}`));\n      }\n\n      // Write .env\n      if (response.generateEnv) {\n        const envPath = path.join(process.cwd(), '.env');\n        const envContent = envTemplate(secret, response.usePepper);\n        \n        if (fs.existsSync(envPath)) {\n          fs.appendFileSync(envPath, envContent);\n          console.log(chalk.green(`\u2714 Updated: ${chalk.white('.env')} (Appended JWT_SECRET)`));\n        } else {\n          fs.writeFileSync(envPath, envContent);\n          console.log(chalk.green(`\u2714 Created: ${chalk.white('.env')}`));\n        }\n      }\n\n      console.log(chalk.bold.white('\\nKroxt is ready. Happy coding! \uD83D\uDE80\\n'));\n\n    } catch (err) {\n      console.error(chalk.red('\\n\u2716 Initialization cancelled.'));\n      process.exit(1);\n    }\n  });\n\nprogram.parse(process.argv);\n"],
+  "mappings": ";AACA,SAAS,eAAe;AACxB,OAAO,cAAc;AACrB,OAAO,WAAW;AAClB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,OAAO,YAAY;AACnB,SAAS,cAAc,aAAa,wBAAwB;AAE5D,MAAM,UAAU,IAAI,QAAQ;AAC5B,MAAM,WAAW,IAAI,SAAS;AAE9B,QACG,KAAK,OAAO,EACZ,YAAY,0CAA0C,EACtD,QAAQ,OAAO;AAElB,QACG,QAAQ,MAAM,EACd,YAAY,kCAAkC,EAC9C,OAAO,aAAa,+BAA+B,EACnD,OAAO,OAAO,YAAY;AACzB,UAAQ,IAAI,MAAM,KAAK,MAAM,mCAA8B,CAAC;AAE5D,MAAI;AACF,QAAI,WAAW;AAAA,MACb,SAAS;AAAA,MACT,aAAa;AAAA,MACb,cAAc;AAAA,MACd,eAAe;AAAA,MACf,qBAAqB;AAAA,MACrB,WAAW;AAAA,IACb;AAEA,QAAI,CAAC,QAAQ,KAAK;AAChB,iBAAW,MAAM,SAAS,OAAO;AAAA,QAC/B;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,YACP,EAAE,MAAM,UAAU,SAAS,sBAAsB;AAAA,YACjD,EAAE,MAAM,YAAY,SAAS,qBAAqB;AAAA,YAClD,EAAE,MAAM,UAAU,SAAS,4BAA4B;AAAA,YACvD,EAAE,MAAM,WAAW,SAAS,8BAA8B;AAAA,YAC1D,EAAE,MAAM,QAAQ,SAAS,sBAAsB;AAAA,UACjD;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAAA,IACH,OAAO;AACL,cAAQ,IAAI,MAAM,KAAK,mCAAmC,CAAC;AAC3D,iBAAW;AAAA,QACT,GAAG;AAAA,QACH,cAAc;AAAA,QACd,eAAe;AAAA,QACf,qBAAqB;AAAA,QACrB,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,SAAS,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AACpD,UAAM,cAAc,aAAa,SAAS,SAAS,QAAQ,QAAQ;AAGnE,UAAM,WAAW,KAAK,KAAK,QAAQ,IAAI,GAAG,OAAO,OAAO,SAAS;AACjE,UAAM,UAAU,KAAK,QAAQ,QAAQ;AAErC,QAAI,CAAC,GAAG,WAAW,OAAO,GAAG;AAC3B,SAAG,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AAAA,IAC3C;AAEA,OAAG,cAAc,UAAU,WAAW;AACtC,YAAQ,IAAI,MAAM,MAAM;AAAA,kBAAgB,MAAM,MAAM,iBAAiB,CAAC,EAAE,CAAC;AAGzE,UAAM,eAAe,KAAK,KAAK,QAAQ,IAAI,GAAG,eAAe;AAC7D,QAAI,CAAC,GAAG,WAAW,YAAY,GAAG;AAChC,SAAG,cAAc,cAAc,gBAAgB;AAC/C,cAAQ,IAAI,MAAM,MAAM,mBAAc,MAAM,MAAM,eAAe,CAAC,EAAE,CAAC;AAAA,IACvE;AAGA,QAAI,SAAS,aAAa;AACxB,YAAM,UAAU,KAAK,KAAK,QAAQ,IAAI,GAAG,MAAM;AAC/C,YAAM,aAAa,YAAY,QAAQ,SAAS,SAAS;AAEzD,UAAI,GAAG,WAAW,OAAO,GAAG;AAC1B,WAAG,eAAe,SAAS,UAAU;AACrC,gBAAQ,IAAI,MAAM,MAAM,mBAAc,MAAM,MAAM,MAAM,CAAC,wBAAwB,CAAC;AAAA,MACpF,OAAO;AACL,WAAG,cAAc,SAAS,UAAU;AACpC,gBAAQ,IAAI,MAAM,MAAM,mBAAc,MAAM,MAAM,MAAM,CAAC,EAAE,CAAC;AAAA,MAC9D;AAAA,IACF;AAEA,YAAQ,IAAI,MAAM,KAAK,MAAM,6CAAsC,CAAC;AAAA,EAEtE,SAAS,KAAK;AACZ,YAAQ,MAAM,MAAM,IAAI,oCAA+B,CAAC;AACxD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF,CAAC;AAEH,QAAQ,MAAM,QAAQ,IAAI;",
+  "names": []
+}

package/dist/cli/templates.cjs

@@ -0,0 +1,147 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var templates_exports = {};
+__export(templates_exports, {
+  authTemplate: () => authTemplate,
+  envTemplate: () => envTemplate,
+  tsConfigTemplate: () => tsConfigTemplate
+});
+module.exports = __toCommonJS(templates_exports);
+var import_crypto = __toESM(require("crypto"), 1);
+const authTemplate = (adapter, secret, options) => `import { createAuth } from "kroxt";
+${getAdapterImportBlock(adapter)}
+import dotenv from "dotenv";
+
+dotenv.config();
+
+${getAdapterInitialization(adapter)}
+
+export const auth = createAuth({
+  adapter: authAdapter,
+  secret: process.env.JWT_SECRET || "${secret}",
+  ${options.usePepper ? 'pepper: process.env.JWT_PEPPER || "",' : ""}
+  
+  // Global Security Configurations
+  session: {
+    expires: "15m",
+    refreshExpires: "7d",
+    enforceStrictRevocation: ${options.useStrictRevocation ? "true" : "false"}
+  },
+  
+  // Custom JWT Payload logic
+  jwt: {
+    payload: (user: any, type: "access" | "refresh") => {
+      if (type === "access") {
+        return {
+          role: user.role,
+          // schoolId: user.schoolId 
+        };
+      }
+      return {};
+    }
+  },
+
+  ${options.useRateLimit ? `rateLimit: {
+    max: 100, // Requests per minute
+    windowMs: 60 * 1000
+  },` : ""}
+  ${options.useIPBlocking ? `ipBlocking: {
+    maxStrikes: 5,
+    blockDurationMs: 15 * 60 * 1000
+  },` : ""}
+  passwordPolicy: {
+    minLength: 6,
+    requireUppercase: true,
+    requireSpecialCharacter: true
+  }
+});
+`;
+function getAdapterImportBlock(adapter) {
+  switch (adapter) {
+    case "mongoose":
+      return `import { createMongoAdapter, createRateLimitModel } from "kroxt/adapters/mongoose";
+import mongoose from "mongoose";`;
+    case "prisma":
+      return `import { createPrismaAdapter } from "kroxt/adapters/prisma";`;
+    case "drizzle":
+      return `import { createDrizzleAdapter } from "kroxt/adapters/drizzle";
+import { eq } from "drizzle-orm";`;
+    case "memory":
+      return `import { createMemoryAdapter } from "kroxt/adapters/memory";`;
+    default:
+      return "";
+  }
+}
+function getAdapterInitialization(adapter) {
+  switch (adapter) {
+    case "mongoose":
+      return `// import { User } from "../models/user.model.js";
+// The rate limit model is optional but recommended
+const authAdapter = createMongoAdapter(User, createRateLimitModel(mongoose));`;
+    case "prisma":
+      return `// import { prisma } from "./lib/prisma";
+const authAdapter = createPrismaAdapter(prisma.user);`;
+    case "drizzle":
+      return `// import { db } from "./db";
+// import { users } from "./db/schema";
+// import { eq } from "drizzle-orm";
+const authAdapter = createDrizzleAdapter(db, users, eq);`;
+    case "memory":
+      return `const authAdapter = createMemoryAdapter();`;
+    default:
+      return `// const authAdapter = ...;`;
+  }
+}
+const envTemplate = (secret, usePepper) => `
+# Kroxt Auth Secrets
+JWT_SECRET="${secret}"
+${usePepper ? `JWT_PEPPER="${import_crypto.default.randomBytes(16).toString("hex")}"` : ""}
+`;
+const tsConfigTemplate = `{
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "types": ["node"]
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules"]
+}
+`;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  authTemplate,
+  envTemplate,
+  tsConfigTemplate
+});
+//# sourceMappingURL=templates.cjs.map

package/dist/cli/templates.cjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cli/templates.ts"],
+  "sourcesContent": ["import crypto from 'crypto';\n\nexport const authTemplate = (adapter: string, secret: string, options: any) => `import { createAuth } from \"kroxt\";\n${getAdapterImportBlock(adapter)}\nimport dotenv from \"dotenv\";\n\ndotenv.config();\n\n${getAdapterInitialization(adapter)}\n\nexport const auth = createAuth({\n  adapter: authAdapter,\n  secret: process.env.JWT_SECRET || \"${secret}\",\n  ${options.usePepper ? 'pepper: process.env.JWT_PEPPER || \"\",' : ''}\n  \n  // Global Security Configurations\n  session: {\n    expires: \"15m\",\n    refreshExpires: \"7d\",\n    enforceStrictRevocation: ${options.useStrictRevocation ? 'true' : 'false'}\n  },\n  \n  // Custom JWT Payload logic\n  jwt: {\n    payload: (user: any, type: \"access\" | \"refresh\") => {\n      if (type === \"access\") {\n        return {\n          role: user.role,\n          // schoolId: user.schoolId \n        };\n      }\n      return {};\n    }\n  },\n\n  ${options.useRateLimit ? `rateLimit: {\n    max: 100, // Requests per minute\n    windowMs: 60 * 1000\n  },` : ''}\n  ${options.useIPBlocking ? `ipBlocking: {\n    maxStrikes: 5,\n    blockDurationMs: 15 * 60 * 1000\n  },` : ''}\n  passwordPolicy: {\n    minLength: 6,\n    requireUppercase: true,\n    requireSpecialCharacter: true\n  }\n});\n`;\n\nfunction getAdapterImportBlock(adapter: string) {\n  switch (adapter) {\n    case 'mongoose':\n      return `import { createMongoAdapter, createRateLimitModel } from \"kroxt/adapters/mongoose\";\\nimport mongoose from \"mongoose\";`;\n    case 'prisma':\n      return `import { createPrismaAdapter } from \"kroxt/adapters/prisma\";`;\n    case 'drizzle':\n      return `import { createDrizzleAdapter } from \"kroxt/adapters/drizzle\";\\nimport { eq } from \"drizzle-orm\";`;\n    case 'memory':\n      return `import { createMemoryAdapter } from \"kroxt/adapters/memory\";`;\n    default:\n      return '';\n  }\n}\n\nfunction getAdapterInitialization(adapter: string) {\n  switch (adapter) {\n    case 'mongoose':\n      return `// import { User } from \"../models/user.model.js\";\\n// The rate limit model is optional but recommended\\nconst authAdapter = createMongoAdapter(User, createRateLimitModel(mongoose));`;\n    case 'prisma':\n      return `// import { prisma } from \"./lib/prisma\";\\nconst authAdapter = createPrismaAdapter(prisma.user);`;\n    case 'drizzle':\n      return `// import { db } from \"./db\";\\n// import { users } from \"./db/schema\";\\n// import { eq } from \"drizzle-orm\";\\nconst authAdapter = createDrizzleAdapter(db, users, eq);`;\n    case 'memory':\n      return `const authAdapter = createMemoryAdapter();`;\n    default:\n      return `// const authAdapter = ...;`;\n  }\n}\n\nexport const envTemplate = (secret: string, usePepper: boolean) => `\n# Kroxt Auth Secrets\nJWT_SECRET=\"${secret}\"\n${usePepper ? `JWT_PEPPER=\"${crypto.randomBytes(16).toString('hex')}\"` : ''}\n`;\n\nexport const tsConfigTemplate = `{\n  \"compilerOptions\": {\n    \"target\": \"ESNext\",\n    \"module\": \"ESNext\",\n    \"moduleResolution\": \"bundler\",\n    \"esModuleInterop\": true,\n    \"forceConsistentCasingInFileNames\": true,\n    \"strict\": true,\n    \"skipLibCheck\": true,\n    \"types\": [\"node\"]\n  },\n  \"include\": [\"src/**/*\"],\n  \"exclude\": [\"node_modules\"]\n}\n`;\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAmB;AAEZ,MAAM,eAAe,CAAC,SAAiB,QAAgB,YAAiB;AAAA,EAC7E,sBAAsB,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,yBAAyB,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA,uCAII,MAAM;AAAA,IACzC,QAAQ,YAAY,0CAA0C,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,+BAMrC,QAAQ,sBAAsB,SAAS,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAgBzE,QAAQ,eAAe;AAAA;AAAA;AAAA,QAGnB,EAAE;AAAA,IACN,QAAQ,gBAAgB;AAAA;AAAA;AAAA,QAGpB,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASV,SAAS,sBAAsB,SAAiB;AAC9C,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,aAAO;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,yBAAyB,SAAiB;AACjD,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,aAAO;AAAA;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA;AAAA;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEO,MAAM,cAAc,CAAC,QAAgB,cAAuB;AAAA;AAAA,cAErD,MAAM;AAAA,EAClB,YAAY,eAAe,cAAAA,QAAO,YAAY,EAAE,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE;AAAA;AAGpE,MAAM,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;",
+  "names": ["crypto"]
+}

package/dist/cli/templates.js

@@ -0,0 +1,111 @@
+import crypto from "crypto";
+const authTemplate = (adapter, secret, options) => `import { createAuth } from "kroxt";
+${getAdapterImportBlock(adapter)}
+import dotenv from "dotenv";
+
+dotenv.config();
+
+${getAdapterInitialization(adapter)}
+
+export const auth = createAuth({
+  adapter: authAdapter,
+  secret: process.env.JWT_SECRET || "${secret}",
+  ${options.usePepper ? 'pepper: process.env.JWT_PEPPER || "",' : ""}
+  
+  // Global Security Configurations
+  session: {
+    expires: "15m",
+    refreshExpires: "7d",
+    enforceStrictRevocation: ${options.useStrictRevocation ? "true" : "false"}
+  },
+  
+  // Custom JWT Payload logic
+  jwt: {
+    payload: (user: any, type: "access" | "refresh") => {
+      if (type === "access") {
+        return {
+          role: user.role,
+          // schoolId: user.schoolId 
+        };
+      }
+      return {};
+    }
+  },
+
+  ${options.useRateLimit ? `rateLimit: {
+    max: 100, // Requests per minute
+    windowMs: 60 * 1000
+  },` : ""}
+  ${options.useIPBlocking ? `ipBlocking: {
+    maxStrikes: 5,
+    blockDurationMs: 15 * 60 * 1000
+  },` : ""}
+  passwordPolicy: {
+    minLength: 6,
+    requireUppercase: true,
+    requireSpecialCharacter: true
+  }
+});
+`;
+function getAdapterImportBlock(adapter) {
+  switch (adapter) {
+    case "mongoose":
+      return `import { createMongoAdapter, createRateLimitModel } from "kroxt/adapters/mongoose";
+import mongoose from "mongoose";`;
+    case "prisma":
+      return `import { createPrismaAdapter } from "kroxt/adapters/prisma";`;
+    case "drizzle":
+      return `import { createDrizzleAdapter } from "kroxt/adapters/drizzle";
+import { eq } from "drizzle-orm";`;
+    case "memory":
+      return `import { createMemoryAdapter } from "kroxt/adapters/memory";`;
+    default:
+      return "";
+  }
+}
+function getAdapterInitialization(adapter) {
+  switch (adapter) {
+    case "mongoose":
+      return `// import { User } from "../models/user.model.js";
+// The rate limit model is optional but recommended
+const authAdapter = createMongoAdapter(User, createRateLimitModel(mongoose));`;
+    case "prisma":
+      return `// import { prisma } from "./lib/prisma";
+const authAdapter = createPrismaAdapter(prisma.user);`;
+    case "drizzle":
+      return `// import { db } from "./db";
+// import { users } from "./db/schema";
+// import { eq } from "drizzle-orm";
+const authAdapter = createDrizzleAdapter(db, users, eq);`;
+    case "memory":
+      return `const authAdapter = createMemoryAdapter();`;
+    default:
+      return `// const authAdapter = ...;`;
+  }
+}
+const envTemplate = (secret, usePepper) => `
+# Kroxt Auth Secrets
+JWT_SECRET="${secret}"
+${usePepper ? `JWT_PEPPER="${crypto.randomBytes(16).toString("hex")}"` : ""}
+`;
+const tsConfigTemplate = `{
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "skipLibCheck": true,
+    "types": ["node"]
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules"]
+}
+`;
+export {
+  authTemplate,
+  envTemplate,
+  tsConfigTemplate
+};
+//# sourceMappingURL=templates.js.map

package/dist/cli/templates.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cli/templates.ts"],
+  "sourcesContent": ["import crypto from 'crypto';\n\nexport const authTemplate = (adapter: string, secret: string, options: any) => `import { createAuth } from \"kroxt\";\n${getAdapterImportBlock(adapter)}\nimport dotenv from \"dotenv\";\n\ndotenv.config();\n\n${getAdapterInitialization(adapter)}\n\nexport const auth = createAuth({\n  adapter: authAdapter,\n  secret: process.env.JWT_SECRET || \"${secret}\",\n  ${options.usePepper ? 'pepper: process.env.JWT_PEPPER || \"\",' : ''}\n  \n  // Global Security Configurations\n  session: {\n    expires: \"15m\",\n    refreshExpires: \"7d\",\n    enforceStrictRevocation: ${options.useStrictRevocation ? 'true' : 'false'}\n  },\n  \n  // Custom JWT Payload logic\n  jwt: {\n    payload: (user: any, type: \"access\" | \"refresh\") => {\n      if (type === \"access\") {\n        return {\n          role: user.role,\n          // schoolId: user.schoolId \n        };\n      }\n      return {};\n    }\n  },\n\n  ${options.useRateLimit ? `rateLimit: {\n    max: 100, // Requests per minute\n    windowMs: 60 * 1000\n  },` : ''}\n  ${options.useIPBlocking ? `ipBlocking: {\n    maxStrikes: 5,\n    blockDurationMs: 15 * 60 * 1000\n  },` : ''}\n  passwordPolicy: {\n    minLength: 6,\n    requireUppercase: true,\n    requireSpecialCharacter: true\n  }\n});\n`;\n\nfunction getAdapterImportBlock(adapter: string) {\n  switch (adapter) {\n    case 'mongoose':\n      return `import { createMongoAdapter, createRateLimitModel } from \"kroxt/adapters/mongoose\";\\nimport mongoose from \"mongoose\";`;\n    case 'prisma':\n      return `import { createPrismaAdapter } from \"kroxt/adapters/prisma\";`;\n    case 'drizzle':\n      return `import { createDrizzleAdapter } from \"kroxt/adapters/drizzle\";\\nimport { eq } from \"drizzle-orm\";`;\n    case 'memory':\n      return `import { createMemoryAdapter } from \"kroxt/adapters/memory\";`;\n    default:\n      return '';\n  }\n}\n\nfunction getAdapterInitialization(adapter: string) {\n  switch (adapter) {\n    case 'mongoose':\n      return `// import { User } from \"../models/user.model.js\";\\n// The rate limit model is optional but recommended\\nconst authAdapter = createMongoAdapter(User, createRateLimitModel(mongoose));`;\n    case 'prisma':\n      return `// import { prisma } from \"./lib/prisma\";\\nconst authAdapter = createPrismaAdapter(prisma.user);`;\n    case 'drizzle':\n      return `// import { db } from \"./db\";\\n// import { users } from \"./db/schema\";\\n// import { eq } from \"drizzle-orm\";\\nconst authAdapter = createDrizzleAdapter(db, users, eq);`;\n    case 'memory':\n      return `const authAdapter = createMemoryAdapter();`;\n    default:\n      return `// const authAdapter = ...;`;\n  }\n}\n\nexport const envTemplate = (secret: string, usePepper: boolean) => `\n# Kroxt Auth Secrets\nJWT_SECRET=\"${secret}\"\n${usePepper ? `JWT_PEPPER=\"${crypto.randomBytes(16).toString('hex')}\"` : ''}\n`;\n\nexport const tsConfigTemplate = `{\n  \"compilerOptions\": {\n    \"target\": \"ESNext\",\n    \"module\": \"ESNext\",\n    \"moduleResolution\": \"bundler\",\n    \"esModuleInterop\": true,\n    \"forceConsistentCasingInFileNames\": true,\n    \"strict\": true,\n    \"skipLibCheck\": true,\n    \"types\": [\"node\"]\n  },\n  \"include\": [\"src/**/*\"],\n  \"exclude\": [\"node_modules\"]\n}\n`;\n"],
+  "mappings": "AAAA,OAAO,YAAY;AAEZ,MAAM,eAAe,CAAC,SAAiB,QAAgB,YAAiB;AAAA,EAC7E,sBAAsB,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,yBAAyB,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA,uCAII,MAAM;AAAA,IACzC,QAAQ,YAAY,0CAA0C,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,+BAMrC,QAAQ,sBAAsB,SAAS,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAgBzE,QAAQ,eAAe;AAAA;AAAA;AAAA,QAGnB,EAAE;AAAA,IACN,QAAQ,gBAAgB;AAAA;AAAA;AAAA,QAGpB,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASV,SAAS,sBAAsB,SAAiB;AAC9C,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,aAAO;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,yBAAyB,SAAiB;AACjD,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,aAAO;AAAA;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA;AAAA;AAAA;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEO,MAAM,cAAc,CAAC,QAAgB,cAAuB;AAAA;AAAA,cAErD,MAAM;AAAA,EAClB,YAAY,eAAe,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE;AAAA;AAGpE,MAAM,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;",
+  "names": []
+}

package/dist/core/index.d.ts

@@ -1,5 +1,6 @@
 import type { AuthAdapter, User } from "../adapters/index.js";
 import type { Provider } from "../providers/index.js";
+import { type RateLimitOptions } from "../security/rate-limit.js";
 export interface CreateAuthOptions {
     adapter: AuthAdapter<any>;
     secret: string | Uint8Array;
@@ -7,6 +8,7 @@ export interface CreateAuthOptions {
     session?: {
         expires?: string | number;
         refreshExpires?: string | number;
+        enforceStrictRevocation?: boolean;
     };
     providers?: Provider[];
     jwt?: {
@@ -18,6 +20,18 @@ export interface CreateAuthOptions {
          */
         payload?: (user: User<any>, type: "access" | "refresh") => Record<string, any>;
     };
+    rateLimit?: RateLimitOptions;
+    ipBlocking?: {
+        maxStrikes: number;
+        blockDurationMs: number;
+    };
+    passwordPolicy?: {
+        minLength?: number;
+        requireUppercase?: boolean;
+        requireLowercase?: boolean;
+        requireNumber?: boolean;
+        requireSpecialCharacter?: boolean;
+    };
 }
 export declare function createAuth(options: CreateAuthOptions): {
     signup: (userData: Omit<User<any>, "id">, password?: string) => Promise<{
@@ -25,11 +39,12 @@ export declare function createAuth(options: CreateAuthOptions): {
         accessToken: string;
         refreshToken: string;
     }>;
-    loginWithPassword: (email: string, password: string) => Promise<{
+    loginWithPassword: (email: string, password: string, clientIp?: string) => Promise<{
         user: any;
         accessToken: string;
         refreshToken: string;
     }>;
+    changePassword: (userId: string, newPassword: string) => Promise<any>;
     refresh: (refreshToken: string) => Promise<{
         accessToken: string;
     }>;

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/core/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KACpC,CAAC;IACF,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE;QACF;;;;;WAKG;QACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAClF,CAAC;CACL;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,iBAAiB;uBA4DjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,aAAa,MAAM;;;;;+BAmBhC,MAAM,YAAY,MAAM;;;;;4BAtC3B,MAAM;;;yBAbT,MAAM,iBAAgB,QAAQ,GAAG,SAAS;0BAnBzC,IAAI,CAAC,GAAG,CAAC,SAAQ,QAAQ,GAAG,SAAS;;EAmG3E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,GAAE,MAAW,GAAG,UAAU,CAE9D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/core/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAErF,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACjC,uBAAuB,CAAC,EAAE,OAAO,CAAC;KACrC,CAAC;IACF,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE;QACF;;;;;WAKG;QACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAClF,CAAC;IACF,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,UAAU,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,cAAc,CAAC,EAAE;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;KACrC,CAAC;CACL;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,iBAAiB;uBAuGjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,aAAa,MAAM;;;;;+BAoBhC,MAAM,YAAY,MAAM,aAAa,MAAM;;;;;6BA0C7C,MAAM,eAAe,MAAM;4BA7G5B,MAAM;;;yBArBT,MAAM,iBAAgB,QAAQ,GAAG,SAAS;0BAxBzC,IAAI,CAAC,GAAG,CAAC,SAAQ,QAAQ,GAAG,SAAS;;EAoL3E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,GAAE,MAAW,GAAG,UAAU,CAE9D"}

package/dist/index.d.ts

@@ -4,6 +4,8 @@ export type { Provider, ProviderConfig } from "./providers/index.js";
 export { createAuth, generateSecret } from "./core/index.js";
 export type { CreateAuthOptions } from "./core/index.js";
 export { createMemoryAdapter } from "./adapters/memory.js";
-export { createMongoAdapter } from "./adapters/mongoose.js";
+export { createMongoAdapter, createRateLimitModel } from "./adapters/mongoose.js";
+export { createPrismaAdapter } from "./adapters/prisma.js";
+export { createDrizzleAdapter } from "./adapters/drizzle.js";
 export * from "./security/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC7D,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/auth/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACtD,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC7D,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,cAAc,qBAAqB,CAAC"}