export type { SeedDefaultRolesResult } from './rbac-seed';
export * from './authentication';
export * from './authenticator';
export * from './client';
export * from './middleware';
export * from './rate-limiter';
// WebAuthn/Passkey support (now using ts-auth - no external dependencies)
export * from './magic-link';
export * from './passkey';
export * from './password/reset';
export * from './register';
export * from './user';
// Token management (Laravel Passport-style)
export * from './tokens';
// Authorization Gates & Policies (Laravel-style)
export * from './gate';
export * from './policy';
export * from './authorizable';
export * from './permissions';
// Role-Based Access Control (RBAC)
export * from './rbac';
export { createBqbRbacStore } from './rbac-store-bqb';
export { DEFAULT_ROLE_PACKS, seedDefaultRoles } from './rbac-seed';
// Email Verification
export * from './email-verification';
// Session-based Authentication (SPA Cookie Auth)
export * from './session-auth';
// Cookie-carried access tokens, for server-rendered pages.
export * from './cookie-auth';
export * from './request-token';
// The stx page gate (`middleware: ['auth' | 'guest']`), token-validating.
export * from './page-gate';
// Social sign-in: which local user a provider identity resolves to.
export * from './socials';
// TOTP (Two-Factor Authentication) - re-export from ts-auth
export {
  generateTOTP,
  verifyTOTP,
  generateTOTPSecret,
  totpKeyUri,
} from '@stacksjs/ts-auth';
// TOTP setup/enable/disable + login-challenge persistence
export * from './two-factor';
// Team resolution from auth credentials (dashboard-form scoping)
export * from './team';