export type { PasswordPolicy, PasswordRuleId } from '../password-policy.js';
export { activePasswordRules, DEFAULT_PASSWORD_POLICY, isPasswordRuleMet, PASSWORD_RULES, resolvePasswordPolicy, unmetPasswordRules } from '../password-policy.js';
export { sanitizeRedirect } from '../redirect.js';
export type { AuthConfig, AuthLogger, AuthSession, AuthUser, CsrfConfig, EmailConfig, Es256PrivateJwk, Es256PublicJwk, JwtConfig, LockoutConfig, PasswordConfig, RateLimitConfig, RefreshTokenConfig, TokenTtlConfig, TwoFactorConfig } from '../types.js';
export { createInMemoryBackupCodeRepository, createInMemoryFederatedAccountRepository, createInMemoryRefreshTokenRepository, createInMemoryRepos, createInMemoryStore, type InMemoryStore } from './adapters/in-memory.js';
export type { BackupCodeRepository, CreateInvitationData, CreateNotificationData, CreatePasskeyData, CreateRefreshTokenData, CreateUserData, FailedLoginLock, FederatedAccount, FederatedAccountRepository, FullAuthUser, Invitation, InvitationRepository, NotificationPreference, NotificationPreferenceRepository, NotificationRecord, NotificationRepository, Passkey, PasskeyRepository, PreferenceData, PushSubscriptionData, PushSubscriptionRepository, PushSubscriptionWriteOutcome, RefreshTokenRecord, RefreshTokenRepository, Repositories, UserRepository } from './adapters/types.js';
export { generateSecureToken, hashToken, sanitizeUser } from './auth.js';
export type { CsrfValidateOptions, EnsureCsrfCookieOptions } from './csrf.js';
export { ensureCsrfCookie, validateCsrf } from './csrf.js';
export type { AuthDeps } from './deps.js';
export { createAuthDeps } from './deps.js';
export { parseDurationSeconds } from './duration.js';
export type { ChangeEmailNoticeContext, MailBuilder, MailBuilderContext } from './email/builders.js';
export type { BuiltEmail } from './email/templates.js';
export type { EmailTransport, SendEmailParams } from './email/types.js';
export type { FederatedAuthHandleOptions, FederatedIdentity } from './federated-handle.js';
export { createFederatedAuthHandle } from './federated-handle.js';
export type { AuthHandleOptions, PublicRoute } from './handle.js';
export { createAuthHandle, DEFAULT_PUBLIC_ROUTES } from './handle.js';
export type { ChangeEmailHandlerOptions } from './handlers/change-email.js';
export { createChangeEmailHandler } from './handlers/change-email.js';
export { createChangePasswordHandler } from './handlers/change-password.js';
export { createDeleteAccountHandler } from './handlers/delete-account.js';
export type { AuthErrorCode } from './handlers/errors.js';
export { AUTH_ERROR_CODES } from './handlers/errors.js';
export type { ForgotPasswordHandlerOptions } from './handlers/forgot-password.js';
export { createForgotPasswordHandler } from './handlers/forgot-password.js';
export type { InvitationHandlerOptions } from './handlers/invitation.js';
export { createInvitationHandlers } from './handlers/invitation.js';
export { createJWKSHandler } from './handlers/jwks.js';
export { createLoginHandler } from './handlers/login.js';
export type { LogoutHandlerOptions } from './handlers/logout.js';
export { createLogoutHandler } from './handlers/logout.js';
export { createMeHandler } from './handlers/me.js';
export { createPasswordPolicyHandler } from './handlers/password-policy.js';
export { createRefreshHandler } from './handlers/refresh.js';
export type { RegisterHandlerOptions } from './handlers/register.js';
export { createRegisterHandler } from './handlers/register.js';
export { createResetPasswordHandler } from './handlers/reset-password.js';
export type { SessionSummary } from './handlers/sessions.js';
export { createSessionsHandlers } from './handlers/sessions.js';
export { createTwoFactorHandlers } from './handlers/two-factor.js';
export { createUpdateProfileHandler } from './handlers/update-profile.js';
export { createVerifyEmailHandler } from './handlers/verify-email.js';
export { createVerifyEmailChangeHandler } from './handlers/verify-email-change.js';
export { computeJwkThumbprint, createSessionToken, createSignedToken, generateES256KeyPair, MAX_TOKEN_LENGTH, SESSION_TOKEN_PURPOSE, verifySessionToken, verifySignedToken } from './jwt.js';
export { createNotificationsHandlers } from './notifications/handlers/notifications.js';
export type { PreferencesHandlerOptions } from './notifications/handlers/preferences.js';
export { createPreferencesHandler } from './notifications/handlers/preferences.js';
export { createPushKeyHandler } from './notifications/handlers/push-key.js';
export type { PushSubscriptionHandlerOptions } from './notifications/handlers/push-subscription.js';
export { createPushSubscriptionHandler } from './notifications/handlers/push-subscription.js';
export type { StreamHandlerOptions } from './notifications/handlers/stream.js';
export { createStreamHandler } from './notifications/handlers/stream.js';
export type { OwnedPushSubscription, PushPayload, PushRateLimitConfig, PushResult, PushService, PushServiceOptions, VapidConfig, VapidKeys } from './notifications/push.js';
export { createPushService, generateVapidKeys } from './notifications/push.js';
export { isAllowedPushEndpoint, isPublicHttpsEndpoint } from './notifications/push-endpoint.js';
export type { NotificationRegistry } from './notifications/registry.js';
export { createNotificationRegistry } from './notifications/registry.js';
export type { NotificationService, NotificationServiceDeps } from './notifications/service.js';
export { createNotificationService } from './notifications/service.js';
export type { SSEManager } from './notifications/sse.js';
export { createSSEManager } from './notifications/sse.js';
export type { NotificationTypeDefinition } from './notifications/types.js';
export type { ChallengeEntry, ChallengeStore } from './passkey/challenge-store.js';
export { createInMemoryChallengeStore } from './passkey/challenge-store.js';
export { WebAuthnError } from './passkey/errors.js';
export { createPasskeyHandlers } from './passkey/handlers.js';
export type { VerifiedAssertion, VerifiedRegistration, WebAuthnConfig } from './passkey/webauthn.js';
export { generateAuthenticationOptions, generateRegistrationOptions, verifyAssertion, verifyRegistration } from './passkey/webauthn.js';
export type { PasswordVerifyResult } from './password.js';
export { hashPassword, validatePasswordStrength, verifyPassword, verifyPasswordWithMigration } from './password.js';
export type { RateLimiter, RateLimitResult, RateLimitStore } from './rate-limit.js';
export { createRateLimiter } from './rate-limit.js';
export type { RotateOutcome, SessionMeta } from './refresh-token.js';
export { clearRefreshCookie, issueRefreshToken, readRefreshCookie, refreshCookieName, resolveJwtConfig, revokeRefreshFromCookie, rotateRefreshToken, setRefreshCookie } from './refresh-token.js';
export { resetRateLimiters } from './secret-registry.js';
export type { SecurityHeadersConfig } from './security-headers.js';
export { applySecurityHeaders } from './security-headers.js';
export { applyRotationOutcome, clearSessionCookie, endSession, establishSession, getSessionFromCookie, resolveSessionMeta, sessionPayload, setSessionCookie } from './session.js';
export type { TotpAlgorithm } from './totp.js';
export { base32Decode, base32Encode, buildOtpauthUri, decryptSecret, encryptSecret, generateTotpSecret, verifyTotp } from './totp.js';