auth

var (
	// NewHooks creates a new native typed lifecycle hooks and event dispatcher.
	NewHooks = plugin.NewHooks

	// WithHooks configures a custom hooks dispatcher in engine configuration.
	WithHooks = config.WithHooks

	// WithAsyncHooks configures whether lifecycle hooks are dispatched asynchronously.
	WithAsyncHooks = config.WithAsyncHooks
)

var (
	// NewPipeline creates a new synchronous execution pipeline.
	NewPipeline = plugin.NewPipeline

	// WithInterceptor registers interceptors globally in engine configuration.
	WithInterceptor = config.WithInterceptor

	// WithBeforeSignIn registers a BeforeSignIn functional interceptor.
	WithBeforeSignIn = config.WithBeforeSignIn

	// WithAfterSignIn registers an AfterSignIn functional interceptor.
	WithAfterSignIn = config.WithAfterSignIn

	// WithBeforeSignUp registers a BeforeSignUp functional interceptor.
	WithBeforeSignUp = config.WithBeforeSignUp

	// WithAfterSignUp registers an AfterSignUp functional interceptor.
	WithAfterSignUp = config.WithAfterSignUp

	// WithBeforeCreateSession registers a BeforeCreateSession functional interceptor.
	WithBeforeCreateSession = config.WithBeforeCreateSession

	// WithAfterCreateSession registers an AfterCreateSession functional interceptor.
	WithAfterCreateSession = config.WithAfterCreateSession

	// WithCallInterceptor attaches an interceptor scoped strictly to an individual call.
	WithCallInterceptor = plugin.WithCallInterceptor
)

var (
	// ErrSessionRepositoryRequired is returned when session operations are invoked without configuring a SessionRepository.
	ErrSessionRepositoryRequired = errors.New("auth: session repository is required")

	// ErrSessionManagerRequired is returned when session operations are invoked without an active SessionManager in context.
	ErrSessionManagerRequired = plugin.ErrSessionManagerRequired

	// ErrInvalidUserID is returned when an empty user ID is provided to session creation.
	ErrInvalidUserID = errors.New("auth: user ID cannot be empty")

	// ErrMFAEngineNotConfigured is returned when attempting MFA challenge verification without a registered MFAProvider plugin.
	ErrMFAEngineNotConfigured = domain.ErrMFAEngineNotConfigured

	// ErrInvalidChallengeToken is returned when an invalid challenge token is submitted.
	ErrInvalidChallengeToken = domain.ErrInvalidChallengeToken

	// ErrChallengeExpired is returned when a challenge token has exceeded its validity time.
	ErrChallengeExpired = domain.ErrChallengeExpired
)

var (
	// DefaultSessionConfig returns default session lifetime settings.
	DefaultSessionConfig = config.DefaultSessionConfig

	// WithDuration configures a custom expiration duration for the session.
	WithDuration = plugin.WithDuration

	// WithRememberMe configures extended session lifetime for remember-me requests.
	WithRememberMe = plugin.WithRememberMe

	// WithIPAddress sets the client IP address initiating the session.
	WithIPAddress = plugin.WithIPAddress

	// WithUserAgent sets the client User-Agent initiating the session.
	WithUserAgent = plugin.WithUserAgent

	// WithDeviceID sets the physical device identifier for the session.
	WithDeviceID = plugin.WithDeviceID

	// WithExtra sets a single dynamic metadata key-value in the session.
	WithExtra = plugin.WithExtra

	// WithExtraMap copies dynamic metadata key-value pairs into the session.
	WithExtraMap = plugin.WithExtraMap
)