1/** 2 * @factory/auth — authentication primitives. 3 * 4 * Public surface: 5 * - tokens: sign/verify HS256 JWTs (node:crypto), refresh rotation w/ family reuse detection 6 * - passwords: policy + hash/verify (PBKDF2 scaffold, bcrypt-swappable interface) 7 * - sessions: server-side session registry (storage-agnostic) 8 */ 9export * from "./tokens.js"; 10export * from "./passwords.js"; 11export * from "./sessions.js"; 12