# Kavach

> A drop-in authentication framework for SvelteKit with unified API across multiple
> platforms, declarative route protection, and pre-built UI components.

Kavach provides a single authentication abstraction for SvelteKit apps. Swap between
Supabase, Firebase, Auth0, AWS Amplify, or Convex by changing one config value.
Route protection rules are declared once in `kavach.config.js` and enforced
server-side via a SvelteKit hook.

## Core Packages

- [Auth](./auth.txt): Core client — createKavach, session management, auth state
- [Sentry](./sentry.txt): Route protection engine — rules, roles, redirect logic
- [UI](./ui.txt): Pre-built Svelte components — AuthProvider, AuthPage
- [Vite Plugin](./vite.txt): Virtual module generation from kavach.config.js
- [Logger](./logger.txt): Structured audit logging with adapter support
- [Query](./query.txt): Declarative data query helpers
- [Cookie](./cookie.txt): Cookie serialization and parsing utilities
- [Hashing](./hashing.txt): Password and token hashing utilities
- [CLI](./cli.txt): Scaffolding CLI — kavach init, kavach add

## Adapters

- [Supabase](./adapter-supabase.txt): Full capabilities — auth, data, RPC, logging
- [Firebase](./adapter-firebase.txt): Auth, OAuth, magic link, passkey
- [Auth0](./adapter-auth0.txt): Auth, OAuth, magic link, password
- [AWS Amplify](./adapter-amplify.txt): Auth, OAuth, password (Cognito)
- [Convex](./adapter-convex.txt): Auth, OAuth, password

## Quick Start

Install:

```bash
npm install kavach @kavach/sentry @kavach/ui @kavach/vite
npm install @kavach/adapter-supabase  # or other adapter
```

See [Auth](./auth.txt) for full setup instructions.