Core runtime helpers for Verge Kit applications.
@vergekit/core/utilities@vergekit/core/http@vergekit/core/email@vergekit/core/auth
npm install
npm run verifyBuild before publishing:
npm run build
npm publish --access public@vergekit/core is available under the MIT License.
The shared auth handler lets signed-in users change their email immediately, without a password prompt or a confirmation link.
VK trusts the replacement address for sign-in and recovery.
The shared POST /api/auth/change-email-direct handler requires a valid session and rejects banned users.
It normalizes addresses and rejects an address that another account uses.
Database uniqueness also protects simultaneous requests.
The current session stays active, and the handler revokes other sessions.
The link-based email change endpoint stays disabled.
Initial registration still requires email verification.