@absolutejs/auth 0.55.5 → 0.55.7

package/README.md

@@ -5,7 +5,12 @@ Server applications should import the primary authentication contract from
 session types, route protection, provider configuration, and the other core
 server utilities without loading declarations for every optional Auth feature.
 The root entry point remains available for applications that need the complete
-feature export surface.
+feature export surface. `auth()` exposes the complete reusable request context
+(`protectRoute`, `requireRecentAuth`, optional `protectPermission`, and
+`protectAgent`) while keeping its declaration bounded. Consumers that need the
+typed configurable route applications themselves can call
+`createAuthApplications()` from the root entry point and compose its
+`coreRoutes`, `featureRoutes`, and `authContext` applications independently.
 
 ## Overview
 

package/dist/agents/index.js

@@ -1425,6 +1425,23 @@ var resolveAgentPrincipal = async (request, config) => {
 };
 // src/agents/context.ts
 import { Elysia } from "elysia";
+
+// src/pluginIdentity.ts
+var dependencyIds = new WeakMap;
+var nextDependencyId = 1;
+var pluginDependencySeed = (dependency) => {
+  if (dependency === undefined)
+    return "default";
+  const existing = dependencyIds.get(dependency);
+  if (existing !== undefined)
+    return existing;
+  const identity = nextDependencyId;
+  nextDependencyId += 1;
+  dependencyIds.set(dependency, identity);
+  return identity;
+};
+
+// src/agents/context.ts
 var DELETE_CODE_POINT = 127;
 var HTTP_FORBIDDEN = 403;
 var HTTP_UNAUTHORIZED = 401;
@@ -1467,14 +1484,19 @@ var failureResponse = (config, failure, requiredScopes) => new Response(JSON.str
   },
   status: failure.code === "Forbidden" ? HTTP_FORBIDDEN : HTTP_UNAUTHORIZED
 });
-var agentAuthContextPlugin = (config) => new Elysia().derive(({ request }) => ({
+var agentAuthContextPlugin = (config) => new Elysia({
+  name: "@absolutejs/auth/agent-context",
+  seed: pluginDependencySeed(config)
+}).derive(({ request }) => ({
   protectAgent: async (requiredScopes, handleAuth, handleAuthFail) => {
     if (config === undefined) {
       const failure = {
         code: "Unauthorized",
         message: "Agent is not authenticated"
       };
-      return await handleAuthFail?.(failure) ?? new Response(failure.message, { status: HTTP_UNAUTHORIZED });
+      return await handleAuthFail?.(failure) ?? new Response(failure.message, {
+        status: HTTP_UNAUTHORIZED
+      });
     }
     const principal = await resolveAgentPrincipal(request, config);
     if (principal === undefined) {
@@ -1493,8 +1515,9 @@ var agentAuthContextPlugin = (config) => new Elysia().derive(({ request }) => ({
     }
     return handleAuth(principal);
   }
-}));
+})).as("global");
 // src/agents/routes.ts
+import { Elysia as Elysia2 } from "elysia";
 var HTTP_BAD_REQUEST = 400;
 var HTTP_OK = 200;
 var HTTP_UNAUTHORIZED2 = 401;
@@ -1559,8 +1582,15 @@ var parseRegistrationInput = (value) => {
   return input;
 };
 var escapeHtml = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
-var agentAuthPlugin = (config) => {
-  const plugin = agentAuthContextPlugin(config);
+var agentAuthPlugin = (config) => new Elysia2({
+  name: "@absolutejs/auth/agent",
+  seed: pluginDependencySeed(config)
+}).use(agentAuthContextPlugin(config)).use(agentAuthRoutes(config)).as("global");
+var agentAuthRoutes = (config) => {
+  const plugin = new Elysia2({
+    name: "@absolutejs/auth/agent-routes",
+    seed: pluginDependencySeed(config)
+  });
   if (config === undefined)
     return plugin.as("global");
   if (config.agentRegistration === undefined) {
@@ -12836,5 +12866,5 @@ export {
   AGENT_CLAIM_GRANT_TYPE
 };
 
-//# debugId=35BBF77DF315307D64756E2164756E21
+//# debugId=0C42692E8F64E63E64756E2164756E21
 //# sourceMappingURL=index.js.map