@authhero/cloudflare-adapter 3.4.0 → 4.0.0

package/dist/types/index.d.ts

@@ -23,7 +23,7 @@ export { createAnalyticsEngineOutboxMetricsSink } from "./analytics-engine-outbo
 export type { AnalyticsEngineOutboxMetricsConfig, OutboxMetricRecord, } from "./analytics-engine-outbox-metrics";
 export { createR2SQLLogsAdapter } from "./r2-sql-logs";
 export { createR2SQLStatsAdapter } from "./r2-sql-logs";
-export { createCloudflareWfpD1Provisioner, createWfpProvisionerSteps, createWfpTenantProvisioningHook, createWfpForwardMiddleware, CloudflareApiClient, CloudflareApiError, } from "./wfp-provisioner";
+export { createCloudflareWfpD1Provisioner, createWfpProvisionerSteps, createWfpTenantProvisioningHook, createWfpForwardMiddleware, DEFAULT_LOCAL_PATHS, CloudflareApiClient, CloudflareApiError, } from "./wfp-provisioner";
 export type { CloudflareWfpD1Provisioner, CloudflareWfpD1ProvisionerOptions, TenantProvisionerSteps, TenantProvisionNames, WfpProvisionerSteps, ProvisionResult, ProvisionerMigration, TenantSecretsResolver, WfpTenantProvisioningHook, WfpTenantProvisioningHookOptions, CfApiClientOptions, D1Database, D1QueryResult, ScriptBinding, ScriptUploadOptions, WfpForwardOptions, } from "./wfp-provisioner";
 export interface CloudflareAdapters {
     customDomains: CustomDomainsAdapter;

package/dist/types/wfp-provisioner/index.d.ts

@@ -5,7 +5,7 @@ export { collectSyncDefaultsErrors } from "./sync-defaults-errors";
 export type { CloudflareWfpD1Provisioner, CloudflareWfpD1ProvisionerOptions, ProvisionResult, ProvisionerMigration, TenantSecretsResolver, } from "./types";
 export { createWfpTenantProvisioningHook } from "./tenant-hook";
 export type { WfpTenantProvisioningHook, WfpTenantProvisioningHookOptions, } from "./tenant-hook";
-export { createWfpForwardMiddleware } from "./wfp-forward";
+export { createWfpForwardMiddleware, DEFAULT_LOCAL_PATHS } from "./wfp-forward";
 export type { WfpForwardOptions } from "./wfp-forward";
 export { CloudflareApiClient, CloudflareApiError } from "./cf-api";
 export type { CfApiClientOptions, D1Database, D1QueryResult, ScriptBinding, ScriptUploadOptions, } from "./cf-api";

package/dist/types/wfp-provisioner/wfp-forward.d.ts

@@ -1,5 +1,18 @@
 import type { Context, MiddlewareHandler } from "hono";
 import type { TenantsDataAdapter } from "@authhero/adapter-interfaces";
+/**
+ * Path prefixes served from the control plane rather than dispatched to a
+ * tenant worker. These are shared static assets that are byte-identical across
+ * tenants and only exist on the control plane's deployment.
+ *
+ * `/u/widget/` is the universal-login (u2) widget bundle. It's a multi-file
+ * Stencil bundle the SSR'd pages load as an ES module to hydrate the form. A
+ * per-tenant dispatch worker has no static-assets binding and no configured
+ * `widgetHandler`, so forwarding these requests 404s and the u2 buttons render
+ * inert. Serving them from the control plane — where the assets live — keeps
+ * zero per-tenant weight.
+ */
+export declare const DEFAULT_LOCAL_PATHS: readonly string[];
 export interface WfpForwardOptions {
     /** Tenants adapter, used to look up the resolved tenant's `deployment_type`. */
     tenants: TenantsDataAdapter;
@@ -29,11 +42,16 @@ export interface WfpForwardOptions {
      * handlers.
      *
      * Use this for shared static assets that only the control plane can serve —
-     * a per-tenant dispatch worker has no static-assets binding. Defaults to
-     * `["/u/widget/"]` (the universal-login widget bundle); pass `[]` to disable
-     * the carve-out entirely, or extend the list for other shared assets.
+     * a per-tenant dispatch worker has no static-assets binding. These are added
+     * to `DEFAULT_LOCAL_PATHS` (the universal-login widget bundle), so a default
+     * added later is not lost by anyone who passes their own list.
      */
     localPaths?: string[];
+    /**
+     * Whether `DEFAULT_LOCAL_PATHS` apply. Defaults to `true`; pass `false` to
+     * dispatch even the default paths and carve out only `localPaths`.
+     */
+    includeDefaultLocalPaths?: boolean;
 }
 /**
  * Hono middleware that forwards a request to its tenant's WFP worker over a
@@ -49,8 +67,8 @@ export interface WfpForwardOptions {
  * The tenant worker receives the original request verbatim and owns the full
  * response.
  *
- * Requests whose path matches `localPaths` (default `["/u/widget/"]`) are also
- * never dispatched — they are shared static assets that only the control plane
- * can serve, so a per-tenant worker would 404 them. See `DEFAULT_LOCAL_PATHS`.
+ * Requests whose path matches `DEFAULT_LOCAL_PATHS` (`["/u/widget/"]`) or the
+ * extra `localPaths` are also never dispatched — they are shared static assets
+ * that only the control plane can serve, so a per-tenant worker would 404 them.
  */
 export declare function createWfpForwardMiddleware(options: WfpForwardOptions): MiddlewareHandler;

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/sesamyab/authhero"
   },
-  "version": "3.4.0",
+  "version": "4.0.0",
   "files": [
     "dist"
   ],
@@ -48,7 +48,7 @@
     "vite": "^8.0.14",
     "vitest": "^4.1.7",
     "@authhero/multi-tenancy": "15.4.0",
-    "authhero": "9.27.0"
+    "authhero": "9.27.1"
   },
   "peerDependencies": {
     "@authhero/multi-tenancy": "^14.0.0",