@frockbot/cloudflare 0.7.292 → 0.7.294

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frockbot/cloudflare",
-  "version": "0.7.292",
+  "version": "0.7.294",
   "private": false,
   "license": "MIT",
   "type": "module",
@@ -23,12 +23,12 @@
     "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.access.json && tsc --noEmit -p test/tsconfig.json && tsc --noEmit -p e2e/tsconfig.json"
   },
   "dependencies": {
-    "@frockbot/app": "0.7.292",
-    "@frockbot/applets": "0.7.292",
-    "@frockbot/computer": "0.7.292",
-    "@frockbot/core": "0.7.292",
-    "@frockbot/frock-compose": "0.7.292",
-    "@frockbot/providers": "0.7.292",
+    "@frockbot/app": "0.7.294",
+    "@frockbot/applets": "0.7.294",
+    "@frockbot/computer": "0.7.294",
+    "@frockbot/core": "0.7.294",
+    "@frockbot/frock-compose": "0.7.294",
+    "@frockbot/providers": "0.7.294",
     "@rive-app/flutter-native-wasm": "44.0.0",
     "agents": "0.24.0",
     "ai": "^7.0.107",

package/src/admin-identities.ts

@@ -8,6 +8,8 @@ export const DEVELOPMENT_USER_ID = "development";
 export interface GatewayIdentityV1 {
   id: string;
   email?: string;
+  /** Whether the provider verified `email`; an unverified one names nobody. */
+  emailVerified?: boolean;
   mode: "better-auth" | "development";
 }
 
@@ -19,7 +21,11 @@ export function isDeploymentAdminV1(
     return true;
   }
   const emails = adminEmailsV1(configuredEmails);
-  if (identity.email && emails.has(identity.email.trim().toLowerCase())) {
+  if (
+    identity.emailVerified === true &&
+    identity.email &&
+    emails.has(identity.email.trim().toLowerCase())
+  ) {
     return true;
   }
   return identity.mode === "development" && emails.size === 0;

package/src/gateway.ts

@@ -432,6 +432,7 @@ async function identifyRequest(
       {
         id: userId,
         ...(session?.user.email ? { email: session.user.email } : {}),
+        emailVerified: session?.user.emailVerified === true,
         mode: development.userId ? "development" : "better-auth",
       },
       dependencies.adminEmails,

package/src/index.ts

@@ -441,7 +441,12 @@ function debugSurface(env: Env): DebugGatewaySurface {
       return (
         identity != null &&
         isDeploymentAdminV1(
-          { id: identity.id, email: identity.email, mode: "better-auth" },
+          {
+            id: identity.id,
+            email: identity.email,
+            emailVerified: identity.emailVerified,
+            mode: "better-auth",
+          },
           env.FROCKBOT_ADMIN_EMAILS,
         )
       );
@@ -849,7 +854,12 @@ async function storedAdmissionIdentity(
     ...(email === undefined ? {} : { email }),
     emailVerified: identity.emailVerified,
     isAdmin: isDeploymentAdminV1(
-      { id: identity.id, email: identity.email, mode: "better-auth" },
+      {
+        id: identity.id,
+        email: identity.email,
+        emailVerified: identity.emailVerified,
+        mode: "better-auth",
+      },
       env.FROCKBOT_ADMIN_EMAILS,
     ),
   };
@@ -914,7 +924,12 @@ async function mayCreateIdentity(
   if (email === undefined) return false;
   if (
     isDeploymentAdminV1(
-      { id: email, email, mode: "better-auth" },
+      {
+        id: email,
+        email,
+        emailVerified: candidate.emailVerified,
+        mode: "better-auth",
+      },
       env.FROCKBOT_ADMIN_EMAILS,
     )
   ) {