@jskit-ai/auth-core 0.1.102 → 0.1.104

package/package.descriptor.mjs

@@ -1,7 +1,7 @@
 export default Object.freeze({
   "packageVersion": 1,
   "packageId": "@jskit-ai/auth-core",
-  "version": "0.1.102",
+  "version": "0.1.104",
   "kind": "runtime",
   "dependsOn": [
     "@jskit-ai/value-app-config-shared"
@@ -74,7 +74,7 @@ export default Object.freeze({
   "mutations": {
     "dependencies": {
       "runtime": {
-        "@jskit-ai/kernel": "0.1.104",
+        "@jskit-ai/kernel": "0.1.106",
         "@fastify/cookie": "^11.0.2",
         "@fastify/csrf-protection": "^7.1.0",
         "@fastify/rate-limit": "^10.3.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/auth-core",
-  "version": "0.1.102",
+  "version": "0.1.104",
   "type": "module",
   "scripts": {
     "test": "node --test"
@@ -54,7 +54,7 @@
     "./shared/commands/authSessionReadCommand": "./src/shared/commands/authSessionReadCommand.js"
   },
   "dependencies": {
-    "@jskit-ai/kernel": "0.1.104",
+    "@jskit-ai/kernel": "0.1.106",
     "@fastify/cookie": "^11.0.2",
     "@fastify/csrf-protection": "^7.1.0",
     "@fastify/rate-limit": "^10.3.0",

package/src/server/authActor.js

@@ -39,6 +39,7 @@ function normalizeAuthActor(value = {}, options = {}) {
   const appUserId = normalizeOpaqueId(source.appUserId || source.profileId || source.userProfileId, {
     fallback: null
   });
+  const id = appUserId || providerUserId;
   const authIdentityId = String(source.authIdentityId || createAuthIdentityId(provider, providerUserId)).trim();
 
   if (!providerUserId || !email) {
@@ -46,6 +47,7 @@ function normalizeAuthActor(value = {}, options = {}) {
   }
 
   return Object.freeze({
+    id,
     authIdentityId,
     provider,
     providerUserId,
@@ -61,9 +63,8 @@ function buildLegacyProfileFromActor(actorLike) {
   if (!actor) {
     return null;
   }
-  const id = actor.appUserId || actor.providerUserId || actor.authIdentityId;
   return Object.freeze({
-    id,
+    id: actor.id || actor.appUserId || actor.providerUserId || actor.authIdentityId,
     email: actor.email,
     displayName: actor.displayName,
     authProvider: actor.provider,

package/test/authContract.test.js

@@ -96,6 +96,7 @@ test("normalizeAuthActor builds the stable actor and legacy profile bridge", ()
   });
 
   assert.deepEqual(actor, {
+    id: "42",
     authIdentityId: "supabase:abc-123",
     provider: "supabase",
     providerUserId: "abc-123",
@@ -123,10 +124,36 @@ test("normalizeAuthActor preserves opaque app user ids", () => {
     profileSource: "users"
   });
 
+  assert.equal(actor.id, "app-user-1");
   assert.equal(actor.appUserId, "app-user-1");
   assert.equal(buildLegacyProfileFromActor(actor).id, "app-user-1");
 });
 
+test("normalizeAuthActor exposes projected app user id as the stable actor id", () => {
+  const actor = normalizeAuthActor({
+    provider: "local",
+    providerUserId: "provider-user-1",
+    email: "local@example.com",
+    appUserId: "app-user-1"
+  });
+
+  assert.equal(actor.id, "app-user-1");
+  assert.equal(actor.appUserId, "app-user-1");
+  assert.equal(actor.providerUserId, "provider-user-1");
+});
+
+test("normalizeAuthActor falls back to provider user id when no app user is projected", () => {
+  const actor = normalizeAuthActor({
+    provider: "local",
+    providerUserId: "provider-user-1",
+    email: "local@example.com"
+  });
+
+  assert.equal(actor.id, "provider-user-1");
+  assert.equal(actor.appUserId, null);
+  assert.equal(actor.providerUserId, "provider-user-1");
+});
+
 test("normalizeAuthSecurityStatus emits policy and legacy authPolicy aliases", () => {
   const status = buildSecurityStatusFromAuthMethodsStatus(
     {