@junejs/server 0.1.2-dev.9 → 1.0.0-dev.10

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { AdapterCapabilities, AdapterEmitContext, AdapterEntry, JuneAdapter, ResourcePlan, deno, staticSite, vercel, workers } from "./adapter.js";
 import { CreateAppOptions, JuneApp, createApp } from "./app.js";
 import { R2Bucket, localBlob, r2 } from "./blob.js";
-import { a as Pipeline, d as createPipeline, n as LayoutComponent, o as PipelineConfig, s as Resolved, u as RouteResolver } from "./pipeline-CCp9idQ4.js";
+import { a as Pipeline, d as createPipeline, n as LayoutComponent, o as PipelineConfig, s as Resolved, u as RouteResolver } from "./pipeline-cCR6MGNK.js";
 import { WorkerManifest, createWorker } from "./worker.js";
 import { BuildResult, buildManifest, freezeConfig, generateContent, juneBuild, scanRoutes } from "./build.js";
 import { loadJuneConfig } from "./config-loader.js";

package/dist/{pipeline-CCp9idQ4.d.ts → pipeline-cCR6MGNK.d.ts}

@@ -4,6 +4,7 @@ import React from "react";
 import { DocumentConfig } from "@junejs/core/document";
 import { I18nConfig } from "@junejs/core/i18n";
 import { Resources } from "@junejs/core/resources";
+import { Principal, Session } from "@junejs/core/context";
 //#region src/pipeline.d.ts
 type LayoutComponent = React.ComponentType<{
   children: React.ReactNode;
@@ -32,6 +33,13 @@ type PipelineConfig = {
   resolve: RouteResolver;
   resources?: () => Promise<Resources> | Resources;
   services?: () => Promise<unknown> | unknown;
+  identity?: (request: Request) => Promise<{
+    user?: Principal;
+    session?: Session;
+  }> | {
+    user?: Principal;
+    session?: Session;
+  };
   earlyHints?: string[];
   htmlCacheControl?: string;
   notFoundComponent?: React.ComponentType<{

package/dist/pipeline.d.ts

@@ -1,2 +1,2 @@
-import { a as Pipeline, c as ResolvedResource, d as createPipeline, i as MiddlewareHandler, l as ResourceHandler, n as LayoutComponent, o as PipelineConfig, r as LoadingComponent, s as Resolved, t as ExtraHandler, u as RouteResolver } from "./pipeline-CCp9idQ4.js";
+import { a as Pipeline, c as ResolvedResource, d as createPipeline, i as MiddlewareHandler, l as ResourceHandler, n as LayoutComponent, o as PipelineConfig, r as LoadingComponent, s as Resolved, t as ExtraHandler, u as RouteResolver } from "./pipeline-cCR6MGNK.js";
 export { ExtraHandler, LayoutComponent, LoadingComponent, MiddlewareHandler, Pipeline, PipelineConfig, Resolved, ResolvedResource, ResourceHandler, RouteResolver, createPipeline };

package/dist/pipeline.js

@@ -171,7 +171,10 @@ function createPipeline(cfg) {
 		const url = new URL(request.url);
 		if (url.pathname === "/mcp") {
 			if (!agent.mcp) return notFoundResponse("view", url.pathname);
-			return mcpHandler(request, { request });
+			return mcpHandler(request, {
+				request,
+				...cfg.identity ? await cfg.identity(request) : void 0
+			});
 		}
 		if (request.method === "GET" && agent.discovery) {
 			const d = await discovery(url);

package/dist/worker.d.ts

@@ -1,4 +1,4 @@
-import { l as ResourceHandler, n as LayoutComponent, r as LoadingComponent, t as ExtraHandler } from "./pipeline-CCp9idQ4.js";
+import { l as ResourceHandler, n as LayoutComponent, r as LoadingComponent, t as ExtraHandler } from "./pipeline-cCR6MGNK.js";
 import { BrandedRoute } from "@junejs/core/route";
 import { AgentConfig } from "@junejs/core/config";
 import React from "react";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@junejs/server",
-  "version": "0.1.2-dev.9",
+  "version": "1.0.0-dev.10",
   "description": "June host adapters + dev server. Host-coupled; depends on the pure @junejs/core contract layer.",
   "type": "module",
   "license": "MIT",
@@ -125,14 +125,14 @@
     "build": "tsdown"
   },
   "dependencies": {
-    "@junejs/db": ">=0.0.34-dev.0",
+    "@junejs/db": ">=0.0.34-dev.1",
     "@momiji-rs/sparkdown": "^0.0.4",
     "lightningcss": "^1.27.0",
     "oxc-parser": "^0.137.0",
     "rolldown": "^1.1.0"
   },
   "peerDependencies": {
-    "@junejs/core": ">=0.1.1-dev.16",
+    "@junejs/core": ">=0.2.0-dev.26",
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "react-server-dom-webpack": "19.2.7",
@@ -156,7 +156,8 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/junebuild/june"
+    "url": "git+https://github.com/junebuild/june.git",
+    "directory": "packages/june"
   },
   "devDependencies": {
     "@libsql/client": "^0.17.3",

package/src/pipeline.ts

@@ -34,6 +34,7 @@ import {
   sitemapXml,
 } from "@junejs/core/discovery";
 import { mcpHandler, mcpTools } from "@junejs/core/mcp";
+import type { Principal, Session } from "@junejs/core/context";
 
 import { ensureScope, runInScope, setRequestLocale } from "@junejs/db";
 import type { AgentConfig } from "@junejs/core/config";
@@ -126,6 +127,14 @@ export type PipelineConfig = {
   // `currentServices()` resolves in loaders/views/actions. Absent → currentServices()
   // is undefined. This is the Worker-side twin of a Durable Object seeding services.
   services?: () => Promise<unknown> | unknown;
+  // Resolve the request's authenticated identity (the auth integration's job —
+  // e.g. Better Auth reading the session cookie). The result rides every
+  // ActionContext the pipeline builds, starting with the /mcp mount, so
+  // requiresPrincipal actions and per-call connection auth see the SAME
+  // principal a UI dispatch would. Absent → anonymous (identity-gated actions
+  // reject); a THROWING resolver propagates as a server error — it must never
+  // silently degrade to anonymous.
+  identity?: (request: Request) => Promise<{ user?: Principal; session?: Session }> | { user?: Principal; session?: Session };
   earlyHints?: string[];
   htmlCacheControl?: string;
   notFoundComponent?: React.ComponentType<{ pathname: string }>;
@@ -473,9 +482,11 @@ export function createPipeline(cfg: PipelineConfig): Pipeline {
       if (url.pathname === "/mcp") {
         if (!agent.mcp) return notFoundResponse("view", url.pathname);
         // The agent's tool calls run inside the same request scope, so an action's
-        // ambient `db` is the SAME resource the UI uses (and, once auth is wired,
-        // the same principal via ctx). ctx carries identity only — not resources.
-        return mcpHandler(request, { request });
+        // ambient `db` is the SAME resource the UI uses, and — via cfg.identity —
+        // the same principal: requiresPrincipal actions and per-call connection
+        // auth are live on this surface. ctx carries identity only — not resources.
+        const identity = cfg.identity ? await cfg.identity(request) : undefined;
+        return mcpHandler(request, { request, ...identity });
       }
       if (request.method === "GET" && agent.discovery) {
         const d = await discovery(url);