@lunora/auth 1.0.0-alpha.192 → 1.0.0-alpha.194

package/dist/adapter.d.mts

@@ -1,4 +1,4 @@
 import 'better-auth/adapters';
-export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-BW_ovHul.mjs";
+export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-CaPwF2v3.mjs";
 import "./sql-store.mjs";
 import "./store.mjs";

package/dist/adapter.d.ts

@@ -1,4 +1,4 @@
 import 'better-auth/adapters';
-export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-BWw-tC_U.js";
+export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-CElAPJ1U.js";
 import "./sql-store.js";
 import "./store.js";

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { D as DoStorageLike } from "./packem_shared/adapter.d-BW_ovHul.mjs";
-export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-BW_ovHul.mjs";
+import { D as DoStorageLike } from "./packem_shared/adapter.d-CaPwF2v3.mjs";
+export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-CaPwF2v3.mjs";
 import { LunoraError } from '@lunora/errors';
 import { L as LunoraAuth, a as LunoraAuthOptions } from "./packem_shared/create-auth.d-D1CKOFWc.mjs";
 export { c as createAuth, r as resolveAuthOptions } from "./packem_shared/create-auth.d-D1CKOFWc.mjs";
@@ -749,7 +749,6 @@ declare const READ_AUDIT_PATH = "/__lunora/auth/audit";
 declare const INTERNAL_SECRET_HEADER = "x-lunora-auth-do-secret";
 /**
  * Options for the auth DO, beyond the better-auth options themselves.
- * @experimental
  */
 interface AuthDoOptions {
   /**
@@ -778,7 +777,6 @@ interface AuthDoOptions {
  *     }
  * }
  * ```
- * @experimental
  */
 declare class LunoraAuthDO {
   #private;
@@ -835,7 +833,6 @@ declare const handleAuthDiscoveryRequest: (auth: LunoraAuth, request: Request) =
  * here is the name better-auth's introspection expects to find.
  * @param options The better-auth options the DO will run — the plugin list decides which tables exist.
  * @returns SQL statements to execute in order.
- * @experimental
  */
 declare const authDoSchemaStatements: (options: LunoraAuthOptions) => string[];
 /**
@@ -866,7 +863,6 @@ declare const authDoSchemaStatements: (options: LunoraAuthOptions) => string[];
  * @param options The better-auth options the DO runs, already resolved.
  * @param existingColumns Physical column names currently present on a table; empty/absent for a table that does not exist yet (it will be created instead).
  * @returns SQL statements to execute in order; empty when the live schema is current.
- * @experimental
  */
 declare const authDoColumnAdditions: (options: LunoraAuthOptions, existingColumns: (table: string) => Iterable<string>) => string[];
 /** What one table looked like after a copy call. */
@@ -1015,7 +1011,6 @@ interface DoAuthWiring {
  * The exception is a `jurisdiction` the namespace cannot express, which throws here.
  * @param options The resolved namespace, secret, and names.
  * @returns The `authHandler` / `resolveIdentity` pair.
- * @experimental
  */
 declare const createDoAuthWiring: (options: DoAuthWiringOptions) => DoAuthWiring;
 /** better-auth's `databaseHooks` shape, derived so a rename upstream fails to compile rather than silently mis-hooking. */
@@ -1082,7 +1077,6 @@ declare const handleAuthRequest: (auth: LunoraAuth, request: Request, basePath?:
  * @param accountTable Physical name of the account table (`account` unless renamed via `account.modelName`).
  * @param indexNames Indexes to drop first, from {@link indexesReferencingIssuer}.
  * @returns The `DROP INDEX` statements followed by the `DROP COLUMN`.
- * @experimental
  */
 declare const legacyIssuerCleanupStatements: (accountTable?: string, indexNames?: Iterable<string>) => string[];
 /**

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { D as DoStorageLike } from "./packem_shared/adapter.d-BWw-tC_U.js";
-export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-BWw-tC_U.js";
+import { D as DoStorageLike } from "./packem_shared/adapter.d-CElAPJ1U.js";
+export { l as lunoraAuthAdapter, a as lunoraD1Adapter, b as lunoraDoAdapter } from "./packem_shared/adapter.d-CElAPJ1U.js";
 import { LunoraError } from '@lunora/errors';
 import { L as LunoraAuth, a as LunoraAuthOptions } from "./packem_shared/create-auth.d-D1CKOFWc.js";
 export { c as createAuth, r as resolveAuthOptions } from "./packem_shared/create-auth.d-D1CKOFWc.js";
@@ -749,7 +749,6 @@ declare const READ_AUDIT_PATH = "/__lunora/auth/audit";
 declare const INTERNAL_SECRET_HEADER = "x-lunora-auth-do-secret";
 /**
  * Options for the auth DO, beyond the better-auth options themselves.
- * @experimental
  */
 interface AuthDoOptions {
   /**
@@ -778,7 +777,6 @@ interface AuthDoOptions {
  *     }
  * }
  * ```
- * @experimental
  */
 declare class LunoraAuthDO {
   #private;
@@ -835,7 +833,6 @@ declare const handleAuthDiscoveryRequest: (auth: LunoraAuth, request: Request) =
  * here is the name better-auth's introspection expects to find.
  * @param options The better-auth options the DO will run — the plugin list decides which tables exist.
  * @returns SQL statements to execute in order.
- * @experimental
  */
 declare const authDoSchemaStatements: (options: LunoraAuthOptions) => string[];
 /**
@@ -866,7 +863,6 @@ declare const authDoSchemaStatements: (options: LunoraAuthOptions) => string[];
  * @param options The better-auth options the DO runs, already resolved.
  * @param existingColumns Physical column names currently present on a table; empty/absent for a table that does not exist yet (it will be created instead).
  * @returns SQL statements to execute in order; empty when the live schema is current.
- * @experimental
  */
 declare const authDoColumnAdditions: (options: LunoraAuthOptions, existingColumns: (table: string) => Iterable<string>) => string[];
 /** What one table looked like after a copy call. */
@@ -1015,7 +1011,6 @@ interface DoAuthWiring {
  * The exception is a `jurisdiction` the namespace cannot express, which throws here.
  * @param options The resolved namespace, secret, and names.
  * @returns The `authHandler` / `resolveIdentity` pair.
- * @experimental
  */
 declare const createDoAuthWiring: (options: DoAuthWiringOptions) => DoAuthWiring;
 /** better-auth's `databaseHooks` shape, derived so a rename upstream fails to compile rather than silently mis-hooking. */
@@ -1082,7 +1077,6 @@ declare const handleAuthRequest: (auth: LunoraAuth, request: Request, basePath?:
  * @param accountTable Physical name of the account table (`account` unless renamed via `account.modelName`).
  * @param indexNames Indexes to drop first, from {@link indexesReferencingIssuer}.
  * @returns The `DROP INDEX` statements followed by the `DROP COLUMN`.
- * @experimental
  */
 declare const legacyIssuerCleanupStatements: (accountTable?: string, indexNames?: Iterable<string>) => string[];
 /**

package/dist/packem_shared/{adapter.d-BWw-tC_U.d.ts → adapter.d-CElAPJ1U.d.ts}

@@ -83,7 +83,6 @@ declare const lunoraD1Adapter: (d1: Parameters<typeof d1Executor>[0]) => ReturnT
  * before reaching for it: the auth tables then live inside a single Durable Object.
  *
  * Schema-checked like {@link lunoraD1Adapter}, against the object's own SQLite.
- * @experimental
  */
 declare const lunoraDoAdapter: (storage: DoStorageLike) => ReturnType<typeof lunoraAuthAdapter>;
 export { DoStorageLike as D, lunoraD1Adapter as a, lunoraDoAdapter as b, lunoraAuthAdapter as l };

package/dist/packem_shared/{adapter.d-BW_ovHul.d.mts → adapter.d-CaPwF2v3.d.mts}

@@ -83,7 +83,6 @@ declare const lunoraD1Adapter: (d1: Parameters<typeof d1Executor>[0]) => ReturnT
  * before reaching for it: the auth tables then live inside a single Durable Object.
  *
  * Schema-checked like {@link lunoraD1Adapter}, against the object's own SQLite.
- * @experimental
  */
 declare const lunoraDoAdapter: (storage: DoStorageLike) => ReturnType<typeof lunoraAuthAdapter>;
 export { DoStorageLike as D, lunoraD1Adapter as a, lunoraDoAdapter as b, lunoraAuthAdapter as l };

package/dist/plugins-enterprise-client.d.mts

@@ -3,13 +3,11 @@ export type {
 /**
  * Adds `authClient.signIn.sso({ email | domain | providerId })`. Registering the
  * server `sso` plugin without this leaves those actions unavailable and untyped.
- * @experimental
  */
 ssoClient } from '@better-auth/sso/client';
 /**
  * The plugin instance `ssoClient()` returns. Exported so an app can type the array it
  * passes to `createAuthClient` when it assembles plugins conditionally.
- * @experimental
  */
 type SSOClientPlugin = ReturnType<typeof ssoClient>;
 export { SSOClientPlugin };

package/dist/plugins-enterprise-client.d.ts

@@ -3,13 +3,11 @@ export type {
 /**
  * Adds `authClient.signIn.sso({ email | domain | providerId })`. Registering the
  * server `sso` plugin without this leaves those actions unavailable and untyped.
- * @experimental
  */
 ssoClient } from '@better-auth/sso/client';
 /**
  * The plugin instance `ssoClient()` returns. Exported so an app can type the array it
  * passes to `createAuthClient` when it assembles plugins conditionally.
- * @experimental
  */
 type SSOClientPlugin = ReturnType<typeof ssoClient>;
 export { SSOClientPlugin };

package/dist/plugins-enterprise.d.mts

@@ -1657,7 +1657,6 @@ declare function sso$1<O extends SSOOptions>(options?: O | undefined): {
  *
  * SAML loads on workerd but its assertion-verify path (pure-JS RSA) has not been
  * measured against a Worker CPU budget — treat OIDC/OAuth2 as the supported mode.
- * @experimental
  */
 declare const sso: typeof sso$1;
 export {
@@ -1665,6 +1664,5 @@ export {
  * The OIDC provider configuration accepted by `registerSSOProvider` — exported so a
  * caller can type the config it builds (from env, a tenant record, …) before handing it
  * over.
- * @experimental
  */
 type OIDCConfig, sso };

package/dist/plugins-enterprise.d.ts

@@ -1657,7 +1657,6 @@ declare function sso$1<O extends SSOOptions>(options?: O | undefined): {
  *
  * SAML loads on workerd but its assertion-verify path (pure-JS RSA) has not been
  * measured against a Worker CPU budget — treat OIDC/OAuth2 as the supported mode.
- * @experimental
  */
 declare const sso: typeof sso$1;
 export {
@@ -1665,6 +1664,5 @@ export {
  * The OIDC provider configuration accepted by `registerSSOProvider` — exported so a
  * caller can type the config it builds (from env, a tenant record, …) before handing it
  * over.
- * @experimental
  */
 type OIDCConfig, sso };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/auth",
-  "version": "1.0.0-alpha.192",
+  "version": "1.0.0-alpha.194",
   "description": "Auth for Lunora — a thin better-auth wrapper: email/password, OAuth, plugins, D1-backed",
   "keywords": [
     "auth",
@@ -106,16 +106,16 @@
     "access": "public"
   },
   "dependencies": {
-    "@better-auth/api-key": "1.7.3",
-    "@better-auth/cimd": "1.7.3",
-    "@better-auth/mcp": "1.7.3",
-    "@better-auth/oauth-provider": "1.7.3",
-    "@better-auth/passkey": "1.7.3",
-    "@better-auth/scim": "1.7.3",
+    "@better-auth/api-key": "1.7.7",
+    "@better-auth/cimd": "1.7.7",
+    "@better-auth/mcp": "1.7.7",
+    "@better-auth/oauth-provider": "1.7.7",
+    "@better-auth/passkey": "1.7.7",
+    "@better-auth/scim": "1.7.7",
     "@lunora/errors": "1.0.0-alpha.50",
     "@lunora/values": "1.0.0-alpha.60",
-    "@visulima/disposable-email-domains": "1.1.10",
-    "@visulima/email-verifier": "1.0.21",
+    "@visulima/disposable-email-domains": "1.1.14",
+    "@visulima/email-verifier": "1.0.30",
     "@visulima/free-email-domains": "1.0.1",
     "@visulima/redact": "5.0.0"
   },