@lunora/auth 1.0.0-alpha.37 → 1.0.0-alpha.39

package/dist/sql-store.mjs

@@ -1,184 +1 @@
-const quoteId = (name) => `"${name.replaceAll('"', '""')}"`;
-const NEVER = { params: [], sql: "0" };
-const sided = (column, insensitive) => insensitive ? { column: `LOWER(${column})`, placeholder: "LOWER(?)" } : { column, placeholder: "?" };
-const patternFragment = (column, value, operator, insensitive) => {
-  if (typeof value !== "string") {
-    return NEVER;
-  }
-  const side = sided(column, insensitive);
-  if (operator === "contains") {
-    return { params: [value], sql: `instr(${side.column}, ${side.placeholder}) > 0` };
-  }
-  if (operator === "starts_with") {
-    return { params: [value], sql: `instr(${side.column}, ${side.placeholder}) = 1` };
-  }
-  return { params: [value, value], sql: `substr(${side.column}, -length(?)) = ${side.placeholder}` };
-};
-const equalityFragment = (column, value, insensitive, negated) => {
-  if (value === null) {
-    return { params: [], sql: `${column} IS ${negated ? "NOT " : ""}NULL` };
-  }
-  const side = sided(column, insensitive);
-  const symbol = negated ? "<>" : "=";
-  return { params: [value], sql: `${side.column} ${symbol} ${side.placeholder}` };
-};
-const inFragment = (column, value, negated, insensitive) => {
-  const values = Array.isArray(value) ? value : [];
-  if (values.length === 0) {
-    return { params: [], sql: negated ? "1" : "0" };
-  }
-  const side = sided(column, insensitive);
-  const placeholders = values.map(() => side.placeholder).join(", ");
-  return { params: [...values], sql: `${side.column} ${negated ? "NOT IN" : "IN"} (${placeholders})` };
-};
-const compileClause = (clause) => {
-  const column = quoteId(clause.field);
-  const { mode, operator, value } = clause;
-  const insensitive = mode === "insensitive";
-  switch (operator) {
-    case "contains":
-    case "ends_with":
-    case "starts_with": {
-      return patternFragment(column, value, operator, insensitive);
-    }
-    case "gt": {
-      return { params: [value], sql: `${column} > ?` };
-    }
-    case "gte": {
-      return { params: [value], sql: `${column} >= ?` };
-    }
-    case "in": {
-      return inFragment(column, value, false, insensitive);
-    }
-    case "lt": {
-      return { params: [value], sql: `${column} < ?` };
-    }
-    case "lte": {
-      return { params: [value], sql: `${column} <= ?` };
-    }
-    case "ne": {
-      return equalityFragment(column, value, insensitive, true);
-    }
-    case "not_in": {
-      return inFragment(column, value, true, insensitive);
-    }
-    // "eq" and the default: null-aware equality.
-    default: {
-      return equalityFragment(column, value, insensitive, false);
-    }
-  }
-};
-const compileWhere = (where) => {
-  if (where.length === 0) {
-    return { params: [], sql: "" };
-  }
-  let accumulator = compileClause(where[0]);
-  for (const clause of where.slice(1)) {
-    const fragment = compileClause(clause);
-    const connector = clause.connector === "OR" ? "OR" : "AND";
-    accumulator = { params: [...accumulator.params, ...fragment.params], sql: `(${accumulator.sql} ${connector} ${fragment.sql})` };
-  }
-  return accumulator;
-};
-const whereSuffix = (fragment) => fragment.sql ? ` WHERE ${fragment.sql}` : "";
-const createSqlAuthStore = (executor) => {
-  const selectRows = (model, where) => {
-    const fragment = compileWhere(where);
-    return executor.all(`SELECT * FROM ${quoteId(model)}${whereSuffix(fragment)}`, fragment.params);
-  };
-  return {
-    consumeOne: async (model, where) => {
-      const fragment = compileWhere(where);
-      const table = quoteId(model);
-      const [row] = await executor.all(
-        `DELETE FROM ${table} WHERE rowid IN (SELECT rowid FROM ${table}${whereSuffix(fragment)} LIMIT 1) RETURNING *`,
-        fragment.params
-      );
-      return row;
-    },
-    count: async (model, where) => {
-      const fragment = compileWhere(where);
-      const [row] = await executor.all(`SELECT COUNT(*) AS __count FROM ${quoteId(model)}${whereSuffix(fragment)}`, fragment.params);
-      return Number(row?.["__count"] ?? 0);
-    },
-    create: async (model, data) => {
-      const columns = Object.keys(data);
-      const placeholders = columns.map(() => "?").join(", ");
-      const sql = `INSERT INTO ${quoteId(model)} (${columns.map((column) => quoteId(column)).join(", ")}) VALUES (${placeholders})`;
-      await executor.run(
-        sql,
-        columns.map((column) => data[column])
-      );
-      return { ...data };
-    },
-    incrementOne: async (model, where, increment, set) => {
-      const table = quoteId(model);
-      const incrementColumns = Object.keys(increment);
-      const setColumns = set ? Object.keys(set) : [];
-      const fragment = compileWhere(where);
-      if (incrementColumns.length === 0 && setColumns.length === 0) {
-        const [row2] = await executor.all(`SELECT * FROM ${table}${whereSuffix(fragment)} LIMIT 1`, fragment.params);
-        return row2;
-      }
-      const assignments = [
-        // COALESCE(col, 0) so a NULL counter advances from 0 rather than staying
-        // NULL (`NULL + ? = NULL` in SQLite/D1) — matches the memory store, which
-        // treats a non-numeric/absent counter as 0.
-        ...incrementColumns.map((column) => `${quoteId(column)} = COALESCE(${quoteId(column)}, 0) + ?`),
-        ...setColumns.map((column) => `${quoteId(column)} = ?`)
-      ].join(", ");
-      const [row] = await executor.all(
-        `UPDATE ${table} SET ${assignments} WHERE rowid IN (SELECT rowid FROM ${table}${whereSuffix(fragment)} LIMIT 1) RETURNING *`,
-        [...incrementColumns.map((column) => increment[column]), ...setColumns.map((column) => set[column]), ...fragment.params]
-      );
-      return row;
-    },
-    read: async (model, query) => {
-      const fragment = compileWhere(query.where);
-      const parameters = [...fragment.params];
-      let sql = `SELECT * FROM ${quoteId(model)}${whereSuffix(fragment)}`;
-      if (query.sortBy) {
-        sql += ` ORDER BY ${quoteId(query.sortBy.field)} ${query.sortBy.direction === "asc" ? "ASC" : "DESC"}`;
-      }
-      if (query.limit !== void 0) {
-        sql += " LIMIT ?";
-        parameters.push(Math.trunc(query.limit));
-      }
-      if (query.offset) {
-        sql += `${query.limit === void 0 ? " LIMIT -1" : ""} OFFSET ?`;
-        parameters.push(Math.trunc(query.offset));
-      }
-      return executor.all(sql, parameters);
-    },
-    remove: async (model, where) => {
-      const fragment = compileWhere(where);
-      const deleted = await executor.all(`DELETE FROM ${quoteId(model)}${whereSuffix(fragment)} RETURNING *`, fragment.params);
-      return deleted.length;
-    },
-    update: async (model, where, values) => {
-      const columns = Object.keys(values);
-      if (columns.length === 0) {
-        return selectRows(model, where);
-      }
-      const assignments = columns.map((column) => `${quoteId(column)} = ?`).join(", ");
-      const fragment = compileWhere(where);
-      return executor.all(`UPDATE ${quoteId(model)} SET ${assignments}${whereSuffix(fragment)} RETURNING *`, [
-        ...columns.map((column) => values[column]),
-        ...fragment.params
-      ]);
-    }
-  };
-};
-const d1Executor = (database) => {
-  return {
-    all: async (sql, parameters) => {
-      const result = await database.prepare(sql).bind(...parameters).all();
-      return result.results ?? [];
-    },
-    run: async (sql, parameters) => {
-      await database.prepare(sql).bind(...parameters).run();
-    }
-  };
-};
-
-export { createSqlAuthStore, d1Executor };
+const c=r=>`"${r.replaceAll('"','""')}"`,I={params:[],sql:"0"},E=(r,e)=>e?{column:`LOWER(${r})`,placeholder:"LOWER(?)"}:{column:r,placeholder:"?"},N=(r,e,s,n)=>{if(typeof e!="string")return I;const a=E(r,n);return s==="contains"?{params:[e],sql:`instr(${a.column}, ${a.placeholder}) > 0`}:s==="starts_with"?{params:[e],sql:`instr(${a.column}, ${a.placeholder}) = 1`}:{params:[e,e],sql:`substr(${a.column}, -length(?)) = ${a.placeholder}`}},R=(r,e,s,n)=>{if(e===null)return{params:[],sql:`${r} IS ${n?"NOT ":""}NULL`};const a=E(r,s),t=n?"<>":"=";return{params:[e],sql:`${a.column} ${t} ${a.placeholder}`}},T=(r,e,s,n)=>{const a=Array.isArray(e)?e:[];if(a.length===0)return{params:[],sql:s?"1":"0"};const t=E(r,n),l=a.map(()=>t.placeholder).join(", ");return{params:[...a],sql:`${t.column} ${s?"NOT IN":"IN"} (${l})`}},d=r=>{const e=c(r.field),{mode:s,operator:n,value:a}=r,t=s==="insensitive";switch(n){case"contains":case"ends_with":case"starts_with":return N(e,a,n,t);case"gt":return{params:[a],sql:`${e} > ?`};case"gte":return{params:[a],sql:`${e} >= ?`};case"in":return T(e,a,!1,t);case"lt":return{params:[a],sql:`${e} < ?`};case"lte":return{params:[a],sql:`${e} <= ?`};case"ne":return R(e,a,t,!0);case"not_in":return T(e,a,!0,t);default:return R(e,a,t,!1)}},p=r=>{if(r.length===0)return{params:[],sql:""};let e=d(r[0]);for(const s of r.slice(1)){const n=d(s),a=s.connector==="OR"?"OR":"AND";e={params:[...e.params,...n.params],sql:`(${e.sql} ${a} ${n.sql})`}}return e},$=r=>r.sql?` WHERE ${r.sql}`:"",f=r=>{const e=(s,n)=>{const a=p(n);return r.all(`SELECT * FROM ${c(s)}${$(a)}`,a.params)};return{consumeOne:async(s,n)=>{const a=p(n),t=c(s),[l]=await r.all(`DELETE FROM ${t} WHERE rowid IN (SELECT rowid FROM ${t}${$(a)} LIMIT 1) RETURNING *`,a.params);return l},count:async(s,n)=>{const a=p(n),[t]=await r.all(`SELECT COUNT(*) AS __count FROM ${c(s)}${$(a)}`,a.params);return Number(t?.__count??0)},create:async(s,n)=>{const a=Object.keys(n),t=a.map(()=>"?").join(", "),l=`INSERT INTO ${c(s)} (${a.map(o=>c(o)).join(", ")}) VALUES (${t})`;return await r.run(l,a.map(o=>n[o])),{...n}},incrementOne:async(s,n,a,t)=>{const l=c(s),o=Object.keys(a),i=t?Object.keys(t):[],m=p(n);if(o.length===0&&i.length===0){const[u]=await r.all(`SELECT * FROM ${l}${$(m)} LIMIT 1`,m.params);return u}const h=[...o.map(u=>`${c(u)} = COALESCE(${c(u)}, 0) + ?`),...i.map(u=>`${c(u)} = ?`)].join(", "),[O]=await r.all(`UPDATE ${l} SET ${h} WHERE rowid IN (SELECT rowid FROM ${l}${$(m)} LIMIT 1) RETURNING *`,[...o.map(u=>a[u]),...i.map(u=>t[u]),...m.params]);return O},read:async(s,n)=>{const a=p(n.where),t=[...a.params];let l=`SELECT * FROM ${c(s)}${$(a)}`;return n.sortBy&&(l+=` ORDER BY ${c(n.sortBy.field)} ${n.sortBy.direction==="asc"?"ASC":"DESC"}`),n.limit!==void 0&&(l+=" LIMIT ?",t.push(Math.trunc(n.limit))),n.offset&&(l+=`${n.limit===void 0?" LIMIT -1":""} OFFSET ?`,t.push(Math.trunc(n.offset))),r.all(l,t)},remove:async(s,n)=>{const a=p(n);return(await r.all(`DELETE FROM ${c(s)}${$(a)} RETURNING *`,a.params)).length},update:async(s,n,a)=>{const t=Object.keys(a);if(t.length===0)return e(s,n);const l=t.map(i=>`${c(i)} = ?`).join(", "),o=p(n);return r.all(`UPDATE ${c(s)} SET ${l}${$(o)} RETURNING *`,[...t.map(i=>a[i]),...o.params])}}},q=r=>({all:async(e,s)=>(await r.prepare(e).bind(...s).all()).results??[],run:async(e,s)=>{await r.prepare(e).bind(...s).run()}});export{f as createSqlAuthStore,q as d1Executor};

package/dist/store.mjs

@@ -1,183 +1 @@
-const asString = (value) => typeof value === "string" ? value : void 0;
-const isNullish = (value) => value === void 0 || value === null;
-const looseEquals = (left, right, insensitive) => {
-  if (insensitive) {
-    const a = asString(left);
-    const b = asString(right);
-    if (a !== void 0 && b !== void 0) {
-      return a.toLowerCase() === b.toLowerCase();
-    }
-  }
-  return left === right;
-};
-const matchesPattern = (cell, value, operator, insensitive) => {
-  const haystack = asString(cell);
-  const needle = asString(value);
-  if (haystack === void 0 || needle === void 0) {
-    return false;
-  }
-  const [a, b] = insensitive ? [haystack.toLowerCase(), needle.toLowerCase()] : [haystack, needle];
-  if (operator === "contains") {
-    return a.includes(b);
-  }
-  return operator === "starts_with" ? a.startsWith(b) : a.endsWith(b);
-};
-const evaluateClause = (row, clause) => {
-  const { field, mode, operator, value } = clause;
-  const cell = row[field];
-  const insensitive = mode === "insensitive";
-  switch (operator) {
-    case "contains":
-    case "ends_with":
-    case "starts_with": {
-      return matchesPattern(cell, value, operator, insensitive);
-    }
-    case "gt": {
-      return !isNullish(value) && cell > value;
-    }
-    case "gte": {
-      return !isNullish(value) && cell >= value;
-    }
-    case "in": {
-      return Array.isArray(value) && value.some((entry) => looseEquals(cell, entry, insensitive));
-    }
-    case "lt": {
-      return !isNullish(value) && cell < value;
-    }
-    case "lte": {
-      return !isNullish(value) && cell <= value;
-    }
-    case "ne": {
-      return !looseEquals(cell, value, insensitive);
-    }
-    case "not_in": {
-      return Array.isArray(value) && !value.some((entry) => looseEquals(cell, entry, insensitive));
-    }
-    // "eq" and the default: null-aware equality.
-    default: {
-      return isNullish(value) ? isNullish(cell) : looseEquals(cell, value, insensitive);
-    }
-  }
-};
-const compareCells = (a, b) => {
-  if (typeof a === "string" && typeof b === "string") {
-    return a.localeCompare(b);
-  }
-  const left = Number(a);
-  const right = Number(b);
-  if (left < right) {
-    return -1;
-  }
-  return left > right ? 1 : 0;
-};
-const sortRows = (rows, sortBy) => {
-  const direction = sortBy.direction === "asc" ? 1 : -1;
-  return rows.toSorted((left, right) => {
-    const a = left[sortBy.field];
-    const b = right[sortBy.field];
-    if (isNullish(a) && isNullish(b)) {
-      return 0;
-    }
-    if (isNullish(a)) {
-      return -direction;
-    }
-    if (isNullish(b)) {
-      return direction;
-    }
-    return compareCells(a, b) * direction;
-  });
-};
-const matchesWhere = (row, where) => {
-  let result = true;
-  for (const [index, clause] of where.entries()) {
-    const clauseResult = evaluateClause(row, clause);
-    if (index === 0) {
-      result = clauseResult;
-    } else if (clause.connector === "OR") {
-      result = result || clauseResult;
-    } else {
-      result = result && clauseResult;
-    }
-  }
-  return result;
-};
-const createMemoryAuthStore = () => {
-  const tables = /* @__PURE__ */ new Map();
-  const tableOf = (model) => {
-    const existing = tables.get(model);
-    if (existing) {
-      return existing;
-    }
-    const created = [];
-    tables.set(model, created);
-    return created;
-  };
-  return {
-    consumeOne: (model, where) => {
-      const table = tableOf(model);
-      const index = table.findIndex((row2) => matchesWhere(row2, where));
-      if (index === -1) {
-        return Promise.resolve(void 0);
-      }
-      const [row] = table.splice(index, 1);
-      return Promise.resolve(row ? { ...row } : void 0);
-    },
-    count: (model, where) => Promise.resolve(tableOf(model).filter((row) => matchesWhere(row, where)).length),
-    create: (model, data) => {
-      const row = { ...data };
-      tableOf(model).push(row);
-      return Promise.resolve({ ...row });
-    },
-    incrementOne: (model, where, increment, set) => {
-      const row = tableOf(model).find((candidate) => matchesWhere(candidate, where));
-      if (!row) {
-        return Promise.resolve(void 0);
-      }
-      for (const [field, delta] of Object.entries(increment)) {
-        row[field] = (typeof row[field] === "number" ? row[field] : 0) + delta;
-      }
-      if (set) {
-        Object.assign(row, set);
-      }
-      return Promise.resolve({ ...row });
-    },
-    read: (model, query) => {
-      let rows = tableOf(model).filter((row) => matchesWhere(row, query.where));
-      if (query.sortBy) {
-        rows = sortRows(rows, query.sortBy);
-      }
-      if (query.offset) {
-        rows = rows.slice(query.offset);
-      }
-      if (query.limit !== void 0) {
-        rows = rows.slice(0, query.limit);
-      }
-      return Promise.resolve(
-        rows.map((row) => {
-          return { ...row };
-        })
-      );
-    },
-    remove: (model, where) => {
-      const table = tableOf(model);
-      const kept = table.filter((row) => !matchesWhere(row, where));
-      const removed = table.length - kept.length;
-      table.length = 0;
-      table.push(...kept);
-      return Promise.resolve(removed);
-    },
-    update: (model, where, values) => {
-      const matched = tableOf(model).filter((row) => matchesWhere(row, where));
-      for (const row of matched) {
-        Object.assign(row, values);
-      }
-      return Promise.resolve(
-        matched.map((row) => {
-          return { ...row };
-        })
-      );
-    }
-  };
-};
-
-export { createMemoryAuthStore, matchesWhere };
+const m=i=>typeof i=="string"?i:void 0,a=i=>i==null,f=(i,n,r)=>{if(r){const o=m(i),t=m(n);if(o!==void 0&&t!==void 0)return o.toLowerCase()===t.toLowerCase()}return i===n},d=(i,n,r,o)=>{const t=m(i),e=m(n);if(t===void 0||e===void 0)return!1;const[s,c]=o?[t.toLowerCase(),e.toLowerCase()]:[t,e];return r==="contains"?s.includes(c):r==="starts_with"?s.startsWith(c):s.endsWith(c)},v=(i,n)=>{const{field:r,mode:o,operator:t,value:e}=n,s=i[r],c=o==="insensitive";switch(t){case"contains":case"ends_with":case"starts_with":return d(s,e,t,c);case"gt":return!a(e)&&s>e;case"gte":return!a(e)&&s>=e;case"in":return Array.isArray(e)&&e.some(l=>f(s,l,c));case"lt":return!a(e)&&s<e;case"lte":return!a(e)&&s<=e;case"ne":return!f(s,e,c);case"not_in":return Array.isArray(e)&&!e.some(l=>f(s,l,c));default:return a(e)?a(s):f(s,e,c)}},h=(i,n)=>{if(typeof i=="string"&&typeof n=="string")return i.localeCompare(n);const r=Number(i),o=Number(n);return r<o?-1:r>o?1:0},p=(i,n)=>{const r=n.direction==="asc"?1:-1;return i.toSorted((o,t)=>{const e=o[n.field],s=t[n.field];return a(e)&&a(s)?0:a(e)?-r:a(s)?r:h(e,s)*r})},u=(i,n)=>{let r=!0;for(const[o,t]of n.entries()){const e=v(i,t);o===0?r=e:t.connector==="OR"?r=r||e:r=r&&e}return r},g=()=>{const i=new Map,n=r=>{const o=i.get(r);if(o)return o;const t=[];return i.set(r,t),t};return{consumeOne:(r,o)=>{const t=n(r),e=t.findIndex(c=>u(c,o));if(e===-1)return Promise.resolve(void 0);const[s]=t.splice(e,1);return Promise.resolve(s?{...s}:void 0)},count:(r,o)=>Promise.resolve(n(r).filter(t=>u(t,o)).length),create:(r,o)=>{const t={...o};return n(r).push(t),Promise.resolve({...t})},incrementOne:(r,o,t,e)=>{const s=n(r).find(c=>u(c,o));if(!s)return Promise.resolve(void 0);for(const[c,l]of Object.entries(t))s[c]=(typeof s[c]=="number"?s[c]:0)+l;return e&&Object.assign(s,e),Promise.resolve({...s})},read:(r,o)=>{let t=n(r).filter(e=>u(e,o.where));return o.sortBy&&(t=p(t,o.sortBy)),o.offset&&(t=t.slice(o.offset)),o.limit!==void 0&&(t=t.slice(0,o.limit)),Promise.resolve(t.map(e=>({...e})))},remove:(r,o)=>{const t=n(r),e=t.filter(c=>!u(c,o)),s=t.length-e.length;return t.length=0,t.push(...e),Promise.resolve(s)},update:(r,o,t)=>{const e=n(r).filter(s=>u(s,o));for(const s of e)Object.assign(s,t);return Promise.resolve(e.map(s=>({...s})))}}};export{g as createMemoryAuthStore,u as matchesWhere};

package/dist/turnstile-middleware.mjs

@@ -1,34 +1 @@
-import { LunoraError } from '@lunora/errors';
-import { verifyTurnstile } from './turnstile.mjs';
-
-const verifyTurnstileMiddleware = (options) => async ({ ctx, next }) => {
-  const token = options.token(ctx);
-  if (token === void 0 || token === "") {
-    throw new LunoraError("FORBIDDEN", options.message ?? "turnstile token missing");
-  }
-  let result;
-  try {
-    result = await verifyTurnstile({
-      expectedAction: options.expectedAction,
-      expectedHostname: options.expectedHostname,
-      fetch: options.fetch,
-      remoteip: options.remoteip?.(ctx),
-      secret: options.secret,
-      token
-    });
-  } catch (error) {
-    console.error(`@lunora/auth: verifyTurnstileMiddleware siteverify threw; ${options.failOpen ? "failing open" : "failing closed"}`, error);
-    if (options.failOpen) {
-      return next();
-    }
-    throw new LunoraError("FORBIDDEN", options.message ?? "turnstile verification unavailable", { cause: error });
-  }
-  if (!result.success || options.validate !== void 0 && !options.validate(result)) {
-    throw new LunoraError("FORBIDDEN", options.message ?? "turnstile verification failed", {
-      data: result.errorCodes.length > 0 ? { errorCodes: result.errorCodes } : void 0
-    });
-  }
-  return next();
-};
-
-export { verifyTurnstileMiddleware };
+import{LunoraError as i}from"@lunora/errors";import{verifyTurnstile as a}from"./turnstile.mjs";const d=e=>async({ctx:o,next:n})=>{const r=e.token(o);if(r===void 0||r==="")throw new i("FORBIDDEN",e.message??"turnstile token missing");let t;try{t=await a({expectedAction:e.expectedAction,expectedHostname:e.expectedHostname,fetch:e.fetch,remoteip:e.remoteip?.(o),secret:e.secret,token:r})}catch(s){if(console.error(`@lunora/auth: verifyTurnstileMiddleware siteverify threw; ${e.failOpen?"failing open":"failing closed"}`,s),e.failOpen)return n();throw new i("FORBIDDEN",e.message??"turnstile verification unavailable",{cause:s})}if(!t.success||e.validate!==void 0&&!e.validate(t))throw new i("FORBIDDEN",e.message??"turnstile verification failed",{data:t.errorCodes.length>0?{errorCodes:t.errorCodes}:void 0});return n()};export{d as verifyTurnstileMiddleware};

package/dist/turnstile.mjs

@@ -1,59 +1 @@
-import { LunoraError } from '@lunora/errors';
-
-const TURNSTILE_VERIFY_ENDPOINT = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
-const asString = (value) => typeof value === "string" ? value : void 0;
-const asStringArray = (value) => Array.isArray(value) ? value.filter((entry) => typeof entry === "string") : [];
-const verifyTurnstile = async ({
-  expectedAction,
-  expectedHostname,
-  fetch = globalThis.fetch,
-  remoteip,
-  secret,
-  token
-}) => {
-  const body = new URLSearchParams({ response: token, secret });
-  if (remoteip !== void 0 && remoteip !== "") {
-    body.set("remoteip", remoteip);
-  }
-  let response;
-  try {
-    response = await fetch(TURNSTILE_VERIFY_ENDPOINT, {
-      body: body.toString(),
-      headers: { "content-type": "application/x-www-form-urlencoded" },
-      method: "POST"
-    });
-  } catch (error) {
-    throw new LunoraError("SERVICE_UNAVAILABLE", "turnstile siteverify request failed", { cause: error, status: 503 });
-  }
-  if (!response.ok) {
-    throw new LunoraError("SERVICE_UNAVAILABLE", `turnstile siteverify returned ${String(response.status)}`, { status: 503 });
-  }
-  let raw;
-  try {
-    raw = await response.json();
-  } catch (error) {
-    throw new LunoraError("SERVICE_UNAVAILABLE", "turnstile siteverify returned a non-JSON body", { cause: error, status: 503 });
-  }
-  const action = asString(raw.action);
-  const hostname = asString(raw.hostname);
-  const errorCodes = asStringArray(raw["error-codes"]);
-  let success = raw.success === true;
-  if (success && expectedHostname !== void 0 && hostname !== expectedHostname) {
-    success = false;
-    errorCodes.push("hostname-mismatch");
-  }
-  if (success && expectedAction !== void 0 && action !== expectedAction) {
-    success = false;
-    errorCodes.push("action-mismatch");
-  }
-  return {
-    action,
-    cdata: asString(raw.cdata),
-    challengeTs: asString(raw.challenge_ts),
-    errorCodes,
-    hostname,
-    success
-  };
-};
-
-export { TURNSTILE_VERIFY_ENDPOINT, verifyTurnstile };
+import{LunoraError as l}from"@lunora/errors";const y="https://challenges.cloudflare.com/turnstile/v0/siteverify",o=t=>typeof t=="string"?t:void 0,w=t=>Array.isArray(t)?t.filter(r=>typeof r=="string"):[],A=async({expectedAction:t,expectedHostname:r,fetch:f=globalThis.fetch,remoteip:n,secret:m,token:p})=>{const h=new URLSearchParams({response:p,secret:m});n!==void 0&&n!==""&&h.set("remoteip",n);let a;try{a=await f(y,{body:h.toString(),headers:{"content-type":"application/x-www-form-urlencoded"},method:"POST"})}catch(c){throw new l("SERVICE_UNAVAILABLE","turnstile siteverify request failed",{cause:c,status:503})}if(!a.ok)throw new l("SERVICE_UNAVAILABLE",`turnstile siteverify returned ${String(a.status)}`,{status:503});let e;try{e=await a.json()}catch(c){throw new l("SERVICE_UNAVAILABLE","turnstile siteverify returned a non-JSON body",{cause:c,status:503})}const u=o(e.action),d=o(e.hostname),i=w(e["error-codes"]);let s=e.success===!0;return s&&r!==void 0&&d!==r&&(s=!1,i.push("hostname-mismatch")),s&&t!==void 0&&u!==t&&(s=!1,i.push("action-mismatch")),{action:u,cdata:o(e.cdata),challengeTs:o(e.challenge_ts),errorCodes:i,hostname:d,success:s}};export{y as TURNSTILE_VERIFY_ENDPOINT,A as verifyTurnstile};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/auth",
-  "version": "1.0.0-alpha.37",
+  "version": "1.0.0-alpha.39",
   "description": "Auth for Lunora — a thin better-auth wrapper: email/password, OAuth, plugins, D1-backed",
   "keywords": [
     "auth",
@@ -92,7 +92,7 @@
   "dependencies": {
     "@better-auth/passkey": "^1.6.23",
     "@lunora/errors": "1.0.0-alpha.8",
-    "@lunora/server": "1.0.0-alpha.31",
+    "@lunora/server": "1.0.0-alpha.33",
     "@lunora/values": "1.0.0-alpha.11",
     "@visulima/disposable-email-domains": "1.0.1",
     "@visulima/email-verifier": "1.0.1",

package/dist/packem_shared/DEFAULT_AUTH_BASE_PATH-DjcUWEQl.mjs

@@ -1,11 +0,0 @@
-const DEFAULT_AUTH_BASE_PATH = "/api/auth";
-const handleAuthRequest = async (auth, request, basePath = DEFAULT_AUTH_BASE_PATH) => {
-  const url = new URL(request.url);
-  const base = basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
-  if (url.pathname !== base && !url.pathname.startsWith(`${base}/`)) {
-    return void 0;
-  }
-  return auth.handler(request);
-};
-
-export { DEFAULT_AUTH_BASE_PATH, handleAuthRequest };