@lunora/auth 1.0.0-alpha.70 → 1.0.0-alpha.71

package/dist/middleware.d.mts

@@ -24,7 +24,7 @@ interface MiddlewareNext<ContextIn> {
  * authorization bypass, so a call that trips the lint also trips this guard.
  */
 declare class LunoraAuthHeadersError extends LunoraError {
-  /** The `ctx.authApi.&lt;method>` that was called without `headers`. */
+  /** The `ctx.authApi.<method>` that was called without `headers`. */
   readonly method: string;
   constructor(method: string);
 }
@@ -36,7 +36,7 @@ interface WithAuthPluginsOptions {
    * Whether to install the runtime header guard around `ctx.authApi`.
    *
    * **Defaults to `true` — the safe default.** When enabled, every
-   * `ctx.authApi.&lt;method>(…)` call that omits `headers` throws
+   * `ctx.authApi.<method>(…)` call that omits `headers` throws
    * {@link LunoraAuthHeadersError} instead of silently running with full
    * server-to-server privileges. For a deliberate, per-call unauthenticated
    * invocation, use the explicit `ctx.authApi.withoutHeaders()` escape hatch
@@ -89,7 +89,7 @@ interface LunoraAuthApiContext<Auth extends LunoraAuth> {
    * statically; the guard is the runtime backstop for the cases the lint
    * can't see (dynamic method names, indirected calls). For the rare,
    * deliberate unauthenticated server-to-server call, opt out explicitly with
-   * `ctx.authApi.withoutHeaders().&lt;method>(…)`.
+   * `ctx.authApi.withoutHeaders().<method>(…)`.
    *
    * Lunora's procedure context carries only the resolved identity, not the
    * raw inbound `Headers`, so this middleware CANNOT pre-bind them for you.
@@ -179,7 +179,7 @@ interface LunoraAuthApiContext<Auth extends LunoraAuth> {
  * Shape of the middleware {@link withAuthPlugins} returns: a callable generic
  * over the incoming ctx so chaining `.use(...)` preserves whatever ctx fields
  * the upstream middleware already installed. Lives as its own interface
- * because TypeScript doesn't allow declaring `const fn: &lt;CtxIn>() => ...` —
+ * because TypeScript doesn't allow declaring `const fn: <CtxIn>() => ...` —
  * the generic must live on a callable type alias or interface.
  */
 type WithAuthPluginsMiddleware<Auth extends LunoraAuth> = <ContextIn>(options: {

package/dist/middleware.d.ts

@@ -24,7 +24,7 @@ interface MiddlewareNext<ContextIn> {
  * authorization bypass, so a call that trips the lint also trips this guard.
  */
 declare class LunoraAuthHeadersError extends LunoraError {
-  /** The `ctx.authApi.&lt;method>` that was called without `headers`. */
+  /** The `ctx.authApi.<method>` that was called without `headers`. */
   readonly method: string;
   constructor(method: string);
 }
@@ -36,7 +36,7 @@ interface WithAuthPluginsOptions {
    * Whether to install the runtime header guard around `ctx.authApi`.
    *
    * **Defaults to `true` — the safe default.** When enabled, every
-   * `ctx.authApi.&lt;method>(…)` call that omits `headers` throws
+   * `ctx.authApi.<method>(…)` call that omits `headers` throws
    * {@link LunoraAuthHeadersError} instead of silently running with full
    * server-to-server privileges. For a deliberate, per-call unauthenticated
    * invocation, use the explicit `ctx.authApi.withoutHeaders()` escape hatch
@@ -89,7 +89,7 @@ interface LunoraAuthApiContext<Auth extends LunoraAuth> {
    * statically; the guard is the runtime backstop for the cases the lint
    * can't see (dynamic method names, indirected calls). For the rare,
    * deliberate unauthenticated server-to-server call, opt out explicitly with
-   * `ctx.authApi.withoutHeaders().&lt;method>(…)`.
+   * `ctx.authApi.withoutHeaders().<method>(…)`.
    *
    * Lunora's procedure context carries only the resolved identity, not the
    * raw inbound `Headers`, so this middleware CANNOT pre-bind them for you.
@@ -179,7 +179,7 @@ interface LunoraAuthApiContext<Auth extends LunoraAuth> {
  * Shape of the middleware {@link withAuthPlugins} returns: a callable generic
  * over the incoming ctx so chaining `.use(...)` preserves whatever ctx fields
  * the upstream middleware already installed. Lives as its own interface
- * because TypeScript doesn't allow declaring `const fn: &lt;CtxIn>() => ...` —
+ * because TypeScript doesn't allow declaring `const fn: <CtxIn>() => ...` —
  * the generic must live on a callable type alias or interface.
  */
 type WithAuthPluginsMiddleware<Auth extends LunoraAuth> = <ContextIn>(options: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/auth",
-  "version": "1.0.0-alpha.70",
+  "version": "1.0.0-alpha.71",
   "description": "Auth for Lunora — a thin better-auth wrapper: email/password, OAuth, plugins, D1-backed",
   "keywords": [
     "auth",
@@ -102,9 +102,9 @@
     "@better-auth/oauth-provider": "1.7.0-rc.2",
     "@better-auth/passkey": "1.7.0-rc.2",
     "@better-auth/scim": "1.7.0-rc.2",
-    "@lunora/errors": "1.0.0-alpha.13",
-    "@lunora/server": "1.0.0-alpha.61",
-    "@lunora/values": "1.0.0-alpha.18",
+    "@lunora/errors": "1.0.0-alpha.14",
+    "@lunora/server": "1.0.0-alpha.62",
+    "@lunora/values": "1.0.0-alpha.19",
     "@visulima/disposable-email-domains": "1.0.1",
     "@visulima/email-verifier": "1.0.1",
     "@visulima/free-email-domains": "1.0.0",