@procedures/better-auth 0.46.0 → 0.47.2

package/dist/browser.d.ts

@@ -1,5 +1,5 @@
 /**
- * The browser half of the sign-in (Graph's split, wave 2, W8): the calls of a page to the auth routes of a
+ * The browser half of the sign-in: the calls of a page to the auth routes of a
  * procedures server with Better Auth. This entry has no framework and no global state: each function gives data,
  * and the app decides what the page does (a redirect, a reload).
  *

package/dist/browser.js

@@ -1,5 +1,5 @@
 /**
- * The browser half of the sign-in (Graph's split, wave 2, W8): the calls of a page to the auth routes of a
+ * The browser half of the sign-in: the calls of a page to the auth routes of a
  * procedures server with Better Auth. This entry has no framework and no global state: each function gives data,
  * and the app decides what the page does (a redirect, a reload).
  *

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package",
   "name": "@procedures/better-auth",
-  "version": "0.46.0",
+  "version": "0.47.2",
   "description": "Better Auth for a procedures server: the sign-in with GitHub, Google and passkeys over MongoDB, and a request hook that gives the principal of a session or of an agent token.",
   "keywords": [
     "procedures",
@@ -42,7 +42,7 @@
   ],
   "sideEffects": false,
   "devDependencies": {
-    "@mark1russell7/cue": "^1.0.0",
+    "@mark1russell7/cue": "^1.1.0",
     "mongodb": "^7.7.0",
     "typescript": "^7.0.2",
     "vitest": "^5.0.3"
@@ -57,7 +57,7 @@
   },
   "dependencies": {
     "@better-auth/passkey": "^1.7.10",
-    "@procedures/client": "0.46.0",
+    "@procedures/client": "0.47.2",
     "@simplewebauthn/browser": "^13.3.0",
     "better-auth": "^1.7.10",
     "zod": "^4.6.5"
@@ -67,9 +67,9 @@
   },
   "scripts": {
     "build": "tsc -b",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.test.json",
     "clean": "rm -rf dist .tsbuildinfo",
-    "test": "vitest run --passWithNoTests",
+    "test": "vitest run",
     "test:watch": "vitest"
   }
 }

package/src/better-auth.test.ts

@@ -241,9 +241,9 @@ describe("betterAuthPrincipalOf", () => {
 
   it("does not take another bearer token as the agent, and ignores the act-as header without the token", async () => {
     const { principals } = setup();
-    const hook = betterAuthPrincipalOf({ principals, agentToken: TOKEN, actAsHeader: "X-Graph-As", actAs: () => true, anonymous: READ_ONLY });
-    expect((await hook({ bearer: "wrong", headers: { "x-graph-as": "u1" } }, request))?.principal).toEqual({ id: ANONYMOUS_ID, via: VIA.anonymous });
-    expect((await hook({ bearer: TOKEN, headers: { "x-graph-as": "u1" } }, request))?.principal?.id).toBe("u1");
+    const hook = betterAuthPrincipalOf({ principals, agentToken: TOKEN, actAsHeader: "X-App-As", actAs: () => true, anonymous: READ_ONLY });
+    expect((await hook({ bearer: "wrong", headers: { "x-app-as": "u1" } }, request))?.principal).toEqual({ id: ANONYMOUS_ID, via: VIA.anonymous });
+    expect((await hook({ bearer: TOKEN, headers: { "x-app-as": "u1" } }, request))?.principal?.id).toBe("u1");
     expect(await betterAuthPrincipalOf({ principals })({ bearer: TOKEN }, request)).toBeUndefined(); // no agent token: no agent
   });
 });

package/src/browser.ts

@@ -1,5 +1,5 @@
 /**
- * The browser half of the sign-in (Graph's split, wave 2, W8): the calls of a page to the auth routes of a
+ * The browser half of the sign-in: the calls of a page to the auth routes of a
  * procedures server with Better Auth. This entry has no framework and no global state: each function gives data,
  * and the app decides what the page does (a redirect, a reload).
  *