@runlot/auth 0.1.0-rc.73 → 0.1.0-rc.74

package/dist/client.d.ts

@@ -2,34 +2,38 @@ import { type User } from "./index.js";
 export interface NextOpts {
     next?: string;
 }
-/** 프로젝트가 등록할 수 있는 소셜 프로바이더 (docs/auth.md §9). */
+/** The social providers a project can register (docs/auth.md §9). */
 export type AuthProvider = "github" | "google" | "kakao";
-/** 로그인 페이지. 프로바이더를 주면 그 프로바이더의 authorize 로 바로 간다. */
+/** The sign-in page. Given a provider, it goes straight to that provider's
+ *  authorize. */
 export declare function signInUrl(provider?: AuthProvider, opts?: NextOpts): string;
 /**
- * 가입 페이지.
+ * The sign-up page.
  *
- * **프로바이더 인자가 없다.** 소셜은 가입과 로그인이 한 길이라
- * (docs/auth.md §5 — `GET sign-in/{provider}` 하나뿐이고 신원 upsert 가 §6 의
- * 연결 규칙을 탄다) `signUpUrl("github")` 같은 주소는 서버에 없다. 소셜로
- * 가입시키려면 `signInUrl(provider)` 를 쓴다.
+ * **There is no provider argument.** For social logins, signing up and signing
+ * in are one path (docs/auth.md §5 — there is only `GET sign-in/{provider}`,
+ * and the identity upsert rides the linking rules of §6), so a URL like
+ * `signUpUrl("github")` does not exist on the server. To sign somebody up with
+ * a social provider, use `signInUrl(provider)`.
  */
 export declare function signUpUrl(opts?: NextOpts): string;
 /**
- * 로그아웃.
+ * Sign-out.
  *
- * **링크가 아니라 POST 대상이다** (docs/auth.md §5). `<form method="post"
- * action={signOutUrl()}>` 로 쓴다 — GET 으로 로그아웃되면 남의 페이지에 박힌
- * `<img>` 하나가 사용자를 내보낼 수 있다.
+ * **It is a POST target, not a link** (docs/auth.md §5). Use it as `<form
+ * method="post" action={signOutUrl()}>` — if a GET could sign somebody out, a
+ * single `<img>` embedded in somebody else's page could throw the user out.
  */
 export declare function signOutUrl(opts?: NextOpts): string;
 /**
- * 지금 로그인한 사람. 클라이언트 렌더 앱이 부팅할 때 부르는 자리다.
+ * Who is signed in right now. This is what a client-rendered app calls while
+ * booting.
  *
- * 답이 200 이 아니면 `{ user: null }` 이다 — 로그아웃 상태는 예외가 아니라
- * 답이고(401 도 답이다), 던지면 모든 페이지가 try/catch 가 된다.
+ * Anything other than a 200 gives `{ user: null }` — being signed out is an
+ * answer, not an exception (a 401 is an answer too), and throwing would turn
+ * every page into a try/catch.
  *
- * `fetchImpl` 은 시험이 가짜를 넣는 구멍이다.
+ * `fetchImpl` is the hole through which the tests inject a fake.
  */
 export declare function session(fetchImpl?: typeof fetch): Promise<{
     user: User | null;

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iDAAiD;AACjD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAqBzD,qDAAqD;AACrD,wBAAgB,SAAS,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAE1E;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAEjD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAElD;AAED;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,CAAC,CAKtF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qEAAqE;AACrE,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;AAsBzD;iBACiB;AACjB,wBAAgB,SAAS,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAE1E;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAEjD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,CAElD;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;CAAE,CAAC,CAKtF"}

package/dist/client.js

@@ -1,12 +1,14 @@
-// 브라우저 도우미 (docs/auth.md §10). 링크를 짓는 일과 `GET /session` 한 번이
-// 전부라 의존성이 0 이고, 서버가 아는 것을 다시 안다고 주장하지 않는다.
+// Browser helpers (docs/auth.md §10). Building links and one `GET /session` is
+// all there is, so it has zero dependencies, and it does not claim to know
+// again what the server already knows.
 import { AUTH_BASE } from "./index.js";
-// `next` 는 같은 오리진의 상대 경로만 통과시킨다 — docs/auth.md §5 의 `safeNext`
-// 와 같은 규칙이다. `/` 로 시작해야 하고 `//` 로 시작하면 안 된다: `//evil.example`
-// 은 브라우저가 절대 URL 로 읽으므로 열린 리다이렉트가 된다.
+// `next` lets through only a same-origin relative path — the same rule as
+// `safeNext` in docs/auth.md §5. It has to start with `/` and must not start
+// with `//`: the browser reads `//evil.example` as an absolute URL, which makes
+// it an open redirect.
 //
-// 여기서 거르는 것은 편의일 뿐 보안 경계가 아니다. 링크는 손으로도 만들 수 있으니
-// 서버가 같은 검사를 다시 한다.
+// Filtering here is a convenience, not a security boundary. A link can also be
+// made by hand, so the server runs the same check again.
 function safeNext(next) {
     if (next === undefined || next === "")
         return null;
@@ -21,38 +23,42 @@ function authUrl(path, provider, opts) {
     const next = safeNext(opts?.next);
     return next === null ? base : `${base}?next=${encodeURIComponent(next)}`;
 }
-/** 로그인 페이지. 프로바이더를 주면 그 프로바이더의 authorize 로 바로 간다. */
+/** The sign-in page. Given a provider, it goes straight to that provider's
+ *  authorize. */
 export function signInUrl(provider, opts) {
     return authUrl("sign-in", provider, opts);
 }
 /**
- * 가입 페이지.
+ * The sign-up page.
  *
- * **프로바이더 인자가 없다.** 소셜은 가입과 로그인이 한 길이라
- * (docs/auth.md §5 — `GET sign-in/{provider}` 하나뿐이고 신원 upsert 가 §6 의
- * 연결 규칙을 탄다) `signUpUrl("github")` 같은 주소는 서버에 없다. 소셜로
- * 가입시키려면 `signInUrl(provider)` 를 쓴다.
+ * **There is no provider argument.** For social logins, signing up and signing
+ * in are one path (docs/auth.md §5 — there is only `GET sign-in/{provider}`,
+ * and the identity upsert rides the linking rules of §6), so a URL like
+ * `signUpUrl("github")` does not exist on the server. To sign somebody up with
+ * a social provider, use `signInUrl(provider)`.
  */
 export function signUpUrl(opts) {
     return authUrl("sign-up", undefined, opts);
 }
 /**
- * 로그아웃.
+ * Sign-out.
  *
- * **링크가 아니라 POST 대상이다** (docs/auth.md §5). `<form method="post"
- * action={signOutUrl()}>` 로 쓴다 — GET 으로 로그아웃되면 남의 페이지에 박힌
- * `<img>` 하나가 사용자를 내보낼 수 있다.
+ * **It is a POST target, not a link** (docs/auth.md §5). Use it as `<form
+ * method="post" action={signOutUrl()}>` — if a GET could sign somebody out, a
+ * single `<img>` embedded in somebody else's page could throw the user out.
  */
 export function signOutUrl(opts) {
     return authUrl("sign-out", undefined, opts);
 }
 /**
- * 지금 로그인한 사람. 클라이언트 렌더 앱이 부팅할 때 부르는 자리다.
+ * Who is signed in right now. This is what a client-rendered app calls while
+ * booting.
  *
- * 답이 200 이 아니면 `{ user: null }` 이다 — 로그아웃 상태는 예외가 아니라
- * 답이고(401 도 답이다), 던지면 모든 페이지가 try/catch 가 된다.
+ * Anything other than a 200 gives `{ user: null }` — being signed out is an
+ * answer, not an exception (a 401 is an answer too), and throwing would turn
+ * every page into a try/catch.
  *
- * `fetchImpl` 은 시험이 가짜를 넣는 구멍이다.
+ * `fetchImpl` is the hole through which the tests inject a fake.
  */
 export async function session(fetchImpl) {
     const f = fetchImpl ?? fetch;

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,4CAA4C;AAE5C,OAAO,EAAE,SAAS,EAAa,MAAM,YAAY,CAAC;AASlD,+DAA+D;AAC/D,8DAA8D;AAC9D,sCAAsC;AACtC,EAAE;AACF,iDAAiD;AACjD,oBAAoB;AACpB,SAAS,QAAQ,CAAC,IAAwB;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAuB,EAAE,IAAe;IACrE,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,SAAS,CAAC,QAAuB,EAAE,IAAe;IAChE,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAe;IACxC,OAAO,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,SAAwB;IACpD,MAAM,CAAC,GAAG,SAAS,IAAI,KAAK,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,SAAS,UAAU,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;AACrD,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,uCAAuC;AAEvC,OAAO,EAAE,SAAS,EAAa,MAAM,YAAY,CAAC;AASlD,0EAA0E;AAC1E,6EAA6E;AAC7E,gFAAgF;AAChF,uBAAuB;AACvB,EAAE;AACF,+EAA+E;AAC/E,yDAAyD;AACzD,SAAS,QAAQ,CAAC,IAAwB;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAuB,EAAE,IAAe;IACrE,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;iBACiB;AACjB,MAAM,UAAU,SAAS,CAAC,QAAuB,EAAE,IAAe;IAChE,OAAO,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAe;IACxC,OAAO,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,SAAwB;IACpD,MAAM,CAAC,GAAG,SAAS,IAAI,KAAK,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,SAAS,UAAU,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;AACrD,CAAC"}

package/dist/index.d.ts

@@ -1,26 +1,28 @@
-/** 시스템 워커가 종단하는 경로 접두 (docs/auth.md §5). */
+/** The path prefix the system worker terminates (docs/auth.md §5). */
 export declare const AUTH_BASE = "/__runlot/auth";
 export interface User {
-    /** uuid — `runlot_auth.users` 의 PK 이자 RLS 가 보는 값. */
+    /** uuid — the PK of `runlot_auth.users` and the value RLS looks at. */
     id: string;
     email: string | null;
     emailVerified: boolean;
     name: string | null;
     avatarUrl: string | null;
-    /** 이 사용자에 연결된 로그인 수단. 예: `["password", "github"]`. */
+    /** The sign-in methods linked to this user. For example:
+     *  `["password", "github"]`. */
     providers: string[];
     /** ISO 8601. */
     createdAt: string;
-    /** ISO 8601. 한 번도 로그인하지 않았으면 `null`. */
+    /** ISO 8601. `null` if they have never signed in. */
     lastSignInAt: string | null;
 }
 /**
- * `signOut` 이 돌려주는 삭제 쿠키 한 줄. `HeadersInit` 으로 그대로 쓴다.
+ * The one deletion-cookie line `signOut` returns. Used as a `HeadersInit` as
+ * is.
  */
 export interface SignOutHeaders {
     "set-cookie": string;
 }
-/** `users.list` 의 한 쪽. `cursor` 가 `null` 이면 마지막 쪽이다. */
+/** One page of `users.list`. A `null` `cursor` means it is the last page. */
 export interface UserPage {
     users: User[];
     cursor: string | null;
@@ -28,10 +30,11 @@ export interface UserPage {
 export interface UserUpdate {
     name?: string | null;
     avatarUrl?: string | null;
-    /** `true` 는 그 사용자의 세션 전부 폐기를 겸한다 (docs/auth.md §4). */
+    /** `true` also revokes every session of that user (docs/auth.md §4). */
     banned?: boolean;
 }
-/** 관리 조회·수정. 게이트웨이를 안 거치고 `DB` 바인딩으로 직접 읽는다. */
+/** Administrative reads and writes. They do not go through the gateway; they
+ *  read directly through the `DB` binding. */
 export interface AuthUsers {
     get(id: string): Promise<User | null>;
     getByEmail(email: string): Promise<User | null>;
@@ -40,29 +43,31 @@ export interface AuthUsers {
         limit?: number;
     }): Promise<UserPage>;
     update(id: string, patch: UserUpdate): Promise<User>;
-    /** 사용자·신원·세션·토큰. 앱의 표는 앱이 `ON DELETE` 로 잇는다. */
+    /** The user, the identities, the sessions and the tokens. The app's own
+     *  tables are joined up by the app with `ON DELETE`. */
     delete(id: string): Promise<void>;
 }
 export interface AuthSessions {
-    /** 비밀번호 변경 뒤의 관용구. */
+    /** The idiom after a password change. */
     revokeAll(userId: string): Promise<void>;
 }
 export interface AuthBinding {
     /**
-     * 쿠키 → 세션 → 사용자. 없으면 `null`.
-     * **던지지 않는다** — 로그인 안 한 상태는 오류가 아니다.
+     * Cookie → session → user. `null` when there is none.
+     * **It does not throw** — not being signed in is not an error.
      */
     user(request: Request): Promise<User | null>;
     /**
-     * 그 세션을 지우고 삭제 쿠키를 돌려준다. 응답에 얹는 것은 호출자의 몫이다.
+     * Erases that session and returns the deletion cookie. Putting it on the
+     * response is the caller's job.
      *
      * ```ts
      * return new Response(null, { headers: await env.auth.signOut(request) });
      * ```
      *
-     * `Headers` 가 아니라 평범한 객체인 이유는 실측이다 — `Headers` 는 RPC
-     * 경계를 못 넘는다 (docs/auth.md §4). 그래도 `HeadersInit` 이라 위처럼 그대로
-     * 얹힌다.
+     * It is a plain object rather than a `Headers` because of a measurement —
+     * `Headers` cannot cross the RPC boundary (docs/auth.md §4). It is still a
+     * `HeadersInit`, so it goes on exactly as above.
      */
     signOut(request: Request): Promise<SignOutHeaders>;
     users: AuthUsers;
@@ -78,7 +83,7 @@ export interface AuthBinding {
     revokeSessions?(userId: string): Promise<void>;
 }
 /**
- * 자기 `Env` 에 붙이는 조각.
+ * The fragment to attach to your own `Env`.
  *
  * ```ts
  * interface Env extends AuthEnv {

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,4CAA4C;AAC5C,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAE1C,MAAM,WAAW,IAAI;IACnB,qDAAqD;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,sDAAsD;IACtD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wDAAwD;AACxD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uDAAuD;IACvD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACtC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,gDAAgD;IAChD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,sBAAsB;IACtB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC7C;;;;;;;;;;OAUG;IACH,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IAMvB,OAAO,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC3C,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrD,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1E,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,cAAc,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,WAAW,CAAC;CACnB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAeA,sEAAsE;AACtE,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAE1C,MAAM,WAAW,IAAI;IACnB,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;oCACgC;IAChC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;8CAC8C;AAC9C,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACtC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD;4DACwD;IACxD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC7C;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IAOvB,OAAO,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC3C,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrD,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1E,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,UAAU,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,cAAc,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,WAAW,CAAC;CACnB"}

package/dist/index.js

@@ -1,15 +1,17 @@
-// `env.auth` 의 타입 (docs/auth.md §4, §10).
+// The types for `env.auth` (docs/auth.md §4, §10).
 //
-// 이 패키지는 런타임을 싣지 않는다. 바인딩은 workerd 안에서 auth 시스템 워커가
-// 주입하므로, 사용자가 npm 에서 받을 것은 자기 `Env` 에 붙일 타입과 브라우저에서
-// 부르는 도우미(`@runlot/auth/client`) 둘뿐이다. 의존성 0 인 이유도 같다 —
-// 워커 번들에 한 바이트도 더하지 않아야 한다.
+// This package ships no runtime. The binding is injected by the auth system
+// worker inside workerd, so all a user gets from npm is the type to attach to
+// their own `Env` and the helpers called from the browser
+// (`@runlot/auth/client`). That is also why it has zero dependencies — it must
+// not add a single byte to the worker bundle.
 //
-// `user(request)` 가 요청을 받는 것은 취향이 아니라 제약이다 (docs/access.md §4.2
-// 의 논거 그대로): `env` 는 워커 수명 동안 고정된 묶음이고 신원은 요청마다 다른
-// 값이다. 인자 없이 부르는 모양은 요청을 `AsyncLocalStorage` 로 숨겨 주는 회차 6
-// 의 Next.js 어댑터 안에서만 성립하고, 그 밖에서는 `TypeError` 다 — "안 됨" 이
-// 조용히 `null` 이 되면 모든 페이지가 로그아웃 상태로 보인다.
-/** 시스템 워커가 종단하는 경로 접두 (docs/auth.md §5). */
+// `user(request)` taking a request is a constraint, not a taste (the same
+// argument as docs/access.md §4.2): `env` is a bundle fixed for the lifetime of
+// the worker, and the identity is a different value on every request. The
+// argument-free shape only holds inside round 6's Next.js adapter, which hides
+// the request in `AsyncLocalStorage`; anywhere else it is a `TypeError` — if
+// "cannot be done" quietly became `null`, every page would look logged out.
+/** The path prefix the system worker terminates (docs/auth.md §5). */
 export const AUTH_BASE = "/__runlot/auth";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,oDAAoD;AACpD,oDAAoD;AACpD,wDAAwD;AACxD,4BAA4B;AAC5B,EAAE;AACF,gEAAgE;AAChE,mDAAmD;AACnD,0DAA0D;AAC1D,0DAA0D;AAC1D,wCAAwC;AAExC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,0DAA0D;AAC1D,+EAA+E;AAC/E,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,gFAAgF;AAChF,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAE5E,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runlot/auth",
-  "version": "0.1.0-rc.73",
+  "version": "0.1.0-rc.74",
   "description": "Types and browser helpers for env.auth — Runlot provides the runtime",
   "publishConfig": {
     "access": "public"
@@ -30,7 +30,7 @@
     "@types/node": "^22.10.2",
     "esbuild": "^0.24.2",
     "typescript": "^5.7.2",
-    "@runlot/config": "0.1.0-rc.73"
+    "@runlot/config": "0.1.0-rc.74"
   },
   "scripts": {
     "test": "node build.mjs",