@suluk/better-auth 0.2.1 → 0.2.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suluk/better-auth",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Official Better-Auth-on-Hono support for Suluk: auth methods -> v4 securitySchemes; ingest Better Auth's OpenAPI 3.0 -> v4; session -> principal for per-viewer docs. CANDIDATE tooling.",
   "publishConfig": {
     "access": "public"

package/src/index.ts

@@ -11,7 +11,7 @@ export { authSecuritySchemes, type AuthMethods, type AuthSecurity } from "./secu
 export { normalizeOas30, ingestAuthOpenAPI, mergeAuth, type IngestOptions } from "./ingest";
 export {
   principalFromSession, MFA_SCOPE, mcpConnectionKeyId, orgScope, parseOrgScope,
-  type Principal, type SessionLike, type PrincipalOptions,
+  type Principal, type SessionLike, type PrincipalOptions, type AppVars,
 } from "./principal";
 export { mountAuth, type AuthHandlerLike, type HonoLike, type MountAuthOptions } from "./mount";
 // scope-aware API-key verification (Phase 0): wraps Better Auth's verifyApiKey to return a { scopes } Principal,

package/src/principal.ts

@@ -8,6 +8,16 @@ export interface Principal {
   scopes: string[];
 }
 
+/** The Hono context Variables the auth middleware POPULATES per `/api/*` request — the resolved caller (`c.get("user")`,
+ *  `c.var.scopes`, and the api-key id/name for a keyed caller). A module that READS the auth-set principal (e.g. `mcp`)
+ *  types its context off THIS shared shape instead of importing the app's `../auth` — so it needs no sibling import. */
+export interface AppVars {
+  user?: { id: string; email?: string };
+  scopes?: string[];
+  keyId?: string;
+  keyName?: string;
+}
+
 /** A minimal view of a Better Auth session (duck-typed; works with the real Session shape). */
 export interface SessionLike {
   user?: { role?: string | string[]; scopes?: string[] } | null;