@warlock.js/auth 5.33.0 → 5.34.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +2 -71
  2. package/package.json +8 -8
package/CHANGELOG.md CHANGED
@@ -4,12 +4,6 @@ All notable changes to `@warlock.js/auth` are documented in this file.
4
4
 
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `@warlock.js/*` packages are released in lockstep — every package shares the same version number, so a version below may list only the changes that affected this package.
6
6
 
7
- ## 5.33.0 - 2026-10-19
8
-
9
- ### Changed
10
-
11
- - Lockstep release; package APIs are unchanged.
12
-
13
7
  ## 5.32.0 - 2026-10-18
14
8
 
15
9
  ### Changed
@@ -43,13 +37,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
43
37
 
44
38
  ### Changed
45
39
 
46
- - Lockstep release; package APIs are unchanged. Skills refer to other topics by name instead of file paths, so cross-references keep working after `agent-kit` copies them into an app.
40
+ - Skills refer to other topics by name instead of file paths, so cross-references keep working after `agent-kit` copies them into an app.
47
41
 
48
42
  ## 5.28.0 - 2026-10-01
49
43
 
50
44
  ### Changed
51
45
 
52
- - Lockstep release; package APIs are unchanged. `llms.txt` now lists every skill topic with its description (frontmatter in CRLF files was skipped).
46
+ - `llms.txt` now lists every skill topic with its description (frontmatter in CRLF files was skipped).
53
47
 
54
48
  ## 5.27.0 - 2026-10-01
55
49
 
@@ -74,24 +68,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
74
68
  - `authMiddleware` now returns its normal `401` missing-credential response for an unsafe dual-source request that presents neither access nor refresh cookies, instead of treating the configured refresh descriptor as a presented credential and rejecting its Origin with `403`.
75
69
  - Token-pair issuance now ensures its durable token family once, and repeated ensures return the existing family without another upsert.
76
70
 
77
- ## 5.24.0 - 2026-09-27
78
-
79
- ### Changed
80
-
81
- - Lockstep release; package APIs are unchanged.
82
-
83
- ## 5.23.2 - 2026-09-26
84
-
85
- ### Changed
86
-
87
- - Lockstep patch release; package APIs are unchanged.
88
-
89
- ## 5.23.1 - 2026-09-26
90
-
91
- ### Changed
92
-
93
- - Lockstep patch release; package APIs are unchanged.
94
-
95
71
  ## 5.23.0 - 2026-09-25
96
72
 
97
73
  ### Upgrading
@@ -102,12 +78,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
102
78
 
103
79
  - **BREAKING:** `CookieWriter` is removed. `setSessionCookies`, `clearSessionCookies`, `setAuthCookie`, `clearAuthCookie` and `loginWithSessionCookies` take core's `Response` (only its `cookie` and `clearCookie`), so a page action's `response` still works without a cast. An app helper that was typed as `CookieWriter` can take `{ cookie: (...args: Parameters<Response["cookie"]>) => unknown }` instead.
104
80
 
105
- ## 5.22.1 - 2026-09-25
106
-
107
- ### Changed
108
-
109
- - Lockstep patch release; package APIs are unchanged.
110
-
111
81
  ## 5.22.0 - 2026-09-25
112
82
 
113
83
  ### Fixed
@@ -128,10 +98,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
128
98
  - **BREAKING:** `authMiddleware` takes an ordered header/cookie `sources` list; a present Authorization header always wins and never falls back to the cookie, so an invalid header now returns `401`.
129
99
  - JWTs carry a random `jti`, so tokens issued in the same second differ.
130
100
 
131
- ### Changed
132
-
133
- - Lockstep release maintenance and dependency refresh.
134
-
135
101
  ## 5.20.0 - 2026-09-24
136
102
 
137
103
  ### Changed
@@ -242,18 +208,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
242
208
 
243
209
  A typed `currentUser<UserType extends Auth>()` helper is also exported, wrapping core's `useCurrentUser()` for callers that want `Auth`-derived typing without repeating the assertion at every call site.
244
210
 
245
- ## 5.11.0 - 2026-09-14
246
-
247
- _Released in lockstep with the `@warlock.js/*` family; no package-specific changes in 5.11.0._
248
-
249
- ## 5.10.0 - 2026-09-14
250
-
251
- _Released in lockstep with the `@warlock.js/*` family; no package-specific changes in 5.10.0._
252
-
253
- ## 5.9.0 - 2026-09-13
254
-
255
- _Released in lockstep with the `@warlock.js/*` family; no package-specific changes in 5.9.0._
256
-
257
211
  ## 5.8.0 - 2026-09-13
258
212
 
259
213
  ### Added
@@ -270,33 +224,10 @@ _Released in lockstep with the `@warlock.js/*` family; no package-specific chang
270
224
 
271
225
  - Documentation shipped in this package's `skills/` told users to run `pnpm`-specific commands. `pnpm <binary>` has no npm equivalent, so those instructions failed outright for anyone not using pnpm. Commands are now package-manager neutral.
272
226
 
273
- ## 5.2.3 - 2026-09-02
274
-
275
- ### Fixed
276
-
277
- - Released in exact lockstep with Core's Web generator repairs so every family dependency remains installable at 5.2.3.
278
-
279
227
  ## 5.2.2
280
228
 
281
229
  - `package.json` now declares `"warlock": { "environment": "server" }` — build-boundary metadata `@warlock.js/web` uses to refuse value-imports of this package from app client code (type-only imports are still allowed; server loaders/controllers/modules are unaffected).
282
230
 
283
- ## 5.1.0
284
-
285
- No changes to `@warlock.js/auth`. Released in lockstep with the `@warlock.js/web`
286
- React-execution fix and the `@warlock.js/core` CLI additions — see those packages'
287
- changelogs.
288
-
289
- ## 5.0.2 - 2026-08-25
290
-
291
- No changes to `@warlock.js/auth`. Released in lockstep with the `@warlock.js/web` SSR
292
- fix (`ssr.noExternal`) — see that package's changelog.
293
-
294
- ## 5.0.1 - 2026-08-25
295
-
296
- No changes to `@warlock.js/auth`. Released in lockstep with the `create-warlock` vite
297
- resolution pin and the `@warlock.js/web` peer narrowing — see those packages'
298
- changelogs.
299
-
300
231
  ## 5.0.0 - 2026-08-25
301
232
 
302
233
  ### Changed
package/package.json CHANGED
@@ -12,13 +12,13 @@
12
12
  "ms": "^2.1.3"
13
13
  },
14
14
  "peerDependencies": {
15
- "@warlock.js/fs": "5.33.0",
16
- "@warlock.js/cache": "5.33.0",
17
- "@warlock.js/cascade": "5.33.0",
18
- "@warlock.js/core": "5.33.0",
19
- "@warlock.js/logger": "5.33.0",
20
- "@warlock.js/seal": "5.33.0",
21
- "@warlock.js/notifications": "5.33.0",
15
+ "@warlock.js/fs": "5.34.1",
16
+ "@warlock.js/cache": "5.34.1",
17
+ "@warlock.js/cascade": "5.34.1",
18
+ "@warlock.js/core": "5.34.1",
19
+ "@warlock.js/logger": "5.34.1",
20
+ "@warlock.js/seal": "5.34.1",
21
+ "@warlock.js/notifications": "5.34.1",
22
22
  "@simplewebauthn/server": "^13.1.0",
23
23
  "jose": "^6.1.0"
24
24
  },
@@ -48,7 +48,7 @@
48
48
  ],
49
49
  "author": "hassanzohdy",
50
50
  "license": "MIT",
51
- "version": "5.33.0",
51
+ "version": "5.34.1",
52
52
  "type": "module",
53
53
  "main": "./esm/index.mjs",
54
54
  "module": "./esm/index.mjs",