toilscript 0.1.52 → 0.1.53

package/dist/importmap.json

@@ -1,7 +1,7 @@
 {
   "imports": {
-    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.52/dist/toilscript.js",
-    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.52/dist/cli.js",
+    "toilscript": "https://cdn.jsdelivr.net/npm/toilscript@0.1.53/dist/toilscript.js",
+    "toilscript/cli": "https://cdn.jsdelivr.net/npm/toilscript@0.1.53/dist/cli.js",
     "binaryen": "https://cdn.jsdelivr.net/npm/binaryen@130.0.0-nightly.20260609/index.js",
     "long": "https://cdn.jsdelivr.net/npm/long@5.3.2/index.js"
   }

package/dist/toilscript.generated.d.ts

@@ -3271,6 +3271,14 @@ declare module "types:toilscript/src/parser" {
          * `AuthUser` (a natural compile error).
          */
         private injectUserBinding;
+        /** Built-in auth (`server.auth`) reserves `toilUserId` + `username` as the FIRST two `@user` fields, so an
+         *  app can add its own fields to the authenticated user without repeating the identity boilerplate. Errors
+         *  if the class already declares either reserved name. Prepended toilUserId-first so `AuthService.userId()`
+         *  recovers the stable id straight from the session codec. Runs before `injectDataCodec` so the codec
+         *  covers the injected fields. */
+        private injectAuthIdentityFields;
+        /** Parse one synthesized field for {@link injectAuthIdentityFields}: returns the member (does not push). */
+        private parseAuthField;
         /** True if `decorators` carries a decorator of `kind` (e.g. `@auth`). */
         private hasDecoratorKind;
         /** The mount prefix from `@rest("api")` -> "/api"; "" for the bare/object form (root). */
@@ -5157,6 +5165,10 @@ declare module "types:toilscript/src/compiler" {
         /** Toil compile surface mode. null = default request artifact. "hot" = request + stream surface.
          *  "cold" = daemon surface. */
         targetMode: string | null;
+        /** Built-in auth (`server.auth`): inject the reserved `toilUserId` + `username` identity fields into the
+         *  single `@user` so an app can extend the authenticated user with its own fields. Set by the toiljs build
+         *  when it detects the app declares its own `@user` under `server.auth`. */
+        authUser: boolean;
         /** Runtime type. Defaults to Incremental GC. */
         runtime: Runtime;
         /** If true, indicates that debug information will be emitted by Binaryen. */
@@ -10069,6 +10081,8 @@ declare module "types:toilscript/src/index-wasm" {
     export function setNoUnsafe(options: Options, noUnsafe: boolean): void;
     /** Sets the `targetMode` option ("hot", "cold", or null for the default request artifact). */
     export function setTargetMode(options: Options, targetMode: string | null): void;
+    /** Enables built-in-auth `@user` field injection (reserved `toilUserId` + `username`). */
+    export function setAuthUser(options: Options, authUser: boolean): void;
     /** Sets the `lowMemoryLimit` option. */
     export function setLowMemoryLimit(options: Options, lowMemoryLimit: number): void;
     /** Sets the `exportRuntime` option. */