@mastra/auth-workos - npm Package Compare versions

Comparing version 1.6.3 to 1.6.4-alpha.0

dist/_types/@internal_auth/dist/ee/fga-check.d.ts

@@ -6,8 +6,5 @@ /**
  */
-import type { FGACheckContext, IFGAProvider } from './interfaces/fga.js';
+import type { ActorSignal, FGACheckContext, IFGAProvider } from './interfaces/fga.js';
 import type { MastraFGAPermissionInput } from './interfaces/permissions.generated.js';
-export type ActorSignal = true | {
-    actorKind: 'system';
-    sourceWorkflow?: string;
-};
+export type { ActorSignal };
 export interface CheckFGAOptions {
@@ -14,0 +11,0 @@ fgaProvider: IFGAProvider | undefined;

dist/_types/@internal_auth/dist/ee/interfaces/fga.d.ts

@@ -12,2 +12,30 @@ /**
 /**
+ * Signals that a call is made by a trusted non-user actor rather than an
+ * authenticated end user.
+ *
+ * - `true` is the anonymous system shorthand.
+ * - The object form additionally names the acting agent (`agentId`) and carries
+ *   the permission grants / scope a provider can enforce for least privilege.
+ */
+export type ActorSignal = true | {
+    actorKind: 'system';
+    sourceWorkflow?: string;
+    /**
+     * Identity of the acting system agent. Unlike the check `resource` (the
+     * target), this names the actor itself so a provider can enforce
+     * per-agent least privilege.
+     */
+    agentId?: string;
+    /**
+     * Permission grants *claimed* for this actor — the actor analog of a
+     * user's resolved permissions. This is an untrusted, self-asserted hint:
+     * a provider enforcing real least privilege should resolve the actor's
+     * authoritative grants from a trusted source (e.g. a manifest or FGA,
+     * keyed by `agentId`) rather than trusting these values directly.
+     */
+    permissions?: MastraFGAPermissionInput[];
+    /** Additional provider-specific scope for the actor (e.g. tenant, environment). */
+    scope?: Record<string, string>;
+};
+/**
  * Optional context for an authorization check.
@@ -310,2 +338,21 @@ */
     }>(user: TUser, resources: T[], resourceType: string, permission: MastraFGAPermissionInput): Promise<T[]>;
+    /**
+     * Authorize a non-user (system / autonomous agent) actor.
+     *
+     * System actors bypass the user-centric `require()` path. Implement this
+     * method to opt in to provider-driven least privilege for those actors:
+     * decide whether the actor (identified by `actor.agentId` and constrained by
+     * `actor.permissions` / `actor.scope`) may perform `permission` on
+     * `resource`, and throw {@link FGADeniedError} to deny.
+     *
+     * When this method is not implemented, Mastra preserves the legacy
+     * trusted-actor bypass (allow after the tenant-scope check). Adding it is
+     * therefore fully backward compatible.
+     *
+     * @param actor - The system actor signal (`true` shorthand, or an object with
+     *   `agentId`, `permissions`, `scope`).
+     * @param params - The resource and permission being attempted.
+     * @throws FGADeniedError if the actor may not perform the action.
+     */
+    requireActor?(actor: ActorSignal, params: FGACheckParams): Promise<void>;
 }
@@ -312,0 +359,0 @@ /**

dist/_types/@internal_auth/dist/index.d.ts

@@ -273,2 +273,68 @@ /**
 }
+/**
+ * Provider interface for organization membership management.
+ *
+ * Implement this interface to enable multi-tenant hosts (e.g. the Mastra Code
+ * web factory) to bootstrap a personal organization for new users and to
+ * authorize organization-level administrative mutations.
+ */
+export interface IOrganizationsProvider {
+    /**
+     * Ensure the user belongs to an organization, bootstrapping a personal org
+     * on first use when they have none. Must be idempotent under
+     * concurrent/retried first logins.
+     *
+     * @param userId - Stable provider user id
+     * @returns The organization id, or `undefined` when the user genuinely
+     * stays no-org (bootstrap is best-effort)
+     */
+    ensureOrganization(userId: string): Promise<string | undefined>;
+    /**
+     * Whether the user holds an admin-equivalent role in the organization.
+     * Provider errors should resolve to `false` rather than throw.
+     *
+     * @param organizationId - Organization id
+     * @param userId - Stable provider user id
+     */
+    isOrganizationAdmin(organizationId: string, userId: string): Promise<boolean>;
+}
+/**
+ * Host-level context handed to {@link IAuthInit.init} once during server
+ * preparation. Storage-agnostic: hosts pass whatever database handle their
+ * storage backend exposes.
+ */
+export interface AuthInitContext {
+    /**
+     * Database handle for providers that persist their own auth tables
+     * (e.g. better-auth). Shape is provider-defined; hosts pass their storage
+     * backend's auth database as-is.
+     */
+    database?: unknown;
+    /** Browser-facing origin (no trailing slash), e.g. `https://factory.acme.com`. */
+    publicUrl?: string;
+    /**
+     * Extra browser origins allowed to talk to the API (cross-origin SPA
+     * deploys). Providers that enforce their own origin allow-list (e.g.
+     * better-auth `trustedOrigins`) must honor these.
+     */
+    allowedOrigins?: string[];
+}
+/**
+ * Optional one-time initialization hook for auth providers. Hosts call
+ * `init()` once during preparation with host-level context (database, public
+ * origin) so providers can consume it without the deploy entry passing it
+ * twice. Providers should fail fast here for requirements only satisfiable at
+ * prepare time.
+ */
+export interface IAuthInit {
+    init(ctx: AuthInitContext): Promise<void>;
+}
+/**
+ * Provider interface for handling raw auth HTTP requests. Providers that ship
+ * their own HTTP API surface (e.g. better-auth's `/api/auth/*` handler)
+ * implement this so hosts can mount it (typically under `/auth/api/*`).
+ */
+export interface IAuthHttpHandler {
+    handleAuthRequest(request: Request): Promise<Response>;
+}
 export * from './session/index.js';
@@ -275,0 +341,0 @@ export * from './provider/index.js';

dist/_types/@internal_auth/dist/provider/index.d.ts

 import { MastraBase } from '../_types/@internal_core/dist/base/index.d.ts';
-import type { CredentialsResult, ISSOProvider, ISessionProvider, IUserProvider, Session, SSOCallbackResult, SSOLoginConfig, User } from '..';
+import type { CredentialsResult, IAuthHttpHandler, IAuthInit, ICredentialsProvider, IOrganizationsProvider, ISSOProvider, ISessionProvider, IUserProvider, Session, SSOCallbackResult, SSOLoginConfig, User } from '..';
 import type { AuthorizeUserFn, MastraAuthConfig, MastraAuthRequest } from '../types/index.js';
@@ -75,2 +75,9 @@ export interface MastraAuthProviderOptions<TUser = unknown> {
 }
+export declare function isSSOProvider(p: unknown): p is ISSOProvider;
+export declare function isSessionProvider(p: unknown): p is ISessionProvider;
+export declare function isUserProvider(p: unknown): p is IUserProvider;
+export declare function isCredentialsProvider(p: unknown): p is ICredentialsProvider;
+export declare function isOrganizationsProvider(p: unknown): p is IOrganizationsProvider;
+export declare function isAuthHttpHandler(p: unknown): p is IAuthHttpHandler;
+export declare function hasAuthInit(p: unknown): p is IAuthInit;
 export declare class CompositeAuth extends MastraAuthProvider implements ISSOProvider<User>, ISessionProvider<Session>, IUserProvider<User> {
@@ -77,0 +84,0 @@ private providers;

dist/auth-provider.d.ts

@@ -7,3 +7,3 @@ /**
  */
-import type { IUserProvider, ISSOProvider, ISessionProvider, Session, SSOCallbackResult, SSOLoginConfig } from './_types/@internal_auth/dist/index.d.ts';
+import type { AuthInitContext, IAuthInit, IOrganizationsProvider, IUserProvider, ISSOProvider, ISessionProvider, Session, SSOCallbackResult, SSOLoginConfig } from './_types/@internal_auth/dist/index.d.ts';
 import type { EEUser } from './_types/@internal_auth/dist/ee/index.d.ts';
@@ -41,3 +41,3 @@ import { MastraAuthProvider } from './_types/@internal_auth/dist/provider/index.d.ts';
  */
-export declare class MastraAuthWorkos extends MastraAuthProvider<WorkOSUser> implements IUserProvider<EEUser>, ISSOProvider<EEUser>, ISessionProvider<Session> {
+export declare class MastraAuthWorkos extends MastraAuthProvider<WorkOSUser> implements IUserProvider<EEUser>, ISSOProvider<EEUser>, ISessionProvider<Session>, IOrganizationsProvider, IAuthInit {
     protected workos: WorkOS;
@@ -149,2 +149,36 @@ protected clientId: string;
     /**
+     * One-time host initialization. Resolves the redirect URI from the host's
+     * `publicUrl` (`<publicUrl>/auth/callback`) when it was not provided in the
+     * options or via `WORKOS_REDIRECT_URI`.
+     *
+     * Fails at prepare time rather than handing WorkOS an empty redirect URI on
+     * the first login (which breaks hosted login with an opaque provider error).
+     */
+    init(ctx: AuthInitContext): Promise<void>;
+    /**
+     * Ensure the user belongs to a WorkOS organization, creating a personal org
+     * on first use when they have none.
+     *
+     * - ≥1 membership → return the first org id (they already belong somewhere;
+     *   we never auto-create when a membership exists).
+     * - 0 memberships → create a personal org + membership and return its id.
+     *
+     * Idempotency: the create call carries `externalId = userId` and a stable
+     * `idempotencyKey`, so concurrent/retried first logins never create duplicate
+     * personal orgs. If a prior run created the org but never attached the
+     * membership, the create rejects with `external_id_already_used`; we recover
+     * the existing org by `externalId` and (re)attach the membership instead of
+     * failing.
+     *
+     * Best-effort: any WorkOS error (e.g. API key lacking org-create permission)
+     * is swallowed and returns `undefined`, leaving the user in their no-org
+     * state rather than failing the request.
+     */
+    ensureOrganization(userId: string): Promise<string | undefined>;
+    /**
+     * Whether the user holds an admin-equivalent role (`admin` or `owner`) in
+     * the organization. Provider errors resolve to `false`.
+     */
+    isOrganizationAdmin(organizationId: string, userId: string): Promise<boolean>;
+    /**
      * Get the underlying WorkOS client.
@@ -151,0 +185,0 @@ */

dist/auth-provider.d.ts.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"auth-provider.d.ts","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,cAAc,EACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAqB,MAAM,yBAAyB,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,KAAK,eAAe,GAAG;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,KAAK,iBAAiB,GAAG,OAAO,GAAG,eAAe,CAAC;AAWnD,OAAO,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAWtE;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBACX,SAAQ,kBAAkB,CAAC,UAAU,CACrC,YAAW,aAAa,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC;IAEjF,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,SAAS,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACpD,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;IAChC,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACpC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC;IAClC,SAAS,CAAC,eAAe,CAAC,EAAE,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACjE,SAAS,CAAC,mBAAmB,CAAC,EAAE,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;IAC/E,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAE1D,OAAO,CAAC,EAAE,uBAAuB;IA+E7C;;;;;OAKG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAgF9F;;OAEG;IACG,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAQvD;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyC9D;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAYzD;;OAEG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;YAIzB,cAAc;YAoBd,yBAAyB;IAiBvC,OAAO,CAAC,iCAAiC;IAIzC,OAAO,CAAC,qBAAqB;IA6C7B,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,mBAAmB;IA+B3B,OAAO,CAAC,YAAY;IAoBpB;;OAEG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IA8BvD;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAoDtF;;;;;;;OAOG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiClF;;OAEG;IACH,oBAAoB,IAAI,cAAc;IAyBtC;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAczF;;;;OAIG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAMlE;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAKjE;;OAEG;IACH,uBAAuB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI;IAMzD;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAU3D;;OAEG;IACH,sBAAsB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAShD;;OAEG;IACH,SAAS,IAAI,MAAM;IAInB;;OAEG;IACH,cAAc,IAAI,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC;IAIhD;;OAEG;IACH,WAAW,IAAI,MAAM;IAIrB;;OAEG;IACH,cAAc,IAAI,MAAM;CAGzB"}
+{"version":3,"file":"auth-provider.d.ts","sourceRoot":"","sources":["../src/auth-provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,cAAc,EACf,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAqB,MAAM,yBAAyB,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,KAAK,eAAe,GAAG;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,KAAK,iBAAiB,GAAG,OAAO,GAAG,eAAe,CAAC;AAWnD,OAAO,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAsCtE;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBACX,SAAQ,kBAAkB,CAAC,UAAU,CACrC,YAAW,aAAa,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,SAAS;IAEpH,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,SAAS,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACpD,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;IAChC,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACpC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC;IAClC,SAAS,CAAC,eAAe,CAAC,EAAE,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACjE,SAAS,CAAC,mBAAmB,CAAC,EAAE,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;IAC/E,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBAE1D,OAAO,CAAC,EAAE,uBAAuB;IA2E7C;;;;;OAKG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAgF9F;;OAEG;IACG,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAQvD;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyC9D;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAYzD;;OAEG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;YAIzB,cAAc;YAoBd,yBAAyB;IAiBvC,OAAO,CAAC,iCAAiC;IAIzC,OAAO,CAAC,qBAAqB;IA6C7B,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,mBAAmB;IA+B3B,OAAO,CAAC,YAAY;IAoBpB;;OAEG;IACH,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAsCvD;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAoDtF;;;;;;;OAOG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiClF;;OAEG;IACH,oBAAoB,IAAI,cAAc;IAyBtC;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAczF;;;;OAIG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAMlE;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD;;OAEG;IACG,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAKjE;;OAEG;IACH,uBAAuB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI;IAMzD;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAU3D;;OAEG;IACH,sBAAsB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAShD;;;;;;;OAOG;IACG,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB/C;;;;;;;;;;;;;;;;;;OAkBG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IA2DrE;;;OAGG;IACG,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBnF;;OAEG;IACH,SAAS,IAAI,MAAM;IAInB;;OAEG;IACH,cAAc,IAAI,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC;IAIhD;;OAEG;IACH,WAAW,IAAI,MAAM;IAIrB;;OAEG;IACH,cAAc,IAAI,MAAM;CAGzB"}

package.json

 {
   "name": "@mastra/auth-workos",
-  "version": "1.6.3",
+  "version": "1.6.4-alpha.0",
   "description": "Mastra WorkOS Auth integration",
@@ -35,3 +35,3 @@ "type": "module",
     "@vitest/ui": "4.1.10",
-    "eslint": "^10.4.1",
+    "eslint": "^10.7.0",
     "tsup": "^8.5.1",
@@ -41,4 +41,4 @@ "typescript": "^6.0.3",
     "@internal/auth": "0.0.6",
-    "@internal/types-builder": "0.0.89",
-    "@internal/lint": "0.0.114"
+    "@internal/lint": "0.0.114",
+    "@internal/types-builder": "0.0.89"
   },
@@ -45,0 +45,0 @@ "files": [

New alerts

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Improved metrics

Total package byte prevSize

763805

5.96%

Lines of code

7895

5.04%

Worsened metrics

Number of low quality alerts

1

Infinity%

No dependency changes