OptionalassignReturn an updated context with auth/session fields attached.
OptionalgetCustom session lookup. Required when context does not expose
ctx.ports.auth.
OptionalisDecide whether a resolved session counts as authenticated.
OptionalmodeResolve whether the current contract is public, optional-auth, or required-auth.
OptionalnameHook name used in diagnostics.
OptionalunauthorizedReturn a custom unauthorized response for required-auth routes.
Options for
createAuthHooks(...).