@1sat/connect 0.0.13 → 0.0.15

package/dist/sigma-oauth.d.ts

@@ -1,19 +1,15 @@
 /**
- * Sigma OAuth — PKCE flow helpers for Sigma Identity provider.
- *
- * These are standard OAuth 2.0 + PKCE utilities. No dependency on
- * @sigma-auth/better-auth-plugin — the consuming app's server-side
- * callback route handles the token exchange.
+ * Sigma OAuth — wraps @sigma-auth/better-auth-plugin/client for the
+ * standard Sigma Identity OAuth flow (PKCE, redirect, callback).
  */
+import { type SigmaSignInOptions, sigmaClient } from '@sigma-auth/better-auth-plugin/client';
+/** Sigma Identity server URL */
+export declare const SIGMA_URL = "https://auth.sigmaidentity.com";
 export interface SigmaOAuthConfig {
-    /** Sigma auth server URL (e.g. https://auth.sigmaidentity.com) */
-    sigmaUrl: string;
     /** OAuth client ID registered with Sigma */
     clientId: string;
     /** Local callback URL path (default: /auth/sigma/callback) */
     callbackURL?: string;
-    /** Scopes to request (default: ['openid', 'profile']) */
-    scopes?: string[];
 }
 export interface SigmaOAuthResult {
     /** BAP ID returned from the callback */
@@ -25,28 +21,970 @@ export interface SigmaOAuthResult {
     /** Access token */
     accessToken: string;
 }
+type SigmaPluginActions = ReturnType<ReturnType<typeof sigmaClient>['getActions']>;
+type SigmaAugmentedClient = {
+    sigma: SigmaPluginActions['sigma'];
+    signIn: {
+        sigma: SigmaPluginActions['signIn']['sigma'];
+    };
+};
+declare const baseAuthClient: {
+    signIn: {
+        social: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+            provider: (string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel";
+            callbackURL?: string | undefined;
+            newUserCallbackURL?: string | undefined;
+            errorCallbackURL?: string | undefined;
+            disableRedirect?: boolean | undefined;
+            idToken?: {
+                token: string;
+                nonce?: string | undefined;
+                accessToken?: string | undefined;
+                refreshToken?: string | undefined;
+                expiresAt?: number | undefined;
+                user?: {
+                    name?: {
+                        firstName?: string | undefined;
+                        lastName?: string | undefined;
+                    } | undefined;
+                    email?: string | undefined;
+                } | undefined;
+            } | undefined;
+            scopes?: string[] | undefined;
+            requestSignUp?: boolean | undefined;
+            loginHint?: string | undefined;
+            additionalData?: Record<string, any> | undefined;
+        }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+            provider: (string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel";
+            callbackURL?: string | undefined;
+            newUserCallbackURL?: string | undefined;
+            errorCallbackURL?: string | undefined;
+            disableRedirect?: boolean | undefined;
+            idToken?: {
+                token: string;
+                nonce?: string | undefined;
+                accessToken?: string | undefined;
+                refreshToken?: string | undefined;
+                expiresAt?: number | undefined;
+                user?: {
+                    name?: {
+                        firstName?: string | undefined;
+                        lastName?: string | undefined;
+                    } | undefined;
+                    email?: string | undefined;
+                } | undefined;
+            } | undefined;
+            scopes?: string[] | undefined;
+            requestSignUp?: boolean | undefined;
+            loginHint?: string | undefined;
+            additionalData?: Record<string, any> | undefined;
+        } & {
+            fetchOptions?: FetchOptions | undefined;
+        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+            redirect: boolean;
+            url: string;
+        } | (Omit<{
+            redirect: boolean;
+            token: string;
+            url: undefined;
+            user: {
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined | undefined;
+            };
+        }, "user"> & {
+            user: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined;
+            }>;
+        }), {
+            code?: string | undefined;
+            message?: string | undefined;
+        }, FetchOptions["throw"] extends true ? true : false>>;
+    };
+} & {
+    signOut: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: Record<string, any> | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        success: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    signUp: {
+        email: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+            name: string;
+            email: string;
+            password: string;
+            image?: string | undefined;
+            callbackURL?: string | undefined;
+            rememberMe?: boolean | undefined;
+        }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+            email: string;
+            name: string;
+            password: string;
+            image?: string | undefined;
+            callbackURL?: string | undefined;
+            fetchOptions?: FetchOptions | undefined;
+        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<(Omit<{
+            token: null;
+            user: {
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined | undefined;
+            };
+        }, "user"> & {
+            user: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined;
+            }>;
+        }) | (Omit<{
+            token: string;
+            user: {
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined | undefined;
+            };
+        }, "user"> & {
+            user: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined;
+            }>;
+        }), {
+            code?: string | undefined;
+            message?: string | undefined;
+        }, FetchOptions["throw"] extends true ? true : false>>;
+    };
+} & {
+    signIn: {
+        email: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+            email: string;
+            password: string;
+            callbackURL?: string | undefined;
+            rememberMe?: boolean | undefined;
+        }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+            email: string;
+            password: string;
+            callbackURL?: string | undefined;
+            rememberMe?: boolean | undefined;
+        } & {
+            fetchOptions?: FetchOptions | undefined;
+        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<Omit<{
+            redirect: boolean;
+            token: string;
+            url?: string | undefined;
+            user: {
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined | undefined;
+            };
+        }, "user"> & {
+            user: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined;
+            }>;
+        }, {
+            code?: string | undefined;
+            message?: string | undefined;
+        }, FetchOptions["throw"] extends true ? true : false>>;
+    };
+} & {
+    resetPassword: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        newPassword: string;
+        token?: string | undefined;
+    }> & Record<string, any>, Partial<{
+        token?: string | undefined;
+    }> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        newPassword: string;
+        token?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    verifyEmail: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        token: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        query: {
+            token: string;
+            callbackURL?: string | undefined;
+        };
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<NonNullable<void | {
+        status: boolean;
+    }>, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    sendVerificationEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        email: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        email: string;
+        callbackURL?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    changeEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        newEmail: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        newEmail: string;
+        callbackURL?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    changePassword: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        newPassword: string;
+        currentPassword: string;
+        revokeOtherSessions?: boolean | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        newPassword: string;
+        currentPassword: string;
+        revokeOtherSessions?: boolean | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<Omit<{
+        token: string | null;
+        user: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        } & Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        };
+    }, "user"> & {
+        user: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        }>;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    updateSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}>> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<Partial<{}> & {
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+        };
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    updateUser: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}> & {
+        name?: string | undefined;
+        image?: string | undefined | null;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<import("better-auth/client").InferUserUpdateCtx<{
+        baseURL: string;
+        plugins: import("better-auth").BetterAuthClientPlugin[];
+    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    deleteUser: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        callbackURL?: string | undefined;
+        password?: string | undefined;
+        token?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        callbackURL?: string | undefined;
+        password?: string | undefined;
+        token?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        success: boolean;
+        message: string;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    requestPasswordReset: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        email: string;
+        redirectTo?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        email: string;
+        redirectTo?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+        message: string;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    resetPassword: {
+        ":token": <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+            callbackURL: string;
+        }> & Record<string, any>, {
+            token: string;
+        }>>(data_0: import("better-auth").Prettify<{
+            query: {
+                callbackURL: string;
+            };
+            fetchOptions?: FetchOptions | undefined;
+        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<never, {
+            code?: string | undefined;
+            message?: string | undefined;
+        }, FetchOptions["throw"] extends true ? true : false>>;
+    };
+} & {
+    listSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: Record<string, any> | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<import("better-auth").Prettify<{
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        userId: string;
+        expiresAt: Date;
+        token: string;
+        ipAddress?: string | null | undefined | undefined;
+        userAgent?: string | null | undefined | undefined;
+    }>[], {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    revokeSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        token: string;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        token: string;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    revokeSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: Record<string, any> | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    revokeOtherSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: Record<string, any> | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    linkSocial: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        provider: unknown;
+        callbackURL?: string | undefined;
+        idToken?: {
+            token: string;
+            nonce?: string | undefined;
+            accessToken?: string | undefined;
+            refreshToken?: string | undefined;
+            scopes?: string[] | undefined;
+        } | undefined;
+        requestSignUp?: boolean | undefined;
+        scopes?: string[] | undefined;
+        errorCallbackURL?: string | undefined;
+        disableRedirect?: boolean | undefined;
+        additionalData?: Record<string, any> | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        provider: unknown;
+        callbackURL?: string | undefined;
+        idToken?: {
+            token: string;
+            nonce?: string | undefined;
+            accessToken?: string | undefined;
+            refreshToken?: string | undefined;
+            scopes?: string[] | undefined;
+        } | undefined;
+        requestSignUp?: boolean | undefined;
+        scopes?: string[] | undefined;
+        errorCallbackURL?: string | undefined;
+        disableRedirect?: boolean | undefined;
+        additionalData?: Record<string, any> | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        url: string;
+        redirect: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    listAccounts: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: Record<string, any> | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        scopes: string[];
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        userId: string;
+        providerId: string;
+        accountId: string;
+    }[], {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    deleteUser: {
+        callback: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+            token: string;
+            callbackURL?: string | undefined;
+        }> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+            query: {
+                token: string;
+                callbackURL?: string | undefined;
+            };
+            fetchOptions?: FetchOptions | undefined;
+        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+            success: boolean;
+            message: string;
+        }, {
+            code?: string | undefined;
+            message?: string | undefined;
+        }, FetchOptions["throw"] extends true ? true : false>>;
+    };
+} & {
+    unlinkAccount: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        providerId: string;
+        accountId?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        providerId: string;
+        accountId?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    refreshToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        providerId: string;
+        accountId?: string | undefined;
+        userId?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        providerId: string;
+        accountId?: string | undefined;
+        userId?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        accessToken: string | undefined;
+        refreshToken: string;
+        accessTokenExpiresAt: Date | undefined;
+        refreshTokenExpiresAt: Date | null | undefined;
+        scope: string | null | undefined;
+        idToken: string | null | undefined;
+        providerId: string;
+        accountId: string;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    getAccessToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        providerId: string;
+        accountId?: string | undefined;
+        userId?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0: import("better-auth").Prettify<{
+        providerId: string;
+        accountId?: string | undefined;
+        userId?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        accessToken: string;
+        accessTokenExpiresAt: Date | undefined;
+        scopes: string[];
+        idToken: string | undefined;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    accountInfo: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        accountId?: string | undefined;
+    }> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: {
+            accountId?: string | undefined;
+        } | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        user: import("better-auth").OAuth2UserInfo;
+        data: Record<string, any>;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    getSession: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        disableCookieCache?: unknown;
+        disableRefresh?: unknown;
+    }> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: {
+            disableCookieCache?: unknown;
+            disableRefresh?: unknown;
+        } | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        user: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        }>;
+        session: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+        }>;
+    } | null, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+} & {
+    useSession: import("nanostores").Atom<{
+        data: {
+            user: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined;
+            }>;
+            session: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                userId: string;
+                expiresAt: Date;
+                token: string;
+                ipAddress?: string | null | undefined;
+                userAgent?: string | null | undefined;
+            }>;
+        } | null;
+        error: import("@better-fetch/fetch").BetterFetchError | null;
+        isPending: boolean;
+        isRefetching: boolean;
+        refetch: (queryParams?: {
+            query?: import("better-auth").SessionQueryParams;
+        } | undefined) => Promise<void>;
+    }>;
+    $fetch: import("@better-fetch/fetch").BetterFetch<{
+        plugins: (import("@better-fetch/fetch").BetterFetchPlugin<Record<string, any>> | {
+            id: string;
+            name: string;
+            hooks: {
+                onSuccess(context: import("@better-fetch/fetch").SuccessContext<any>): void;
+            };
+        } | {
+            id: string;
+            name: string;
+            hooks: {
+                onSuccess: ((context: import("@better-fetch/fetch").SuccessContext<any>) => Promise<void> | void) | undefined;
+                onError: ((context: import("@better-fetch/fetch").ErrorContext) => Promise<void> | void) | undefined;
+                onRequest: (<T extends Record<string, any>>(context: import("@better-fetch/fetch").RequestContext<T>) => Promise<import("@better-fetch/fetch").RequestContext | void> | import("@better-fetch/fetch").RequestContext | void) | undefined;
+                onResponse: ((context: import("@better-fetch/fetch").ResponseContext) => Promise<Response | void | import("@better-fetch/fetch").ResponseContext> | Response | import("@better-fetch/fetch").ResponseContext | void) | undefined;
+            };
+        })[];
+        cache?: RequestCache | undefined;
+        priority?: RequestPriority | undefined;
+        credentials?: RequestCredentials;
+        headers?: (HeadersInit & (HeadersInit | {
+            accept: "application/json" | "text/plain" | "application/octet-stream";
+            "content-type": "application/json" | "text/plain" | "application/x-www-form-urlencoded" | "multipart/form-data" | "application/octet-stream";
+            authorization: "Bearer" | "Basic";
+        })) | undefined;
+        integrity?: string | undefined;
+        keepalive?: boolean | undefined;
+        method: string;
+        mode?: RequestMode | undefined;
+        redirect?: RequestRedirect | undefined;
+        referrer?: string | undefined;
+        referrerPolicy?: ReferrerPolicy | undefined;
+        signal?: (AbortSignal | null) | undefined;
+        window?: null | undefined;
+        onRetry?: ((response: import("@better-fetch/fetch").ResponseContext) => Promise<void> | void) | undefined;
+        hookOptions?: {
+            cloneResponse?: boolean;
+        } | undefined;
+        timeout?: number | undefined;
+        customFetchImpl: import("@better-fetch/fetch").FetchEsque;
+        baseURL: string;
+        throw?: boolean | undefined;
+        auth?: ({
+            type: "Bearer";
+            token: string | Promise<string | undefined> | (() => string | Promise<string | undefined> | undefined) | undefined;
+        } | {
+            type: "Basic";
+            username: string | (() => string | undefined) | undefined;
+            password: string | (() => string | undefined) | undefined;
+        } | {
+            type: "Custom";
+            prefix: string | (() => string | undefined) | undefined;
+            value: string | (() => string | undefined) | undefined;
+        }) | undefined;
+        body?: any;
+        query?: any;
+        params?: any;
+        duplex?: "full" | "half" | undefined;
+        jsonParser: (text: string) => Promise<any> | any;
+        retry?: import("@better-fetch/fetch").RetryOptions | undefined;
+        retryAttempt?: number | undefined;
+        output?: (import("@better-fetch/fetch").StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+        errorSchema?: import("@better-fetch/fetch").StandardSchemaV1 | undefined;
+        disableValidation?: boolean | undefined;
+        disableSignal?: boolean | undefined;
+    }, unknown, unknown, {}>;
+    $store: {
+        notify: (signal?: (Omit<string, "$sessionSignal"> | "$sessionSignal") | undefined) => void;
+        listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
+        atoms: Record<string, import("nanostores").WritableAtom<any>>;
+    };
+    $Infer: {
+        Session: {
+            user: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined;
+            }>;
+            session: import("better-auth").StripEmptyObjects<{
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                userId: string;
+                expiresAt: Date;
+                token: string;
+                ipAddress?: string | null | undefined;
+                userAgent?: string | null | undefined;
+            }>;
+        };
+    };
+    $ERROR_CODES: {
+        USER_NOT_FOUND: {
+            readonly code: "USER_NOT_FOUND";
+            message: string;
+        };
+        FAILED_TO_CREATE_USER: {
+            readonly code: "FAILED_TO_CREATE_USER";
+            message: string;
+        };
+        FAILED_TO_CREATE_SESSION: {
+            readonly code: "FAILED_TO_CREATE_SESSION";
+            message: string;
+        };
+        FAILED_TO_UPDATE_USER: {
+            readonly code: "FAILED_TO_UPDATE_USER";
+            message: string;
+        };
+        FAILED_TO_GET_SESSION: {
+            readonly code: "FAILED_TO_GET_SESSION";
+            message: string;
+        };
+        INVALID_PASSWORD: {
+            readonly code: "INVALID_PASSWORD";
+            message: string;
+        };
+        INVALID_EMAIL: {
+            readonly code: "INVALID_EMAIL";
+            message: string;
+        };
+        INVALID_EMAIL_OR_PASSWORD: {
+            readonly code: "INVALID_EMAIL_OR_PASSWORD";
+            message: string;
+        };
+        INVALID_USER: {
+            readonly code: "INVALID_USER";
+            message: string;
+        };
+        SOCIAL_ACCOUNT_ALREADY_LINKED: {
+            readonly code: "SOCIAL_ACCOUNT_ALREADY_LINKED";
+            message: string;
+        };
+        PROVIDER_NOT_FOUND: {
+            readonly code: "PROVIDER_NOT_FOUND";
+            message: string;
+        };
+        INVALID_TOKEN: {
+            readonly code: "INVALID_TOKEN";
+            message: string;
+        };
+        TOKEN_EXPIRED: {
+            readonly code: "TOKEN_EXPIRED";
+            message: string;
+        };
+        ID_TOKEN_NOT_SUPPORTED: {
+            readonly code: "ID_TOKEN_NOT_SUPPORTED";
+            message: string;
+        };
+        FAILED_TO_GET_USER_INFO: {
+            readonly code: "FAILED_TO_GET_USER_INFO";
+            message: string;
+        };
+        USER_EMAIL_NOT_FOUND: {
+            readonly code: "USER_EMAIL_NOT_FOUND";
+            message: string;
+        };
+        EMAIL_NOT_VERIFIED: {
+            readonly code: "EMAIL_NOT_VERIFIED";
+            message: string;
+        };
+        PASSWORD_TOO_SHORT: {
+            readonly code: "PASSWORD_TOO_SHORT";
+            message: string;
+        };
+        PASSWORD_TOO_LONG: {
+            readonly code: "PASSWORD_TOO_LONG";
+            message: string;
+        };
+        USER_ALREADY_EXISTS: {
+            readonly code: "USER_ALREADY_EXISTS";
+            message: string;
+        };
+        USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL: {
+            readonly code: "USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL";
+            message: string;
+        };
+        EMAIL_CAN_NOT_BE_UPDATED: {
+            readonly code: "EMAIL_CAN_NOT_BE_UPDATED";
+            message: string;
+        };
+        CREDENTIAL_ACCOUNT_NOT_FOUND: {
+            readonly code: "CREDENTIAL_ACCOUNT_NOT_FOUND";
+            message: string;
+        };
+        ACCOUNT_NOT_FOUND: {
+            readonly code: "ACCOUNT_NOT_FOUND";
+            message: string;
+        };
+        SESSION_EXPIRED: {
+            readonly code: "SESSION_EXPIRED";
+            message: string;
+        };
+        FAILED_TO_UNLINK_LAST_ACCOUNT: {
+            readonly code: "FAILED_TO_UNLINK_LAST_ACCOUNT";
+            message: string;
+        };
+        USER_ALREADY_HAS_PASSWORD: {
+            readonly code: "USER_ALREADY_HAS_PASSWORD";
+            message: string;
+        };
+        CROSS_SITE_NAVIGATION_LOGIN_BLOCKED: {
+            readonly code: "CROSS_SITE_NAVIGATION_LOGIN_BLOCKED";
+            message: string;
+        };
+        VERIFICATION_EMAIL_NOT_ENABLED: {
+            readonly code: "VERIFICATION_EMAIL_NOT_ENABLED";
+            message: string;
+        };
+        EMAIL_ALREADY_VERIFIED: {
+            readonly code: "EMAIL_ALREADY_VERIFIED";
+            message: string;
+        };
+        EMAIL_MISMATCH: {
+            readonly code: "EMAIL_MISMATCH";
+            message: string;
+        };
+        SESSION_NOT_FRESH: {
+            readonly code: "SESSION_NOT_FRESH";
+            message: string;
+        };
+        LINKED_ACCOUNT_ALREADY_EXISTS: {
+            readonly code: "LINKED_ACCOUNT_ALREADY_EXISTS";
+            message: string;
+        };
+        INVALID_ORIGIN: {
+            readonly code: "INVALID_ORIGIN";
+            message: string;
+        };
+        INVALID_CALLBACK_URL: {
+            readonly code: "INVALID_CALLBACK_URL";
+            message: string;
+        };
+        INVALID_REDIRECT_URL: {
+            readonly code: "INVALID_REDIRECT_URL";
+            message: string;
+        };
+        INVALID_ERROR_CALLBACK_URL: {
+            readonly code: "INVALID_ERROR_CALLBACK_URL";
+            message: string;
+        };
+        INVALID_NEW_USER_CALLBACK_URL: {
+            readonly code: "INVALID_NEW_USER_CALLBACK_URL";
+            message: string;
+        };
+        MISSING_OR_NULL_ORIGIN: {
+            readonly code: "MISSING_OR_NULL_ORIGIN";
+            message: string;
+        };
+        CALLBACK_URL_REQUIRED: {
+            readonly code: "CALLBACK_URL_REQUIRED";
+            message: string;
+        };
+        FAILED_TO_CREATE_VERIFICATION: {
+            readonly code: "FAILED_TO_CREATE_VERIFICATION";
+            message: string;
+        };
+        FIELD_NOT_ALLOWED: {
+            readonly code: "FIELD_NOT_ALLOWED";
+            message: string;
+        };
+        ASYNC_VALIDATION_NOT_SUPPORTED: {
+            readonly code: "ASYNC_VALIDATION_NOT_SUPPORTED";
+            message: string;
+        };
+        VALIDATION_ERROR: {
+            readonly code: "VALIDATION_ERROR";
+            message: string;
+        };
+        MISSING_FIELD: {
+            readonly code: "MISSING_FIELD";
+            message: string;
+        };
+        METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED: {
+            readonly code: "METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED";
+            message: string;
+        };
+        BODY_MUST_BE_AN_OBJECT: {
+            readonly code: "BODY_MUST_BE_AN_OBJECT";
+            message: string;
+        };
+        PASSWORD_ALREADY_SET: {
+            readonly code: "PASSWORD_ALREADY_SET";
+            message: string;
+        };
+    };
+};
+export declare const sigmaAuthClient: typeof baseAuthClient & SigmaAugmentedClient;
 /**
- * Initiate Sigma OAuth by redirecting the browser to the authorize endpoint.
+ * Initiate Sigma OAuth by redirecting to the authorize endpoint.
+ * Uses the better-auth-plugin's signIn.sigma() which handles PKCE,
+ * sessionStorage, wallet-check gate, and redirect.
  *
- * Generates PKCE verifier/challenge, stores state in sessionStorage,
- * and navigates the browser away. Returns a never-resolving Promise
- * since the page navigates.
+ * Returns a never-resolving Promise since the page navigates away.
  */
-export declare function initiateSigmaOAuth(config: SigmaOAuthConfig): Promise<never>;
+export declare function initiateSigmaOAuth(config: SigmaOAuthConfig, options?: Omit<SigmaSignInOptions, 'clientId' | 'callbackURL'>): Promise<never>;
 /**
- * Check if the current URL has Sigma OAuth callback parameters
- * that match a pending OAuth flow.
+ * Complete Sigma OAuth callback. Uses the better-auth-plugin's
+ * handleCallback() which verifies state, exchanges code via the
+ * server-side callback route, and returns user data.
  */
-export declare function isSigmaCallback(searchParams: URLSearchParams): boolean;
+export declare function completeSigmaOAuth(searchParams: URLSearchParams): Promise<SigmaOAuthResult>;
 /**
- * Complete Sigma OAuth by exchanging the authorization code.
- *
- * Validates state from sessionStorage, POSTs the code + verifier to the
- * app's server-side callback route, and returns the user info.
- *
- * @param searchParams - URL search params from the callback
- * @param serverCallbackUrl - Server-side route that exchanges code for tokens
- *   (default: /api/auth/sigma/callback)
+ * Set the active Sigma identity on the auth client.
+ * Must be called after OAuth to enable iframe signing.
  */
-export declare function completeSigmaOAuth(searchParams: URLSearchParams, serverCallbackUrl?: string): Promise<SigmaOAuthResult>;
+export declare function setSigmaIdentity(bapId: string): void;
+export {};
 //# sourceMappingURL=sigma-oauth.d.ts.map