@baseplate-dev/plugin-auth 1.0.6 → 1.0.8

package/dist/better-auth/generators/fastify/better-auth-admin-module/better-auth-admin-module.generator.js

@@ -0,0 +1,56 @@
+import { createNodePackagesTask, extractPackageVersions, TsCodeUtils, } from '@baseplate-dev/core-generators';
+import { appModuleProvider, createPothosPrismaObjectTypeOutputName, pothosTypeOutputProvider, } from '@baseplate-dev/fastify-generators';
+import { createGenerator, createGeneratorTask } from '@baseplate-dev/sync';
+import { quot } from '@baseplate-dev/utils';
+import { z } from 'zod';
+import { BETTER_AUTH_MODELS } from '#src/better-auth/constants/model-names.js';
+import { BETTER_AUTH_PACKAGES } from '#src/better-auth/constants/packages.js';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED } from './generated/index.js';
+const descriptorSchema = z.object({
+    adminRoles: z.array(z.string()),
+});
+/**
+ * Generator for better-auth admin mutations.
+ *
+ * Adds GraphQL mutations for admin operations:
+ * - resetUserPassword: Allows admins to reset any user's password
+ * - updateUserRoles: Allows admins to manage user role assignments
+ */
+export const betterAuthAdminModuleGenerator = createGenerator({
+    name: 'better-auth/better-auth-admin-module',
+    generatorFileUrl: import.meta.url,
+    descriptorSchema,
+    buildTasks: ({ adminRoles }) => ({
+        paths: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED.paths.task,
+        imports: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED.imports.task,
+        renderers: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED.renderers.task,
+        main: createGeneratorTask({
+            dependencies: {
+                renderers: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED.renderers.provider,
+                paths: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED.paths.provider,
+                appModule: appModuleProvider,
+                userObjectType: pothosTypeOutputProvider
+                    .dependency()
+                    .reference(createPothosPrismaObjectTypeOutputName(BETTER_AUTH_MODELS.user)),
+            },
+            run({ renderers, paths, appModule, userObjectType }) {
+                appModule.moduleImports.push(paths.adminAuthMutations);
+                return {
+                    build: async (builder) => {
+                        await builder.apply(renderers.adminAuthService.render({}));
+                        await builder.apply(renderers.adminAuthMutations.render({
+                            variables: {
+                                TPL_ADMIN_ROLES: TsCodeUtils.mergeFragmentsAsArrayPresorted(adminRoles.map((r) => quot(r)).toSorted()),
+                                TPL_USER_OBJECT_TYPE: userObjectType.getTypeReference().fragment,
+                            },
+                        }));
+                    },
+                };
+            },
+        }),
+        nodePackages: createNodePackagesTask({
+            prod: extractPackageVersions(BETTER_AUTH_PACKAGES, ['better-auth']),
+        }),
+    }),
+});
+//# sourceMappingURL=better-auth-admin-module.generator.js.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/index.d.ts

@@ -0,0 +1,111 @@
+export declare const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED: {
+    imports: {
+        task: import("@baseplate-dev/sync").GeneratorTask<{
+            betterAuthAdminModuleImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                resetUserPassword: {};
+                updateUserRoles: {};
+            }>>;
+        }, {
+            paths: import("@baseplate-dev/sync").ProviderType<import("./template-paths.js").BetterAuthBetterAuthAdminModulePaths>;
+        }, undefined>;
+    };
+    paths: {
+        provider: import("@baseplate-dev/sync").ProviderType<import("./template-paths.js").BetterAuthBetterAuthAdminModulePaths>;
+        task: import("@baseplate-dev/sync").GeneratorTask<{
+            betterAuthBetterAuthAdminModulePaths: import("@baseplate-dev/sync").ProviderExport<import("./template-paths.js").BetterAuthBetterAuthAdminModulePaths>;
+        }, {
+            appModule: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/fastify-generators").AppModuleProvider>;
+        }, undefined>;
+    };
+    renderers: {
+        provider: import("@baseplate-dev/sync").ProviderType<import("./template-renderers.js").BetterAuthBetterAuthAdminModuleRenderers>;
+        task: import("@baseplate-dev/sync").GeneratorTask<{
+            betterAuthBetterAuthAdminModuleRenderers: import("@baseplate-dev/sync").ProviderExport<import("./template-renderers.js").BetterAuthBetterAuthAdminModuleRenderers>;
+        }, {
+            authRolesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                AUTH_ROLE_CONFIG: {};
+                AuthRole: {
+                    isTypeOnly: true;
+                };
+                DEFAULT_PUBLIC_ROLES: {};
+                DEFAULT_USER_ROLES: {};
+                RoleConfig: {
+                    isTypeOnly: true;
+                };
+            }>>;
+            errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                BadRequestError: {};
+                ForbiddenError: {};
+                handleZodRequestValidationError: {};
+                HttpError: {};
+                InternalServerError: {};
+                logError: {};
+                NotFoundError: {};
+                throwIfPrismaNotFound: {};
+                TooManyRequestsError: {};
+                UnauthorizedError: {};
+            }>>;
+            paths: import("@baseplate-dev/sync").ProviderType<import("./template-paths.js").BetterAuthBetterAuthAdminModulePaths>;
+            pothosImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                builder: {};
+            }>>;
+            prismaGeneratedImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                PrismaClient: {};
+                Prisma: {};
+                '*': {};
+                $Enums: {};
+            }>>;
+            prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                prisma: {};
+            }>>;
+            typescriptFile: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").TypescriptFileProvider>;
+        }, undefined>;
+    };
+    templates: {
+        adminAuthMutations: import("@baseplate-dev/core-generators").TsTemplateFile<{
+            TPL_ADMIN_ROLES: {};
+            TPL_USER_OBJECT_TYPE: {};
+        }, {
+            pothosImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                builder: {};
+            }>>;
+        }, {
+            adminAuthService: {};
+        }>;
+        adminAuthService: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+            authRolesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                AUTH_ROLE_CONFIG: {};
+                AuthRole: {
+                    isTypeOnly: true;
+                };
+                DEFAULT_PUBLIC_ROLES: {};
+                DEFAULT_USER_ROLES: {};
+                RoleConfig: {
+                    isTypeOnly: true;
+                };
+            }>>;
+            errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                BadRequestError: {};
+                ForbiddenError: {};
+                handleZodRequestValidationError: {};
+                HttpError: {};
+                InternalServerError: {};
+                logError: {};
+                NotFoundError: {};
+                throwIfPrismaNotFound: {};
+                TooManyRequestsError: {};
+                UnauthorizedError: {};
+            }>>;
+            prismaGeneratedImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                PrismaClient: {};
+                Prisma: {};
+                '*': {};
+                $Enums: {};
+            }>>;
+            prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+                prisma: {};
+            }>>;
+        }, Record<never, Record<never, never>>>;
+    };
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/index.js

@@ -0,0 +1,11 @@
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS } from './template-paths.js';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_RENDERERS } from './template-renderers.js';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_IMPORTS } from './ts-import-providers.js';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES } from './typed-templates.js';
+export const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_GENERATED = {
+    imports: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_IMPORTS,
+    paths: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS,
+    renderers: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_RENDERERS,
+    templates: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES,
+};
+//# sourceMappingURL=index.js.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/template-paths.d.ts

@@ -0,0 +1,13 @@
+export interface BetterAuthBetterAuthAdminModulePaths {
+    adminAuthMutations: string;
+    adminAuthService: string;
+}
+export declare const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS: {
+    provider: import("@baseplate-dev/sync").ProviderType<BetterAuthBetterAuthAdminModulePaths>;
+    task: import("@baseplate-dev/sync").GeneratorTask<{
+        betterAuthBetterAuthAdminModulePaths: import("@baseplate-dev/sync").ProviderExport<BetterAuthBetterAuthAdminModulePaths>;
+    }, {
+        appModule: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/fastify-generators").AppModuleProvider>;
+    }, undefined>;
+};
+//# sourceMappingURL=template-paths.d.ts.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/template-paths.js

@@ -0,0 +1,25 @@
+import { appModuleProvider } from '@baseplate-dev/fastify-generators';
+import { createGeneratorTask, createProviderType } from '@baseplate-dev/sync';
+const betterAuthBetterAuthAdminModulePaths = createProviderType('better-auth-better-auth-admin-module-paths');
+const betterAuthBetterAuthAdminModulePathsTask = createGeneratorTask({
+    dependencies: { appModule: appModuleProvider },
+    exports: {
+        betterAuthBetterAuthAdminModulePaths: betterAuthBetterAuthAdminModulePaths.export(),
+    },
+    run({ appModule }) {
+        const moduleRoot = appModule.getModuleFolder();
+        return {
+            providers: {
+                betterAuthBetterAuthAdminModulePaths: {
+                    adminAuthMutations: `${moduleRoot}/schema/admin-auth.mutations.ts`,
+                    adminAuthService: `${moduleRoot}/services/admin-auth.service.ts`,
+                },
+            },
+        };
+    },
+});
+export const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS = {
+    provider: betterAuthBetterAuthAdminModulePaths,
+    task: betterAuthBetterAuthAdminModulePathsTask,
+};
+//# sourceMappingURL=template-paths.js.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/template-renderers.d.ts

@@ -0,0 +1,56 @@
+import type { RenderTsTemplateFileActionInput } from '@baseplate-dev/core-generators';
+import type { BuilderAction } from '@baseplate-dev/sync';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES } from './typed-templates.js';
+export interface BetterAuthBetterAuthAdminModuleRenderers {
+    adminAuthMutations: {
+        render: (options: Omit<RenderTsTemplateFileActionInput<typeof BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES.adminAuthMutations>, 'destination' | 'importMapProviders' | 'template' | 'generatorPaths'>) => BuilderAction;
+    };
+    adminAuthService: {
+        render: (options: Omit<RenderTsTemplateFileActionInput<typeof BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES.adminAuthService>, 'destination' | 'importMapProviders' | 'template' | 'generatorPaths'>) => BuilderAction;
+    };
+}
+export declare const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_RENDERERS: {
+    provider: import("@baseplate-dev/sync").ProviderType<BetterAuthBetterAuthAdminModuleRenderers>;
+    task: import("@baseplate-dev/sync").GeneratorTask<{
+        betterAuthBetterAuthAdminModuleRenderers: import("@baseplate-dev/sync").ProviderExport<BetterAuthBetterAuthAdminModuleRenderers>;
+    }, {
+        authRolesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            AUTH_ROLE_CONFIG: {};
+            AuthRole: {
+                isTypeOnly: true;
+            };
+            DEFAULT_PUBLIC_ROLES: {};
+            DEFAULT_USER_ROLES: {};
+            RoleConfig: {
+                isTypeOnly: true;
+            };
+        }>>;
+        errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            BadRequestError: {};
+            ForbiddenError: {};
+            handleZodRequestValidationError: {};
+            HttpError: {};
+            InternalServerError: {};
+            logError: {};
+            NotFoundError: {};
+            throwIfPrismaNotFound: {};
+            TooManyRequestsError: {};
+            UnauthorizedError: {};
+        }>>;
+        paths: import("@baseplate-dev/sync").ProviderType<import("./template-paths.js").BetterAuthBetterAuthAdminModulePaths>;
+        pothosImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            builder: {};
+        }>>;
+        prismaGeneratedImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            PrismaClient: {};
+            Prisma: {};
+            '*': {};
+            $Enums: {};
+        }>>;
+        prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            prisma: {};
+        }>>;
+        typescriptFile: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").TypescriptFileProvider>;
+    }, undefined>;
+};
+//# sourceMappingURL=template-renderers.d.ts.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/template-renderers.js

@@ -0,0 +1,57 @@
+import { typescriptFileProvider } from '@baseplate-dev/core-generators';
+import { authRolesImportsProvider, errorHandlerServiceImportsProvider, pothosImportsProvider, prismaGeneratedImportsProvider, prismaImportsProvider, } from '@baseplate-dev/fastify-generators';
+import { createGeneratorTask, createProviderType } from '@baseplate-dev/sync';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS } from './template-paths.js';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES } from './typed-templates.js';
+const betterAuthBetterAuthAdminModuleRenderers = createProviderType('better-auth-better-auth-admin-module-renderers');
+const betterAuthBetterAuthAdminModuleRenderersTask = createGeneratorTask({
+    dependencies: {
+        authRolesImports: authRolesImportsProvider,
+        errorHandlerServiceImports: errorHandlerServiceImportsProvider,
+        paths: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS.provider,
+        pothosImports: pothosImportsProvider,
+        prismaGeneratedImports: prismaGeneratedImportsProvider,
+        prismaImports: prismaImportsProvider,
+        typescriptFile: typescriptFileProvider,
+    },
+    exports: {
+        betterAuthBetterAuthAdminModuleRenderers: betterAuthBetterAuthAdminModuleRenderers.export(),
+    },
+    run({ authRolesImports, errorHandlerServiceImports, paths, pothosImports, prismaGeneratedImports, prismaImports, typescriptFile, }) {
+        return {
+            providers: {
+                betterAuthBetterAuthAdminModuleRenderers: {
+                    adminAuthMutations: {
+                        render: (options) => typescriptFile.renderTemplateFile({
+                            template: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES.adminAuthMutations,
+                            destination: paths.adminAuthMutations,
+                            importMapProviders: {
+                                pothosImports,
+                            },
+                            generatorPaths: paths,
+                            ...options,
+                        }),
+                    },
+                    adminAuthService: {
+                        render: (options) => typescriptFile.renderTemplateFile({
+                            template: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES.adminAuthService,
+                            destination: paths.adminAuthService,
+                            importMapProviders: {
+                                authRolesImports,
+                                errorHandlerServiceImports,
+                                prismaGeneratedImports,
+                                prismaImports,
+                            },
+                            ...options,
+                        }),
+                    },
+                },
+            },
+        };
+    },
+});
+export const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_RENDERERS = {
+    provider: betterAuthBetterAuthAdminModuleRenderers,
+    task: betterAuthBetterAuthAdminModuleRenderersTask,
+};
+//# sourceMappingURL=template-renderers.js.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/ts-import-providers.d.ts

@@ -0,0 +1,21 @@
+import type { TsImportMapProviderFromSchema } from '@baseplate-dev/core-generators';
+export declare const betterAuthAdminModuleImportsSchema: {
+    resetUserPassword: {};
+    updateUserRoles: {};
+};
+export type BetterAuthAdminModuleImportsProvider = TsImportMapProviderFromSchema<typeof betterAuthAdminModuleImportsSchema>;
+export declare const betterAuthAdminModuleImportsProvider: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+    resetUserPassword: {};
+    updateUserRoles: {};
+}>>;
+export declare const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_IMPORTS: {
+    task: import("@baseplate-dev/sync").GeneratorTask<{
+        betterAuthAdminModuleImports: import("@baseplate-dev/sync").ProviderExport<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            resetUserPassword: {};
+            updateUserRoles: {};
+        }>>;
+    }, {
+        paths: import("@baseplate-dev/sync").ProviderType<import("./template-paths.js").BetterAuthBetterAuthAdminModulePaths>;
+    }, undefined>;
+};
+//# sourceMappingURL=ts-import-providers.d.ts.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/ts-import-providers.js

@@ -0,0 +1,30 @@
+import { createTsImportMap, createTsImportMapSchema, packageScope, } from '@baseplate-dev/core-generators';
+import { createGeneratorTask, createReadOnlyProviderType, } from '@baseplate-dev/sync';
+import { BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS } from './template-paths.js';
+export const betterAuthAdminModuleImportsSchema = createTsImportMapSchema({
+    resetUserPassword: {},
+    updateUserRoles: {},
+});
+export const betterAuthAdminModuleImportsProvider = createReadOnlyProviderType('better-auth-admin-module-imports');
+const betterAuthBetterAuthAdminModuleImportsTask = createGeneratorTask({
+    dependencies: {
+        paths: BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_PATHS.provider,
+    },
+    exports: {
+        betterAuthAdminModuleImports: betterAuthAdminModuleImportsProvider.export(packageScope),
+    },
+    run({ paths }) {
+        return {
+            providers: {
+                betterAuthAdminModuleImports: createTsImportMap(betterAuthAdminModuleImportsSchema, {
+                    resetUserPassword: paths.adminAuthService,
+                    updateUserRoles: paths.adminAuthService,
+                }),
+            },
+        };
+    },
+});
+export const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_IMPORTS = {
+    task: betterAuthBetterAuthAdminModuleImportsTask,
+};
+//# sourceMappingURL=ts-import-providers.js.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/typed-templates.d.ts

@@ -0,0 +1,47 @@
+export declare const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES: {
+    adminAuthMutations: import("@baseplate-dev/core-generators").TsTemplateFile<{
+        TPL_ADMIN_ROLES: {};
+        TPL_USER_OBJECT_TYPE: {};
+    }, {
+        pothosImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            builder: {};
+        }>>;
+    }, {
+        adminAuthService: {};
+    }>;
+    adminAuthService: import("@baseplate-dev/core-generators").TsTemplateFile<{}, {
+        authRolesImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            AUTH_ROLE_CONFIG: {};
+            AuthRole: {
+                isTypeOnly: true;
+            };
+            DEFAULT_PUBLIC_ROLES: {};
+            DEFAULT_USER_ROLES: {};
+            RoleConfig: {
+                isTypeOnly: true;
+            };
+        }>>;
+        errorHandlerServiceImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            BadRequestError: {};
+            ForbiddenError: {};
+            handleZodRequestValidationError: {};
+            HttpError: {};
+            InternalServerError: {};
+            logError: {};
+            NotFoundError: {};
+            throwIfPrismaNotFound: {};
+            TooManyRequestsError: {};
+            UnauthorizedError: {};
+        }>>;
+        prismaGeneratedImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            PrismaClient: {};
+            Prisma: {};
+            '*': {};
+            $Enums: {};
+        }>>;
+        prismaImports: import("@baseplate-dev/sync").ProviderType<import("@baseplate-dev/core-generators").InferTsImportMapFromSchema<{
+            prisma: {};
+        }>>;
+    }, Record<never, Record<never, never>>>;
+};
+//# sourceMappingURL=typed-templates.d.ts.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/generated/typed-templates.js

@@ -0,0 +1,33 @@
+import { createTsTemplateFile } from '@baseplate-dev/core-generators';
+import { authRolesImportsProvider, errorHandlerServiceImportsProvider, pothosImportsProvider, prismaGeneratedImportsProvider, prismaImportsProvider, } from '@baseplate-dev/fastify-generators';
+import path from 'node:path';
+const adminAuthMutations = createTsTemplateFile({
+    fileOptions: { kind: 'singleton' },
+    importMapProviders: { pothosImports: pothosImportsProvider },
+    name: 'admin-auth-mutations',
+    referencedGeneratorTemplates: { adminAuthService: {} },
+    source: {
+        path: path.join(import.meta.dirname, '../templates/module/schema/admin-auth.mutations.ts'),
+    },
+    variables: { TPL_ADMIN_ROLES: {}, TPL_USER_OBJECT_TYPE: {} },
+});
+const adminAuthService = createTsTemplateFile({
+    fileOptions: { kind: 'singleton' },
+    importMapProviders: {
+        authRolesImports: authRolesImportsProvider,
+        errorHandlerServiceImports: errorHandlerServiceImportsProvider,
+        prismaGeneratedImports: prismaGeneratedImportsProvider,
+        prismaImports: prismaImportsProvider,
+    },
+    name: 'admin-auth-service',
+    projectExports: { resetUserPassword: {}, updateUserRoles: {} },
+    source: {
+        path: path.join(import.meta.dirname, '../templates/module/services/admin-auth.service.ts'),
+    },
+    variables: {},
+});
+export const BETTER_AUTH_BETTER_AUTH_ADMIN_MODULE_TEMPLATES = {
+    adminAuthMutations,
+    adminAuthService,
+};
+//# sourceMappingURL=typed-templates.js.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/index.d.ts

@@ -0,0 +1,4 @@
+export * from './better-auth-admin-module.generator.js';
+export type { BetterAuthAdminModuleImportsProvider } from './generated/ts-import-providers.js';
+export { betterAuthAdminModuleImportsProvider } from './generated/ts-import-providers.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/index.js

@@ -0,0 +1,3 @@
+export * from './better-auth-admin-module.generator.js';
+export { betterAuthAdminModuleImportsProvider } from './generated/ts-import-providers.js';
+//# sourceMappingURL=index.js.map

package/dist/better-auth/generators/fastify/better-auth-admin-module/templates/module/schema/admin-auth.mutations.ts

@@ -0,0 +1,48 @@
+// @ts-nocheck
+
+import { resetUserPassword, updateUserRoles } from '$adminAuthService';
+import { builder } from '%pothosImports';
+
+builder.mutationField('resetUserPassword', (t) =>
+  t.fieldWithInputPayload({
+    authorize: TPL_ADMIN_ROLES,
+    payload: {
+      user: t.payload.field({
+        type: TPL_USER_OBJECT_TYPE,
+      }),
+    },
+    input: {
+      userId: t.input.field({ required: true, type: 'Uuid' }),
+      newPassword: t.input.field({ required: true, type: 'String' }),
+    },
+    resolve: async (_root, { input }) => {
+      const user = await resetUserPassword({
+        userId: input.userId,
+        newPassword: input.newPassword,
+      });
+      return { user };
+    },
+  }),
+);
+
+builder.mutationField('updateUserRoles', (t) =>
+  t.fieldWithInputPayload({
+    authorize: TPL_ADMIN_ROLES,
+    payload: {
+      user: t.payload.field({
+        type: TPL_USER_OBJECT_TYPE,
+      }),
+    },
+    input: {
+      userId: t.input.field({ required: true, type: 'Uuid' }),
+      roles: t.input.field({
+        required: true,
+        type: ['String'],
+      }),
+    },
+    resolve: async (root, { input }) => {
+      const user = await updateUserRoles(input);
+      return { user };
+    },
+  }),
+);

package/dist/better-auth/generators/fastify/better-auth-admin-module/templates/module/services/admin-auth.service.ts

@@ -0,0 +1,106 @@
+// @ts-nocheck
+
+import type { AuthRole } from '%authRolesImports';
+import type { User } from '%prismaGeneratedImports';
+
+import { AUTH_ROLE_CONFIG } from '%authRolesImports';
+import { NotFoundError } from '%errorHandlerServiceImports';
+import { prisma } from '%prismaImports';
+import { hashPassword } from 'better-auth/crypto';
+
+const PASSWORD_MIN_LENGTH = 8;
+const PASSWORD_MAX_LENGTH = 255;
+
+/**
+ * Resets a user's password without requiring the current password.
+ * This is used by administrators to reset any user's password.
+ *
+ * @param params - The parameters for resetting password
+ * @param params.userId - The ID of the user whose password is being reset
+ * @param params.newPassword - The new password to set
+ * @returns The updated user
+ */
+export async function resetUserPassword({
+  userId,
+  newPassword,
+}: {
+  userId: string;
+  newPassword: string;
+}): Promise<User> {
+  if (newPassword.length < PASSWORD_MIN_LENGTH) {
+    throw new Error(
+      `Password must be at least ${String(PASSWORD_MIN_LENGTH)} characters`,
+    );
+  }
+  if (newPassword.length > PASSWORD_MAX_LENGTH) {
+    throw new Error('Password is too long');
+  }
+
+  const user = await prisma.user.findUnique({
+    where: { id: userId },
+  });
+
+  if (user === null) {
+    throw new Error('User not found');
+  }
+
+  const passwordHash = await hashPassword(newPassword);
+
+  await prisma.account.updateMany({
+    where: {
+      userId,
+      providerId: 'credential',
+    },
+    data: {
+      password: passwordHash,
+    },
+  });
+
+  return user;
+}
+
+/**
+ * Updates the roles assigned to a user.
+ * Filters out built-in roles (public, user, system) as these are automatically assigned.
+ *
+ * @param params - The parameters for updating user roles
+ * @param params.userId - The ID of the user to update
+ * @param params.roles - Array of role names to assign to the user
+ * @returns The updated user with their roles
+ */
+export async function updateUserRoles({
+  userId,
+  roles,
+}: {
+  userId: string;
+  roles: string[];
+}): Promise<User> {
+  // Filter out auto-assigned roles (public, user, system) that cannot be manually assigned
+  const validRoles = roles.filter((role) => {
+    if (!(role in AUTH_ROLE_CONFIG)) {
+      return false;
+    }
+    const roleConfig = AUTH_ROLE_CONFIG[role as AuthRole];
+    return !roleConfig.autoAssigned;
+  });
+
+  await prisma.$transaction([
+    prisma.userRole.deleteMany({
+      where: { userId, role: { notIn: validRoles } },
+    }),
+    prisma.userRole.createMany({
+      data: validRoles.map((role) => ({ userId, role })),
+      skipDuplicates: true,
+    }),
+  ]);
+
+  const updatedUser = await prisma.user.findUnique({
+    where: { id: userId },
+  });
+
+  if (updatedUser === null) {
+    throw new NotFoundError('User not found', 'user-not-found');
+  }
+
+  return updatedUser;
+}