@columnus/shared 0.1.52 → 0.1.55

package/dist/betterAuthSession.d.ts

@@ -4,5 +4,7 @@ export type SignInViaEmailOtpOptions = {
     siteUrl: string;
     email: string;
     otp?: string;
+    /** Browser origin trusted by Better Auth, required for cross-origin server-side probes. */
+    origin?: string;
 };
-export declare function signInViaEmailOtp({ siteUrl, email, otp, }: SignInViaEmailOtpOptions): Promise<string>;
+export declare function signInViaEmailOtp({ siteUrl, email, otp, origin, }: SignInViaEmailOtpOptions): Promise<string>;

package/dist/betterAuthSession.js

@@ -13,15 +13,21 @@ function isJwtExpired(token, skewSec = 60) {
     return true;
   }
 }
+function withOptionalOrigin(headers, origin) {
+  const normalized = origin?.trim();
+  return normalized ? { ...headers, origin: normalized } : headers;
+}
 async function signInViaEmailOtp({
   siteUrl,
   email,
-  otp = process.env.DEV_OTP_CODE?.trim() || "000000"
+  otp = process.env.DEV_OTP_CODE?.trim() || "000000",
+  origin
 }) {
   const base = siteUrl.replace(/\/$/, "");
+  const jsonHeaders = withOptionalOrigin({ "content-type": "application/json" }, origin);
   const sendRes = await fetch(`${base}/api/auth/email-otp/send-verification-otp`, {
     method: "POST",
-    headers: { "content-type": "application/json" },
+    headers: jsonHeaders,
     body: JSON.stringify({ email, type: "sign-in" })
   });
   if (!sendRes.ok) {
@@ -29,7 +35,7 @@ async function signInViaEmailOtp({
   }
   const signInRes = await fetch(`${base}/api/auth/sign-in/email-otp`, {
     method: "POST",
-    headers: { "content-type": "application/json" },
+    headers: jsonHeaders,
     body: JSON.stringify({ email, otp })
   });
   if (!signInRes.ok) {
@@ -40,7 +46,7 @@ async function signInViaEmailOtp({
     throw new Error("sign-in/email-otp response missing token");
   }
   const convexTokenRes = await fetch(`${base}/api/auth/convex/token`, {
-    headers: { Authorization: `Bearer ${body.token}` }
+    headers: withOptionalOrigin({ Authorization: `Bearer ${body.token}` }, origin)
   });
   if (!convexTokenRes.ok) {
     throw new Error(`convex/token failed: ${convexTokenRes.status} ${await convexTokenRes.text()}`);

package/dist/betterAuthSession.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/betterAuthSession.ts"],"names":[],"mappings":";AAAO,SAAS,YAAY,KAAA,EAAwB;AAClD,EAAA,OAAO,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,KAAW,CAAA;AACrC;AAEO,SAAS,YAAA,CAAa,KAAA,EAAe,OAAA,GAAU,EAAA,EAAa;AACjE,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC7B,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,IAAK,EAAA,EAAI,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAGpF,IAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,EAAU,OAAO,IAAA;AAC5C,IAAA,OAAO,OAAA,CAAQ,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAA,GAAI,OAAA;AAAA,EACxD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAQA,eAAsB,iBAAA,CAAkB;AAAA,EACtC,OAAA;AAAA,EACA,KAAA;AAAA,EACA,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,YAAA,EAAc,MAAK,IAAK;AAC5C,CAAA,EAA8C;AAC5C,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAEtC,EAAA,MAAM,OAAA,GAAU,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,yCAAA,CAAA,EAA6C;AAAA,IAC9E,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,IAAA,EAAM,WAAW;AAAA,GAChD,CAAA;AACD,EAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AACf,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8BAAA,EAAiC,OAAA,CAAQ,MAAM,IAAI,MAAM,OAAA,CAAQ,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,EAC3F;AAEA,EAAA,MAAM,SAAA,GAAY,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,2BAAA,CAAA,EAA+B;AAAA,IAClE,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,KAAK;AAAA,GACpC,CAAA;AACD,EAAA,IAAI,CAAC,UAAU,EAAA,EAAI;AACjB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,SAAA,CAAU,MAAM,IAAI,MAAM,SAAA,CAAU,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,EAC3F;AAEA,EAAA,MAAM,IAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,EAAK;AACnC,EAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,cAAA,GAAiB,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,sBAAA,CAAA,EAA0B;AAAA,IAClE,SAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,IAAA,CAAK,KAAK,CAAA,CAAA;AAAG,GAClD,CAAA;AACD,EAAA,IAAI,CAAC,eAAe,EAAA,EAAI;AACtB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,qBAAA,EAAwB,cAAA,CAAe,MAAM,IAAI,MAAM,cAAA,CAAe,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,EAChG;AACA,EAAA,MAAM,UAAA,GAAc,MAAM,cAAA,CAAe,IAAA,EAAK;AAC9C,EAAA,IAAI,CAAC,WAAW,KAAA,EAAO;AACrB,IAAA,MAAM,IAAI,MAAM,qCAAqC,CAAA;AAAA,EACvD;AACA,EAAA,OAAO,UAAA,CAAW,KAAA;AACpB","file":"betterAuthSession.js","sourcesContent":["export function isConvexJwt(token: string): boolean {\n  return token.split(\".\").length === 3;\n}\n\nexport function isJwtExpired(token: string, skewSec = 60): boolean {\n  const parts = token.split(\".\");\n  if (parts.length !== 3) return true;\n  try {\n    const payload = JSON.parse(Buffer.from(parts[1] ?? \"\", \"base64url\").toString(\"utf8\")) as {\n      exp?: number;\n    };\n    if (typeof payload.exp !== \"number\") return true;\n    return payload.exp <= Math.floor(Date.now() / 1000) + skewSec;\n  } catch {\n    return true;\n  }\n}\n\nexport type SignInViaEmailOtpOptions = {\n  siteUrl: string;\n  email: string;\n  otp?: string;\n};\n\nexport async function signInViaEmailOtp({\n  siteUrl,\n  email,\n  otp = process.env.DEV_OTP_CODE?.trim() || \"000000\",\n}: SignInViaEmailOtpOptions): Promise<string> {\n  const base = siteUrl.replace(/\\/$/, \"\");\n\n  const sendRes = await fetch(`${base}/api/auth/email-otp/send-verification-otp`, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify({ email, type: \"sign-in\" }),\n  });\n  if (!sendRes.ok) {\n    throw new Error(`send-verification-otp failed: ${sendRes.status} ${await sendRes.text()}`);\n  }\n\n  const signInRes = await fetch(`${base}/api/auth/sign-in/email-otp`, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify({ email, otp }),\n  });\n  if (!signInRes.ok) {\n    throw new Error(`sign-in/email-otp failed: ${signInRes.status} ${await signInRes.text()}`);\n  }\n\n  const body = (await signInRes.json()) as { token?: string };\n  if (!body.token) {\n    throw new Error(\"sign-in/email-otp response missing token\");\n  }\n\n  const convexTokenRes = await fetch(`${base}/api/auth/convex/token`, {\n    headers: { Authorization: `Bearer ${body.token}` },\n  });\n  if (!convexTokenRes.ok) {\n    throw new Error(`convex/token failed: ${convexTokenRes.status} ${await convexTokenRes.text()}`);\n  }\n  const convexBody = (await convexTokenRes.json()) as { token?: string };\n  if (!convexBody.token) {\n    throw new Error(\"convex/token response missing token\");\n  }\n  return convexBody.token;\n}\n"]}
+{"version":3,"sources":["../src/betterAuthSession.ts"],"names":[],"mappings":";AAAO,SAAS,YAAY,KAAA,EAAwB;AAClD,EAAA,OAAO,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,KAAW,CAAA;AACrC;AAEO,SAAS,YAAA,CAAa,KAAA,EAAe,OAAA,GAAU,EAAA,EAAa;AACjE,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA;AAC7B,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAA;AAC/B,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,IAAK,EAAA,EAAI,WAAW,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAGpF,IAAA,IAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,EAAU,OAAO,IAAA;AAC5C,IAAA,OAAO,OAAA,CAAQ,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,EAAI,GAAI,GAAI,CAAA,GAAI,OAAA;AAAA,EACxD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAUA,SAAS,kBAAA,CACP,SACA,MAAA,EACwB;AACxB,EAAA,MAAM,UAAA,GAAa,QAAQ,IAAA,EAAK;AAChC,EAAA,OAAO,aAAa,EAAE,GAAG,OAAA,EAAS,MAAA,EAAQ,YAAW,GAAI,OAAA;AAC3D;AAEA,eAAsB,iBAAA,CAAkB;AAAA,EACtC,OAAA;AAAA,EACA,KAAA;AAAA,EACA,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,YAAA,EAAc,MAAK,IAAK,QAAA;AAAA,EAC1C;AACF,CAAA,EAA8C;AAC5C,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACtC,EAAA,MAAM,cAAc,kBAAA,CAAmB,EAAE,cAAA,EAAgB,kBAAA,IAAsB,MAAM,CAAA;AAErF,EAAA,MAAM,OAAA,GAAU,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,yCAAA,CAAA,EAA6C;AAAA,IAC9E,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,WAAA;AAAA,IACT,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,IAAA,EAAM,WAAW;AAAA,GAChD,CAAA;AACD,EAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AACf,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,8BAAA,EAAiC,OAAA,CAAQ,MAAM,IAAI,MAAM,OAAA,CAAQ,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,EAC3F;AAEA,EAAA,MAAM,SAAA,GAAY,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,2BAAA,CAAA,EAA+B;AAAA,IAClE,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,WAAA;AAAA,IACT,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,KAAK;AAAA,GACpC,CAAA;AACD,EAAA,IAAI,CAAC,UAAU,EAAA,EAAI;AACjB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0BAAA,EAA6B,SAAA,CAAU,MAAM,IAAI,MAAM,SAAA,CAAU,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,EAC3F;AAEA,EAAA,MAAM,IAAA,GAAQ,MAAM,SAAA,CAAU,IAAA,EAAK;AACnC,EAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACf,IAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAAA,EAC5D;AAEA,EAAA,MAAM,cAAA,GAAiB,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,sBAAA,CAAA,EAA0B;AAAA,IAClE,OAAA,EAAS,mBAAmB,EAAE,aAAA,EAAe,UAAU,IAAA,CAAK,KAAK,CAAA,CAAA,EAAG,EAAG,MAAM;AAAA,GAC9E,CAAA;AACD,EAAA,IAAI,CAAC,eAAe,EAAA,EAAI;AACtB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,qBAAA,EAAwB,cAAA,CAAe,MAAM,IAAI,MAAM,cAAA,CAAe,IAAA,EAAM,CAAA,CAAE,CAAA;AAAA,EAChG;AACA,EAAA,MAAM,UAAA,GAAc,MAAM,cAAA,CAAe,IAAA,EAAK;AAC9C,EAAA,IAAI,CAAC,WAAW,KAAA,EAAO;AACrB,IAAA,MAAM,IAAI,MAAM,qCAAqC,CAAA;AAAA,EACvD;AACA,EAAA,OAAO,UAAA,CAAW,KAAA;AACpB","file":"betterAuthSession.js","sourcesContent":["export function isConvexJwt(token: string): boolean {\n  return token.split(\".\").length === 3;\n}\n\nexport function isJwtExpired(token: string, skewSec = 60): boolean {\n  const parts = token.split(\".\");\n  if (parts.length !== 3) return true;\n  try {\n    const payload = JSON.parse(Buffer.from(parts[1] ?? \"\", \"base64url\").toString(\"utf8\")) as {\n      exp?: number;\n    };\n    if (typeof payload.exp !== \"number\") return true;\n    return payload.exp <= Math.floor(Date.now() / 1000) + skewSec;\n  } catch {\n    return true;\n  }\n}\n\nexport type SignInViaEmailOtpOptions = {\n  siteUrl: string;\n  email: string;\n  otp?: string;\n  /** Browser origin trusted by Better Auth, required for cross-origin server-side probes. */\n  origin?: string;\n};\n\nfunction withOptionalOrigin(\n  headers: Record<string, string>,\n  origin: string | undefined,\n): Record<string, string> {\n  const normalized = origin?.trim();\n  return normalized ? { ...headers, origin: normalized } : headers;\n}\n\nexport async function signInViaEmailOtp({\n  siteUrl,\n  email,\n  otp = process.env.DEV_OTP_CODE?.trim() || \"000000\",\n  origin,\n}: SignInViaEmailOtpOptions): Promise<string> {\n  const base = siteUrl.replace(/\\/$/, \"\");\n  const jsonHeaders = withOptionalOrigin({ \"content-type\": \"application/json\" }, origin);\n\n  const sendRes = await fetch(`${base}/api/auth/email-otp/send-verification-otp`, {\n    method: \"POST\",\n    headers: jsonHeaders,\n    body: JSON.stringify({ email, type: \"sign-in\" }),\n  });\n  if (!sendRes.ok) {\n    throw new Error(`send-verification-otp failed: ${sendRes.status} ${await sendRes.text()}`);\n  }\n\n  const signInRes = await fetch(`${base}/api/auth/sign-in/email-otp`, {\n    method: \"POST\",\n    headers: jsonHeaders,\n    body: JSON.stringify({ email, otp }),\n  });\n  if (!signInRes.ok) {\n    throw new Error(`sign-in/email-otp failed: ${signInRes.status} ${await signInRes.text()}`);\n  }\n\n  const body = (await signInRes.json()) as { token?: string };\n  if (!body.token) {\n    throw new Error(\"sign-in/email-otp response missing token\");\n  }\n\n  const convexTokenRes = await fetch(`${base}/api/auth/convex/token`, {\n    headers: withOptionalOrigin({ Authorization: `Bearer ${body.token}` }, origin),\n  });\n  if (!convexTokenRes.ok) {\n    throw new Error(`convex/token failed: ${convexTokenRes.status} ${await convexTokenRes.text()}`);\n  }\n  const convexBody = (await convexTokenRes.json()) as { token?: string };\n  if (!convexBody.token) {\n    throw new Error(\"convex/token response missing token\");\n  }\n  return convexBody.token;\n}\n"]}

package/dist/bffProtocol.js

@@ -3831,7 +3831,7 @@ ZodNaN.create = (params) => {
     ...processCreateParams(params)
   });
 };
-var BRAND = Symbol("zod_brand");
+var BRAND = /* @__PURE__ */ Symbol("zod_brand");
 var ZodBranded = class extends ZodType {
   _parse(input) {
     const { ctx } = this._processInputParams(input);