@hammadj/better-auth 1.5.0-beta.10

package/dist/api/to-auth-endpoints.mjs

@@ -0,0 +1,197 @@
+import { isAPIError } from "../utils/is-api-error.mjs";
+import { hasRequestState, runWithEndpointContext, runWithRequestState } from "@better-auth/core/context";
+import { shouldPublishLog } from "@better-auth/core/env";
+import { APIError } from "@better-auth/core/error";
+import { createDefu } from "defu";
+import { kAPIErrorHeaderSymbol, toResponse } from "better-call";
+
+//#region src/api/to-auth-endpoints.ts
+const defuReplaceArrays = createDefu((obj, key, value) => {
+	if (Array.isArray(obj[key]) && Array.isArray(value)) {
+		obj[key] = value;
+		return true;
+	}
+});
+const hooksSourceWeakMap = /* @__PURE__ */ new WeakMap();
+function toAuthEndpoints(endpoints, ctx) {
+	const api = {};
+	for (const [key, endpoint] of Object.entries(endpoints)) {
+		api[key] = async (context) => {
+			const run = async () => {
+				const authContext = await ctx;
+				let internalContext = {
+					...context,
+					context: {
+						...authContext,
+						returned: void 0,
+						responseHeaders: void 0,
+						session: null
+					},
+					path: endpoint.path,
+					headers: context?.headers ? new Headers(context?.headers) : void 0
+				};
+				return runWithEndpointContext(internalContext, async () => {
+					const { beforeHooks, afterHooks } = getHooks(authContext);
+					const before = await runBeforeHooks(internalContext, beforeHooks);
+					/**
+					* If `before.context` is returned, it should
+					* get merged with the original context
+					*/
+					if ("context" in before && before.context && typeof before.context === "object") {
+						const { headers, ...rest } = before.context;
+						/**
+						* Headers should be merged differently
+						* so the hook doesn't override the whole
+						* header
+						*/
+						if (headers) headers.forEach((value, key) => {
+							internalContext.headers.set(key, value);
+						});
+						internalContext = defuReplaceArrays(rest, internalContext);
+					} else if (before) return context?.asResponse ? toResponse(before, { headers: context?.headers }) : context?.returnHeaders ? {
+						headers: context?.headers,
+						response: before
+					} : before;
+					internalContext.asResponse = false;
+					internalContext.returnHeaders = true;
+					internalContext.returnStatus = true;
+					const result = await runWithEndpointContext(internalContext, () => endpoint(internalContext)).catch((e) => {
+						if (isAPIError(e))
+ /**
+						* API Errors from response are caught
+						* and returned to hooks
+						*/
+						return {
+							response: e,
+							status: e.statusCode,
+							headers: e.headers ? new Headers(e.headers) : null
+						};
+						throw e;
+					});
+					if (result && result instanceof Response) return result;
+					internalContext.context.returned = result.response;
+					internalContext.context.responseHeaders = result.headers;
+					const after = await runAfterHooks(internalContext, afterHooks);
+					if (after.response) result.response = after.response;
+					if (isAPIError(result.response) && shouldPublishLog(authContext.logger.level, "debug")) result.response.stack = result.response.errorStack;
+					if (isAPIError(result.response) && !context?.asResponse) throw result.response;
+					return context?.asResponse ? toResponse(result.response, {
+						headers: result.headers,
+						status: result.status
+					}) : context?.returnHeaders ? context?.returnStatus ? {
+						headers: result.headers,
+						response: result.response,
+						status: result.status
+					} : {
+						headers: result.headers,
+						response: result.response
+					} : context?.returnStatus ? {
+						response: result.response,
+						status: result.status
+					} : result.response;
+				});
+			};
+			if (await hasRequestState()) return run();
+			else return runWithRequestState(/* @__PURE__ */ new WeakMap(), run);
+		};
+		api[key].path = endpoint.path;
+		api[key].options = endpoint.options;
+	}
+	return api;
+}
+async function runBeforeHooks(context, hooks) {
+	let modifiedContext = {};
+	for (const hook of hooks) {
+		let matched = false;
+		try {
+			matched = hook.matcher(context);
+		} catch (error) {
+			const hookSource = hooksSourceWeakMap.get(hook.handler) ?? "unknown";
+			context.context.logger.error(`An error occurred during ${hookSource} hook matcher execution:`, error);
+			throw new APIError("INTERNAL_SERVER_ERROR", { message: `An error occurred during hook matcher execution. Check the logs for more details.` });
+		}
+		if (matched) {
+			const result = await hook.handler({
+				...context,
+				returnHeaders: false
+			}).catch((e) => {
+				if (isAPIError(e) && shouldPublishLog(context.context.logger.level, "debug")) e.stack = e.errorStack;
+				throw e;
+			});
+			if (result && typeof result === "object") {
+				if ("context" in result && typeof result.context === "object") {
+					const { headers, ...rest } = result.context;
+					if (headers instanceof Headers) if (modifiedContext.headers) headers.forEach((value, key) => {
+						modifiedContext.headers?.set(key, value);
+					});
+					else modifiedContext.headers = headers;
+					modifiedContext = defuReplaceArrays(rest, modifiedContext);
+					continue;
+				}
+				return result;
+			}
+		}
+	}
+	return { context: modifiedContext };
+}
+async function runAfterHooks(context, hooks) {
+	for (const hook of hooks) if (hook.matcher(context)) {
+		const result = await hook.handler(context).catch((e) => {
+			if (isAPIError(e)) {
+				const headers = e[kAPIErrorHeaderSymbol];
+				if (shouldPublishLog(context.context.logger.level, "debug")) e.stack = e.errorStack;
+				return {
+					response: e,
+					headers: headers ? headers : e.headers ? new Headers(e.headers) : null
+				};
+			}
+			throw e;
+		});
+		if (result.headers) result.headers.forEach((value, key) => {
+			if (!context.context.responseHeaders) context.context.responseHeaders = new Headers({ [key]: value });
+			else if (key.toLowerCase() === "set-cookie") context.context.responseHeaders.append(key, value);
+			else context.context.responseHeaders.set(key, value);
+		});
+		if (result.response) context.context.returned = result.response;
+	}
+	return {
+		response: context.context.returned,
+		headers: context.context.responseHeaders
+	};
+}
+function getHooks(authContext) {
+	const plugins = authContext.options.plugins || [];
+	const beforeHooks = [];
+	const afterHooks = [];
+	const beforeHookHandler = authContext.options.hooks?.before;
+	if (beforeHookHandler) {
+		hooksSourceWeakMap.set(beforeHookHandler, "user");
+		beforeHooks.push({
+			matcher: () => true,
+			handler: beforeHookHandler
+		});
+	}
+	const afterHookHandler = authContext.options.hooks?.after;
+	if (afterHookHandler) {
+		hooksSourceWeakMap.set(afterHookHandler, "user");
+		afterHooks.push({
+			matcher: () => true,
+			handler: afterHookHandler
+		});
+	}
+	const pluginBeforeHooks = plugins.filter((plugin) => plugin.hooks?.before).map((plugin) => plugin.hooks?.before).flat();
+	const pluginAfterHooks = plugins.filter((plugin) => plugin.hooks?.after).map((plugin) => plugin.hooks?.after).flat();
+	/**
+	* Add plugin added hooks at last
+	*/
+	if (pluginBeforeHooks.length) beforeHooks.push(...pluginBeforeHooks);
+	if (pluginAfterHooks.length) afterHooks.push(...pluginAfterHooks);
+	return {
+		beforeHooks,
+		afterHooks
+	};
+}
+
+//#endregion
+export { toAuthEndpoints };
+//# sourceMappingURL=to-auth-endpoints.mjs.map

package/dist/api/to-auth-endpoints.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-auth-endpoints.mjs","names":[],"sources":["../../src/api/to-auth-endpoints.ts"],"sourcesContent":["import type { AuthContext, HookEndpointContext } from \"@better-auth/core\";\nimport type { AuthEndpoint, AuthMiddleware } from \"@better-auth/core/api\";\nimport {\n\thasRequestState,\n\trunWithEndpointContext,\n\trunWithRequestState,\n} from \"@better-auth/core/context\";\nimport { shouldPublishLog } from \"@better-auth/core/env\";\nimport { APIError } from \"@better-auth/core/error\";\nimport type {\n\tEndpointContext,\n\tEndpointOptions,\n\tInputContext,\n} from \"better-call\";\nimport { kAPIErrorHeaderSymbol, toResponse } from \"better-call\";\nimport { createDefu } from \"defu\";\nimport { isAPIError } from \"../utils/is-api-error\";\n\ntype InternalContext = Partial<\n\tInputContext<string, any> & EndpointContext<string, any>\n> & {\n\tpath: string;\n\tasResponse?: boolean | undefined;\n\tcontext: AuthContext & {\n\t\tlogger: AuthContext[\"logger\"];\n\t\treturned?: unknown | undefined;\n\t\tresponseHeaders?: Headers | undefined;\n\t};\n};\n\nconst defuReplaceArrays = createDefu((obj, key, value) => {\n\tif (Array.isArray(obj[key]) && Array.isArray(value)) {\n\t\tobj[key] = value;\n\t\treturn true;\n\t}\n});\n\nconst hooksSourceWeakMap = new WeakMap<\n\tAuthMiddleware,\n\t`user` | `plugin:${string}`\n>();\n\ntype UserInputContext = Partial<\n\tInputContext<string, any> & EndpointContext<string, any>\n>;\n\nexport function toAuthEndpoints<\n\tconst E extends Record<\n\t\tstring,\n\t\tOmit<AuthEndpoint<string, EndpointOptions, any>, \"wrap\">\n\t>,\n>(endpoints: E, ctx: AuthContext | Promise<AuthContext>): E {\n\tconst api: Record<\n\t\tstring,\n\t\t((\n\t\t\tcontext: EndpointContext<string, any> & InputContext<string, any>,\n\t\t) => Promise<any>) & {\n\t\t\tpath?: string | undefined;\n\t\t\toptions?: EndpointOptions | undefined;\n\t\t}\n\t> = {};\n\n\tfor (const [key, endpoint] of Object.entries(endpoints)) {\n\t\tapi[key] = async (context?: UserInputContext) => {\n\t\t\tconst run = async () => {\n\t\t\t\tconst authContext = await ctx;\n\t\t\t\tlet internalContext: InternalContext = {\n\t\t\t\t\t...context,\n\t\t\t\t\tcontext: {\n\t\t\t\t\t\t...authContext,\n\t\t\t\t\t\treturned: undefined,\n\t\t\t\t\t\tresponseHeaders: undefined,\n\t\t\t\t\t\tsession: null,\n\t\t\t\t\t},\n\t\t\t\t\tpath: endpoint.path,\n\t\t\t\t\theaders: context?.headers ? new Headers(context?.headers) : undefined,\n\t\t\t\t};\n\t\t\t\treturn runWithEndpointContext(internalContext, async () => {\n\t\t\t\t\tconst { beforeHooks, afterHooks } = getHooks(authContext);\n\t\t\t\t\tconst before = await runBeforeHooks(internalContext, beforeHooks);\n\t\t\t\t\t/**\n\t\t\t\t\t * If `before.context` is returned, it should\n\t\t\t\t\t * get merged with the original context\n\t\t\t\t\t */\n\t\t\t\t\tif (\n\t\t\t\t\t\t\"context\" in before &&\n\t\t\t\t\t\tbefore.context &&\n\t\t\t\t\t\ttypeof before.context === \"object\"\n\t\t\t\t\t) {\n\t\t\t\t\t\tconst { headers, ...rest } = before.context as {\n\t\t\t\t\t\t\theaders: Headers;\n\t\t\t\t\t\t};\n\t\t\t\t\t\t/**\n\t\t\t\t\t\t * Headers should be merged differently\n\t\t\t\t\t\t * so the hook doesn't override the whole\n\t\t\t\t\t\t * header\n\t\t\t\t\t\t */\n\t\t\t\t\t\tif (headers) {\n\t\t\t\t\t\t\theaders.forEach((value, key) => {\n\t\t\t\t\t\t\t\t(internalContext.headers as Headers).set(key, value);\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t\tinternalContext = defuReplaceArrays(rest, internalContext);\n\t\t\t\t\t} else if (before) {\n\t\t\t\t\t\t/* Return before hook response if it's anything other than a context return */\n\t\t\t\t\t\treturn context?.asResponse\n\t\t\t\t\t\t\t? toResponse(before, {\n\t\t\t\t\t\t\t\t\theaders: context?.headers,\n\t\t\t\t\t\t\t\t})\n\t\t\t\t\t\t\t: context?.returnHeaders\n\t\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\t\theaders: context?.headers,\n\t\t\t\t\t\t\t\t\t\tresponse: before,\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t: before;\n\t\t\t\t\t}\n\n\t\t\t\t\tinternalContext.asResponse = false;\n\t\t\t\t\tinternalContext.returnHeaders = true;\n\t\t\t\t\tinternalContext.returnStatus = true;\n\t\t\t\t\tconst result = (await runWithEndpointContext(internalContext, () =>\n\t\t\t\t\t\t(endpoint as any)(internalContext as any),\n\t\t\t\t\t).catch((e: any) => {\n\t\t\t\t\t\tif (isAPIError(e)) {\n\t\t\t\t\t\t\t/**\n\t\t\t\t\t\t\t * API Errors from response are caught\n\t\t\t\t\t\t\t * and returned to hooks\n\t\t\t\t\t\t\t */\n\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\tresponse: e,\n\t\t\t\t\t\t\t\tstatus: e.statusCode,\n\t\t\t\t\t\t\t\theaders: e.headers ? new Headers(e.headers) : null,\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthrow e;\n\t\t\t\t\t})) as {\n\t\t\t\t\t\theaders: Headers;\n\t\t\t\t\t\tresponse: any;\n\t\t\t\t\t\tstatus: number;\n\t\t\t\t\t};\n\n\t\t\t\t\t//if response object is returned we skip after hooks and post processing\n\t\t\t\t\tif (result && result instanceof Response) {\n\t\t\t\t\t\treturn result;\n\t\t\t\t\t}\n\n\t\t\t\t\tinternalContext.context.returned = result.response;\n\t\t\t\t\tinternalContext.context.responseHeaders = result.headers;\n\n\t\t\t\t\tconst after = await runAfterHooks(internalContext, afterHooks);\n\n\t\t\t\t\tif (after.response) {\n\t\t\t\t\t\tresult.response = after.response;\n\t\t\t\t\t}\n\n\t\t\t\t\tif (\n\t\t\t\t\t\tisAPIError(result.response) &&\n\t\t\t\t\t\tshouldPublishLog(authContext.logger.level, \"debug\")\n\t\t\t\t\t) {\n\t\t\t\t\t\t// inherit stack from errorStack if debug mode is enabled\n\t\t\t\t\t\tresult.response.stack = result.response.errorStack;\n\t\t\t\t\t}\n\n\t\t\t\t\tif (isAPIError(result.response) && !context?.asResponse) {\n\t\t\t\t\t\tthrow result.response;\n\t\t\t\t\t}\n\n\t\t\t\t\tconst response = context?.asResponse\n\t\t\t\t\t\t? toResponse(result.response, {\n\t\t\t\t\t\t\t\theaders: result.headers,\n\t\t\t\t\t\t\t\tstatus: result.status,\n\t\t\t\t\t\t\t})\n\t\t\t\t\t\t: context?.returnHeaders\n\t\t\t\t\t\t\t? context?.returnStatus\n\t\t\t\t\t\t\t\t? {\n\t\t\t\t\t\t\t\t\t\theaders: result.headers,\n\t\t\t\t\t\t\t\t\t\tresponse: result.response,\n\t\t\t\t\t\t\t\t\t\tstatus: result.status,\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\t\theaders: result.headers,\n\t\t\t\t\t\t\t\t\t\tresponse: result.response,\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t: context?.returnStatus\n\t\t\t\t\t\t\t\t? { response: result.response, status: result.status }\n\t\t\t\t\t\t\t\t: result.response;\n\t\t\t\t\treturn response;\n\t\t\t\t});\n\t\t\t};\n\t\t\tif (await hasRequestState()) {\n\t\t\t\treturn run();\n\t\t\t} else {\n\t\t\t\tconst store = new WeakMap();\n\t\t\t\treturn runWithRequestState(store, run);\n\t\t\t}\n\t\t};\n\t\tapi[key].path = endpoint.path;\n\t\tapi[key].options = endpoint.options;\n\t}\n\treturn api as unknown as E;\n}\n\nasync function runBeforeHooks(\n\tcontext: InternalContext,\n\thooks: {\n\t\tmatcher: (context: HookEndpointContext) => boolean;\n\t\thandler: AuthMiddleware;\n\t}[],\n) {\n\tlet modifiedContext: Partial<InternalContext> = {};\n\n\tfor (const hook of hooks) {\n\t\tlet matched = false;\n\t\ttry {\n\t\t\tmatched = hook.matcher(context);\n\t\t} catch (error) {\n\t\t\t// manually handle unexpected errors during hook matcher execution to prevent accidental exposure of internal details\n\t\t\t// Also provides debug information about which plugin the hook failed and error info\n\t\t\tconst hookSource = hooksSourceWeakMap.get(hook.handler) ?? \"unknown\";\n\t\t\tcontext.context.logger.error(\n\t\t\t\t`An error occurred during ${hookSource} hook matcher execution:`,\n\t\t\t\terror,\n\t\t\t);\n\t\t\tthrow new APIError(\"INTERNAL_SERVER_ERROR\", {\n\t\t\t\tmessage: `An error occurred during hook matcher execution. Check the logs for more details.`,\n\t\t\t});\n\t\t}\n\t\tif (matched) {\n\t\t\tconst result = await hook\n\t\t\t\t.handler({\n\t\t\t\t\t...context,\n\t\t\t\t\treturnHeaders: false,\n\t\t\t\t})\n\t\t\t\t.catch((e: unknown) => {\n\t\t\t\t\tif (\n\t\t\t\t\t\tisAPIError(e) &&\n\t\t\t\t\t\tshouldPublishLog(context.context.logger.level, \"debug\")\n\t\t\t\t\t) {\n\t\t\t\t\t\t// inherit stack from errorStack if debug mode is enabled\n\t\t\t\t\t\te.stack = e.errorStack;\n\t\t\t\t\t}\n\t\t\t\t\tthrow e;\n\t\t\t\t});\n\t\t\tif (result && typeof result === \"object\") {\n\t\t\t\tif (\"context\" in result && typeof result.context === \"object\") {\n\t\t\t\t\tconst { headers, ...rest } =\n\t\t\t\t\t\tresult.context as Partial<InternalContext>;\n\t\t\t\t\tif (headers instanceof Headers) {\n\t\t\t\t\t\tif (modifiedContext.headers) {\n\t\t\t\t\t\t\theaders.forEach((value, key) => {\n\t\t\t\t\t\t\t\tmodifiedContext.headers?.set(key, value);\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tmodifiedContext.headers = headers;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tmodifiedContext = defuReplaceArrays(rest, modifiedContext);\n\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\treturn result;\n\t\t\t}\n\t\t}\n\t}\n\treturn { context: modifiedContext };\n}\n\nasync function runAfterHooks(\n\tcontext: InternalContext,\n\thooks: {\n\t\tmatcher: (context: HookEndpointContext) => boolean;\n\t\thandler: AuthMiddleware;\n\t}[],\n) {\n\tfor (const hook of hooks) {\n\t\tif (hook.matcher(context)) {\n\t\t\tconst result = (await hook.handler(context).catch((e) => {\n\t\t\t\tif (isAPIError(e)) {\n\t\t\t\t\tconst headers = (e as any)[kAPIErrorHeaderSymbol] as\n\t\t\t\t\t\t| Headers\n\t\t\t\t\t\t| undefined;\n\t\t\t\t\tif (shouldPublishLog(context.context.logger.level, \"debug\")) {\n\t\t\t\t\t\t// inherit stack from errorStack if debug mode is enabled\n\t\t\t\t\t\te.stack = e.errorStack;\n\t\t\t\t\t}\n\t\t\t\t\treturn {\n\t\t\t\t\t\tresponse: e,\n\t\t\t\t\t\theaders: headers\n\t\t\t\t\t\t\t? headers\n\t\t\t\t\t\t\t: e.headers\n\t\t\t\t\t\t\t\t? new Headers(e.headers)\n\t\t\t\t\t\t\t\t: null,\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tthrow e;\n\t\t\t})) as {\n\t\t\t\tresponse: any;\n\t\t\t\theaders: Headers;\n\t\t\t};\n\t\t\tif (result.headers) {\n\t\t\t\tresult.headers.forEach((value, key) => {\n\t\t\t\t\tif (!context.context.responseHeaders) {\n\t\t\t\t\t\tcontext.context.responseHeaders = new Headers({\n\t\t\t\t\t\t\t[key]: value,\n\t\t\t\t\t\t});\n\t\t\t\t\t} else {\n\t\t\t\t\t\tif (key.toLowerCase() === \"set-cookie\") {\n\t\t\t\t\t\t\tcontext.context.responseHeaders.append(key, value);\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tcontext.context.responseHeaders.set(key, value);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (result.response) {\n\t\t\t\tcontext.context.returned = result.response;\n\t\t\t}\n\t\t}\n\t}\n\treturn {\n\t\tresponse: context.context.returned,\n\t\theaders: context.context.responseHeaders,\n\t};\n}\n\nfunction getHooks(authContext: AuthContext) {\n\tconst plugins = authContext.options.plugins || [];\n\tconst beforeHooks: {\n\t\tmatcher: (context: HookEndpointContext) => boolean;\n\t\thandler: AuthMiddleware;\n\t}[] = [];\n\tconst afterHooks: {\n\t\tmatcher: (context: HookEndpointContext) => boolean;\n\t\thandler: AuthMiddleware;\n\t}[] = [];\n\tconst beforeHookHandler = authContext.options.hooks?.before;\n\tif (beforeHookHandler) {\n\t\thooksSourceWeakMap.set(beforeHookHandler, \"user\");\n\t\tbeforeHooks.push({\n\t\t\tmatcher: () => true,\n\t\t\thandler: beforeHookHandler,\n\t\t});\n\t}\n\tconst afterHookHandler = authContext.options.hooks?.after;\n\tif (afterHookHandler) {\n\t\thooksSourceWeakMap.set(afterHookHandler, \"user\");\n\t\tafterHooks.push({\n\t\t\tmatcher: () => true,\n\t\t\thandler: afterHookHandler,\n\t\t});\n\t}\n\tconst pluginBeforeHooks = plugins\n\t\t.filter((plugin) => plugin.hooks?.before)\n\t\t.map((plugin) => plugin.hooks?.before!)\n\t\t.flat();\n\tconst pluginAfterHooks = plugins\n\t\t.filter((plugin) => plugin.hooks?.after)\n\t\t.map((plugin) => plugin.hooks?.after!)\n\t\t.flat();\n\n\t/**\n\t * Add plugin added hooks at last\n\t */\n\tif (pluginBeforeHooks.length) beforeHooks.push(...pluginBeforeHooks);\n\tif (pluginAfterHooks.length) afterHooks.push(...pluginAfterHooks);\n\n\treturn {\n\t\tbeforeHooks,\n\t\tafterHooks,\n\t};\n}\n"],"mappings":";;;;;;;;AA8BA,MAAM,oBAAoB,YAAY,KAAK,KAAK,UAAU;AACzD,KAAI,MAAM,QAAQ,IAAI,KAAK,IAAI,MAAM,QAAQ,MAAM,EAAE;AACpD,MAAI,OAAO;AACX,SAAO;;EAEP;AAEF,MAAM,qCAAqB,IAAI,SAG5B;AAMH,SAAgB,gBAKd,WAAc,KAA4C;CAC3D,MAAM,MAQF,EAAE;AAEN,MAAK,MAAM,CAAC,KAAK,aAAa,OAAO,QAAQ,UAAU,EAAE;AACxD,MAAI,OAAO,OAAO,YAA+B;GAChD,MAAM,MAAM,YAAY;IACvB,MAAM,cAAc,MAAM;IAC1B,IAAI,kBAAmC;KACtC,GAAG;KACH,SAAS;MACR,GAAG;MACH,UAAU;MACV,iBAAiB;MACjB,SAAS;MACT;KACD,MAAM,SAAS;KACf,SAAS,SAAS,UAAU,IAAI,QAAQ,SAAS,QAAQ,GAAG;KAC5D;AACD,WAAO,uBAAuB,iBAAiB,YAAY;KAC1D,MAAM,EAAE,aAAa,eAAe,SAAS,YAAY;KACzD,MAAM,SAAS,MAAM,eAAe,iBAAiB,YAAY;;;;;AAKjE,SACC,aAAa,UACb,OAAO,WACP,OAAO,OAAO,YAAY,UACzB;MACD,MAAM,EAAE,SAAS,GAAG,SAAS,OAAO;;;;;;AAQpC,UAAI,QACH,SAAQ,SAAS,OAAO,QAAQ;AAC/B,OAAC,gBAAgB,QAAoB,IAAI,KAAK,MAAM;QACnD;AAEH,wBAAkB,kBAAkB,MAAM,gBAAgB;gBAChD,OAEV,QAAO,SAAS,aACb,WAAW,QAAQ,EACnB,SAAS,SAAS,SAClB,CAAC,GACD,SAAS,gBACR;MACA,SAAS,SAAS;MAClB,UAAU;MACV,GACA;AAGL,qBAAgB,aAAa;AAC7B,qBAAgB,gBAAgB;AAChC,qBAAgB,eAAe;KAC/B,MAAM,SAAU,MAAM,uBAAuB,uBAC3C,SAAiB,gBAAuB,CACzC,CAAC,OAAO,MAAW;AACnB,UAAI,WAAW,EAAE;;;;;AAKhB,aAAO;OACN,UAAU;OACV,QAAQ,EAAE;OACV,SAAS,EAAE,UAAU,IAAI,QAAQ,EAAE,QAAQ,GAAG;OAC9C;AAEF,YAAM;OACL;AAOF,SAAI,UAAU,kBAAkB,SAC/B,QAAO;AAGR,qBAAgB,QAAQ,WAAW,OAAO;AAC1C,qBAAgB,QAAQ,kBAAkB,OAAO;KAEjD,MAAM,QAAQ,MAAM,cAAc,iBAAiB,WAAW;AAE9D,SAAI,MAAM,SACT,QAAO,WAAW,MAAM;AAGzB,SACC,WAAW,OAAO,SAAS,IAC3B,iBAAiB,YAAY,OAAO,OAAO,QAAQ,CAGnD,QAAO,SAAS,QAAQ,OAAO,SAAS;AAGzC,SAAI,WAAW,OAAO,SAAS,IAAI,CAAC,SAAS,WAC5C,OAAM,OAAO;AAsBd,YAnBiB,SAAS,aACvB,WAAW,OAAO,UAAU;MAC5B,SAAS,OAAO;MAChB,QAAQ,OAAO;MACf,CAAC,GACD,SAAS,gBACR,SAAS,eACR;MACA,SAAS,OAAO;MAChB,UAAU,OAAO;MACjB,QAAQ,OAAO;MACf,GACA;MACA,SAAS,OAAO;MAChB,UAAU,OAAO;MACjB,GACD,SAAS,eACR;MAAE,UAAU,OAAO;MAAU,QAAQ,OAAO;MAAQ,GACpD,OAAO;MAEX;;AAEH,OAAI,MAAM,iBAAiB,CAC1B,QAAO,KAAK;OAGZ,QAAO,oCADO,IAAI,SAAS,EACO,IAAI;;AAGxC,MAAI,KAAK,OAAO,SAAS;AACzB,MAAI,KAAK,UAAU,SAAS;;AAE7B,QAAO;;AAGR,eAAe,eACd,SACA,OAIC;CACD,IAAI,kBAA4C,EAAE;AAElD,MAAK,MAAM,QAAQ,OAAO;EACzB,IAAI,UAAU;AACd,MAAI;AACH,aAAU,KAAK,QAAQ,QAAQ;WACvB,OAAO;GAGf,MAAM,aAAa,mBAAmB,IAAI,KAAK,QAAQ,IAAI;AAC3D,WAAQ,QAAQ,OAAO,MACtB,4BAA4B,WAAW,2BACvC,MACA;AACD,SAAM,IAAI,SAAS,yBAAyB,EAC3C,SAAS,qFACT,CAAC;;AAEH,MAAI,SAAS;GACZ,MAAM,SAAS,MAAM,KACnB,QAAQ;IACR,GAAG;IACH,eAAe;IACf,CAAC,CACD,OAAO,MAAe;AACtB,QACC,WAAW,EAAE,IACb,iBAAiB,QAAQ,QAAQ,OAAO,OAAO,QAAQ,CAGvD,GAAE,QAAQ,EAAE;AAEb,UAAM;KACL;AACH,OAAI,UAAU,OAAO,WAAW,UAAU;AACzC,QAAI,aAAa,UAAU,OAAO,OAAO,YAAY,UAAU;KAC9D,MAAM,EAAE,SAAS,GAAG,SACnB,OAAO;AACR,SAAI,mBAAmB,QACtB,KAAI,gBAAgB,QACnB,SAAQ,SAAS,OAAO,QAAQ;AAC/B,sBAAgB,SAAS,IAAI,KAAK,MAAM;OACvC;SAEF,iBAAgB,UAAU;AAG5B,uBAAkB,kBAAkB,MAAM,gBAAgB;AAE1D;;AAED,WAAO;;;;AAIV,QAAO,EAAE,SAAS,iBAAiB;;AAGpC,eAAe,cACd,SACA,OAIC;AACD,MAAK,MAAM,QAAQ,MAClB,KAAI,KAAK,QAAQ,QAAQ,EAAE;EAC1B,MAAM,SAAU,MAAM,KAAK,QAAQ,QAAQ,CAAC,OAAO,MAAM;AACxD,OAAI,WAAW,EAAE,EAAE;IAClB,MAAM,UAAW,EAAU;AAG3B,QAAI,iBAAiB,QAAQ,QAAQ,OAAO,OAAO,QAAQ,CAE1D,GAAE,QAAQ,EAAE;AAEb,WAAO;KACN,UAAU;KACV,SAAS,UACN,UACA,EAAE,UACD,IAAI,QAAQ,EAAE,QAAQ,GACtB;KACJ;;AAEF,SAAM;IACL;AAIF,MAAI,OAAO,QACV,QAAO,QAAQ,SAAS,OAAO,QAAQ;AACtC,OAAI,CAAC,QAAQ,QAAQ,gBACpB,SAAQ,QAAQ,kBAAkB,IAAI,QAAQ,GAC5C,MAAM,OACP,CAAC;YAEE,IAAI,aAAa,KAAK,aACzB,SAAQ,QAAQ,gBAAgB,OAAO,KAAK,MAAM;OAElD,SAAQ,QAAQ,gBAAgB,IAAI,KAAK,MAAM;IAGhD;AAEH,MAAI,OAAO,SACV,SAAQ,QAAQ,WAAW,OAAO;;AAIrC,QAAO;EACN,UAAU,QAAQ,QAAQ;EAC1B,SAAS,QAAQ,QAAQ;EACzB;;AAGF,SAAS,SAAS,aAA0B;CAC3C,MAAM,UAAU,YAAY,QAAQ,WAAW,EAAE;CACjD,MAAM,cAGA,EAAE;CACR,MAAM,aAGA,EAAE;CACR,MAAM,oBAAoB,YAAY,QAAQ,OAAO;AACrD,KAAI,mBAAmB;AACtB,qBAAmB,IAAI,mBAAmB,OAAO;AACjD,cAAY,KAAK;GAChB,eAAe;GACf,SAAS;GACT,CAAC;;CAEH,MAAM,mBAAmB,YAAY,QAAQ,OAAO;AACpD,KAAI,kBAAkB;AACrB,qBAAmB,IAAI,kBAAkB,OAAO;AAChD,aAAW,KAAK;GACf,eAAe;GACf,SAAS;GACT,CAAC;;CAEH,MAAM,oBAAoB,QACxB,QAAQ,WAAW,OAAO,OAAO,OAAO,CACxC,KAAK,WAAW,OAAO,OAAO,OAAQ,CACtC,MAAM;CACR,MAAM,mBAAmB,QACvB,QAAQ,WAAW,OAAO,OAAO,MAAM,CACvC,KAAK,WAAW,OAAO,OAAO,MAAO,CACrC,MAAM;;;;AAKR,KAAI,kBAAkB,OAAQ,aAAY,KAAK,GAAG,kBAAkB;AACpE,KAAI,iBAAiB,OAAQ,YAAW,KAAK,GAAG,iBAAiB;AAEjE,QAAO;EACN;EACA;EACA"}

package/dist/auth/base.mjs

@@ -0,0 +1,44 @@
+import { getBaseURL, getOrigin } from "../utils/url.mjs";
+import { getEndpoints, router } from "../api/index.mjs";
+import { getTrustedOrigins } from "../context/helpers.mjs";
+import { runWithAdapter } from "@better-auth/core/context";
+import { BASE_ERROR_CODES, BetterAuthError } from "@better-auth/core/error";
+
+//#region src/auth/base.ts
+const createBetterAuth = (options, initFn) => {
+	const authContext = initFn(options);
+	const { api } = getEndpoints(authContext, options);
+	return {
+		handler: async (request) => {
+			const ctx = await authContext;
+			const basePath = ctx.options.basePath || "/api/auth";
+			if (!ctx.options.baseURL) {
+				const baseURL = getBaseURL(void 0, basePath, request, void 0, ctx.options.advanced?.trustedProxyHeaders);
+				if (baseURL) {
+					ctx.baseURL = baseURL;
+					ctx.options.baseURL = getOrigin(ctx.baseURL) || void 0;
+				} else throw new BetterAuthError("Could not get base URL from request. Please provide a valid base URL.");
+			}
+			ctx.trustedOrigins = await getTrustedOrigins(ctx.options, request);
+			const { handler } = router(ctx, options);
+			return runWithAdapter(ctx.adapter, () => handler(request));
+		},
+		api,
+		options,
+		$context: authContext,
+		$ERROR_CODES: {
+			...options.plugins?.reduce((acc, plugin) => {
+				if (plugin.$ERROR_CODES) return {
+					...acc,
+					...plugin.$ERROR_CODES
+				};
+				return acc;
+			}, {}),
+			...BASE_ERROR_CODES
+		}
+	};
+};
+
+//#endregion
+export { createBetterAuth };
+//# sourceMappingURL=base.mjs.map

package/dist/auth/base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.mjs","names":[],"sources":["../../src/auth/base.ts"],"sourcesContent":["import type { AuthContext, BetterAuthOptions } from \"@better-auth/core\";\nimport { runWithAdapter } from \"@better-auth/core/context\";\nimport { BASE_ERROR_CODES, BetterAuthError } from \"@better-auth/core/error\";\nimport { getEndpoints, router } from \"../api\";\nimport { getTrustedOrigins } from \"../context/helpers\";\nimport type { Auth } from \"../types\";\nimport { getBaseURL, getOrigin } from \"../utils/url\";\n\nexport const createBetterAuth = <Options extends BetterAuthOptions>(\n\toptions: Options,\n\tinitFn: (options: Options) => Promise<AuthContext>,\n): Auth<Options> => {\n\tconst authContext = initFn(options);\n\tconst { api } = getEndpoints(authContext, options);\n\tconst errorCodes = options.plugins?.reduce((acc, plugin) => {\n\t\tif (plugin.$ERROR_CODES) {\n\t\t\treturn {\n\t\t\t\t...acc,\n\t\t\t\t...plugin.$ERROR_CODES,\n\t\t\t};\n\t\t}\n\t\treturn acc;\n\t}, {});\n\treturn {\n\t\thandler: async (request: Request) => {\n\t\t\tconst ctx = await authContext;\n\t\t\tconst basePath = ctx.options.basePath || \"/api/auth\";\n\t\t\tif (!ctx.options.baseURL) {\n\t\t\t\tconst baseURL = getBaseURL(\n\t\t\t\t\tundefined,\n\t\t\t\t\tbasePath,\n\t\t\t\t\trequest,\n\t\t\t\t\tundefined,\n\t\t\t\t\tctx.options.advanced?.trustedProxyHeaders,\n\t\t\t\t);\n\t\t\t\tif (baseURL) {\n\t\t\t\t\tctx.baseURL = baseURL;\n\t\t\t\t\tctx.options.baseURL = getOrigin(ctx.baseURL) || undefined;\n\t\t\t\t} else {\n\t\t\t\t\tthrow new BetterAuthError(\n\t\t\t\t\t\t\"Could not get base URL from request. Please provide a valid base URL.\",\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\t\t\tctx.trustedOrigins = await getTrustedOrigins(ctx.options, request);\n\t\t\tconst { handler } = router(ctx, options);\n\t\t\treturn runWithAdapter(ctx.adapter, () => handler(request));\n\t\t},\n\t\tapi,\n\t\toptions: options,\n\t\t$context: authContext,\n\t\t$ERROR_CODES: {\n\t\t\t...errorCodes,\n\t\t\t...BASE_ERROR_CODES,\n\t\t},\n\t} as any;\n};\n"],"mappings":";;;;;;;AAQA,MAAa,oBACZ,SACA,WACmB;CACnB,MAAM,cAAc,OAAO,QAAQ;CACnC,MAAM,EAAE,QAAQ,aAAa,aAAa,QAAQ;AAUlD,QAAO;EACN,SAAS,OAAO,YAAqB;GACpC,MAAM,MAAM,MAAM;GAClB,MAAM,WAAW,IAAI,QAAQ,YAAY;AACzC,OAAI,CAAC,IAAI,QAAQ,SAAS;IACzB,MAAM,UAAU,WACf,QACA,UACA,SACA,QACA,IAAI,QAAQ,UAAU,oBACtB;AACD,QAAI,SAAS;AACZ,SAAI,UAAU;AACd,SAAI,QAAQ,UAAU,UAAU,IAAI,QAAQ,IAAI;UAEhD,OAAM,IAAI,gBACT,wEACA;;AAGH,OAAI,iBAAiB,MAAM,kBAAkB,IAAI,SAAS,QAAQ;GAClE,MAAM,EAAE,YAAY,OAAO,KAAK,QAAQ;AACxC,UAAO,eAAe,IAAI,eAAe,QAAQ,QAAQ,CAAC;;EAE3D;EACS;EACT,UAAU;EACV,cAAc;GACb,GAtCiB,QAAQ,SAAS,QAAQ,KAAK,WAAW;AAC3D,QAAI,OAAO,aACV,QAAO;KACN,GAAG;KACH,GAAG,OAAO;KACV;AAEF,WAAO;MACL,EAAE,CAAC;GA+BJ,GAAG;GACH;EACD"}

package/dist/auth/full.d.mts

@@ -0,0 +1,30 @@
+import { Auth } from "../types/auth.mjs";
+import "../types/index.mjs";
+import { BetterAuthOptions } from "@better-auth/core";
+
+//#region src/auth/full.d.ts
+/**
+ * Better Auth initializer for full mode (with Kysely)
+ *
+ * @example
+ * ```ts
+ * import { betterAuth } from "better-auth";
+ *
+ * const auth = betterAuth({
+ * 	database: new PostgresDialect({ connection: process.env.DATABASE_URL }),
+ * });
+ * ```
+ *
+ * For minimal mode (without Kysely), import from `better-auth/minimal` instead
+ * @example
+ * ```ts
+ * import { betterAuth } from "better-auth/minimal";
+ *
+ * const auth = betterAuth({
+ *	  database: drizzleAdapter(db, { provider: "pg" }),
+ * });
+ */
+declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;
+//#endregion
+export { betterAuth };
+//# sourceMappingURL=full.d.mts.map

package/dist/auth/full.mjs

@@ -0,0 +1,32 @@
+import { init } from "../context/init.mjs";
+import { createBetterAuth } from "./base.mjs";
+
+//#region src/auth/full.ts
+/**
+* Better Auth initializer for full mode (with Kysely)
+*
+* @example
+* ```ts
+* import { betterAuth } from "better-auth";
+*
+* const auth = betterAuth({
+* 	database: new PostgresDialect({ connection: process.env.DATABASE_URL }),
+* });
+* ```
+*
+* For minimal mode (without Kysely), import from `better-auth/minimal` instead
+* @example
+* ```ts
+* import { betterAuth } from "better-auth/minimal";
+*
+* const auth = betterAuth({
+*	  database: drizzleAdapter(db, { provider: "pg" }),
+* });
+*/
+const betterAuth = (options) => {
+	return createBetterAuth(options, init);
+};
+
+//#endregion
+export { betterAuth };
+//# sourceMappingURL=full.mjs.map

package/dist/auth/full.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"full.mjs","names":[],"sources":["../../src/auth/full.ts"],"sourcesContent":["import type { BetterAuthOptions } from \"@better-auth/core\";\nimport { init } from \"../context/init\";\nimport type { Auth } from \"../types\";\nimport { createBetterAuth } from \"./base\";\n\n/**\n * Better Auth initializer for full mode (with Kysely)\n *\n * @example\n * ```ts\n * import { betterAuth } from \"better-auth\";\n *\n * const auth = betterAuth({\n * \tdatabase: new PostgresDialect({ connection: process.env.DATABASE_URL }),\n * });\n * ```\n *\n * For minimal mode (without Kysely), import from `better-auth/minimal` instead\n * @example\n * ```ts\n * import { betterAuth } from \"better-auth/minimal\";\n *\n * const auth = betterAuth({\n *\t  database: drizzleAdapter(db, { provider: \"pg\" }),\n * });\n */\nexport const betterAuth = <Options extends BetterAuthOptions>(\n\toptions: Options & {},\n): Auth<Options> => {\n\treturn createBetterAuth(options, init);\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,MAAa,cACZ,YACmB;AACnB,QAAO,iBAAiB,SAAS,KAAK"}

package/dist/auth/minimal.d.mts

@@ -0,0 +1,12 @@
+import { Auth } from "../types/auth.mjs";
+import "../types/index.mjs";
+import { BetterAuthOptions } from "@better-auth/core";
+
+//#region src/auth/minimal.d.ts
+/**
+ * Better Auth initializer for minimal mode (without Kysely)
+ */
+declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;
+//#endregion
+export { type BetterAuthOptions, betterAuth };
+//# sourceMappingURL=minimal.d.mts.map

package/dist/auth/minimal.mjs

@@ -0,0 +1,14 @@
+import { createBetterAuth } from "./base.mjs";
+import { initMinimal } from "../context/init-minimal.mjs";
+
+//#region src/auth/minimal.ts
+/**
+* Better Auth initializer for minimal mode (without Kysely)
+*/
+const betterAuth = (options) => {
+	return createBetterAuth(options, initMinimal);
+};
+
+//#endregion
+export { betterAuth };
+//# sourceMappingURL=minimal.mjs.map

package/dist/auth/minimal.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"minimal.mjs","names":[],"sources":["../../src/auth/minimal.ts"],"sourcesContent":["import type { BetterAuthOptions } from \"@better-auth/core\";\nimport { initMinimal } from \"../context/init-minimal\";\nimport type { Auth } from \"../types\";\nimport { createBetterAuth } from \"./base\";\n\nexport type { BetterAuthOptions };\n\n/**\n * Better Auth initializer for minimal mode (without Kysely)\n */\nexport const betterAuth = <Options extends BetterAuthOptions>(\n\toptions: Options & {},\n): Auth<Options> => {\n\treturn createBetterAuth(options, initMinimal);\n};\n"],"mappings":";;;;;;;AAUA,MAAa,cACZ,YACmB;AACnB,QAAO,iBAAiB,SAAS,YAAY"}

package/dist/auth/trusted-origins.mjs

@@ -0,0 +1,31 @@
+import { getHost, getOrigin, getProtocol } from "../utils/url.mjs";
+import { wildcardMatch } from "../utils/wildcard.mjs";
+
+//#region src/auth/trusted-origins.ts
+/**
+* Matches the given url against an origin or origin pattern
+* See "options.trustedOrigins" for details of supported patterns
+*
+* @param url The url to test
+* @param pattern The origin pattern
+* @param [settings] Specify supported pattern matching settings
+* @returns {boolean} true if the URL matches the origin pattern, false otherwise.
+*/
+const matchesOriginPattern = (url, pattern, settings) => {
+	if (url.startsWith("/")) {
+		if (settings?.allowRelativePaths) return url.startsWith("/") && /^\/(?!\/|\\|%2f|%5c)[\w\-.\+/@]*(?:\?[\w\-.\+/=&%@]*)?$/.test(url);
+		return false;
+	}
+	if (pattern.includes("*") || pattern.includes("?")) {
+		if (pattern.includes("://")) return wildcardMatch(pattern)(getOrigin(url) || url);
+		const host = getHost(url);
+		if (!host) return false;
+		return wildcardMatch(pattern)(host);
+	}
+	const protocol = getProtocol(url);
+	return protocol === "http:" || protocol === "https:" || !protocol ? pattern === getOrigin(url) : url.startsWith(pattern);
+};
+
+//#endregion
+export { matchesOriginPattern };
+//# sourceMappingURL=trusted-origins.mjs.map

package/dist/auth/trusted-origins.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-origins.mjs","names":[],"sources":["../../src/auth/trusted-origins.ts"],"sourcesContent":["import { getHost, getOrigin, getProtocol } from \"../utils/url\";\nimport { wildcardMatch } from \"../utils/wildcard\";\n\n/**\n * Matches the given url against an origin or origin pattern\n * See \"options.trustedOrigins\" for details of supported patterns\n *\n * @param url The url to test\n * @param pattern The origin pattern\n * @param [settings] Specify supported pattern matching settings\n * @returns {boolean} true if the URL matches the origin pattern, false otherwise.\n */\nexport const matchesOriginPattern = (\n\turl: string,\n\tpattern: string,\n\tsettings?: { allowRelativePaths: boolean },\n): boolean => {\n\tif (url.startsWith(\"/\")) {\n\t\tif (settings?.allowRelativePaths) {\n\t\t\treturn (\n\t\t\t\turl.startsWith(\"/\") &&\n\t\t\t\t/^\\/(?!\\/|\\\\|%2f|%5c)[\\w\\-.\\+/@]*(?:\\?[\\w\\-.\\+/=&%@]*)?$/.test(url)\n\t\t\t);\n\t\t}\n\n\t\treturn false;\n\t}\n\n\t// Check if pattern contains wildcard characters (*, **, or ?)\n\tconst hasWildcard = pattern.includes(\"*\") || pattern.includes(\"?\");\n\tif (hasWildcard) {\n\t\t// For protocol-specific wildcards, match the full origin\n\t\tif (pattern.includes(\"://\")) {\n\t\t\treturn wildcardMatch(pattern)(getOrigin(url) || url);\n\t\t}\n\t\tconst host = getHost(url);\n\t\tif (!host) {\n\t\t\treturn false;\n\t\t}\n\t\t// For host-only wildcards, match just the host\n\t\treturn wildcardMatch(pattern)(host);\n\t}\n\tconst protocol = getProtocol(url);\n\treturn protocol === \"http:\" || protocol === \"https:\" || !protocol\n\t\t? pattern === getOrigin(url)\n\t\t: url.startsWith(pattern);\n};\n"],"mappings":";;;;;;;;;;;;;AAYA,MAAa,wBACZ,KACA,SACA,aACa;AACb,KAAI,IAAI,WAAW,IAAI,EAAE;AACxB,MAAI,UAAU,mBACb,QACC,IAAI,WAAW,IAAI,IACnB,0DAA0D,KAAK,IAAI;AAIrE,SAAO;;AAKR,KADoB,QAAQ,SAAS,IAAI,IAAI,QAAQ,SAAS,IAAI,EACjD;AAEhB,MAAI,QAAQ,SAAS,MAAM,CAC1B,QAAO,cAAc,QAAQ,CAAC,UAAU,IAAI,IAAI,IAAI;EAErD,MAAM,OAAO,QAAQ,IAAI;AACzB,MAAI,CAAC,KACJ,QAAO;AAGR,SAAO,cAAc,QAAQ,CAAC,KAAK;;CAEpC,MAAM,WAAW,YAAY,IAAI;AACjC,QAAO,aAAa,WAAW,aAAa,YAAY,CAAC,WACtD,YAAY,UAAU,IAAI,GAC1B,IAAI,WAAW,QAAQ"}

package/dist/client/broadcast-channel.d.mts

@@ -0,0 +1,20 @@
+//#region src/client/broadcast-channel.d.ts
+interface BroadcastMessage {
+  event?: "session" | undefined;
+  data?: {
+    trigger?: "signout" | "getSession" | "updateUser";
+  } | undefined;
+  clientId: string;
+  timestamp: number;
+}
+type BroadcastListener = (message: BroadcastMessage) => void;
+declare const kBroadcastChannel: unique symbol;
+interface BroadcastChannel {
+  post(message: Record<string, unknown>): void;
+  subscribe(listener: BroadcastListener): () => void;
+  setup(): () => void;
+}
+declare function getGlobalBroadcastChannel(name?: string): BroadcastChannel;
+//#endregion
+export { BroadcastChannel, BroadcastListener, BroadcastMessage, getGlobalBroadcastChannel, kBroadcastChannel };
+//# sourceMappingURL=broadcast-channel.d.mts.map

package/dist/client/broadcast-channel.mjs

@@ -0,0 +1,46 @@
+//#region src/client/broadcast-channel.ts
+const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
+const now = () => Math.floor(Date.now() / 1e3);
+var WindowBroadcastChannel = class {
+	listeners = /* @__PURE__ */ new Set();
+	name;
+	constructor(name = "better-auth.message") {
+		this.name = name;
+	}
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	post(message) {
+		if (typeof window === "undefined") return;
+		try {
+			localStorage.setItem(this.name, JSON.stringify({
+				...message,
+				timestamp: now()
+			}));
+		} catch {}
+	}
+	setup() {
+		if (typeof window === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const handler = (event) => {
+			if (event.key !== this.name) return;
+			const message = JSON.parse(event.newValue ?? "{}");
+			if (message?.event !== "session" || !message?.data) return;
+			this.listeners.forEach((listener) => listener(message));
+		};
+		window.addEventListener("storage", handler);
+		return () => {
+			window.removeEventListener("storage", handler);
+		};
+	}
+};
+function getGlobalBroadcastChannel(name = "better-auth.message") {
+	if (!globalThis[kBroadcastChannel]) globalThis[kBroadcastChannel] = new WindowBroadcastChannel(name);
+	return globalThis[kBroadcastChannel];
+}
+
+//#endregion
+export { getGlobalBroadcastChannel, kBroadcastChannel };
+//# sourceMappingURL=broadcast-channel.mjs.map

package/dist/client/broadcast-channel.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcast-channel.mjs","names":[],"sources":["../../src/client/broadcast-channel.ts"],"sourcesContent":["export interface BroadcastMessage {\n\tevent?: \"session\" | undefined;\n\tdata?: { trigger?: \"signout\" | \"getSession\" | \"updateUser\" } | undefined;\n\tclientId: string;\n\ttimestamp: number;\n}\n\nexport type BroadcastListener = (message: BroadcastMessage) => void;\n\nexport const kBroadcastChannel = Symbol.for(\"better-auth:broadcast-channel\");\n\nconst now = () => Math.floor(Date.now() / 1000);\n\nexport interface BroadcastChannel {\n\tpost(message: Record<string, unknown>): void;\n\tsubscribe(listener: BroadcastListener): () => void;\n\tsetup(): () => void;\n}\n\nclass WindowBroadcastChannel implements BroadcastChannel {\n\tlisteners = new Set<BroadcastListener>();\n\tprivate name: string;\n\n\tconstructor(name = \"better-auth.message\") {\n\t\tthis.name = name;\n\t}\n\n\tsubscribe(listener: BroadcastListener) {\n\t\tthis.listeners.add(listener);\n\t\treturn () => {\n\t\t\tthis.listeners.delete(listener);\n\t\t};\n\t}\n\n\tpost(message: Record<string, unknown>) {\n\t\tif (typeof window === \"undefined\") return;\n\t\ttry {\n\t\t\tlocalStorage.setItem(\n\t\t\t\tthis.name,\n\t\t\t\tJSON.stringify({ ...message, timestamp: now() }),\n\t\t\t);\n\t\t} catch {}\n\t}\n\n\tsetup() {\n\t\tif (\n\t\t\ttypeof window === \"undefined\" ||\n\t\t\ttypeof window.addEventListener === \"undefined\"\n\t\t) {\n\t\t\treturn () => {};\n\t\t}\n\n\t\tconst handler = (event: StorageEvent) => {\n\t\t\tif (event.key !== this.name) return;\n\t\t\tconst message: BroadcastMessage = JSON.parse(event.newValue ?? \"{}\");\n\t\t\tif (message?.event !== \"session\" || !message?.data) return;\n\n\t\t\tthis.listeners.forEach((listener) => listener(message));\n\t\t};\n\n\t\twindow.addEventListener(\"storage\", handler);\n\n\t\treturn () => {\n\t\t\twindow.removeEventListener(\"storage\", handler);\n\t\t};\n\t}\n}\n\nexport function getGlobalBroadcastChannel(name = \"better-auth.message\") {\n\tif (!(globalThis as any)[kBroadcastChannel]) {\n\t\t(globalThis as any)[kBroadcastChannel] = new WindowBroadcastChannel(name);\n\t}\n\treturn (globalThis as any)[kBroadcastChannel] as BroadcastChannel;\n}\n"],"mappings":";AASA,MAAa,oBAAoB,OAAO,IAAI,gCAAgC;AAE5E,MAAM,YAAY,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;AAQ/C,IAAM,yBAAN,MAAyD;CACxD,4BAAY,IAAI,KAAwB;CACxC,AAAQ;CAER,YAAY,OAAO,uBAAuB;AACzC,OAAK,OAAO;;CAGb,UAAU,UAA6B;AACtC,OAAK,UAAU,IAAI,SAAS;AAC5B,eAAa;AACZ,QAAK,UAAU,OAAO,SAAS;;;CAIjC,KAAK,SAAkC;AACtC,MAAI,OAAO,WAAW,YAAa;AACnC,MAAI;AACH,gBAAa,QACZ,KAAK,MACL,KAAK,UAAU;IAAE,GAAG;IAAS,WAAW,KAAK;IAAE,CAAC,CAChD;UACM;;CAGT,QAAQ;AACP,MACC,OAAO,WAAW,eAClB,OAAO,OAAO,qBAAqB,YAEnC,cAAa;EAGd,MAAM,WAAW,UAAwB;AACxC,OAAI,MAAM,QAAQ,KAAK,KAAM;GAC7B,MAAM,UAA4B,KAAK,MAAM,MAAM,YAAY,KAAK;AACpE,OAAI,SAAS,UAAU,aAAa,CAAC,SAAS,KAAM;AAEpD,QAAK,UAAU,SAAS,aAAa,SAAS,QAAQ,CAAC;;AAGxD,SAAO,iBAAiB,WAAW,QAAQ;AAE3C,eAAa;AACZ,UAAO,oBAAoB,WAAW,QAAQ;;;;AAKjD,SAAgB,0BAA0B,OAAO,uBAAuB;AACvE,KAAI,CAAE,WAAmB,mBACxB,CAAC,WAAmB,qBAAqB,IAAI,uBAAuB,KAAK;AAE1E,QAAQ,WAAmB"}

package/dist/client/config.mjs

@@ -0,0 +1,90 @@
+import { getBaseURL } from "../utils/url.mjs";
+import { redirectPlugin } from "./fetch-plugins.mjs";
+import { parseJSON } from "./parser.mjs";
+import { getSessionAtom } from "./session-atom.mjs";
+import { defu as defu$1 } from "defu";
+import { createFetch } from "@better-fetch/fetch";
+
+//#region src/client/config.ts
+const getClientConfig = (options, loadEnv) => {
+	const isCredentialsSupported = "credentials" in Request.prototype;
+	const baseURL = getBaseURL(options?.baseURL, options?.basePath, void 0, loadEnv) ?? "/api/auth";
+	const pluginsFetchPlugins = options?.plugins?.flatMap((plugin) => plugin.fetchPlugins).filter((pl) => pl !== void 0) || [];
+	const lifeCyclePlugin = {
+		id: "lifecycle-hooks",
+		name: "lifecycle-hooks",
+		hooks: {
+			onSuccess: options?.fetchOptions?.onSuccess,
+			onError: options?.fetchOptions?.onError,
+			onRequest: options?.fetchOptions?.onRequest,
+			onResponse: options?.fetchOptions?.onResponse
+		}
+	};
+	const { onSuccess: _onSuccess, onError: _onError, onRequest: _onRequest, onResponse: _onResponse, ...restOfFetchOptions } = options?.fetchOptions || {};
+	const $fetch = createFetch({
+		baseURL,
+		...isCredentialsSupported ? { credentials: "include" } : {},
+		method: "GET",
+		jsonParser(text) {
+			if (!text) return null;
+			return parseJSON(text, { strict: false });
+		},
+		customFetchImpl: fetch,
+		...restOfFetchOptions,
+		plugins: [
+			lifeCyclePlugin,
+			...restOfFetchOptions.plugins || [],
+			...options?.disableDefaultFetchPlugins ? [] : [redirectPlugin],
+			...pluginsFetchPlugins
+		]
+	});
+	const { $sessionSignal, session } = getSessionAtom($fetch, options);
+	const plugins = options?.plugins || [];
+	let pluginsActions = {};
+	const pluginsAtoms = {
+		$sessionSignal,
+		session
+	};
+	const pluginPathMethods = {
+		"/sign-out": "POST",
+		"/revoke-sessions": "POST",
+		"/revoke-other-sessions": "POST",
+		"/delete-user": "POST"
+	};
+	const atomListeners = [{
+		signal: "$sessionSignal",
+		matcher(path) {
+			return path === "/sign-out" || path === "/update-user" || path === "/sign-up/email" || path === "/sign-in/email" || path === "/delete-user" || path === "/verify-email" || path === "/revoke-sessions" || path === "/revoke-session" || path === "/change-email";
+		}
+	}];
+	for (const plugin of plugins) {
+		if (plugin.getAtoms) Object.assign(pluginsAtoms, plugin.getAtoms?.($fetch));
+		if (plugin.pathMethods) Object.assign(pluginPathMethods, plugin.pathMethods);
+		if (plugin.atomListeners) atomListeners.push(...plugin.atomListeners);
+	}
+	const $store = {
+		notify: (signal) => {
+			pluginsAtoms[signal].set(!pluginsAtoms[signal].get());
+		},
+		listen: (signal, listener) => {
+			pluginsAtoms[signal].subscribe(listener);
+		},
+		atoms: pluginsAtoms
+	};
+	for (const plugin of plugins) if (plugin.getActions) pluginsActions = defu$1(plugin.getActions?.($fetch, $store, options) ?? {}, pluginsActions);
+	return {
+		get baseURL() {
+			return baseURL;
+		},
+		pluginsActions,
+		pluginsAtoms,
+		pluginPathMethods,
+		atomListeners,
+		$fetch,
+		$store
+	};
+};
+
+//#endregion
+export { getClientConfig };
+//# sourceMappingURL=config.mjs.map

package/dist/client/config.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.mjs","names":["defu"],"sources":["../../src/client/config.ts"],"sourcesContent":["import type {\n\tBetterAuthClientOptions,\n\tClientAtomListener,\n} from \"@better-auth/core\";\nimport { createFetch } from \"@better-fetch/fetch\";\nimport { defu } from \"defu\";\nimport type { WritableAtom } from \"nanostores\";\nimport { getBaseURL } from \"../utils/url\";\nimport { redirectPlugin } from \"./fetch-plugins\";\nimport { parseJSON } from \"./parser\";\nimport { getSessionAtom } from \"./session-atom\";\n\nexport const getClientConfig = (\n\toptions?: BetterAuthClientOptions | undefined,\n\tloadEnv?: boolean | undefined,\n) => {\n\t/* check if the credentials property is supported. Useful for cf workers */\n\tconst isCredentialsSupported = \"credentials\" in Request.prototype;\n\tconst baseURL =\n\t\tgetBaseURL(options?.baseURL, options?.basePath, undefined, loadEnv) ??\n\t\t\"/api/auth\";\n\tconst pluginsFetchPlugins =\n\t\toptions?.plugins\n\t\t\t?.flatMap((plugin) => plugin.fetchPlugins)\n\t\t\t.filter((pl) => pl !== undefined) || [];\n\tconst lifeCyclePlugin = {\n\t\tid: \"lifecycle-hooks\",\n\t\tname: \"lifecycle-hooks\",\n\t\thooks: {\n\t\t\tonSuccess: options?.fetchOptions?.onSuccess,\n\t\t\tonError: options?.fetchOptions?.onError,\n\t\t\tonRequest: options?.fetchOptions?.onRequest,\n\t\t\tonResponse: options?.fetchOptions?.onResponse,\n\t\t},\n\t};\n\tconst {\n\t\tonSuccess: _onSuccess,\n\t\tonError: _onError,\n\t\tonRequest: _onRequest,\n\t\tonResponse: _onResponse,\n\t\t...restOfFetchOptions\n\t} = options?.fetchOptions || {};\n\tconst $fetch = createFetch({\n\t\tbaseURL,\n\t\t...(isCredentialsSupported ? { credentials: \"include\" } : {}),\n\t\tmethod: \"GET\",\n\t\tjsonParser(text) {\n\t\t\tif (!text) {\n\t\t\t\treturn null as any;\n\t\t\t}\n\t\t\treturn parseJSON(text, {\n\t\t\t\tstrict: false,\n\t\t\t});\n\t\t},\n\t\tcustomFetchImpl: fetch,\n\t\t...restOfFetchOptions,\n\t\tplugins: [\n\t\t\tlifeCyclePlugin,\n\t\t\t...(restOfFetchOptions.plugins || []),\n\t\t\t...(options?.disableDefaultFetchPlugins ? [] : [redirectPlugin]),\n\t\t\t...pluginsFetchPlugins,\n\t\t],\n\t});\n\tconst { $sessionSignal, session } = getSessionAtom($fetch, options);\n\tconst plugins = options?.plugins || [];\n\tlet pluginsActions = {} as Record<string, any>;\n\tconst pluginsAtoms = {\n\t\t$sessionSignal,\n\t\tsession,\n\t} as Record<string, WritableAtom<any>>;\n\tconst pluginPathMethods: Record<string, \"POST\" | \"GET\"> = {\n\t\t\"/sign-out\": \"POST\",\n\t\t\"/revoke-sessions\": \"POST\",\n\t\t\"/revoke-other-sessions\": \"POST\",\n\t\t\"/delete-user\": \"POST\",\n\t};\n\tconst atomListeners: ClientAtomListener[] = [\n\t\t{\n\t\t\tsignal: \"$sessionSignal\",\n\t\t\tmatcher(path) {\n\t\t\t\tconst matchesCommonPaths =\n\t\t\t\t\tpath === \"/sign-out\" ||\n\t\t\t\t\tpath === \"/update-user\" ||\n\t\t\t\t\tpath === \"/sign-up/email\" ||\n\t\t\t\t\tpath === \"/sign-in/email\" ||\n\t\t\t\t\tpath === \"/delete-user\" ||\n\t\t\t\t\tpath === \"/verify-email\" ||\n\t\t\t\t\tpath === \"/revoke-sessions\" ||\n\t\t\t\t\tpath === \"/revoke-session\" ||\n\t\t\t\t\tpath === \"/change-email\";\n\n\t\t\t\treturn matchesCommonPaths;\n\t\t\t},\n\t\t},\n\t];\n\n\tfor (const plugin of plugins) {\n\t\tif (plugin.getAtoms) {\n\t\t\tObject.assign(pluginsAtoms, plugin.getAtoms?.($fetch));\n\t\t}\n\t\tif (plugin.pathMethods) {\n\t\t\tObject.assign(pluginPathMethods, plugin.pathMethods);\n\t\t}\n\t\tif (plugin.atomListeners) {\n\t\t\tatomListeners.push(...plugin.atomListeners);\n\t\t}\n\t}\n\n\tconst $store = {\n\t\tnotify: (\n\t\t\tsignal?: (Omit<string, \"$sessionSignal\"> | \"$sessionSignal\") | undefined,\n\t\t) => {\n\t\t\tpluginsAtoms[signal as keyof typeof pluginsAtoms]!.set(\n\t\t\t\t!pluginsAtoms[signal as keyof typeof pluginsAtoms]!.get(),\n\t\t\t);\n\t\t},\n\t\tlisten: (\n\t\t\tsignal: Omit<string, \"$sessionSignal\"> | \"$sessionSignal\",\n\t\t\tlistener: (value: boolean, oldValue?: boolean | undefined) => void,\n\t\t) => {\n\t\t\tpluginsAtoms[signal as keyof typeof pluginsAtoms]!.subscribe(listener);\n\t\t},\n\t\tatoms: pluginsAtoms,\n\t};\n\n\tfor (const plugin of plugins) {\n\t\tif (plugin.getActions) {\n\t\t\tpluginsActions = defu(\n\t\t\t\tplugin.getActions?.($fetch, $store, options) ?? {},\n\t\t\t\tpluginsActions,\n\t\t\t);\n\t\t}\n\t}\n\treturn {\n\t\tget baseURL() {\n\t\t\treturn baseURL;\n\t\t},\n\t\tpluginsActions,\n\t\tpluginsAtoms,\n\t\tpluginPathMethods,\n\t\tatomListeners,\n\t\t$fetch,\n\t\t$store,\n\t};\n};\n"],"mappings":";;;;;;;;AAYA,MAAa,mBACZ,SACA,YACI;CAEJ,MAAM,yBAAyB,iBAAiB,QAAQ;CACxD,MAAM,UACL,WAAW,SAAS,SAAS,SAAS,UAAU,QAAW,QAAQ,IACnE;CACD,MAAM,sBACL,SAAS,SACN,SAAS,WAAW,OAAO,aAAa,CACzC,QAAQ,OAAO,OAAO,OAAU,IAAI,EAAE;CACzC,MAAM,kBAAkB;EACvB,IAAI;EACJ,MAAM;EACN,OAAO;GACN,WAAW,SAAS,cAAc;GAClC,SAAS,SAAS,cAAc;GAChC,WAAW,SAAS,cAAc;GAClC,YAAY,SAAS,cAAc;GACnC;EACD;CACD,MAAM,EACL,WAAW,YACX,SAAS,UACT,WAAW,YACX,YAAY,aACZ,GAAG,uBACA,SAAS,gBAAgB,EAAE;CAC/B,MAAM,SAAS,YAAY;EAC1B;EACA,GAAI,yBAAyB,EAAE,aAAa,WAAW,GAAG,EAAE;EAC5D,QAAQ;EACR,WAAW,MAAM;AAChB,OAAI,CAAC,KACJ,QAAO;AAER,UAAO,UAAU,MAAM,EACtB,QAAQ,OACR,CAAC;;EAEH,iBAAiB;EACjB,GAAG;EACH,SAAS;GACR;GACA,GAAI,mBAAmB,WAAW,EAAE;GACpC,GAAI,SAAS,6BAA6B,EAAE,GAAG,CAAC,eAAe;GAC/D,GAAG;GACH;EACD,CAAC;CACF,MAAM,EAAE,gBAAgB,YAAY,eAAe,QAAQ,QAAQ;CACnE,MAAM,UAAU,SAAS,WAAW,EAAE;CACtC,IAAI,iBAAiB,EAAE;CACvB,MAAM,eAAe;EACpB;EACA;EACA;CACD,MAAM,oBAAoD;EACzD,aAAa;EACb,oBAAoB;EACpB,0BAA0B;EAC1B,gBAAgB;EAChB;CACD,MAAM,gBAAsC,CAC3C;EACC,QAAQ;EACR,QAAQ,MAAM;AAYb,UAVC,SAAS,eACT,SAAS,kBACT,SAAS,oBACT,SAAS,oBACT,SAAS,kBACT,SAAS,mBACT,SAAS,sBACT,SAAS,qBACT,SAAS;;EAIX,CACD;AAED,MAAK,MAAM,UAAU,SAAS;AAC7B,MAAI,OAAO,SACV,QAAO,OAAO,cAAc,OAAO,WAAW,OAAO,CAAC;AAEvD,MAAI,OAAO,YACV,QAAO,OAAO,mBAAmB,OAAO,YAAY;AAErD,MAAI,OAAO,cACV,eAAc,KAAK,GAAG,OAAO,cAAc;;CAI7C,MAAM,SAAS;EACd,SACC,WACI;AACJ,gBAAa,QAAsC,IAClD,CAAC,aAAa,QAAsC,KAAK,CACzD;;EAEF,SACC,QACA,aACI;AACJ,gBAAa,QAAsC,UAAU,SAAS;;EAEvE,OAAO;EACP;AAED,MAAK,MAAM,UAAU,QACpB,KAAI,OAAO,WACV,kBAAiBA,OAChB,OAAO,aAAa,QAAQ,QAAQ,QAAQ,IAAI,EAAE,EAClD,eACA;AAGH,QAAO;EACN,IAAI,UAAU;AACb,UAAO;;EAER;EACA;EACA;EACA;EACA;EACA;EACA"}

package/dist/client/fetch-plugins.mjs

@@ -0,0 +1,18 @@
+//#region src/client/fetch-plugins.ts
+const redirectPlugin = {
+	id: "redirect",
+	name: "Redirect",
+	hooks: { onSuccess(context) {
+		if (context.data?.url && context.data?.redirect) {
+			if (typeof window !== "undefined" && window.location) {
+				if (window.location) try {
+					window.location.href = context.data.url;
+				} catch {}
+			}
+		}
+	} }
+};
+
+//#endregion
+export { redirectPlugin };
+//# sourceMappingURL=fetch-plugins.mjs.map

package/dist/client/fetch-plugins.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-plugins.mjs","names":[],"sources":["../../src/client/fetch-plugins.ts"],"sourcesContent":["import type { BetterFetchPlugin } from \"@better-fetch/fetch\";\n\nexport const redirectPlugin = {\n\tid: \"redirect\",\n\tname: \"Redirect\",\n\thooks: {\n\t\tonSuccess(context) {\n\t\t\tif (context.data?.url && context.data?.redirect) {\n\t\t\t\tif (typeof window !== \"undefined\" && window.location) {\n\t\t\t\t\tif (window.location) {\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\twindow.location.href = context.data.url;\n\t\t\t\t\t\t} catch {}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t},\n} satisfies BetterFetchPlugin;\n"],"mappings":";AAEA,MAAa,iBAAiB;CAC7B,IAAI;CACJ,MAAM;CACN,OAAO,EACN,UAAU,SAAS;AAClB,MAAI,QAAQ,MAAM,OAAO,QAAQ,MAAM,UACtC;OAAI,OAAO,WAAW,eAAe,OAAO,UAC3C;QAAI,OAAO,SACV,KAAI;AACH,YAAO,SAAS,OAAO,QAAQ,KAAK;YAC7B;;;IAKZ;CACD"}

package/dist/client/focus-manager.d.mts

@@ -0,0 +1,11 @@
+//#region src/client/focus-manager.d.ts
+type FocusListener = (focused: boolean) => void;
+declare const kFocusManager: unique symbol;
+interface FocusManager {
+  setFocused(focused: boolean): void;
+  subscribe(listener: FocusListener): () => void;
+  setup(): () => void;
+}
+//#endregion
+export { FocusListener, FocusManager, kFocusManager };
+//# sourceMappingURL=focus-manager.d.mts.map