@keystrokehq/platform 0.0.171 → 0.0.172

package/dist/run.cjs

@@ -1,5 +1,5 @@
 const require_config = require("./config.cjs");
-const require_start = require("./start-uYyPk7oF.cjs");
+const require_start = require("./start-CfZfvlbY.cjs");
 //#region src/run.ts
 async function main() {
 	await require_start.startPlatformServer(require_config.definePlatformConfig());

package/dist/run.mjs

@@ -1,5 +1,5 @@
 import { definePlatformConfig } from "./config.mjs";
-import { t as startPlatformServer } from "./start-avYKDymy.mjs";
+import { t as startPlatformServer } from "./start-CCSEG2WQ.mjs";
 //#region src/run.ts
 async function main() {
 	await startPlatformServer(definePlatformConfig());

package/dist/{start-avYKDymy.mjs → start-CCSEG2WQ.mjs}

@@ -1480,10 +1480,15 @@ const AUTH_API_PATH = "/api/auth/*";
 function createAuthInstance(options) {
 	const socialProviders = resolveSocialProviders();
 	const magicLinkPlugin = createMagicLinkPlugin();
+	const advanced = options.crossSubDomainCookieDomain ? { crossSubDomainCookies: {
+		enabled: true,
+		domain: options.crossSubDomainCookieDomain
+	} } : void 0;
 	return betterAuth({
 		secret: options.secret,
 		baseURL: options.baseURL,
 		trustedOrigins: options.trustedOrigins,
+		...advanced ? { advanced } : {},
 		account: { accountLinking: {
 			enabled: true,
 			trustedProviders: ["google", "github"],
@@ -1532,6 +1537,23 @@ function createAuth(options = {}) {
 function handleAuthRequest(auth, request) {
 	return auth.handler(request);
 }
+/** Shared parent domain for Better Auth cross-subdomain cookies (e.g. keystroke.ai). */
+function resolveCrossSubDomainCookieDomain(webUrl, platformUrl) {
+	try {
+		const webHost = new URL(webUrl).hostname;
+		const platformHost = new URL(platformUrl).hostname;
+		if (webHost === platformHost) return;
+		if (webHost === "localhost" || platformHost === "localhost" || webHost === "127.0.0.1" || platformHost === "127.0.0.1") return;
+		const webParts = webHost.split(".");
+		const platformParts = platformHost.split(".");
+		if (webParts.length < 2 || platformParts.length < 2) return;
+		const webParent = webParts.slice(1).join(".");
+		if (webParent !== platformParts.slice(1).join(".")) return;
+		return webParent;
+	} catch {
+		return;
+	}
+}
 function extractWebhookApiKeyFromRequest(request) {
 	const url = new URL(request.url);
 	const queryToken = url.searchParams.get("token") ?? url.searchParams.get("api_key");
@@ -5425,10 +5447,12 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 	if (!webUrl) throw new Error("PUBLIC_WEB_URL is required for the platform server");
 	const platformUrl = process.env.PUBLIC_PLATFORM_URL?.replace(/\/+$/, "");
 	if (!platformUrl) throw new Error("PUBLIC_PLATFORM_URL is required for the platform server");
+	const crossSubDomainCookieDomain = resolveCrossSubDomainCookieDomain(webUrl, platformUrl);
 	const auth = createAuth({
 		baseURL: platformUrl,
 		verificationUri: `${webUrl.replace(/\/+$/, "")}/device`,
-		trustedOrigins: [webUrl]
+		trustedOrigins: [webUrl],
+		crossSubDomainCookieDomain
 	});
 	if (!auth) throw new Error("BETTER_AUTH_SECRET is required for the platform server");
 	const app = await createApp(auth, {
@@ -5450,4 +5474,4 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 //#endregion
 export { startPlatformServer as t };
 
-//# sourceMappingURL=start-avYKDymy.mjs.map
+//# sourceMappingURL=start-CCSEG2WQ.mjs.map