@keystrokehq/platform 0.0.171 → 0.0.172

package/dist/{start-uYyPk7oF.cjs → start-CfZfvlbY.cjs}

@@ -1480,10 +1480,15 @@ const AUTH_API_PATH = "/api/auth/*";
 function createAuthInstance(options) {
 	const socialProviders = resolveSocialProviders();
 	const magicLinkPlugin = createMagicLinkPlugin();
+	const advanced = options.crossSubDomainCookieDomain ? { crossSubDomainCookies: {
+		enabled: true,
+		domain: options.crossSubDomainCookieDomain
+	} } : void 0;
 	return (0, better_auth.betterAuth)({
 		secret: options.secret,
 		baseURL: options.baseURL,
 		trustedOrigins: options.trustedOrigins,
+		...advanced ? { advanced } : {},
 		account: { accountLinking: {
 			enabled: true,
 			trustedProviders: ["google", "github"],
@@ -1532,6 +1537,23 @@ function createAuth(options = {}) {
 function handleAuthRequest(auth, request) {
 	return auth.handler(request);
 }
+/** Shared parent domain for Better Auth cross-subdomain cookies (e.g. keystroke.ai). */
+function resolveCrossSubDomainCookieDomain(webUrl, platformUrl) {
+	try {
+		const webHost = new URL(webUrl).hostname;
+		const platformHost = new URL(platformUrl).hostname;
+		if (webHost === platformHost) return;
+		if (webHost === "localhost" || platformHost === "localhost" || webHost === "127.0.0.1" || platformHost === "127.0.0.1") return;
+		const webParts = webHost.split(".");
+		const platformParts = platformHost.split(".");
+		if (webParts.length < 2 || platformParts.length < 2) return;
+		const webParent = webParts.slice(1).join(".");
+		if (webParent !== platformParts.slice(1).join(".")) return;
+		return webParent;
+	} catch {
+		return;
+	}
+}
 function extractWebhookApiKeyFromRequest(request) {
 	const url = new URL(request.url);
 	const queryToken = url.searchParams.get("token") ?? url.searchParams.get("api_key");
@@ -5425,10 +5447,12 @@ async function startPlatformServer(platformConfig, hooks = {}) {
 	if (!webUrl) throw new Error("PUBLIC_WEB_URL is required for the platform server");
 	const platformUrl = process.env.PUBLIC_PLATFORM_URL?.replace(/\/+$/, "");
 	if (!platformUrl) throw new Error("PUBLIC_PLATFORM_URL is required for the platform server");
+	const crossSubDomainCookieDomain = resolveCrossSubDomainCookieDomain(webUrl, platformUrl);
 	const auth = createAuth({
 		baseURL: platformUrl,
 		verificationUri: `${webUrl.replace(/\/+$/, "")}/device`,
-		trustedOrigins: [webUrl]
+		trustedOrigins: [webUrl],
+		crossSubDomainCookieDomain
 	});
 	if (!auth) throw new Error("BETTER_AUTH_SECRET is required for the platform server");
 	const app = await createApp(auth, {
@@ -5455,4 +5479,4 @@ Object.defineProperty(exports, "startPlatformServer", {
 	}
 });
 
-//# sourceMappingURL=start-uYyPk7oF.cjs.map
+//# sourceMappingURL=start-CfZfvlbY.cjs.map