@lenne.tech/nuxt-extensions 1.15.1 → 1.17.0

package/dist/runtime/lib/auth-client.d.ts

@@ -6,6 +6,34 @@
  *
  * SECURITY: Passwords are hashed with SHA256 client-side to prevent
  * plain text password transmission over the network.
+ *
+ * ---
+ *
+ * A HASHING WRAPPER REPLACES ONE FIELD — IT IS NEVER A WHITELIST.
+ *
+ * This is the invariant every wrapper below shares, and it has been broken twice, so it
+ * lives here rather than beside one method that a refactor could delete.
+ *
+ * Each wrapper exists to substitute ONE field with its SHA256 digest. It must forward
+ * everything else the caller passed, untouched:
+ *
+ *     { ...params, password: hashedPassword }   // correct
+ *     { password: hashedPassword }              // WRONG — drops every other option
+ *     { password: hashedPassword, ...params }   // WRONG — puts the PLAINTEXT back
+ *
+ * The first mistake is silent data loss: `changePassword` dropped `revokeOtherSessions`,
+ * so callers who set it after a suspected compromise got a successful password change and
+ * every other session left open. `twoFactor.enable` dropped `method` and `issuer`, so
+ * `method: 'otp'` quietly enabled TOTP instead.
+ *
+ * The second is worse and looks almost identical: `params` still carries the raw value, so
+ * a trailing spread overwrites the digest and the plaintext password goes on the wire.
+ * Trailing-spread is the more common JS idiom, which is exactly why this warning is here.
+ *
+ * Both are pinned by tests: `test/auth-client-hashing.test.ts` asserts the real request
+ * payload (it catches both mistakes), `test/auth-client-param-forwarding.test.ts` keeps the
+ * source-level half so a whitelist rebuild is visible in review. If you add a wrapper that
+ * hashes something, add it to both.
  */
 import type { LtAuthClientConfig } from '../types/index.js';
 /**
@@ -185,6 +213,26 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         }>;
     };
     passkey: any;
+    /**
+     * Better-Auth admin plugin, passed through UNWRAPPED — and therefore UNHASHED.
+     *
+     * `admin.createUser` (`password`) and `admin.setUserPassword` (`newPassword`) carry
+     * credentials that every other method in this file hashes. These two do not.
+     *
+     * Why that is deliberate rather than an oversight: `@lenne.tech/nest-server` does not
+     * register better-auth's `admin()` plugin and offers no option to — the two routes do
+     * not exist server-side, so a call 404s today. Hashing here would build a client
+     * expectation the server does not answer, and if the plugin were later enabled without
+     * normalising those routes, this wrapper would CREATE the credential-store desync it
+     * was meant to prevent.
+     *
+     * What that costs, stated plainly: `auth.enableAdmin` defaults to `true`, so the admin
+     * CLIENT plugin is registered in every consuming project. The trap is armed and waiting
+     * for a server that answers. Enabling `admin()` server-side is therefore a LOCKSTEP
+     * change — the routes join nest-server's password-normalisation table and these two
+     * methods get `ltSha256` wrappers here, in one release. Half of it produces accounts
+     * whose password nobody can log in with, and nothing warns.
+     */
     admin: any;
     $Infer: {
         Session: {
@@ -281,6 +329,99 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
         atoms: Record<string, import("better-auth/client").WritableAtom<any>>;
     };
+    /**
+     * Read the current session (`GET /get-session`).
+     *
+     * Carries no credential, so it is a bare passthrough.
+     */
+    getSession: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        disableCookieCache?: unknown;
+        disableRefresh?: unknown;
+    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: {
+            disableCookieCache?: unknown;
+            disableRefresh?: unknown;
+        } | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
+        user: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        }>;
+        session: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+        }>;
+    } | null, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+    /**
+     * Send (or re-send) an email-verification mail (`POST /send-verification-email`).
+     *
+     * A BARE passthrough, and it must stay one. `callbackURL` is the value Better Auth
+     * puts into the mail, and it MUST reach the server exactly as the caller wrote it:
+     * Better Auth resolves a relative value against the API origin, so `/auth/verify-email`
+     * lands on `api.<host>/auth/verify-email`, where the route does not exist. The mail
+     * still goes out, and the user follows a link to a 404 — the same silent failure
+     * `redirectTo` produces on the reset path.
+     *
+     * So do not normalise it here, do not supply a default, and do not resolve it against
+     * the client's `baseURL`. A library that quietly repairs the value hides the mistake
+     * until the next caller makes it somewhere we cannot see. Fixing it belongs to the
+     * caller (the lt starters use `appUrl()`, which throws rather than return something
+     * relative).
+     */
+    sendVerificationEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        email: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
+        email: string;
+        callbackURL?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+    /**
+     * Verify an email address from a token (`POST /verify-email`).
+     *
+     * Carries no credential, so it is a bare passthrough. Note what the endpoint does with
+     * the query, because it decides the shape of the answer: WITH a `callbackURL` it
+     * answers `302` to that URL (carrying neither token nor status), WITHOUT one it answers
+     * `{ status: true }` as JSON. Callers that want the result rather than a redirect must
+     * therefore omit `callbackURL` here — which is not the same parameter as the one
+     * `sendVerificationEmail` puts into the mail, and confusing the two is easy.
+     */
+    verifyEmail: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        token: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
+        query: {
+            token: string;
+            callbackURL?: string | undefined;
+        };
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<NonNullable<void | {
+        status: boolean;
+    }>, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
     requestPasswordReset: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
         email: string;
         redirectTo?: string | undefined;
@@ -297,12 +438,15 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         message?: string | undefined;
     }, FetchOptions["throw"] extends true ? true : false>>;
     /**
-     * Change password for an authenticated user (both passwords are hashed)
+     * Change password for an authenticated user (both passwords are hashed).
+     *
+     * `revokeOtherSessions` is the option that made the whitelist bug matter — see the
+     * file header.
      */
-    changePassword: (params: {
+    changePassword: <T extends {
         currentPassword: string;
         newPassword: string;
-    }, options?: any) => Promise<(Omit<{
+    }>(params: T, options?: any) => Promise<(Omit<{
         token: string | null;
         user: {
             id: string;
@@ -373,12 +517,15 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         };
     }>;
     /**
-     * Reset password with token (new password is hashed before sending)
+     * Reset password with token (new password is hashed before sending).
+     *
+     * Spread first, then overwrite the one field this wrapper exists for — see the file
+     * header for why the order is not a style question.
      */
-    resetPassword: (params: {
+    resetPassword: <T extends {
         newPassword: string;
         token: string;
-    }, options?: any) => Promise<{
+    }>(params: T, options?: any) => Promise<{
         status: boolean;
     } | {
         data: {
@@ -398,11 +545,11 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         /**
          * Sign in with email and password (password is hashed before sending)
          */
-        email: (params: {
+        email: <T extends {
             email: string;
             password: string;
             rememberMe?: boolean;
-        }, options?: any) => Promise<(Omit<{
+        }>(params: T, options?: any) => Promise<(Omit<{
             redirect: boolean;
             token: string;
             url?: string | undefined;
@@ -573,11 +720,11 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         /**
          * Sign up with email and password (password is hashed before sending)
          */
-        email: (params: {
+        email: <T extends {
             email: string;
             name: string;
             password: string;
-        } & Record<string, unknown>, options?: any) => Promise<(Omit<{
+        }>(params: T, options?: any) => Promise<(Omit<{
             token: null;
             user: {
                 id: string;
@@ -675,569 +822,5 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         }>;
     };
     twoFactor: any;
-    verifyEmail: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        token: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        query: {
-            token: string;
-            callbackURL?: string | undefined;
-        };
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<NonNullable<void | {
-        status: boolean;
-    }>, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    sendVerificationEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        email: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        email: string;
-        callbackURL?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    changeEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        newEmail: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        newEmail: string;
-        callbackURL?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    updateSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}>> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<import("better-auth/client").InferSessionUpdateCtx<{
-        basePath: string;
-        baseURL: any;
-        fetchOptions: {
-            customFetchImpl: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-        };
-        plugins: any[];
-    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        session: {
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        };
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    updateUser: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}> & {
-        name?: string | undefined;
-        image?: string | undefined | null;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<import("better-auth/client").InferUserUpdateCtx<{
-        basePath: string;
-        baseURL: any;
-        fetchOptions: {
-            customFetchImpl: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-        };
-        plugins: any[];
-    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    deleteUser: (<FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        callbackURL?: string | undefined;
-        password?: string | undefined;
-        token?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        callbackURL?: string | undefined;
-        password?: string | undefined;
-        token?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        success: boolean;
-        message: string;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>) & {
-        callback: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-            token: string;
-            callbackURL?: string | undefined;
-        }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-            query: {
-                token: string;
-                callbackURL?: string | undefined;
-            };
-            fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-            success: boolean;
-            message: string;
-        }, {
-            code?: string | undefined;
-            message?: string | undefined;
-        }, FetchOptions["throw"] extends true ? true : false>>;
-    };
-    listSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<import("better-auth").Prettify<{
-        id: string;
-        createdAt: Date;
-        updatedAt: Date;
-        userId: string;
-        expiresAt: Date;
-        token: string;
-        ipAddress?: string | null | undefined | undefined;
-        userAgent?: string | null | undefined | undefined;
-    }>[], {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        token: string;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        token: string;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeOtherSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    linkSocial: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        provider: unknown;
-        callbackURL?: string | undefined;
-        idToken?: {
-            token: string;
-            nonce?: string | undefined;
-            accessToken?: string | undefined;
-            refreshToken?: string | undefined;
-        } | undefined;
-        requestSignUp?: boolean | undefined;
-        scopes?: string[] | undefined;
-        errorCallbackURL?: string | undefined;
-        disableRedirect?: boolean | undefined;
-        loginHint?: string | undefined;
-        additionalParams?: Record<string, string> | undefined;
-        additionalData?: Record<string, any> | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        provider: unknown;
-        callbackURL?: string | undefined;
-        idToken?: {
-            token: string;
-            nonce?: string | undefined;
-            accessToken?: string | undefined;
-            refreshToken?: string | undefined;
-        } | undefined;
-        requestSignUp?: boolean | undefined;
-        scopes?: string[] | undefined;
-        errorCallbackURL?: string | undefined;
-        disableRedirect?: boolean | undefined;
-        loginHint?: string | undefined;
-        additionalParams?: Record<string, string> | undefined;
-        additionalData?: Record<string, any> | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        url: string;
-        redirect: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    listAccounts: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        scopes: string[];
-        id: string;
-        createdAt: Date;
-        updatedAt: Date;
-        userId: string;
-        providerId: string;
-        issuer: string;
-        accountId: string;
-    }[], {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    unlinkAccount: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    refreshToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | import("better-auth").Prettify<{
-        useAccountCookie: true;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        accessToken: string | undefined;
-        refreshToken: string;
-        accessTokenExpiresAt: Date | undefined;
-        refreshTokenExpiresAt: Date | null | undefined;
-        scope: string | null | undefined;
-        idToken: string | null | undefined;
-        providerId: string;
-        accountId: string;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    getAccessToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | import("better-auth").Prettify<{
-        useAccountCookie: true;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        accessToken: string;
-        accessTokenExpiresAt: Date | undefined;
-        scopes: string[];
-        idToken: string | undefined;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    accountInfo: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        query: {
-            accountId: string;
-            userId?: string | undefined;
-        } | {
-            useAccountCookie: true;
-            userId?: string | undefined;
-        };
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        account: {
-            id: string;
-            providerId: string;
-            issuer: string;
-            accountId: string;
-        };
-        user: import("better-auth").OAuth2UserInfo;
-        data: object;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    getSession: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        disableCookieCache?: unknown;
-        disableRefresh?: unknown;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: {
-            disableCookieCache?: unknown;
-            disableRefresh?: unknown;
-        } | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        user: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-        }>;
-        session: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        }>;
-    } | null, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    hydrateSession: (session: {
-        user: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-        }>;
-        session: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        }>;
-    } | null) => void;
-    $ERROR_CODES: {
-        USER_NOT_FOUND: {
-            readonly code: "USER_NOT_FOUND";
-            message: string;
-        };
-        FAILED_TO_CREATE_USER: {
-            readonly code: "FAILED_TO_CREATE_USER";
-            message: string;
-        };
-        FAILED_TO_CREATE_SESSION: {
-            readonly code: "FAILED_TO_CREATE_SESSION";
-            message: string;
-        };
-        FAILED_TO_UPDATE_USER: {
-            readonly code: "FAILED_TO_UPDATE_USER";
-            message: string;
-        };
-        FAILED_TO_GET_SESSION: {
-            readonly code: "FAILED_TO_GET_SESSION";
-            message: string;
-        };
-        INVALID_PASSWORD: {
-            readonly code: "INVALID_PASSWORD";
-            message: string;
-        };
-        INVALID_EMAIL: {
-            readonly code: "INVALID_EMAIL";
-            message: string;
-        };
-        INVALID_EMAIL_OR_PASSWORD: {
-            readonly code: "INVALID_EMAIL_OR_PASSWORD";
-            message: string;
-        };
-        INVALID_USER: {
-            readonly code: "INVALID_USER";
-            message: string;
-        };
-        SOCIAL_ACCOUNT_ALREADY_LINKED: {
-            readonly code: "SOCIAL_ACCOUNT_ALREADY_LINKED";
-            message: string;
-        };
-        PROVIDER_NOT_FOUND: {
-            readonly code: "PROVIDER_NOT_FOUND";
-            message: string;
-        };
-        INVALID_TOKEN: {
-            readonly code: "INVALID_TOKEN";
-            message: string;
-        };
-        TOKEN_EXPIRED: {
-            readonly code: "TOKEN_EXPIRED";
-            message: string;
-        };
-        ID_TOKEN_NOT_SUPPORTED: {
-            readonly code: "ID_TOKEN_NOT_SUPPORTED";
-            message: string;
-        };
-        FAILED_TO_GET_USER_INFO: {
-            readonly code: "FAILED_TO_GET_USER_INFO";
-            message: string;
-        };
-        USER_EMAIL_NOT_FOUND: {
-            readonly code: "USER_EMAIL_NOT_FOUND";
-            message: string;
-        };
-        EMAIL_NOT_VERIFIED: {
-            readonly code: "EMAIL_NOT_VERIFIED";
-            message: string;
-        };
-        PASSWORD_TOO_SHORT: {
-            readonly code: "PASSWORD_TOO_SHORT";
-            message: string;
-        };
-        PASSWORD_TOO_LONG: {
-            readonly code: "PASSWORD_TOO_LONG";
-            message: string;
-        };
-        USER_ALREADY_EXISTS: {
-            readonly code: "USER_ALREADY_EXISTS";
-            message: string;
-        };
-        USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL: {
-            readonly code: "USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL";
-            message: string;
-        };
-        EMAIL_CAN_NOT_BE_UPDATED: {
-            readonly code: "EMAIL_CAN_NOT_BE_UPDATED";
-            message: string;
-        };
-        CHANGE_EMAIL_DISABLED: {
-            readonly code: "CHANGE_EMAIL_DISABLED";
-            message: string;
-        };
-        CREDENTIAL_ACCOUNT_NOT_FOUND: {
-            readonly code: "CREDENTIAL_ACCOUNT_NOT_FOUND";
-            message: string;
-        };
-        ACCOUNT_NOT_FOUND: {
-            readonly code: "ACCOUNT_NOT_FOUND";
-            message: string;
-        };
-        SESSION_EXPIRED: {
-            readonly code: "SESSION_EXPIRED";
-            message: string;
-        };
-        FAILED_TO_UNLINK_LAST_ACCOUNT: {
-            readonly code: "FAILED_TO_UNLINK_LAST_ACCOUNT";
-            message: string;
-        };
-        USER_ALREADY_HAS_PASSWORD: {
-            readonly code: "USER_ALREADY_HAS_PASSWORD";
-            message: string;
-        };
-        CROSS_SITE_NAVIGATION_LOGIN_BLOCKED: {
-            readonly code: "CROSS_SITE_NAVIGATION_LOGIN_BLOCKED";
-            message: string;
-        };
-        VERIFICATION_EMAIL_NOT_ENABLED: {
-            readonly code: "VERIFICATION_EMAIL_NOT_ENABLED";
-            message: string;
-        };
-        EMAIL_ALREADY_VERIFIED: {
-            readonly code: "EMAIL_ALREADY_VERIFIED";
-            message: string;
-        };
-        EMAIL_MISMATCH: {
-            readonly code: "EMAIL_MISMATCH";
-            message: string;
-        };
-        SESSION_NOT_FRESH: {
-            readonly code: "SESSION_NOT_FRESH";
-            message: string;
-        };
-        LINKED_ACCOUNT_ALREADY_EXISTS: {
-            readonly code: "LINKED_ACCOUNT_ALREADY_EXISTS";
-            message: string;
-        };
-        INVALID_ORIGIN: {
-            readonly code: "INVALID_ORIGIN";
-            message: string;
-        };
-        INVALID_CALLBACK_URL: {
-            readonly code: "INVALID_CALLBACK_URL";
-            message: string;
-        };
-        INVALID_REDIRECT_URL: {
-            readonly code: "INVALID_REDIRECT_URL";
-            message: string;
-        };
-        INVALID_ERROR_CALLBACK_URL: {
-            readonly code: "INVALID_ERROR_CALLBACK_URL";
-            message: string;
-        };
-        INVALID_NEW_USER_CALLBACK_URL: {
-            readonly code: "INVALID_NEW_USER_CALLBACK_URL";
-            message: string;
-        };
-        MISSING_OR_NULL_ORIGIN: {
-            readonly code: "MISSING_OR_NULL_ORIGIN";
-            message: string;
-        };
-        CALLBACK_URL_REQUIRED: {
-            readonly code: "CALLBACK_URL_REQUIRED";
-            message: string;
-        };
-        FAILED_TO_CREATE_VERIFICATION: {
-            readonly code: "FAILED_TO_CREATE_VERIFICATION";
-            message: string;
-        };
-        FIELD_NOT_ALLOWED: {
-            readonly code: "FIELD_NOT_ALLOWED";
-            message: string;
-        };
-        ASYNC_VALIDATION_NOT_SUPPORTED: {
-            readonly code: "ASYNC_VALIDATION_NOT_SUPPORTED";
-            message: string;
-        };
-        VALIDATION_ERROR: {
-            readonly code: "VALIDATION_ERROR";
-            message: string;
-        };
-        MISSING_FIELD: {
-            readonly code: "MISSING_FIELD";
-            message: string;
-        };
-        METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED: {
-            readonly code: "METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED";
-            message: string;
-        };
-        BODY_MUST_BE_AN_OBJECT: {
-            readonly code: "BODY_MUST_BE_AN_OBJECT";
-            message: string;
-        };
-        PASSWORD_ALREADY_SET: {
-            readonly code: "PASSWORD_ALREADY_SET";
-            message: string;
-        };
-    };
 };
 export type LtAuthClient = ReturnType<typeof createLtAuthClient>;