@lunora/auth 1.0.0-alpha.12 → 1.0.0-alpha.120

package/dist/plugins-client.d.mts

@@ -1,2 +1,166 @@
+import { organizationClient } from 'better-auth/client/plugins';
+export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+export { apiKeyClient } from '@better-auth/api-key/client';
+export { oauthDeviceAuthorizationClient, oauthProviderClient } from '@better-auth/oauth-provider/client';
 export { passkeyClient } from '@better-auth/passkey/client';
-export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oidcClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+/**
+ * Which client plugins to include. Each defaults to `false`.
+ *
+ * These are the same names `@lunora/auth-ui` gates its cards on, so one object
+ * can drive both `createLunoraAuthClient` and `registerAuthClientPlugins` — a
+ * flow the UI can show but this cannot install would be a card that renders and
+ * then fails at call time.
+ *
+ * `oneTap` is absent on purpose: Google One Tap needs a client id, not a
+ * boolean, so it comes in through {@link CreateLunoraAuthClientOptions.oneTapClientId}.
+ */
+interface LunoraAuthPluginToggles {
+  admin?: boolean;
+  anonymous?: boolean;
+  deviceAuthorization?: boolean;
+  emailOtp?: boolean;
+  lastLoginMethod?: boolean;
+  magicLink?: boolean;
+  multiSession?: boolean;
+  oauthProvider?: boolean;
+  organization?: boolean;
+  passkey?: boolean;
+  phoneNumber?: boolean;
+  twoFactor?: boolean;
+  username?: boolean;
+}
+type LunoraAuthClientPlugin = ReturnType<typeof organizationClient>;
+declare const lunoraAuthPlugins: (toggles?: LunoraAuthPluginToggles) => LunoraAuthClientPlugin[];
+/** Options for {@link createLunoraAuthClient}; anything else is forwarded to `createAuthClient`. */
+interface CreateLunoraAuthClientOptions {
+  [option: string]: unknown;
+  /** Defaults to the current origin, which is right for a same-origin app. */
+  baseURL?: string;
+  /** Your own client plugins, appended after the standard set. */
+  extraPlugins?: LunoraAuthClientPlugin[];
+  /**
+   * Google OAuth client id. Setting it installs the One Tap client plugin —
+   * a boolean toggle can't, because the prompt is Google's and needs the id.
+   */
+  oneTapClientId?: string;
+  /** Which standard client plugins to include. */
+  plugins?: LunoraAuthPluginToggles;
+}
+/**
+ * Build a better-auth client with Lunora's standard plugin set from toggles.
+ *
+ * You pass your framework's `createAuthClient` in — `better-auth/react`,
+ * `/vue`, `/svelte`, or `/solid` — because the variant has to match the UI
+ * framework, and a helper that picked for you would either guess wrong or drag
+ * every variant into your bundle.
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/react";
+ * import { createLunoraAuthClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createLunoraAuthClient(createAuthClient, {
+ *     plugins: { organization: true, passkey: true, twoFactor: true },
+ * });
+ * ```
+ *
+ * Reach for {@link lunoraAuthPlugins} instead when you want to own the
+ * `createAuthClient` call and only borrow the plugin array.
+ */
+declare const createLunoraAuthClient: <TClient>(createAuthClient: (options: Record<string, unknown>) => TClient, options?: CreateLunoraAuthClientOptions) => TClient;
+export {
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type CreateLunoraAuthClientOptions,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraAuthClientPlugin,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraAuthPluginToggles, createLunoraAuthClient, lunoraAuthPlugins };

package/dist/plugins-client.d.ts

@@ -1,2 +1,166 @@
+import { organizationClient } from 'better-auth/client/plugins';
+export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+export { apiKeyClient } from '@better-auth/api-key/client';
+export { oauthDeviceAuthorizationClient, oauthProviderClient } from '@better-auth/oauth-provider/client';
 export { passkeyClient } from '@better-auth/passkey/client';
-export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oidcClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+/**
+ * Which client plugins to include. Each defaults to `false`.
+ *
+ * These are the same names `@lunora/auth-ui` gates its cards on, so one object
+ * can drive both `createLunoraAuthClient` and `registerAuthClientPlugins` — a
+ * flow the UI can show but this cannot install would be a card that renders and
+ * then fails at call time.
+ *
+ * `oneTap` is absent on purpose: Google One Tap needs a client id, not a
+ * boolean, so it comes in through {@link CreateLunoraAuthClientOptions.oneTapClientId}.
+ */
+interface LunoraAuthPluginToggles {
+  admin?: boolean;
+  anonymous?: boolean;
+  deviceAuthorization?: boolean;
+  emailOtp?: boolean;
+  lastLoginMethod?: boolean;
+  magicLink?: boolean;
+  multiSession?: boolean;
+  oauthProvider?: boolean;
+  organization?: boolean;
+  passkey?: boolean;
+  phoneNumber?: boolean;
+  twoFactor?: boolean;
+  username?: boolean;
+}
+type LunoraAuthClientPlugin = ReturnType<typeof organizationClient>;
+declare const lunoraAuthPlugins: (toggles?: LunoraAuthPluginToggles) => LunoraAuthClientPlugin[];
+/** Options for {@link createLunoraAuthClient}; anything else is forwarded to `createAuthClient`. */
+interface CreateLunoraAuthClientOptions {
+  [option: string]: unknown;
+  /** Defaults to the current origin, which is right for a same-origin app. */
+  baseURL?: string;
+  /** Your own client plugins, appended after the standard set. */
+  extraPlugins?: LunoraAuthClientPlugin[];
+  /**
+   * Google OAuth client id. Setting it installs the One Tap client plugin —
+   * a boolean toggle can't, because the prompt is Google's and needs the id.
+   */
+  oneTapClientId?: string;
+  /** Which standard client plugins to include. */
+  plugins?: LunoraAuthPluginToggles;
+}
+/**
+ * Build a better-auth client with Lunora's standard plugin set from toggles.
+ *
+ * You pass your framework's `createAuthClient` in — `better-auth/react`,
+ * `/vue`, `/svelte`, or `/solid` — because the variant has to match the UI
+ * framework, and a helper that picked for you would either guess wrong or drag
+ * every variant into your bundle.
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/react";
+ * import { createLunoraAuthClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createLunoraAuthClient(createAuthClient, {
+ *     plugins: { organization: true, passkey: true, twoFactor: true },
+ * });
+ * ```
+ *
+ * Reach for {@link lunoraAuthPlugins} instead when you want to own the
+ * `createAuthClient` call and only borrow the plugin array.
+ */
+declare const createLunoraAuthClient: <TClient>(createAuthClient: (options: Record<string, unknown>) => TClient, options?: CreateLunoraAuthClientOptions) => TClient;
+export {
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type CreateLunoraAuthClientOptions,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraAuthClientPlugin,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraAuthPluginToggles, createLunoraAuthClient, lunoraAuthPlugins };

package/dist/plugins-client.mjs

@@ -1,2 +1 @@
-export { passkeyClient } from '@better-auth/passkey/client';
-export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oidcClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+import{createLunoraAuthClient as t,lunoraAuthPlugins as n}from"./packem_shared/createLunoraAuthClient-DhjhCwmM.mjs";import{apiKeyClient as l}from"@better-auth/api-key/client";import{oauthDeviceAuthorizationClient as a,oauthProviderClient as C}from"@better-auth/oauth-provider/client";import{passkeyClient as s}from"@better-auth/passkey/client";import{adminClient as d,anonymousClient as p,customSessionClient as h,deviceAuthorizationClient as f,emailOTPClient as c,inferAdditionalFields as A,inferOrgAdditionalFields as g,jwtClient as x,lastLoginMethodClient as T,magicLinkClient as k,multiSessionClient as v,oneTapClient as w,oneTimeTokenClient as y,organizationClient as z,phoneNumberClient as F,siweClient as L,twoFactorClient as P,usernameClient as O}from"better-auth/client/plugins";export{d as adminClient,p as anonymousClient,l as apiKeyClient,t as createLunoraAuthClient,h as customSessionClient,f as deviceAuthorizationClient,c as emailOTPClient,A as inferAdditionalFields,g as inferOrgAdditionalFields,x as jwtClient,T as lastLoginMethodClient,n as lunoraAuthPlugins,k as magicLinkClient,v as multiSessionClient,a as oauthDeviceAuthorizationClient,C as oauthProviderClient,w as oneTapClient,y as oneTimeTokenClient,z as organizationClient,s as passkeyClient,F as phoneNumberClient,L as siweClient,P as twoFactorClient,O as usernameClient};

package/dist/plugins-enterprise-client.d.mts

@@ -0,0 +1,15 @@
+import { ssoClient } from '@better-auth/sso/client';
+export type {
+/**
+ * Adds `authClient.signIn.sso({ email | domain | providerId })`. Registering the
+ * server `sso` plugin without this leaves those actions unavailable and untyped.
+ * @experimental
+ */
+ssoClient } from '@better-auth/sso/client';
+/**
+ * The plugin instance `ssoClient()` returns. Exported so an app can type the array it
+ * passes to `createAuthClient` when it assembles plugins conditionally.
+ * @experimental
+ */
+type SSOClientPlugin = ReturnType<typeof ssoClient>;
+export { SSOClientPlugin };

package/dist/plugins-enterprise-client.d.ts

@@ -0,0 +1,15 @@
+import { ssoClient } from '@better-auth/sso/client';
+export type {
+/**
+ * Adds `authClient.signIn.sso({ email | domain | providerId })`. Registering the
+ * server `sso` plugin without this leaves those actions unavailable and untyped.
+ * @experimental
+ */
+ssoClient } from '@better-auth/sso/client';
+/**
+ * The plugin instance `ssoClient()` returns. Exported so an app can type the array it
+ * passes to `createAuthClient` when it assembles plugins conditionally.
+ * @experimental
+ */
+type SSOClientPlugin = ReturnType<typeof ssoClient>;
+export { SSOClientPlugin };

package/dist/plugins-enterprise-client.mjs

@@ -0,0 +1 @@
+import{ssoClient as r}from"@better-auth/sso/client";export{r as ssoClient};