@lunora/auth 1.0.0-alpha.163 → 1.0.0-alpha.165

package/dist/packem_shared/createLunoraAuthClient-DZwrWj-w.mjs

@@ -0,0 +1 @@
+import{oauthProviderClient as m}from"@better-auth/oauth-provider/client";import{passkeyClient as h}from"@better-auth/passkey/client";import{oneTapClient as g,lastLoginMethodClient as d,deviceAuthorizationClient as p,anonymousClient as C,multiSessionClient as y,phoneNumberClient as f,usernameClient as S,adminClient as T,emailOTPClient as L,magicLinkClient as b,twoFactorClient as P,organizationClient as k}from"better-auth/client/plugins";const i=Symbol.for("lunora:session-change-listeners"),v=()=>{const n=globalThis;let o=n[i];return o===void 0&&(o=new Set,n[i]=o),o},r=async()=>{const n=[];for(const o of v())try{n.push(o())}catch{}await Promise.allSettled(n)},s={organization:k,twoFactor:P,passkey:h,magicLink:b,emailOtp:L,admin:T,username:S,phoneNumber:f,multiSession:y,anonymous:C,deviceAuthorization:p,lastLoginMethod:d,oauthProvider:m},A=(n={})=>{const o=[];for(const e of Object.keys(s))n[e]&&o.push(s[e]());return o},E=()=>globalThis.location?.origin,z=async()=>r(),I=()=>({fetchPlugins:[{hooks:{onSuccess:n=>{(n.request.method??"GET").toUpperCase()!=="GET"&&r().catch(()=>{})}},id:"lunora-session-sync",name:"lunora-session-sync"}],id:"lunora-session-sync"}),G=(n,o={})=>{const{baseURL:e,extraPlugins:a=[],oneTapClientId:t,plugins:l,...c}=o,u=t===void 0||t===""?[]:[g({clientId:t})];return n({...c,baseURL:e??E(),plugins:[I(),...A(l),...u,...a]})};export{G as createLunoraAuthClient,A as lunoraAuthPlugins,I as lunoraSessionSync,z as notifyLunoraSessionChange};

package/dist/plugins-client.d.mts

@@ -46,6 +46,55 @@ interface CreateLunoraAuthClientOptions {
   /** Which standard client plugins to include. */
   plugins?: LunoraAuthPluginToggles;
 }
+/**
+ * What {@link lunoraSessionSync} returns: a better-auth client plugin, typed
+ * narrowly rather than as `BetterAuthClientPlugin` — widening a plugin to that
+ * type collapses better-auth's session inference on the client it joins.
+ */
+interface LunoraSessionSyncPlugin {
+  fetchPlugins: {
+    hooks: {
+      onSuccess: (context: {
+        request: {
+          method?: string;
+        };
+      }) => void;
+    };
+    id: string;
+    name: string;
+  }[];
+  id: "lunora-session-sync";
+}
+/**
+ * Tell every `LunoraClient` in the page that the auth session may have changed,
+ * so each asks `/get-session` who is signed in now.
+ *
+ * Needed for a **cookie** session: a sign-in or sign-out sets or clears an
+ * `HttpOnly` cookie in a request the Lunora client never sees, and nothing it
+ * can observe changes. Until it re-resolves, its live queries keep showing the
+ * previous user's rows over a socket still authenticated as them.
+ * {@link lunoraSessionSync} (installed by {@link createLunoraAuthClient}) and
+ * `@lunora/auth-ui` call it for you; call it yourself after a session change
+ * made any other way.
+ *
+ * Resolves once every client has re-resolved (or failed to), so code that
+ * reads `client.currentIdentity()` next can `await` it. Never rejects.
+ */
+declare const notifyLunoraSessionChange: () => Promise<void>;
+/**
+ * A better-auth client plugin that, after every successful auth request that
+ * can change the session (anything but a `GET` — sign-in, sign-up, sign-out,
+ * 2FA, account switch, session revocation), calls
+ * {@link notifyLunoraSessionChange}.
+ *
+ * {@link createLunoraAuthClient} always installs it. Add it yourself when you
+ * call `createAuthClient` directly:
+ *
+ * ```ts
+ * export const authClient = createAuthClient({ plugins: [lunoraSessionSync()] });
+ * ```
+ */
+declare const lunoraSessionSync: () => LunoraSessionSyncPlugin;
 /**
  * Build a better-auth client with Lunora's standard plugin set from toggles.
  *
@@ -163,4 +212,36 @@ type LunoraAuthClientPlugin,
  * to `createAuth`: a server plugin without its client counterpart leaves
  * those actions untyped/unavailable, and vice-versa.
  */
-type LunoraAuthPluginToggles, createLunoraAuthClient, lunoraAuthPlugins };
+type LunoraAuthPluginToggles,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraSessionSyncPlugin, createLunoraAuthClient, lunoraAuthPlugins, lunoraSessionSync, notifyLunoraSessionChange };

package/dist/plugins-client.d.ts

@@ -46,6 +46,55 @@ interface CreateLunoraAuthClientOptions {
   /** Which standard client plugins to include. */
   plugins?: LunoraAuthPluginToggles;
 }
+/**
+ * What {@link lunoraSessionSync} returns: a better-auth client plugin, typed
+ * narrowly rather than as `BetterAuthClientPlugin` — widening a plugin to that
+ * type collapses better-auth's session inference on the client it joins.
+ */
+interface LunoraSessionSyncPlugin {
+  fetchPlugins: {
+    hooks: {
+      onSuccess: (context: {
+        request: {
+          method?: string;
+        };
+      }) => void;
+    };
+    id: string;
+    name: string;
+  }[];
+  id: "lunora-session-sync";
+}
+/**
+ * Tell every `LunoraClient` in the page that the auth session may have changed,
+ * so each asks `/get-session` who is signed in now.
+ *
+ * Needed for a **cookie** session: a sign-in or sign-out sets or clears an
+ * `HttpOnly` cookie in a request the Lunora client never sees, and nothing it
+ * can observe changes. Until it re-resolves, its live queries keep showing the
+ * previous user's rows over a socket still authenticated as them.
+ * {@link lunoraSessionSync} (installed by {@link createLunoraAuthClient}) and
+ * `@lunora/auth-ui` call it for you; call it yourself after a session change
+ * made any other way.
+ *
+ * Resolves once every client has re-resolved (or failed to), so code that
+ * reads `client.currentIdentity()` next can `await` it. Never rejects.
+ */
+declare const notifyLunoraSessionChange: () => Promise<void>;
+/**
+ * A better-auth client plugin that, after every successful auth request that
+ * can change the session (anything but a `GET` — sign-in, sign-up, sign-out,
+ * 2FA, account switch, session revocation), calls
+ * {@link notifyLunoraSessionChange}.
+ *
+ * {@link createLunoraAuthClient} always installs it. Add it yourself when you
+ * call `createAuthClient` directly:
+ *
+ * ```ts
+ * export const authClient = createAuthClient({ plugins: [lunoraSessionSync()] });
+ * ```
+ */
+declare const lunoraSessionSync: () => LunoraSessionSyncPlugin;
 /**
  * Build a better-auth client with Lunora's standard plugin set from toggles.
  *
@@ -163,4 +212,36 @@ type LunoraAuthClientPlugin,
  * to `createAuth`: a server plugin without its client counterpart leaves
  * those actions untyped/unavailable, and vice-versa.
  */
-type LunoraAuthPluginToggles, createLunoraAuthClient, lunoraAuthPlugins };
+type LunoraAuthPluginToggles,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraSessionSyncPlugin, createLunoraAuthClient, lunoraAuthPlugins, lunoraSessionSync, notifyLunoraSessionChange };

package/dist/plugins-client.mjs

@@ -1 +1 @@
-import{createLunoraAuthClient as t,lunoraAuthPlugins as n}from"./packem_shared/createLunoraAuthClient-DhjhCwmM.mjs";import{apiKeyClient as l}from"@better-auth/api-key/client";import{oauthDeviceAuthorizationClient as a,oauthProviderClient as C}from"@better-auth/oauth-provider/client";import{passkeyClient as s}from"@better-auth/passkey/client";import{adminClient as d,anonymousClient as p,customSessionClient as h,deviceAuthorizationClient as f,emailOTPClient as c,inferAdditionalFields as A,inferOrgAdditionalFields as g,jwtClient as x,lastLoginMethodClient as T,magicLinkClient as k,multiSessionClient as v,oneTapClient as w,oneTimeTokenClient as y,organizationClient as z,phoneNumberClient as F,siweClient as L,twoFactorClient as P,usernameClient as O}from"better-auth/client/plugins";export{d as adminClient,p as anonymousClient,l as apiKeyClient,t as createLunoraAuthClient,h as customSessionClient,f as deviceAuthorizationClient,c as emailOTPClient,A as inferAdditionalFields,g as inferOrgAdditionalFields,x as jwtClient,T as lastLoginMethodClient,n as lunoraAuthPlugins,k as magicLinkClient,v as multiSessionClient,a as oauthDeviceAuthorizationClient,C as oauthProviderClient,w as oneTapClient,y as oneTimeTokenClient,z as organizationClient,s as passkeyClient,F as phoneNumberClient,L as siweClient,P as twoFactorClient,O as usernameClient};
+import{createLunoraAuthClient as n,lunoraAuthPlugins as t,lunoraSessionSync as o,notifyLunoraSessionChange as l}from"./packem_shared/createLunoraAuthClient-DZwrWj-w.mjs";import{apiKeyClient as a}from"@better-auth/api-key/client";import{oauthDeviceAuthorizationClient as s,oauthProviderClient as u}from"@better-auth/oauth-provider/client";import{passkeyClient as d}from"@better-auth/passkey/client";import{adminClient as p,anonymousClient as f,customSessionClient as c,deviceAuthorizationClient as g,emailOTPClient as A,inferAdditionalFields as x,inferOrgAdditionalFields as y,jwtClient as S,lastLoginMethodClient as L,magicLinkClient as T,multiSessionClient as k,oneTapClient as v,oneTimeTokenClient as w,organizationClient as z,phoneNumberClient as F,siweClient as P,twoFactorClient as O,usernameClient as b}from"better-auth/client/plugins";export{p as adminClient,f as anonymousClient,a as apiKeyClient,n as createLunoraAuthClient,c as customSessionClient,g as deviceAuthorizationClient,A as emailOTPClient,x as inferAdditionalFields,y as inferOrgAdditionalFields,S as jwtClient,L as lastLoginMethodClient,t as lunoraAuthPlugins,o as lunoraSessionSync,T as magicLinkClient,k as multiSessionClient,l as notifyLunoraSessionChange,s as oauthDeviceAuthorizationClient,u as oauthProviderClient,v as oneTapClient,w as oneTimeTokenClient,z as organizationClient,d as passkeyClient,F as phoneNumberClient,P as siweClient,O as twoFactorClient,b as usernameClient};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/auth",
-  "version": "1.0.0-alpha.163",
+  "version": "1.0.0-alpha.165",
   "description": "Auth for Lunora — a thin better-auth wrapper: email/password, OAuth, plugins, D1-backed",
   "keywords": [
     "auth",
@@ -103,8 +103,8 @@
     "@better-auth/oauth-provider": "1.7.3",
     "@better-auth/passkey": "1.7.3",
     "@better-auth/scim": "1.7.3",
-    "@lunora/errors": "1.0.0-alpha.42",
-    "@lunora/values": "1.0.0-alpha.53",
+    "@lunora/errors": "1.0.0-alpha.43",
+    "@lunora/values": "1.0.0-alpha.54",
     "@visulima/disposable-email-domains": "1.1.1",
     "@visulima/email-verifier": "1.0.9",
     "@visulima/free-email-domains": "1.0.1",

package/dist/packem_shared/createLunoraAuthClient-DhjhCwmM.mjs

@@ -1 +0,0 @@
-import{oauthProviderClient as u}from"@better-auth/oauth-provider/client";import{passkeyClient as m}from"@better-auth/passkey/client";import{oneTapClient as c,lastLoginMethodClient as C,deviceAuthorizationClient as p,anonymousClient as g,multiSessionClient as h,phoneNumberClient as d,usernameClient as L,adminClient as b,emailOTPClient as f,magicLinkClient as k,twoFactorClient as y,organizationClient as P}from"better-auth/client/plugins";const o={organization:P,twoFactor:y,passkey:m,magicLink:k,emailOtp:f,admin:b,username:L,phoneNumber:d,multiSession:h,anonymous:g,deviceAuthorization:p,lastLoginMethod:C,oauthProvider:u},T=(t={})=>{const n=[];for(const i of Object.keys(o))t[i]&&n.push(o[i]());return n},v=()=>globalThis.location?.origin,I=(t,n={})=>{const{baseURL:i,extraPlugins:a=[],oneTapClientId:e,plugins:r,...s}=n,l=e===void 0||e===""?[]:[c({clientId:e})];return t({...s,baseURL:i??v(),plugins:[...T(r),...l,...a]})};export{I as createLunoraAuthClient,T as lunoraAuthPlugins};