@lunora/auth 1.0.0-alpha.23 → 1.0.0-alpha.230

package/dist/plugins-client.d.ts

@@ -1,2 +1,251 @@
+import { organizationClient } from 'better-auth/client/plugins';
+export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+export { apiKeyClient } from '@better-auth/api-key/client';
+export { oauthDeviceAuthorizationClient, oauthProviderClient } from '@better-auth/oauth-provider/client';
 export { passkeyClient } from '@better-auth/passkey/client';
-export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oidcClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+/**
+ * Which client plugins to include. Each defaults to `false`.
+ *
+ * These are the same names `@lunora/auth-ui` gates its cards on, so one object
+ * can drive both `createLunoraAuthClient` and `registerAuthClientPlugins` — a
+ * flow the UI can show but this cannot install would be a card that renders and
+ * then fails at call time.
+ *
+ * `oneTap` is absent on purpose: Google One Tap needs a client id, not a
+ * boolean, so it comes in through {@link CreateLunoraAuthClientOptions.oneTapClientId}.
+ */
+interface LunoraAuthPluginToggles {
+  admin?: boolean;
+  anonymous?: boolean;
+  deviceAuthorization?: boolean;
+  emailOtp?: boolean;
+  lastLoginMethod?: boolean;
+  magicLink?: boolean;
+  multiSession?: boolean;
+  oauthProvider?: boolean;
+  organization?: boolean;
+  passkey?: boolean;
+  phoneNumber?: boolean;
+  twoFactor?: boolean;
+  username?: boolean;
+}
+type LunoraAuthClientPlugin = ReturnType<typeof organizationClient>;
+declare const lunoraAuthPlugins: (toggles?: LunoraAuthPluginToggles) => LunoraAuthClientPlugin[];
+/** Options for {@link createLunoraAuthClient}; anything else is forwarded to `createAuthClient`. */
+interface CreateLunoraAuthClientOptions {
+  [option: string]: unknown;
+  /** Defaults to the current origin, which is right for a same-origin app. */
+  baseURL?: string;
+  /** Your own client plugins, appended after the standard set. */
+  extraPlugins?: LunoraAuthClientPlugin[];
+  /**
+   * Google OAuth client id. Setting it installs the One Tap client plugin —
+   * a boolean toggle can't, because the prompt is Google's and needs the id.
+   */
+  oneTapClientId?: string;
+  /** Which standard client plugins to include. */
+  plugins?: LunoraAuthPluginToggles;
+}
+/**
+ * What {@link lunoraSessionSync} returns: a better-auth client plugin, typed
+ * narrowly rather than as `BetterAuthClientPlugin` — widening a plugin to that
+ * type collapses better-auth's session inference on the client it joins.
+ */
+interface LunoraSessionSyncPlugin {
+  fetchPlugins: {
+    hooks: {
+      onSuccess: (context: {
+        request: {
+          method?: string;
+        };
+      }) => void;
+    };
+    id: string;
+    name: string;
+  }[];
+  id: "lunora-session-sync";
+}
+/**
+ * Tell every `LunoraClient` in the page, and in the browser's other tabs on the
+ * same origin, that the auth session may have changed, so each asks
+ * `/get-session` who is signed in now. A tab on another origin that shares the
+ * cookie is not reached: it switches on its next socket reconnect, and the
+ * worker's replay check keeps its writes safe meanwhile.
+ *
+ * Needed for a **cookie** session: a sign-in or sign-out sets or clears an
+ * `HttpOnly` cookie in a request the Lunora client never sees, and nothing it
+ * can observe changes. Until it re-resolves, its live queries keep showing the
+ * previous user's rows over a socket still authenticated as them.
+ * {@link lunoraSessionSync} (installed by {@link createLunoraAuthClient}) and
+ * `@lunora/auth-ui` call it for you; call it yourself after a session change
+ * made any other way.
+ *
+ * Resolves once every client in this tab has re-resolved (or failed to), so
+ * code that reads `client.currentIdentity()` next can `await` it; the other
+ * tabs re-resolve on their own. Never rejects.
+ */
+declare const notifyLunoraSessionChange: () => Promise<void>;
+/**
+ * A better-auth client plugin that, after every successful auth request that
+ * can change the session (anything but a `GET` — sign-in, sign-up, sign-out,
+ * 2FA, account switch, session revocation), calls
+ * {@link notifyLunoraSessionChange}.
+ *
+ * {@link createLunoraAuthClient} always installs it. Add it yourself when you
+ * call `createAuthClient` directly:
+ *
+ * ```ts
+ * export const authClient = createAuthClient({ plugins: [lunoraSessionSync()] });
+ * ```
+ */
+declare const lunoraSessionSync: () => LunoraSessionSyncPlugin;
+/**
+ * Build a better-auth client with Lunora's standard plugin set from toggles.
+ *
+ * You pass your framework's `createAuthClient` in — `better-auth/react`,
+ * `/vue`, `/svelte`, or `/solid` — because the variant has to match the UI
+ * framework, and a helper that picked for you would either guess wrong or drag
+ * every variant into your bundle.
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/react";
+ * import { createLunoraAuthClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createLunoraAuthClient(createAuthClient, {
+ *     plugins: { organization: true, passkey: true, twoFactor: true },
+ * });
+ * ```
+ *
+ * Reach for {@link lunoraAuthPlugins} instead when you want to own the
+ * `createAuthClient` call and only borrow the plugin array.
+ */
+declare const createLunoraAuthClient: <TClient>(createAuthClient: (options: Record<string, unknown>) => TClient, options?: CreateLunoraAuthClientOptions) => TClient;
+export {
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type CreateLunoraAuthClientOptions,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraAuthClientPlugin,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraAuthPluginToggles,
+/**
+ * Client-side counterparts to the server plugins re-exported from
+ * `@lunora/auth/plugins`, surfaced under `@lunora/auth/plugins/client`.
+ *
+ * better-auth plugins come in two halves: a **server** plugin you pass to
+ * `betterAuth()` (re-exported from `@lunora/auth/plugins`) and a **client**
+ * plugin you pass to `createAuthClient()`. Both halves must be registered for a
+ * plugin's endpoints, inferred types, and client actions (e.g.
+ * `authClient.twoFactor.*`, `authClient.organization.*`, the `twoFactorRedirect`
+ * sign-in flow) to exist. This module is the client half so consumers don't have
+ * to reach into better-auth's `better-auth/client/plugins` subpath directly.
+ *
+ * # Wiring
+ *
+ * ```ts
+ * import { createAuthClient } from "better-auth/client"; // or a framework adapter
+ * import { organizationClient, twoFactorClient } from "@lunora/auth/plugins/client";
+ *
+ * export const authClient = createAuthClient({
+ *     baseURL: import.meta.env.VITE_AUTH_URL,
+ *     plugins: [
+ *         organizationClient(),
+ *         twoFactorClient({ onTwoFactorRedirect: () => location.assign("/2fa") }),
+ *     ],
+ * });
+ * ```
+ *
+ * Keep the client plugin list in parity with the server `plugins` array passed
+ * to `createAuth`: a server plugin without its client counterpart leaves
+ * those actions untyped/unavailable, and vice-versa.
+ */
+type LunoraSessionSyncPlugin, createLunoraAuthClient, lunoraAuthPlugins, lunoraSessionSync, notifyLunoraSessionChange };

package/dist/plugins-client.mjs

@@ -1,2 +1 @@
-export { passkeyClient } from '@better-auth/passkey/client';
-export { adminClient, anonymousClient, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oidcClient, oneTimeTokenClient, organizationClient, phoneNumberClient, siweClient, twoFactorClient, usernameClient } from 'better-auth/client/plugins';
+import{createLunoraAuthClient as n,lunoraAuthPlugins as t,lunoraSessionSync as o,notifyLunoraSessionChange as l}from"./packem_shared/createLunoraAuthClient-DRcFNwp9.mjs";import{apiKeyClient as a}from"@better-auth/api-key/client";import{oauthDeviceAuthorizationClient as s,oauthProviderClient as u}from"@better-auth/oauth-provider/client";import{passkeyClient as d}from"@better-auth/passkey/client";import{adminClient as p,anonymousClient as f,customSessionClient as c,deviceAuthorizationClient as g,emailOTPClient as A,inferAdditionalFields as x,inferOrgAdditionalFields as y,jwtClient as S,lastLoginMethodClient as L,magicLinkClient as T,multiSessionClient as k,oneTapClient as v,oneTimeTokenClient as w,organizationClient as z,phoneNumberClient as F,siweClient as P,twoFactorClient as O,usernameClient as b}from"better-auth/client/plugins";export{p as adminClient,f as anonymousClient,a as apiKeyClient,n as createLunoraAuthClient,c as customSessionClient,g as deviceAuthorizationClient,A as emailOTPClient,x as inferAdditionalFields,y as inferOrgAdditionalFields,S as jwtClient,L as lastLoginMethodClient,t as lunoraAuthPlugins,o as lunoraSessionSync,T as magicLinkClient,k as multiSessionClient,l as notifyLunoraSessionChange,s as oauthDeviceAuthorizationClient,u as oauthProviderClient,v as oneTapClient,w as oneTimeTokenClient,z as organizationClient,d as passkeyClient,F as phoneNumberClient,P as siweClient,O as twoFactorClient,b as usernameClient};

package/dist/plugins-enterprise-client.d.mts

@@ -0,0 +1,13 @@
+import { ssoClient } from '@better-auth/sso/client';
+export type {
+/**
+ * Adds `authClient.signIn.sso({ email | domain | providerId })`. Registering the
+ * server `sso` plugin without this leaves those actions unavailable and untyped.
+ */
+ssoClient } from '@better-auth/sso/client';
+/**
+ * The plugin instance `ssoClient()` returns. Exported so an app can type the array it
+ * passes to `createAuthClient` when it assembles plugins conditionally.
+ */
+type SSOClientPlugin = ReturnType<typeof ssoClient>;
+export { SSOClientPlugin };

package/dist/plugins-enterprise-client.d.ts

@@ -0,0 +1,13 @@
+import { ssoClient } from '@better-auth/sso/client';
+export type {
+/**
+ * Adds `authClient.signIn.sso({ email | domain | providerId })`. Registering the
+ * server `sso` plugin without this leaves those actions unavailable and untyped.
+ */
+ssoClient } from '@better-auth/sso/client';
+/**
+ * The plugin instance `ssoClient()` returns. Exported so an app can type the array it
+ * passes to `createAuthClient` when it assembles plugins conditionally.
+ */
+type SSOClientPlugin = ReturnType<typeof ssoClient>;
+export { SSOClientPlugin };

package/dist/plugins-enterprise-client.mjs

@@ -0,0 +1 @@
+import{ssoClient as r}from"@better-auth/sso/client";export{r as ssoClient};