@lunora/react-native 1.0.0-alpha.36 → 1.0.0-alpha.37

package/README.md

@@ -131,10 +131,24 @@ import { client } from "./lunora";
 function Root() {
     const { data: session } = authClient.useSession();
 
+    // `expoBearerToken` is async since better-auth 1.7.1, and an async function
+    // is not a valid effect cleanup return — so kick off a promise instead.
+    // `cancelled` is load-bearing: two session changes in quick succession leave
+    // two reads in flight, and without it the slower one reinstates the previous
+    // session's token.
     useEffect(() => {
-        const token = expoBearerToken(authClient);
-        client.setAuthToken(token); // HTTP `Authorization: Bearer …`
-        client.setWsToken(token ?? undefined); // WS `?token=…`
+        let cancelled = false;
+
+        void (async () => {
+            const token = await expoBearerToken(authClient);
+            if (cancelled) return;
+            client.setAuthToken(token); // HTTP `Authorization: Bearer …`
+            client.setWsToken(token ?? undefined); // WS `?token=…`
+        })();
+
+        return () => {
+            cancelled = true;
+        };
     }, [session]);
 
     // …render the app

package/dist/auth.d.mts

@@ -1,6 +1,20 @@
-import { expoClient as expoClient$1 } from '@better-auth/expo/client';
-export { setupExpoFocusManager, setupExpoOnlineManager } from '@better-auth/expo/client';
-import { BetterAuthClientPlugin } from 'better-auth/client';
+export {
+/**
+ * The slice of a key/value store the better-auth Expo plugin needs. Pass Expo
+ * `SecureStore` straight in.
+ *
+ * Re-exported from `@better-auth/expo/client` rather than restated here. This
+ * used to be a hand-written `SecureStorageLike` mirroring what upstream needed
+ * — two synchronous methods — and better-auth 1.7 moved the Expo storage
+ * integration to asynchronous `SecureStore` methods, so the real shape is now
+ * `getItem` + `getItemAsync` + `setItem` + `setItemAsync`. A hand-written
+ * mirror does not fail when upstream widens like that; it just silently
+ * describes a store the plugin will not accept. Re-exporting makes the
+ * compiler track it, which is the same lesson the `getCookie` shim taught in
+ * this file's history.
+ * @experimental
+ */
+type ExpoClientStorage, expoClient, setupExpoFocusManager, setupExpoOnlineManager } from '@better-auth/expo/client';
 /**
  * Read the current better-auth session token from an Expo auth client, for use
  * as a **bearer** credential on the Lunora client — `client.setAuthToken(token)`
@@ -11,68 +25,27 @@ import { BetterAuthClientPlugin } from 'better-auth/client';
  * better-auth's `bearer` plugin accepts that value verbatim in the
  * `Authorization` header — so the native client authenticates WITHOUT sending a
  * `Cookie`, which the runtime's CSRF guard rejects on an `Origin`-less native
- * request (React Native sends no `Origin`). Returns `null` when signed out.
+ * request (React Native sends no `Origin`). Resolves `null` when signed out.
+ *
+ * **Async since better-auth 1.7.1**, which changed `@better-auth/expo`'s
+ * `getCookie` from `() => string` to `() => Promise<string>` (it reads
+ * `SecureStore` asynchronously now). The awaited value is what gets matched:
+ * regexing the Promise itself would test `"[object Promise]"`, find no
+ * `session_token`, and return `null` on every call — a signed-in native app
+ * that silently behaves as anonymous, which is exactly the failure this
+ * signature change prevents by making callers await.
  *
  * Re-run it whenever the session changes and feed the result to the client (see
  * the package README):
  *
  * ```ts
- * const token = expoBearerToken(authClient);
+ * const token = await expoBearerToken(authClient);
  * client.setAuthToken(token);
  * client.setWsToken(token ?? undefined);
  * ```
  * @experimental
  */
 declare const expoBearerToken: (authClient: {
-  getCookie: () => string;
-}) => null | string;
-/**
- * The slice of a key/value store the better-auth Expo plugin needs — the shape
- * of `expo-secure-store` (a synchronous `getItem`, plus `setItem`). Pass Expo
- * `SecureStore` straight in.
- * @experimental
- */
-interface SecureStorageLike {
-  getItem: (key: string) => null | string;
-  setItem: (key: string, value: string) => unknown;
-}
-/** The actions `expoClient` contributes to the auth client. */
-interface ExpoClientActions {
-  /** The session cookie persisted in `SecureStore`, as a `name=value; …` string. */
-  getCookie: () => string;
-}
-/**
- * `expoClient`'s plugin type, restated so it satisfies `BetterAuthClientPlugin`.
- *
- * From better-auth 1.6.24 through 1.7.0-rc.2, `@better-auth/expo`'s own declaration
- * does not: its `getActions` types the `$fetch` parameter as a *different*
- * `BetterFetch` instantiation than the interface requires, and under
- * `strictFunctionTypes` parameter contravariance rejects the assignment — so
- * `createAuthClient({ plugins: [expoClient(…)] })` fails to typecheck with a TS2322
- * whose error text is several hundred characters of generic-inference expansion.
- * The knock-on is a TS2345 wherever the inferred `getCookie` action is then read.
- *
- * The base has to stay upstream's own return type, with only `getActions` replaced:
- * better-auth infers the whole client API (`signIn`, `signUp`, the session shape)
- * from the literal plugin members, so rebuilding the type on top of
- * `BetterAuthClientPlugin` instead — or merely intersecting with it — collapses that
- * inference to `never` and the errors reappear as "Property 'signIn' does not exist".
- * The replacement takes its parameters from better-auth's interface (making the
- * assignment trivially valid) and returns {@link ExpoClientActions}, which is what
- * keeps `authClient.getCookie()` typed for `expoBearerToken`. Runtime behaviour
- * is untouched — this is a declaration-level correction of an upstream bug.
- *
- * Delete this shim (and re-export `expoClient` directly) once upstream's
- * `getActions` signature matches the interface again.
- * @experimental
- */
-type ExpoClientPlugin = Omit<ReturnType<typeof expoClient$1>, "getActions"> & {
-  getActions: (...arguments_: Parameters<NonNullable<BetterAuthClientPlugin["getActions"]>>) => ExpoClientActions;
-};
-/**
- * The better-auth Expo client plugin — session persisted in `SecureStore`, OAuth via
- * the app scheme. Pass it to `createAuthClient({ plugins: [expoClient({ scheme, storage })] })`.
- * @experimental
- */
-declare const expoClient: (options: Parameters<typeof expoClient$1>[0]) => ExpoClientPlugin;
-export { ExpoClientActions, ExpoClientPlugin, SecureStorageLike, expoBearerToken, expoClient };
+  getCookie: () => Promise<string> | string;
+}) => Promise<null | string>;
+export { expoBearerToken };

package/dist/auth.d.ts

@@ -1,6 +1,20 @@
-import { expoClient as expoClient$1 } from '@better-auth/expo/client';
-export { setupExpoFocusManager, setupExpoOnlineManager } from '@better-auth/expo/client';
-import { BetterAuthClientPlugin } from 'better-auth/client';
+export {
+/**
+ * The slice of a key/value store the better-auth Expo plugin needs. Pass Expo
+ * `SecureStore` straight in.
+ *
+ * Re-exported from `@better-auth/expo/client` rather than restated here. This
+ * used to be a hand-written `SecureStorageLike` mirroring what upstream needed
+ * — two synchronous methods — and better-auth 1.7 moved the Expo storage
+ * integration to asynchronous `SecureStore` methods, so the real shape is now
+ * `getItem` + `getItemAsync` + `setItem` + `setItemAsync`. A hand-written
+ * mirror does not fail when upstream widens like that; it just silently
+ * describes a store the plugin will not accept. Re-exporting makes the
+ * compiler track it, which is the same lesson the `getCookie` shim taught in
+ * this file's history.
+ * @experimental
+ */
+type ExpoClientStorage, expoClient, setupExpoFocusManager, setupExpoOnlineManager } from '@better-auth/expo/client';
 /**
  * Read the current better-auth session token from an Expo auth client, for use
  * as a **bearer** credential on the Lunora client — `client.setAuthToken(token)`
@@ -11,68 +25,27 @@ import { BetterAuthClientPlugin } from 'better-auth/client';
  * better-auth's `bearer` plugin accepts that value verbatim in the
  * `Authorization` header — so the native client authenticates WITHOUT sending a
  * `Cookie`, which the runtime's CSRF guard rejects on an `Origin`-less native
- * request (React Native sends no `Origin`). Returns `null` when signed out.
+ * request (React Native sends no `Origin`). Resolves `null` when signed out.
+ *
+ * **Async since better-auth 1.7.1**, which changed `@better-auth/expo`'s
+ * `getCookie` from `() => string` to `() => Promise<string>` (it reads
+ * `SecureStore` asynchronously now). The awaited value is what gets matched:
+ * regexing the Promise itself would test `"[object Promise]"`, find no
+ * `session_token`, and return `null` on every call — a signed-in native app
+ * that silently behaves as anonymous, which is exactly the failure this
+ * signature change prevents by making callers await.
  *
  * Re-run it whenever the session changes and feed the result to the client (see
  * the package README):
  *
  * ```ts
- * const token = expoBearerToken(authClient);
+ * const token = await expoBearerToken(authClient);
  * client.setAuthToken(token);
  * client.setWsToken(token ?? undefined);
  * ```
  * @experimental
  */
 declare const expoBearerToken: (authClient: {
-  getCookie: () => string;
-}) => null | string;
-/**
- * The slice of a key/value store the better-auth Expo plugin needs — the shape
- * of `expo-secure-store` (a synchronous `getItem`, plus `setItem`). Pass Expo
- * `SecureStore` straight in.
- * @experimental
- */
-interface SecureStorageLike {
-  getItem: (key: string) => null | string;
-  setItem: (key: string, value: string) => unknown;
-}
-/** The actions `expoClient` contributes to the auth client. */
-interface ExpoClientActions {
-  /** The session cookie persisted in `SecureStore`, as a `name=value; …` string. */
-  getCookie: () => string;
-}
-/**
- * `expoClient`'s plugin type, restated so it satisfies `BetterAuthClientPlugin`.
- *
- * From better-auth 1.6.24 through 1.7.0-rc.2, `@better-auth/expo`'s own declaration
- * does not: its `getActions` types the `$fetch` parameter as a *different*
- * `BetterFetch` instantiation than the interface requires, and under
- * `strictFunctionTypes` parameter contravariance rejects the assignment — so
- * `createAuthClient({ plugins: [expoClient(…)] })` fails to typecheck with a TS2322
- * whose error text is several hundred characters of generic-inference expansion.
- * The knock-on is a TS2345 wherever the inferred `getCookie` action is then read.
- *
- * The base has to stay upstream's own return type, with only `getActions` replaced:
- * better-auth infers the whole client API (`signIn`, `signUp`, the session shape)
- * from the literal plugin members, so rebuilding the type on top of
- * `BetterAuthClientPlugin` instead — or merely intersecting with it — collapses that
- * inference to `never` and the errors reappear as "Property 'signIn' does not exist".
- * The replacement takes its parameters from better-auth's interface (making the
- * assignment trivially valid) and returns {@link ExpoClientActions}, which is what
- * keeps `authClient.getCookie()` typed for `expoBearerToken`. Runtime behaviour
- * is untouched — this is a declaration-level correction of an upstream bug.
- *
- * Delete this shim (and re-export `expoClient` directly) once upstream's
- * `getActions` signature matches the interface again.
- * @experimental
- */
-type ExpoClientPlugin = Omit<ReturnType<typeof expoClient$1>, "getActions"> & {
-  getActions: (...arguments_: Parameters<NonNullable<BetterAuthClientPlugin["getActions"]>>) => ExpoClientActions;
-};
-/**
- * The better-auth Expo client plugin — session persisted in `SecureStore`, OAuth via
- * the app scheme. Pass it to `createAuthClient({ plugins: [expoClient({ scheme, storage })] })`.
- * @experimental
- */
-declare const expoClient: (options: Parameters<typeof expoClient$1>[0]) => ExpoClientPlugin;
-export { ExpoClientActions, ExpoClientPlugin, SecureStorageLike, expoBearerToken, expoClient };
+  getCookie: () => Promise<string> | string;
+}) => Promise<null | string>;
+export { expoBearerToken };

package/dist/auth.mjs

@@ -1 +1 @@
-import{expoClient as e}from"@better-auth/expo/client";import{setupExpoFocusManager as n,setupExpoOnlineManager as x}from"@better-auth/expo/client";import{default as s}from"./packem_shared/expoBearerToken-D4y9YP0s.mjs";const p=e;export{s as expoBearerToken,p as expoClient,n as setupExpoFocusManager,x as setupExpoOnlineManager};
+import{default as p}from"./packem_shared/expoBearerToken-CA88JtQp.mjs";import{expoClient as a,setupExpoFocusManager as n,setupExpoOnlineManager as t}from"@better-auth/expo/client";export{p as expoBearerToken,a as expoClient,n as setupExpoFocusManager,t as setupExpoOnlineManager};

package/dist/packem_shared/expoBearerToken-CA88JtQp.mjs

@@ -0,0 +1 @@
+const t=/(?:^|;)[^;=]*session_token=([^;]+)/,n=async e=>t.exec(await e.getCookie())?.[1]??null;export{n as default};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/react-native",
-  "version": "1.0.0-alpha.36",
+  "version": "1.0.0-alpha.37",
   "description": "React Native / Expo integration for Lunora: an AsyncStorage-backed client factory, the useQuery/useMutation/useSubscription hooks, and a one-call better-auth Expo client",
   "keywords": [
     "cloudflare",
@@ -54,9 +54,9 @@
     "@lunora/react": "1.0.0-alpha.61"
   },
   "peerDependencies": {
-    "@better-auth/expo": "^1.6.23",
+    "@better-auth/expo": "^1.7.1",
     "@tanstack/react-query": "^5.101.0",
-    "better-auth": "^1.6.23",
+    "better-auth": "^1.7.1",
     "react": "^19.2.7"
   },
   "peerDependenciesMeta": {

package/dist/packem_shared/expoBearerToken-D4y9YP0s.mjs

@@ -1 +0,0 @@
-const o=/(?:^|;)[^;=]*session_token=([^;]+)/,n=e=>o.exec(e.getCookie())?.[1]??null;export{n as default};