@momentumcms/auth 0.4.1 → 0.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@momentumcms/auth",
-  "version": "0.4.1",
+  "version": "0.5.1",
   "description": "Better Auth integration for Momentum CMS",
   "license": "MIT",
   "author": "Momentum CMS Contributors",
@@ -26,12 +26,20 @@
   "main": "./index.cjs",
   "types": "./src/index.d.ts",
   "peerDependencies": {
+    "@angular/core": ">=19.0.0",
     "@momentumcms/core": ">=0.0.1",
+    "@momentumcms/email": ">=0.5.1",
     "@momentumcms/logger": ">=0.0.1",
     "better-auth": "^1.4.0",
     "better-sqlite3": "^12.0.0",
     "nodemailer": "^8.0.0",
     "pg": "^8.0.0"
   },
+  "dependencies": {
+    "@angular/compiler": "~21.2.0",
+    "@angular/platform-browser": "~21.2.0",
+    "@angular/platform-server": "~21.2.0",
+    "juice": "^11.1.1"
+  },
   "module": "./index.js"
 }

package/src/lib/auth.d.ts

@@ -2,6 +2,7 @@ import { betterAuth } from 'better-auth';
 import type { Pool } from 'pg';
 import type { Database } from 'better-sqlite3';
 import { type EmailConfig } from './email';
+import { type FindEmailTemplateFn } from './email-templates';
 import type { Field } from '@momentumcms/core';
 import type { OAuthProvidersConfig } from './auth-core';
 export type { MomentumUser, MomentumSession, OAuthProviderConfig, OAuthProvidersConfig, } from './auth-core';
@@ -26,6 +27,12 @@ export interface MomentumEmailOptions extends EmailConfig {
     appName?: string;
     /** Require email verification on signup. Default: false */
     requireEmailVerification?: boolean;
+    /**
+     * Optional callback to look up email templates from the database.
+     * When provided, DB templates are used first; falls back to Angular SSR rendering.
+     * Typically wired from the email plugin's API.
+     */
+    findEmailTemplate?: FindEmailTemplateFn;
 }
 /**
  * Configuration options for Momentum Auth.
@@ -43,8 +50,6 @@ export interface MomentumAuthConfig {
     email?: MomentumEmailOptions;
     /** OAuth social login providers */
     socialProviders?: OAuthProvidersConfig;
-    /** Enable two-factor authentication (TOTP). Default: false */
-    twoFactorAuth?: boolean;
     /** Additional Better Auth plugins (from sub-plugins). */
     plugins?: unknown[];
     /** Extra user fields to register with Better Auth's user.additionalFields. */
@@ -66,8 +71,6 @@ export interface MomentumAuthConfigLegacy {
     email?: MomentumEmailOptions;
     /** OAuth social login providers */
     socialProviders?: OAuthProvidersConfig;
-    /** Enable two-factor authentication (TOTP). Default: false */
-    twoFactorAuth?: boolean;
 }
 /**
  * Get the list of enabled OAuth provider names from config/env vars.

package/src/lib/email-components/password-reset-email.component.d.ts

@@ -0,0 +1,11 @@
+export interface PasswordResetEmailData {
+    name?: string;
+    url: string;
+    appName: string;
+    expiresIn: string;
+}
+export declare class PasswordResetEmailComponent {
+    readonly data: PasswordResetEmailData;
+    readonly year: number;
+    get greeting(): string;
+}

package/src/lib/email-components/verification-email.component.d.ts

@@ -0,0 +1,11 @@
+export interface VerificationEmailData {
+    name?: string;
+    url: string;
+    appName: string;
+    expiresIn: string;
+}
+export declare class VerificationEmailComponent {
+    readonly data: VerificationEmailData;
+    readonly year: number;
+    get greeting(): string;
+}

package/src/lib/email-templates.d.ts

@@ -1,7 +1,20 @@
+/**
+ * Result of looking up an email template from the database.
+ * Returned by `findEmailTemplate` callbacks.
+ */
+export interface DbEmailTemplate {
+    subject?: string;
+    emailBlocks?: unknown[];
+}
+/**
+ * Callback type for looking up email templates from the database.
+ * Returns null if no template is found (falls back to Angular SSR rendering).
+ */
+export type FindEmailTemplateFn = (slug: string) => Promise<DbEmailTemplate | null>;
 /**
  * Email template options.
  */
-interface EmailTemplateOptions {
+export interface EmailTemplateOptions {
     /** Recipient's name */
     name?: string;
     /** Action URL (reset link, verification link, etc.) */
@@ -10,39 +23,46 @@ interface EmailTemplateOptions {
     appName?: string;
     /** Expiration time for the link (e.g., '1 hour') */
     expiresIn?: string;
+    /** Optional callback to look up templates from the database (DB-first). */
+    findEmailTemplate?: FindEmailTemplateFn;
 }
 /**
  * Generate password reset email content.
  *
+ * If `findEmailTemplate` is provided, queries the DB for a 'password-reset' template first.
+ * Falls back to Angular SSR rendering if no DB template is found.
+ *
  * @example
  * ```typescript
- * const { subject, text, html } = getPasswordResetEmail({
+ * const { subject, text, html } = await getPasswordResetEmail({
  *   name: 'John',
  *   url: 'https://example.com/admin/reset-password?token=abc123',
  *   expiresIn: '1 hour',
  * });
  * ```
  */
-export declare function getPasswordResetEmail(options: EmailTemplateOptions): {
+export declare function getPasswordResetEmail(options: EmailTemplateOptions): Promise<{
     subject: string;
     text: string;
     html: string;
-};
+}>;
 /**
  * Generate email verification email content.
  *
+ * If `findEmailTemplate` is provided, queries the DB for a 'verification' template first.
+ * Falls back to Angular SSR rendering if no DB template is found.
+ *
  * @example
  * ```typescript
- * const { subject, text, html } = getVerificationEmail({
+ * const { subject, text, html } = await getVerificationEmail({
  *   name: 'John',
  *   url: 'https://example.com/admin/verify-email?token=abc123',
  *   expiresIn: '24 hours',
  * });
  * ```
  */
-export declare function getVerificationEmail(options: EmailTemplateOptions): {
+export declare function getVerificationEmail(options: EmailTemplateOptions): Promise<{
     subject: string;
     text: string;
     html: string;
-};
-export {};
+}>;

package/src/lib/plugins/admin.d.ts

@@ -1,19 +1,16 @@
 /**
- * Admin Sub-Plugin (Stub)
+ * Admin Sub-Plugin
  *
  * Wraps Better Auth's admin plugin for user management capabilities:
  * - Ban/unban users
  * - Impersonate users
  * - Admin-level session fields
- *
- * This is a stub — the Better Auth admin plugin import will be added
- * when the full admin integration is implemented.
  */
 import type { MomentumAuthSubPlugin } from './sub-plugin.types';
 /**
  * Creates the admin sub-plugin.
  *
- * Adds ban/impersonation fields to the user and session collections.
- * The actual Better Auth admin plugin will be wired in a future iteration.
+ * Adds ban/impersonation fields to the user and session collections
+ * and registers the Better Auth admin plugin for ban/unban/impersonation endpoints.
  */
 export declare function authAdmin(): MomentumAuthSubPlugin;

package/src/lib/plugins/organization.d.ts

@@ -1,19 +1,16 @@
 /**
- * Organization Sub-Plugin (Stub)
+ * Organization Sub-Plugin
  *
  * Wraps Better Auth's organization plugin for multi-tenant capabilities:
  * - Organizations
  * - Members with roles
  * - Invitations
- *
- * This is a stub — the Better Auth organization plugin import will be added
- * when the full organization integration is implemented.
  */
 import type { MomentumAuthSubPlugin } from './sub-plugin.types';
 /**
  * Creates the organization sub-plugin.
  *
- * Adds organization, member, and invitation collections.
- * The actual Better Auth organization plugin will be wired in a future iteration.
+ * Adds organization, member, and invitation collections
+ * and registers the Better Auth organization plugin for multi-tenant endpoints.
  */
 export declare function authOrganization(): MomentumAuthSubPlugin;