@nextsparkjs/core 0.1.0-beta.188 → 0.1.0-beta.189

package/dist/lib/api/entities.js

@@ -79,13 +79,13 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al cargar ${entityType}`;
+      let userMessage = `Failed to load ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para acceder a estos datos. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to access this data. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para realizar esta acci\xF3n.";
+        userMessage = "You do not have the necessary permissions to perform this action.";
       } else if (response.status === 404) {
-        userMessage = "Los datos solicitados no fueron encontrados.";
+        userMessage = "The requested data was not found.";
       } else if (response.status === 400 && errorData.code === "TEAM_CONTEXT_REQUIRED") {
         console.warn("[EntityApiClient] Team context not ready yet, returning empty list");
         return {
@@ -102,7 +102,7 @@ class EntityApiClient {
           }
         };
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -127,15 +127,15 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al cargar ${entityType}`;
+      let userMessage = `Failed to load ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para acceder a estos datos. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to access this data. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para realizar esta acci\xF3n.";
+        userMessage = "You do not have the necessary permissions to perform this action.";
       } else if (response.status === 404) {
-        userMessage = "El elemento solicitado no fue encontrado.";
+        userMessage = "The requested item was not found.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -158,15 +158,15 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al crear ${entityType}`;
+      let userMessage = `Failed to create ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para crear este elemento. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to create this item. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para crear este elemento.";
+        userMessage = "You do not have the necessary permissions to create this item.";
       } else if (response.status === 400) {
-        userMessage = "Los datos proporcionados no son v\xE1lidos. Por favor, revisa el formulario.";
+        userMessage = "The provided data is not valid. Please review the form.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -189,17 +189,17 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al actualizar ${entityType}`;
+      let userMessage = `Failed to update ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para actualizar este elemento. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to update this item. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para actualizar este elemento.";
+        userMessage = "You do not have the necessary permissions to update this item.";
       } else if (response.status === 404) {
-        userMessage = "El elemento que intentas actualizar no fue encontrado.";
+        userMessage = "The item you are trying to update was not found.";
       } else if (response.status === 400) {
-        userMessage = "Los datos proporcionados no son v\xE1lidos. Por favor, revisa el formulario.";
+        userMessage = "The provided data is not valid. Please review the form.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -221,15 +221,15 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      let userMessage = `Error al eliminar ${entityType}`;
+      let userMessage = `Failed to delete ${entityType}`;
       if (response.status === 401) {
-        userMessage = "No tienes permisos para eliminar este elemento. Por favor, inicia sesi\xF3n nuevamente.";
+        userMessage = "You do not have permission to delete this item. Please sign in again.";
       } else if (response.status === 403) {
-        userMessage = "No tienes los permisos necesarios para eliminar este elemento.";
+        userMessage = "You do not have the necessary permissions to delete this item.";
       } else if (response.status === 404) {
-        userMessage = "El elemento que intentas eliminar no fue encontrado.";
+        userMessage = "The item you are trying to delete was not found.";
       } else if (response.status >= 500) {
-        userMessage = "Error interno del servidor. Por favor, intenta m\xE1s tarde.";
+        userMessage = "Internal server error. Please try again later.";
       } else if (errorData.message && !errorData.message.includes("API key")) {
         userMessage = errorData.message;
       }
@@ -333,8 +333,8 @@ class EntityApiClient {
       if (entityConfig.features.canDelete) {
         operations.push({
           id: "bulk-delete",
-          name: "Eliminar Seleccionados",
-          description: "Eliminar m\xFAltiples elementos a la vez",
+          name: "Delete Selected",
+          description: "Delete multiple items at once",
           icon: "trash",
           requiresConfirmation: true
         });
@@ -342,15 +342,15 @@ class EntityApiClient {
       if (entityConfig.features.canEdit) {
         operations.push({
           id: "bulk-edit",
-          name: "Editar Seleccionados",
-          description: "Actualizar m\xFAltiples elementos a la vez",
+          name: "Edit Selected",
+          description: "Update multiple items at once",
           icon: "edit"
         });
       }
       operations.push({
         id: "bulk-export",
-        name: "Exportar",
-        description: "Exportar datos seleccionados",
+        name: "Export",
+        description: "Export selected data",
         icon: "download"
       });
       return operations;
@@ -376,7 +376,7 @@ class EntityApiClient {
     });
     if (!response.ok) {
       const errorData = await response.json().catch(() => ({}));
-      throw new Error(errorData.message || `Error ejecutando operaci\xF3n ${operationId}`);
+      throw new Error(errorData.message || `Error executing operation ${operationId}`);
     }
     const result = await response.json();
     return result.data;

package/dist/lib/api/keys.d.ts

@@ -39,24 +39,24 @@ export declare class ApiKeyManager {
  * Definición de scopes disponibles para API keys
  */
 export declare const API_SCOPES: {
-    readonly 'users:read': "Leer información de usuarios";
-    readonly 'users:write': "Crear y actualizar usuarios";
-    readonly 'users:delete': "Eliminar usuarios";
-    readonly 'tasks:read': "Leer tasks";
-    readonly 'tasks:write': "Crear y actualizar tasks";
-    readonly 'tasks:delete': "Eliminar tasks";
-    readonly 'media:read': "Leer información de archivos y media";
-    readonly 'media:write': "Subir y actualizar archivos";
-    readonly 'media:delete': "Eliminar archivos";
-    readonly 'teams:read': "Leer equipos, miembros e invitaciones";
-    readonly 'teams:write': "Crear y actualizar equipos, miembros e invitaciones";
-    readonly 'teams:delete': "Eliminar equipos";
-    readonly 'billing:read': "Leer suscripciones, facturas y uso";
-    readonly 'billing:write': "Gestionar suscripciones, checkout, cambios de plan y uso";
-    readonly 'admin:api-keys': "Gestionar API keys";
-    readonly 'admin:users': "Administración completa de usuarios";
-    readonly 'admin:devtools': "Acceso a las APIs de DevTools (registries, testing, scheduled actions)";
-    readonly '*': "Acceso completo (solo superadmin)";
+    readonly 'users:read': "Read user information";
+    readonly 'users:write': "Create and update users";
+    readonly 'users:delete': "Delete users";
+    readonly 'tasks:read': "Read tasks";
+    readonly 'tasks:write': "Create and update tasks";
+    readonly 'tasks:delete': "Delete tasks";
+    readonly 'media:read': "Read file and media information";
+    readonly 'media:write': "Upload and update files";
+    readonly 'media:delete': "Delete files";
+    readonly 'teams:read': "Read teams, members and invitations";
+    readonly 'teams:write': "Create and update teams, members and invitations";
+    readonly 'teams:delete': "Delete teams";
+    readonly 'billing:read': "Read subscriptions, invoices and usage";
+    readonly 'billing:write': "Manage subscriptions, checkout, plan changes and usage";
+    readonly 'admin:api-keys': "Manage API keys";
+    readonly 'admin:users': "Full user administration";
+    readonly 'admin:devtools': "Access to DevTools APIs (registries, testing, scheduled actions)";
+    readonly '*': "Full access (superadmin only)";
 };
 export type ApiScope = keyof typeof API_SCOPES;
 /**
@@ -79,33 +79,33 @@ export declare function getAppApiScopes(): Record<string, string>;
  */
 export declare const SCOPE_CATEGORIES: {
     readonly users: {
-        readonly name: "Usuarios";
-        readonly description: "Gestión de usuarios del sistema";
+        readonly name: "Users";
+        readonly description: "System user management";
         readonly scopes: ApiScope[];
     };
     readonly tasks: {
         readonly name: "Tasks";
-        readonly description: "Gestión de tareas y TODOs";
+        readonly description: "Task and TODO management";
         readonly scopes: ApiScope[];
     };
     readonly teams: {
         readonly name: "Teams";
-        readonly description: "Equipos, miembros e invitaciones";
+        readonly description: "Teams, members and invitations";
         readonly scopes: ApiScope[];
     };
     readonly billing: {
         readonly name: "Billing";
-        readonly description: "Suscripciones, facturas, uso y planes";
+        readonly description: "Subscriptions, invoices, usage and plans";
         readonly scopes: ApiScope[];
     };
     readonly admin: {
-        readonly name: "Administración";
-        readonly description: "Funciones administrativas";
+        readonly name: "Administration";
+        readonly description: "Administrative functions";
         readonly scopes: ApiScope[];
     };
     readonly system: {
-        readonly name: "Sistema";
-        readonly description: "Acceso completo al sistema";
+        readonly name: "System";
+        readonly description: "Full system access";
         readonly scopes: ApiScope[];
     };
 };

package/dist/lib/api/keys.js

@@ -70,30 +70,30 @@ class ApiKeyManager {
 }
 const API_SCOPES = {
   // Usuarios
-  "users:read": "Leer informaci\xF3n de usuarios",
-  "users:write": "Crear y actualizar usuarios",
-  "users:delete": "Eliminar usuarios",
+  "users:read": "Read user information",
+  "users:write": "Create and update users",
+  "users:delete": "Delete users",
   // Tasks
-  "tasks:read": "Leer tasks",
-  "tasks:write": "Crear y actualizar tasks",
-  "tasks:delete": "Eliminar tasks",
+  "tasks:read": "Read tasks",
+  "tasks:write": "Create and update tasks",
+  "tasks:delete": "Delete tasks",
   // Media (archivos, imágenes, videos)
-  "media:read": "Leer informaci\xF3n de archivos y media",
-  "media:write": "Subir y actualizar archivos",
-  "media:delete": "Eliminar archivos",
+  "media:read": "Read file and media information",
+  "media:write": "Upload and update files",
+  "media:delete": "Delete files",
   // Teams (equipos, miembros e invitaciones)
-  "teams:read": "Leer equipos, miembros e invitaciones",
-  "teams:write": "Crear y actualizar equipos, miembros e invitaciones",
-  "teams:delete": "Eliminar equipos",
+  "teams:read": "Read teams, members and invitations",
+  "teams:write": "Create and update teams, members and invitations",
+  "teams:delete": "Delete teams",
   // Billing (suscripciones, facturas, uso y planes)
-  "billing:read": "Leer suscripciones, facturas y uso",
-  "billing:write": "Gestionar suscripciones, checkout, cambios de plan y uso",
+  "billing:read": "Read subscriptions, invoices and usage",
+  "billing:write": "Manage subscriptions, checkout, plan changes and usage",
   // Administración
-  "admin:api-keys": "Gestionar API keys",
-  "admin:users": "Administraci\xF3n completa de usuarios",
-  "admin:devtools": "Acceso a las APIs de DevTools (registries, testing, scheduled actions)",
+  "admin:api-keys": "Manage API keys",
+  "admin:users": "Full user administration",
+  "admin:devtools": "Access to DevTools APIs (registries, testing, scheduled actions)",
   // Comodín (solo para superadmins)
-  "*": "Acceso completo (solo superadmin)"
+  "*": "Full access (superadmin only)"
 };
 function getApiScopes() {
   var _a;
@@ -108,33 +108,33 @@ function getAppApiScopes() {
 }
 const SCOPE_CATEGORIES = {
   users: {
-    name: "Usuarios",
-    description: "Gesti\xF3n de usuarios del sistema",
+    name: "Users",
+    description: "System user management",
     scopes: ["users:read", "users:write", "users:delete"]
   },
   tasks: {
     name: "Tasks",
-    description: "Gesti\xF3n de tareas y TODOs",
+    description: "Task and TODO management",
     scopes: ["tasks:read", "tasks:write", "tasks:delete"]
   },
   teams: {
     name: "Teams",
-    description: "Equipos, miembros e invitaciones",
+    description: "Teams, members and invitations",
     scopes: ["teams:read", "teams:write", "teams:delete"]
   },
   billing: {
     name: "Billing",
-    description: "Suscripciones, facturas, uso y planes",
+    description: "Subscriptions, invoices, usage and plans",
     scopes: ["billing:read", "billing:write"]
   },
   admin: {
-    name: "Administraci\xF3n",
-    description: "Funciones administrativas",
+    name: "Administration",
+    description: "Administrative functions",
     scopes: ["admin:api-keys", "admin:users", "admin:devtools"]
   },
   system: {
-    name: "Sistema",
-    description: "Acceso completo al sistema",
+    name: "System",
+    description: "Full system access",
     scopes: ["*"]
   }
 };

package/dist/lib/auth/callback-url.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Callback URL
+ *
+ * Where sign-in sends the user afterwards. `callbackUrl` arrives in the login
+ * URL, where anyone can write it, so only a path on this app counts: `//host`,
+ * `/\host` or an absolute URL would take the user to another site right after
+ * they authenticate.
+ */
+/** The path, query and hash of an in-app callback, or null for anything else. */
+export declare function safeCallbackPath(value: string | null | undefined): string | null;
+//# sourceMappingURL=callback-url.d.ts.map

package/dist/lib/auth/callback-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-url.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/callback-url.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAWhF"}

package/dist/lib/auth/callback-url.js

@@ -0,0 +1,14 @@
+const PLACEHOLDER_ORIGIN = "http://callback.invalid";
+function safeCallbackPath(value) {
+  if (!value || !value.startsWith("/")) return null;
+  try {
+    const url = new URL(value, PLACEHOLDER_ORIGIN);
+    const path = `${url.pathname}${url.search}${url.hash}`;
+    return url.origin === PLACEHOLDER_ORIGIN && !path.startsWith("//") ? path : null;
+  } catch {
+    return null;
+  }
+}
+export {
+  safeCallbackPath
+};

package/dist/lib/auth/otp-config.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Email OTP Config Resolution
+ *
+ * Turns the (optional, partially specified) `auth.otp` block of the merged app
+ * config into the concrete values handed to Better Auth's emailOTP plugin. Pure
+ * function — no side effects besides a `console.warn` on invalid input — so it
+ * is safe to import from client code too.
+ *
+ * Both numbers are read by the server (the plugin) and by the login form (the
+ * notice that counts the code down, and the length the input accepts). They
+ * live here so the two agree by construction: a duplicated literal is how the
+ * UI ends up promising five minutes for a code that lasts two.
+ *
+ * Resolution rules:
+ * - Every field falls back to the core default when missing.
+ * - Non-positive / non-finite values are rejected (warning) → default.
+ * - `otpLength` is additionally bounded to what Better Auth can generate.
+ */
+import type { AuthConfig } from '../config/types';
+export interface ResolvedOtpConfig {
+    /** Lifetime of an emailed code, in seconds. */
+    expiresIn: number;
+    /** Number of digits in an emailed code. */
+    otpLength: number;
+}
+export declare const DEFAULT_OTP_CONFIG: ResolvedOtpConfig;
+/**
+ * Resolve the email-OTP configuration the app runs with.
+ *
+ * @param authConfig - The merged `auth` config (core defaults + theme overrides).
+ *                     Only its `otp` block is read; `undefined`/`null` is
+ *                     allowed and yields the defaults.
+ */
+export declare function resolveOtpConfig(authConfig?: Pick<AuthConfig, 'otp'> | null): ResolvedOtpConfig;
+/**
+ * Seconds left before a code sent at `sentAt` expires, between 0 and the code's
+ * lifetime: a clock set back after the request would otherwise count more time
+ * than the server gives the code.
+ *
+ * @param sentAt - Epoch milliseconds of the moment the code was requested.
+ * @param expiresIn - Code lifetime in seconds.
+ * @param now - Epoch milliseconds to measure against (injectable for tests).
+ */
+export declare function getOtpSecondsRemaining(sentAt: number, expiresIn: number, now?: number): number;
+/**
+ * Format a remaining-seconds count as `m:ss`, always with both parts so the
+ * value reads as a duration on its own (a bare "45" needs a unit the
+ * surrounding sentence does not supply).
+ *
+ * Digits and a colon read the same in every locale this ships with, so the
+ * value can be interpolated into a translated sentence without each locale
+ * owning a time format.
+ */
+export declare function formatOtpCountdown(secondsRemaining: number): string;
+//# sourceMappingURL=otp-config.d.ts.map

package/dist/lib/auth/otp-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp-config.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/otp-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAiB,MAAM,iBAAiB,CAAA;AAEhE,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,kBAAkB,EAAE,iBAGhC,CAAA;AA2BD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,IAAI,GAC1C,iBAAiB,CAcnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAmB,GACvB,MAAM,CAGR;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAKnE"}

package/dist/lib/auth/otp-config.js

@@ -0,0 +1,48 @@
+const DEFAULT_OTP_CONFIG = {
+  expiresIn: 60 * 5,
+  // 5 minutes
+  otpLength: 6
+};
+const MIN_OTP_LENGTH = 4;
+const MAX_OTP_LENGTH = 10;
+function isPositiveNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0;
+}
+function resolveNumber(value, fallback, field) {
+  if (value === void 0) return fallback;
+  if (!isPositiveNumber(value) || Math.floor(value) < 1) {
+    console.warn(
+      `[Auth] Ignoring invalid auth.otp.${field} (${String(value)}); using default ${fallback}`
+    );
+    return fallback;
+  }
+  return Math.floor(value);
+}
+function resolveOtpConfig(authConfig) {
+  const cfg = (authConfig == null ? void 0 : authConfig.otp) ?? {};
+  const expiresIn = resolveNumber(cfg.expiresIn, DEFAULT_OTP_CONFIG.expiresIn, "expiresIn");
+  let otpLength = resolveNumber(cfg.otpLength, DEFAULT_OTP_CONFIG.otpLength, "otpLength");
+  if (otpLength < MIN_OTP_LENGTH || otpLength > MAX_OTP_LENGTH) {
+    console.warn(
+      `[Auth] auth.otp.otpLength (${otpLength}) is outside ${MIN_OTP_LENGTH}-${MAX_OTP_LENGTH}; using default ${DEFAULT_OTP_CONFIG.otpLength}`
+    );
+    otpLength = DEFAULT_OTP_CONFIG.otpLength;
+  }
+  return { expiresIn, otpLength };
+}
+function getOtpSecondsRemaining(sentAt, expiresIn, now = Date.now()) {
+  const elapsed = Math.floor((now - sentAt) / 1e3);
+  return Math.min(expiresIn, Math.max(0, expiresIn - elapsed));
+}
+function formatOtpCountdown(secondsRemaining) {
+  const total = Math.max(0, Math.floor(secondsRemaining));
+  const minutes = Math.floor(total / 60);
+  const seconds = total % 60;
+  return `${minutes}:${String(seconds).padStart(2, "0")}`;
+}
+export {
+  DEFAULT_OTP_CONFIG,
+  formatOtpCountdown,
+  getOtpSecondsRemaining,
+  resolveOtpConfig
+};

package/dist/lib/auth/registration-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registration-helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/registration-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGrF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAElE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAShF;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAKnE;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAKzE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAEnE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,OAAO,GACf,OAAO,CAGT;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAEnE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,gBAAgB,CAY5E"}
+{"version":3,"file":"registration-helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/registration-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAIrF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAElE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAShF;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAKnE;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAKzE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAEnE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAEpE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,OAAO,GACf,OAAO,CAGT;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAEnE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,gBAAgB,CAa5E"}

package/dist/lib/auth/registration-helpers.js

@@ -1,4 +1,5 @@
 import { resolveAuthMethods } from "./auth-methods.js";
+import { resolveOtpConfig } from "./otp-config.js";
 function isRegistrationOpen(mode) {
   return mode === "open" || mode === "domain-open";
 }
@@ -41,7 +42,8 @@ function getPublicAuthConfig(authConfig) {
         enabled: isGoogleAuthEnabled(authConfig)
       }
     },
-    methods: resolveAuthMethods(authConfig)
+    methods: resolveAuthMethods(authConfig),
+    otp: resolveOtpConfig(authConfig)
   };
 }
 export {

package/dist/lib/auth/session-hint.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Session Hint
+ *
+ * Better Auth's session cookie is httpOnly, so client code cannot tell whether a
+ * visitor is signed in without asking the server. This readable cookie records
+ * whether the browser carries a session, and public pages ask for the session
+ * only when it says so: an anonymous visitor makes no session request. The proxy
+ * keeps it in line with the session cookie on every request, and client code
+ * updates it on sign-in, sign-out and each session it reads. It is a hint, never
+ * proof of anything: a stale one costs a single request that finds no session.
+ */
+export declare const SESSION_HINT_COOKIE = "nextspark.signed_in";
+/** As long as browsers keep a cookie: longer than any session. */
+export declare const SESSION_HINT_MAX_AGE: number;
+/**
+ * Whether a Cookie header carries Better Auth's session cookie. It says nothing
+ * about whether that session is still valid, only that there may be one to read.
+ */
+export declare function hasSessionCookie(cookieHeader: string | null | undefined): boolean;
+/** Whether this browser was signed in when client code last looked. */
+export declare function hasSessionHint(): boolean;
+/** Record whether this browser is signed in. */
+export declare function setSessionHint(signedIn: boolean): void;
+/**
+ * Call `onChange` whenever the hint may have changed: client code set it (a
+ * sign-in or sign-out on this page), or the tab comes back into view, after
+ * responses the proxy answered may have set it. Returns the function that stops
+ * listening. Its shape fits React's useSyncExternalStore.
+ */
+export declare function subscribeSessionHint(onChange: () => void): () => void;
+//# sourceMappingURL=session-hint.d.ts.map

package/dist/lib/auth/session-hint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-hint.d.ts","sourceRoot":"","sources":["../../../src/lib/auth/session-hint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,mBAAmB,wBAAwB,CAAA;AAExD,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,QAAqB,CAAA;AAKtD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEjF;AAED,uEAAuE;AACvE,wBAAgB,cAAc,IAAI,OAAO,CAGxC;AAKD,gDAAgD;AAChD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAOtD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAUrE"}

package/dist/lib/auth/session-hint.js

@@ -0,0 +1,37 @@
+const SESSION_HINT_COOKIE = "nextspark.signed_in";
+const SESSION_HINT_MAX_AGE = 60 * 60 * 24 * 400;
+const SESSION_COOKIE = /(?:^|;\s*)(?:__Secure-)?better-auth[.-]session_token=[^;\s]/;
+function hasSessionCookie(cookieHeader) {
+  return SESSION_COOKIE.test(cookieHeader ?? "");
+}
+function hasSessionHint() {
+  if (typeof document === "undefined") return false;
+  return document.cookie.split(";").some((part) => part.trim() === `${SESSION_HINT_COOKIE}=1`);
+}
+const SESSION_HINT_CHANGE_EVENT = "nextspark:session-hint-change";
+function setSessionHint(signedIn) {
+  if (typeof document === "undefined" || hasSessionHint() === signedIn) return;
+  const secure = typeof location !== "undefined" && location.protocol === "https:" ? "; Secure" : "";
+  document.cookie = signedIn ? `${SESSION_HINT_COOKIE}=1; Max-Age=${SESSION_HINT_MAX_AGE}; Path=/; SameSite=Lax${secure}` : `${SESSION_HINT_COOKIE}=; Max-Age=0; Path=/; SameSite=Lax${secure}`;
+  window.dispatchEvent(new Event(SESSION_HINT_CHANGE_EVENT));
+}
+function subscribeSessionHint(onChange) {
+  if (typeof window === "undefined") return () => {
+  };
+  window.addEventListener(SESSION_HINT_CHANGE_EVENT, onChange);
+  window.addEventListener("focus", onChange);
+  document.addEventListener("visibilitychange", onChange);
+  return () => {
+    window.removeEventListener(SESSION_HINT_CHANGE_EVENT, onChange);
+    window.removeEventListener("focus", onChange);
+    document.removeEventListener("visibilitychange", onChange);
+  };
+}
+export {
+  SESSION_HINT_COOKIE,
+  SESSION_HINT_MAX_AGE,
+  hasSessionCookie,
+  hasSessionHint,
+  setSessionHint,
+  subscribeSessionHint
+};

package/dist/lib/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAUA,OAAO,EAAgF,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAevH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnF;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA+GD,eAAO,MAAM,IAAI,qEAoWf,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,kBAAkB,EAAE,QAAQ,EAAE,CAAC;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAUA,OAAO,EAAgF,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAgBvH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnF;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAoHD,eAAO,MAAM,IAAI,qEAqWf,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,kBAAkB,EAAE,QAAQ,EAAE,CAAC;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B"}

package/dist/lib/auth.js

@@ -16,6 +16,7 @@ import { shouldSkipTeamCreation, getSignupContext } from "./auth-context.js";
 import { isDomainAllowed } from "./auth/registration-helpers.js";
 import { registrationGuardPlugin } from "./auth/registration-guard-plugin.js";
 import { resolveSessionConfig } from "./auth/session-config.js";
+import { resolveOtpConfig } from "./auth/otp-config.js";
 import { isPasswordLoginEnabled } from "./auth/auth-methods.js";
 import { getCorsOrigins, isPrivateLanOrigin, normalizeCorsEnvironment } from "./utils/cors.js";
 async function hasPendingInvitationForEmail(email) {
@@ -45,6 +46,7 @@ const pool = new Pool({
   max: 20
 });
 const sessionConfig = resolveSessionConfig(AUTH_CONFIG);
+const otpConfig = resolveOtpConfig(AUTH_CONFIG);
 function resolveNonOwnerSignupRole() {
   var _a, _b, _c, _d;
   const cfg = AUTH_CONFIG.signupIntent;
@@ -220,13 +222,13 @@ const auth = betterAuth({
           email,
           otp,
           type,
-          appName: process.env.NEXT_PUBLIC_APP_NAME || "Your App"
+          appName: process.env.NEXT_PUBLIC_APP_NAME || "Your App",
+          expiresIn: otpConfig.expiresIn
         }, I18N_CONFIG.defaultLocale);
         await emailService.send({ to: email, ...template });
       },
-      otpLength: 6,
-      expiresIn: 300,
-      // 5 minutes
+      otpLength: otpConfig.otpLength,
+      expiresIn: otpConfig.expiresIn,
       sendVerificationOnSignUp: false,
       disableSignUp: false
       // auto-create user on first OTP sign-in