@payez/next-mvp 4.0.47 → 4.1.0

package/dist/api-handlers/admin/stats.js

@@ -128,14 +128,16 @@ function createStatsHandler(config) {
             if (adminCheck.error)
                 return adminCheck.error;
             try {
-                // Fetch from 3 sources in parallel
-                const [usersResult, sessionCount, auditResult] = await Promise.allSettled([
-                    // 1. Users + tier breakdown via HMAC proxy (Vibe collection query)
+                // Fetch from 4 sources in parallel
+                const [usersResult, tierDistributionResult, sessionCount, auditResult] = await Promise.allSettled([
+                    // 1. Users count via HMAC proxy (Vibe collection query)
                     vibeServiceRequest('/v1/collections/vibe_app/tables/users/query', {
                         method: 'POST',
                         body: { page: 1, pageSize: 500, orderBy: 'created_at', orderDirection: 'desc' },
                     }),
-                    // 2. Active sessions from Redis
+                    // 2. Tier distribution from analytics endpoint (uses purchases table)
+                    vibeServiceRequest('/v1/analytics/tier-distribution?includeTrend=false', { method: 'GET' }),
+                    // 3. Active sessions from Redis
                     (async () => {
                         const redis = (0, redis_1.getRedis)();
                         const sessionPrefix = getSessionPrefix();
@@ -148,12 +150,11 @@ function createStatsHandler(config) {
                         } while (cursor !== '0');
                         return sessionKeys.length;
                     })(),
-                    // 3. Recent audit activity via HMAC proxy
+                    // 4. Recent audit activity via HMAC proxy
                     vibeServiceRequest('/v1/audit?pageSize=10&sortDir=desc', { method: 'GET' }),
                 ]);
                 // Parse users — deduplicate by user_id
                 let totalUsers = 0;
-                let tierBreakdown = {};
                 if (usersResult.status === 'fulfilled' && usersResult.value.ok && usersResult.value.data) {
                     const data = usersResult.value.data;
                     const rawUsers = data.data || data.documents || data.users || [];
@@ -166,17 +167,26 @@ function createStatsHandler(config) {
                             userMap.set(uid, u);
                         }
                     }
-                    const uniqueUsers = Array.from(userMap.values());
-                    totalUsers = uniqueUsers.length;
-                    // Build tier breakdown from deduplicated users (unless API provides one)
-                    tierBreakdown = data.tierBreakdown || data.tiers || {};
-                    if (Object.keys(tierBreakdown).length === 0) {
-                        for (const user of uniqueUsers) {
-                            const tier = user.tier || 'free';
-                            tierBreakdown[tier] = (tierBreakdown[tier] || 0) + 1;
+                    totalUsers = userMap.size;
+                }
+                // Parse tier distribution from analytics endpoint (uses purchases table)
+                let tierBreakdown = {};
+                if (tierDistributionResult.status === 'fulfilled' && tierDistributionResult.value.ok && tierDistributionResult.value.data) {
+                    const data = tierDistributionResult.value.data;
+                    // Handle response shape: { distribution: [{ tierKey, userCount }, ...] }
+                    const distribution = data.distribution || data.data || data.tiers || [];
+                    if (Array.isArray(distribution)) {
+                        for (const item of distribution) {
+                            const tierKey = item.tierKey || item.tier || item.name || 'free';
+                            const count = item.userCount || item.count || item.users || 0;
+                            tierBreakdown[tierKey] = (tierBreakdown[tierKey] || 0) + count;
                         }
                     }
                 }
+                // Fallback: if no tier data from analytics, show all as free
+                if (Object.keys(tierBreakdown).length === 0) {
+                    tierBreakdown = { free: totalUsers };
+                }
                 // Parse active sessions count
                 let activeSessions = 0;
                 if (sessionCount.status === 'fulfilled') {

package/dist/auth/better-auth.d.ts

@@ -9,6 +9,7 @@
  * @see BETTER-AUTH-MIGRATION-SPEC.md
  */
 import 'server-only';
+import { type MagicLinkOptions } from 'better-auth/plugins/magic-link';
 import type { IDPClientConfig } from '../lib/idp-client-config';
 /**
  * Better Auth social provider config shape.
@@ -22,13 +23,25 @@ export interface BetterAuthSocialProvider {
  * Build Better Auth social providers from IDP config.
  */
 export declare function buildBetterAuthProviders(config: IDPClientConfig): Record<string, BetterAuthSocialProvider>;
+/**
+ * Optional configuration for `createBetterAuthInstance`.
+ *
+ * - `magicLink`: if provided, registers Better Auth's magic-link plugin.
+ *   The host app supplies its own `sendMagicLink` callback — typically a
+ *   fetch to its email service (e.g. ACP's `/v1/auth/magic-link/email`).
+ *   Omit the `magicLink` key entirely to skip the plugin; the consuming
+ *   app will not have a magic-link flow.
+ */
+export interface CreateBetterAuthInstanceOptions {
+    magicLink?: MagicLinkOptions;
+}
 /**
  * Create Better Auth instance from IDP config.
  *
  * No database — runs in stateless mode with JWE cookie cache.
  * Call after getIDPClientConfig() resolves.
  */
-export declare function createBetterAuthInstance(idpConfig: IDPClientConfig): import("better-auth").Auth<{
+export declare function createBetterAuthInstance(idpConfig: IDPClientConfig, opts?: CreateBetterAuthInstanceOptions): import("better-auth").Auth<{
     baseURL: string;
     secret: string;
     socialProviders: Record<string, BetterAuthSocialProvider>;
@@ -65,7 +78,102 @@ export declare function createBetterAuthInstance(idpConfig: IDPClientConfig): im
                 handler: (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>;
             }[];
         };
-    }];
+    }, ...{
+        id: "magic-link";
+        endpoints: {
+            signInMagicLink: import("better-auth").StrictEndpoint<"/sign-in/magic-link", {
+                method: "POST";
+                requireHeaders: true;
+                body: import("better-auth").ZodObject<{
+                    email: import("better-auth").ZodEmail;
+                    name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+                    callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+                    newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+                    errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+                    metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
+                }, import("better-auth").$strip>;
+                metadata: {
+                    openapi: {
+                        operationId: string;
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                status: {
+                                                    type: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            }, {
+                status: boolean;
+            }>;
+            magicLinkVerify: import("better-auth").StrictEndpoint<"/magic-link/verify", {
+                method: "GET";
+                query: import("better-auth").ZodObject<{
+                    token: import("better-auth").ZodString;
+                    callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+                    errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+                    newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+                }, import("better-auth").$strip>;
+                use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>)[];
+                requireHeaders: true;
+                metadata: {
+                    openapi: {
+                        operationId: string;
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                session: {
+                                                    $ref: string;
+                                                };
+                                                user: {
+                                                    $ref: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            }, {
+                token: string;
+                user: {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    email: string;
+                    emailVerified: boolean;
+                    name: string;
+                    image?: string | null | undefined;
+                };
+            }>;
+        };
+        rateLimit: {
+            pathMatcher(path: string): boolean;
+            window: number;
+            max: number;
+        }[];
+        options: MagicLinkOptions;
+    }[]];
 }>;
 /**
  * Better Auth is always enabled (NextAuth removed in 4.0).
@@ -77,6 +185,18 @@ export declare function isBetterAuthEnabled(): boolean;
  */
 declare let cachedInstance: any;
 export { cachedInstance as __betterAuthInstance };
+/**
+ * Configure Better Auth instance options for this process.
+ *
+ * Must be called before the first auth request — before
+ * `getBetterAuthInstance()` caches an instance. Typically called once at
+ * app startup, e.g. from Next.js `instrumentation.ts` or an equivalent
+ * server bootstrap hook.
+ *
+ * Throws if called after the instance has already been resolved: options
+ * cannot be applied retroactively.
+ */
+export declare function configureBetterAuth(opts: CreateBetterAuthInstanceOptions): void;
 export declare function getBetterAuthInstance(): Promise<any>;
 /**
  * Get flag-gated auth handler for Next.js route.

package/dist/auth/better-auth.js

@@ -47,6 +47,7 @@ exports.__betterAuthInstance = void 0;
 exports.buildBetterAuthProviders = buildBetterAuthProviders;
 exports.createBetterAuthInstance = createBetterAuthInstance;
 exports.isBetterAuthEnabled = isBetterAuthEnabled;
+exports.configureBetterAuth = configureBetterAuth;
 exports.getBetterAuthInstance = getBetterAuthInstance;
 exports.getBetterAuthHandler = getBetterAuthHandler;
 exports.exchangeOAuthForIdpTokens = exchangeOAuthForIdpTokens;
@@ -55,6 +56,7 @@ require("server-only");
 const better_auth_1 = require("better-auth");
 const next_js_1 = require("better-auth/next-js");
 const next_js_2 = require("better-auth/next-js");
+const magic_link_1 = require("better-auth/plugins/magic-link");
 const idp_client_config_1 = require("../lib/idp-client-config");
 const app_slug_1 = require("../lib/app-slug");
 const redis_1 = require("../lib/redis");
@@ -81,7 +83,7 @@ function buildBetterAuthProviders(config) {
  * No database — runs in stateless mode with JWE cookie cache.
  * Call after getIDPClientConfig() resolves.
  */
-function createBetterAuthInstance(idpConfig) {
+function createBetterAuthInstance(idpConfig, opts = {}) {
     const appSlug = idpConfig.clientSlug || (0, app_slug_1.getAppSlug)();
     // Resolve base URL: BETTER_AUTH_URL env > IDP config > localhost fallback
     // Must include /api/auth since that's where the catch-all route is mounted
@@ -149,6 +151,7 @@ function createBetterAuthInstance(idpConfig) {
         },
         plugins: [
             (0, next_js_1.nextCookies)(),
+            ...(opts.magicLink ? [(0, magic_link_1.magicLink)(opts.magicLink)] : []),
         ],
     });
 }
@@ -167,12 +170,31 @@ let cachedInstance = null;
 exports.__betterAuthInstance = cachedInstance;
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 let initPromise = null;
+let configuredOpts = {};
+/**
+ * Configure Better Auth instance options for this process.
+ *
+ * Must be called before the first auth request — before
+ * `getBetterAuthInstance()` caches an instance. Typically called once at
+ * app startup, e.g. from Next.js `instrumentation.ts` or an equivalent
+ * server bootstrap hook.
+ *
+ * Throws if called after the instance has already been resolved: options
+ * cannot be applied retroactively.
+ */
+function configureBetterAuth(opts) {
+    if (cachedInstance) {
+        throw new Error('[BETTER_AUTH] configureBetterAuth() must run before the instance is first resolved. ' +
+            'Call it in Next.js instrumentation.ts or an equivalent startup hook.');
+    }
+    configuredOpts = opts;
+}
 async function getBetterAuthInstance() {
     if (cachedInstance)
         return cachedInstance;
     if (!initPromise) {
         initPromise = (0, idp_client_config_1.getIDPClientConfig)(true).then(config => {
-            const instance = createBetterAuthInstance(config);
+            const instance = createBetterAuthInstance(config, configuredOpts);
             exports.__betterAuthInstance = cachedInstance = instance;
             console.log('[BETTER_AUTH] Instance created for', config.clientSlug || config.clientId);
             return instance;