@riffdb/better-auth 0.0.0-stage → 0.2.1

package/dist/profile-plan.js

@@ -0,0 +1,180 @@
+import { createAdapterFactory, } from "better-auth/adapters";
+import { BETTER_AUTH_PINNED_VERSION } from "./profile.js";
+export const RIFFDB_BETTER_AUTH_PROFILE_PLAN_SCHEMA = "riffdb.better-auth-profile-plan/v1";
+const MAX_MODELS = 32;
+const MAX_FIELDS_PER_MODEL = 64;
+const SYMBOL_PATTERN = /^[A-Za-z][A-Za-z0-9_]{0,127}$/u;
+const LINEAGE_PATTERN = /^[A-Za-z][A-Za-z0-9_.-]{0,127}$/u;
+const STORAGE_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9_]{0,127}$/u;
+const SECRET_FIELD_PATTERN = /(?:accessToken|backupCodes|clientSecret|idToken|password|privateKey|refreshToken|secret|token|totp|value)$/iu;
+const SUPPORTED_FIELD_TYPES = new Set([
+    "boolean",
+    "date",
+    "json",
+    "number",
+    "number[]",
+    "string",
+    "string[]",
+]);
+export class RiffDBBetterAuthProfileGenerationError extends Error {
+    code;
+    constructor(code) {
+        super(`cannot generate RiffDB Better Auth profile: ${code}`);
+        this.code = code;
+        this.name = "RiffDBBetterAuthProfileGenerationError";
+    }
+}
+function reject(code) {
+    throw new RiffDBBetterAuthProfileGenerationError(code);
+}
+function validateGeneratorConfig(config) {
+    const applicationRole = config.applicationRole ?? "BetterAuthServer";
+    if (!SYMBOL_PATTERN.test(config.name) ||
+        !LINEAGE_PATTERN.test(config.contractLineage) ||
+        !SYMBOL_PATTERN.test(applicationRole) ||
+        (config.output !== undefined &&
+            (config.output.length < 1 || config.output.length > 4_096 || config.output.includes("\0")))) {
+        reject("invalid_generator_configuration");
+    }
+    return Object.freeze({
+        name: config.name,
+        lineage: config.contractLineage,
+        applicationRole,
+    });
+}
+function pluginIds(options) {
+    const ids = (options.plugins ?? []).filter((plugin) => plugin.id !== "next-cookies").map((plugin) => plugin.id);
+    if (ids.some((id) => !SYMBOL_PATTERN.test(id.replaceAll("-", "_")))) {
+        reject("invalid_generator_configuration");
+    }
+    return Object.freeze([...new Set(ids)].sort());
+}
+function fieldPlan(name, attributes, models) {
+    const storageName = attributes.fieldName ?? name;
+    if (!SYMBOL_PATTERN.test(name) || !STORAGE_NAME_PATTERN.test(storageName)) {
+        reject("invalid_field_name");
+    }
+    if (!SUPPORTED_FIELD_TYPES.has(attributes.type))
+        reject("unsupported_field_type");
+    const reference = attributes.references;
+    if (reference !== undefined &&
+        (!models.has(reference.model) ||
+            !SYMBOL_PATTERN.test(reference.model) ||
+            !SYMBOL_PATTERN.test(reference.field))) {
+        reject("invalid_reference");
+    }
+    const secret = attributes.returned === false || SECRET_FIELD_PATTERN.test(name);
+    return Object.freeze({
+        name,
+        storageName,
+        type: attributes.type,
+        required: attributes.required ?? false,
+        unique: attributes.unique ?? false,
+        indexed: attributes.index ?? false,
+        secret,
+        input: attributes.input !== false,
+        returned: attributes.returned !== false,
+        hasDefault: attributes.defaultValue !== undefined,
+        hasOnUpdate: attributes.onUpdate !== undefined,
+        ...(reference === undefined
+            ? {}
+            : {
+                reference: Object.freeze({
+                    model: reference.model,
+                    field: reference.field,
+                    ...(reference.onDelete === undefined ? {} : { onDelete: reference.onDelete }),
+                }),
+            }),
+    });
+}
+export function defineRiffDBBetterAuthProfilePlan(options, tables, config) {
+    const checked = validateGeneratorConfig(config);
+    if (options.advanced?.database?.generateId !== "uuid") {
+        reject("unsupported_id_generation");
+    }
+    const modelEntries = Object.entries(tables).sort(([left], [right]) => left.localeCompare(right));
+    if (modelEntries.length < 1 || modelEntries.length > MAX_MODELS) {
+        reject("profile_model_bound_exceeded");
+    }
+    const modelNames = new Set(modelEntries.map(([name]) => name));
+    const models = modelEntries.map(([name, table]) => {
+        const storageName = table.modelName;
+        if (!SYMBOL_PATTERN.test(name) || !STORAGE_NAME_PATTERN.test(storageName)) {
+            reject("invalid_model_name");
+        }
+        const fields = Object.entries(table.fields).sort(([left], [right]) => left.localeCompare(right));
+        if (fields.length < 1 || fields.length > MAX_FIELDS_PER_MODEL) {
+            reject("profile_field_bound_exceeded");
+        }
+        return Object.freeze({
+            name,
+            storageName,
+            fields: Object.freeze(fields.map(([field, attributes]) => fieldPlan(field, attributes, modelNames))),
+        });
+    });
+    return Object.freeze({
+        schema: RIFFDB_BETTER_AUTH_PROFILE_PLAN_SCHEMA,
+        betterAuthVersion: BETTER_AUTH_PINNED_VERSION,
+        idGeneration: "uuid",
+        name: checked.name,
+        contract: Object.freeze({
+            lineage: checked.lineage,
+            applicationRole: checked.applicationRole,
+        }),
+        plugins: pluginIds(options),
+        models: Object.freeze(models),
+        bounds: Object.freeze({
+            maximumModels: MAX_MODELS,
+            maximumFieldsPerModel: MAX_FIELDS_PER_MODEL,
+        }),
+    });
+}
+export function renderRiffDBBetterAuthProfilePlan(plan) {
+    return `${JSON.stringify(plan, null, 2)}\n`;
+}
+function generationOnlyFailure() {
+    throw new RiffDBBetterAuthProfileGenerationError("generation_only_runtime_call");
+}
+function generationOnlyAdapter(options, config) {
+    const fail = async () => generationOnlyFailure();
+    return {
+        create: fail,
+        update: fail,
+        updateMany: fail,
+        findOne: fail,
+        findMany: fail,
+        delete: fail,
+        deleteMany: fail,
+        consumeOne: fail,
+        incrementOne: fail,
+        count: fail,
+        createSchema: async ({ file, tables }) => ({
+            code: renderRiffDBBetterAuthProfilePlan(defineRiffDBBetterAuthProfilePlan(options, tables, config)),
+            path: file ?? config.output ?? "riffdb/better-auth.profile.json",
+            overwrite: true,
+        }),
+    };
+}
+/**
+ * Generation-only Better Auth adapter used by `better-auth generate`.
+ *
+ * It resolves the complete configured Better Auth schema without requiring a
+ * live RiffDB driver. Runtime methods always fail; the resulting reviewed plan
+ * is input to the compiled-profile materializer, never a generic CRUD schema.
+ */
+export function riffdbProfileAdapter(config) {
+    validateGeneratorConfig(config);
+    return createAdapterFactory({
+        config: {
+            adapterId: "riffdb-profile-generator",
+            adapterName: "RiffDB Better Auth Profile Generator",
+            supportsNumericIds: false,
+            supportsUUIDs: false,
+            supportsJSON: true,
+            supportsArrays: true,
+            transaction: false,
+        },
+        adapter: ({ options }) => generationOnlyAdapter(options, config),
+    });
+}
+//# sourceMappingURL=profile-plan.js.map

package/dist/profile-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-plan.js","sourceRoot":"","sources":["../src/profile-plan.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,GAGrB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,CAAC,MAAM,sCAAsC,GACjD,oCAA6C,CAAC;AAEhD,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,cAAc,GAAG,gCAAgC,CAAC;AACxD,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,MAAM,oBAAoB,GAAG,gCAAgC,CAAC;AAC9D,MAAM,oBAAoB,GACxB,8GAA8G,CAAC;AACjH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAc;IACjD,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAuDH,MAAM,OAAO,sCAAuC,SAAQ,KAAK;IAC5B,IAAI;IAAvC,YAAmC,IAAgD;QACjF,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;oBAD5B,IAAI;QAErC,IAAI,CAAC,IAAI,GAAG,wCAAwC,CAAC;IACvD,CAAC;CACF;AAED,SAAS,MAAM,CAAC,IAAgD;IAC9D,MAAM,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA8C;IAE9C,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,kBAAkB,CAAC;IACrE,IACE,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAC7C,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC;QACrC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;YAC1B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAC7F,CAAC;QACD,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,eAAe;QAC/B,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,OAA0B;IAC3C,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChH,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,UAA4B,EAC5B,MAA2B;IAE3B,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC;IACjD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAElF,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC;IACxC,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YACrC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EACxC,CAAC;QACD,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,KAAK,KAAK,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,WAAW;QACX,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,KAAK;QACtC,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,KAAK;QAClC,OAAO,EAAE,UAAU,CAAC,KAAK,IAAI,KAAK;QAClC,MAAM;QACN,KAAK,EAAE,UAAU,CAAC,KAAK,KAAK,KAAK;QACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ,KAAK,KAAK;QACvC,UAAU,EAAE,UAAU,CAAC,YAAY,KAAK,SAAS;QACjD,WAAW,EAAE,UAAU,CAAC,QAAQ,KAAK,SAAS;QAC9C,GAAG,CAAC,SAAS,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;oBACvB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;iBAC9E,CAAC;aACH,CAAC;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAA0B,EAC1B,MAA0B,EAC1B,MAA8C;IAE9C,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,KAAK,MAAM,EAAE,CAAC;QACtD,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAChE,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QAChD,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1E,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACnE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YAC9D,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI;YACJ,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,MAAM,CACnB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAC9E;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,sCAAsC;QAC9C,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,MAAM;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC;QACF,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,aAAa,EAAE,UAAU;YACzB,qBAAqB,EAAE,oBAAoB;SAC5C,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAAiC;IACjF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,IAAI,sCAAsC,CAAC,8BAA8B,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA0B,EAC1B,MAA8C;IAE9C,MAAM,IAAI,GAAG,KAAK,IAAoB,EAAE,CAAC,qBAAqB,EAAE,CAAC;IACjE,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,EAAE,iCAAiC,CACrC,iCAAiC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAC3D;YACD,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,iCAAiC;YAChE,SAAS,EAAE,IAAI;SAChB,CAAC;KACc,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA8C;IAE9C,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,oBAAoB,CAAC;QAC1B,MAAM,EAAE;YACN,SAAS,EAAE,0BAA0B;YACrC,WAAW,EAAE,sCAAsC;YACnD,kBAAkB,EAAE,KAAK;YACzB,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,IAAI;YAClB,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,KAAK;SACnB;QACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC;KACjE,CAAC,CAAC;AACL,CAAC"}

package/dist/profile.d.ts

@@ -0,0 +1,48 @@
+export declare const BETTER_AUTH_PINNED_VERSION: "1.7.18";
+export declare const SUPPORTED_BETTER_AUTH_VERSIONS: readonly ["1.7.18"];
+export declare const RIFFDB_BETTER_AUTH_PROFILE_SCHEMA: "riffdb.better-auth-core-profile/v1";
+export declare const BETTER_AUTH_CORE_MODELS: readonly ["user", "session", "account", "verification"];
+export type BetterAuthCoreModel = (typeof BETTER_AUTH_CORE_MODELS)[number];
+export declare const BETTER_AUTH_CORE_FIELDS: {
+    readonly user: readonly ["id", "name", "email", "emailVerified", "image", "createdAt", "updatedAt"];
+    readonly session: readonly ["id", "userId", "token", "expiresAt", "ipAddress", "userAgent", "createdAt", "updatedAt"];
+    readonly account: readonly ["id", "userId", "accountId", "providerId", "accessToken", "refreshToken", "accessTokenExpiresAt", "refreshTokenExpiresAt", "scope", "idToken", "password", "createdAt", "updatedAt"];
+    readonly verification: readonly ["id", "identifier", "value", "expiresAt", "createdAt", "updatedAt"];
+};
+export interface BetterAuthModelShape {
+    readonly name: string;
+    readonly fields: readonly string[];
+}
+export interface RiffDBContractIdentity {
+    readonly lineage: string;
+    readonly version: number;
+    readonly bundleHash: string;
+    readonly applicationRole: string;
+}
+export interface RiffDBBetterAuthCoreProfileInput {
+    readonly schema: typeof RIFFDB_BETTER_AUTH_PROFILE_SCHEMA;
+    readonly betterAuthVersion: string;
+    readonly idGeneration: "uuid" | "default" | "serial";
+    readonly plugins?: readonly string[];
+    readonly models: readonly BetterAuthModelShape[];
+    readonly contract: RiffDBContractIdentity;
+}
+export interface RiffDBBetterAuthCoreProfile {
+    readonly schema: typeof RIFFDB_BETTER_AUTH_PROFILE_SCHEMA;
+    readonly betterAuthVersion: typeof BETTER_AUTH_PINNED_VERSION;
+    readonly idGeneration: "uuid";
+    readonly plugins: readonly [];
+    readonly models: Readonly<Record<BetterAuthCoreModel, {
+        readonly name: BetterAuthCoreModel;
+        readonly fields: readonly string[];
+    }>>;
+    readonly contract: Readonly<RiffDBContractIdentity>;
+}
+export type UnsupportedBetterAuthProfileCode = "invalid_profile_schema" | "unsupported_better_auth_version" | "unsupported_id_generation" | "unsupported_plugin" | "invalid_model_inventory" | "unsupported_model" | "unsupported_field_shape" | "invalid_contract_identity";
+export declare class UnsupportedBetterAuthProfileError extends Error {
+    readonly code: UnsupportedBetterAuthProfileCode;
+    constructor(code: UnsupportedBetterAuthProfileCode);
+}
+/** Validates the exact compiled Better Auth core profile. */
+export declare function defineRiffDBBetterAuthCoreProfile(input: RiffDBBetterAuthCoreProfileInput): RiffDBBetterAuthCoreProfile;
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,0BAA0B,EAAG,QAAiB,CAAC;AAC5D,eAAO,MAAM,8BAA8B,qBAAuD,CAAC;AACnG,eAAO,MAAM,iCAAiC,EAC5C,oCAA6C,CAAC;AAEhD,eAAO,MAAM,uBAAuB,YAClC,MAAM,EACN,SAAS,EACT,SAAS,EACT,cAAc,CACN,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,eAAO,MAAM,uBAAuB;;;;;CA2CyC,CAAC;AAM9E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,MAAM,EAAE,OAAO,iCAAiC,CAAC;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,OAAO,iCAAiC,CAAC;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,OAAO,0BAA0B,CAAC;IAC9D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CACvB,MAAM,CAAC,mBAAmB,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CACxG,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,gCAAgC,GACxC,wBAAwB,GACxB,iCAAiC,GACjC,2BAA2B,GAC3B,oBAAoB,GACpB,yBAAyB,GACzB,mBAAmB,GACnB,yBAAyB,GACzB,2BAA2B,CAAC;AAEhC,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,SAAgB,IAAI,EAAE,gCAAgC,CAAC;IAEvD,YAAmB,IAAI,EAAE,gCAAgC,EAIxD;CACF;AAkCD,6DAA6D;AAC7D,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,gCAAgC,GACtC,2BAA2B,CAgD7B"}

package/dist/profile.js

@@ -0,0 +1,132 @@
+export const BETTER_AUTH_PINNED_VERSION = "1.7.18";
+export const SUPPORTED_BETTER_AUTH_VERSIONS = Object.freeze([BETTER_AUTH_PINNED_VERSION]);
+export const RIFFDB_BETTER_AUTH_PROFILE_SCHEMA = "riffdb.better-auth-core-profile/v1";
+export const BETTER_AUTH_CORE_MODELS = [
+    "user",
+    "session",
+    "account",
+    "verification",
+];
+export const BETTER_AUTH_CORE_FIELDS = {
+    user: [
+        "id",
+        "name",
+        "email",
+        "emailVerified",
+        "image",
+        "createdAt",
+        "updatedAt",
+    ],
+    session: [
+        "id",
+        "userId",
+        "token",
+        "expiresAt",
+        "ipAddress",
+        "userAgent",
+        "createdAt",
+        "updatedAt",
+    ],
+    account: [
+        "id",
+        "userId",
+        "accountId",
+        "providerId",
+        "accessToken",
+        "refreshToken",
+        "accessTokenExpiresAt",
+        "refreshTokenExpiresAt",
+        "scope",
+        "idToken",
+        "password",
+        "createdAt",
+        "updatedAt",
+    ],
+    verification: [
+        "id",
+        "identifier",
+        "value",
+        "expiresAt",
+        "createdAt",
+        "updatedAt",
+    ],
+};
+const HASH_PATTERN = /^[0-9a-f]{64}$/u;
+const LINEAGE_PATTERN = /^[A-Za-z][A-Za-z0-9_.-]{0,127}$/u;
+const SYMBOL_PATTERN = /^[A-Za-z][A-Za-z0-9_]{0,127}$/u;
+export class UnsupportedBetterAuthProfileError extends Error {
+    code;
+    constructor(code) {
+        super(`unsupported Better Auth profile: ${code}`);
+        this.name = "UnsupportedBetterAuthProfileError";
+        this.code = code;
+    }
+}
+function reject(code) {
+    throw new UnsupportedBetterAuthProfileError(code);
+}
+function exactFields(model, fields) {
+    const expected = [...BETTER_AUTH_CORE_FIELDS[model]].sort();
+    const actual = [...fields].sort();
+    if (actual.length !== expected.length ||
+        new Set(actual).size !== actual.length ||
+        actual.some((field, index) => field !== expected[index])) {
+        reject("unsupported_field_shape");
+    }
+    return Object.freeze([...BETTER_AUTH_CORE_FIELDS[model]]);
+}
+function validateContractIdentity(contract) {
+    if (!LINEAGE_PATTERN.test(contract.lineage) ||
+        !Number.isSafeInteger(contract.version) ||
+        contract.version < 1 ||
+        !HASH_PATTERN.test(contract.bundleHash) ||
+        !SYMBOL_PATTERN.test(contract.applicationRole)) {
+        reject("invalid_contract_identity");
+    }
+    return Object.freeze({ ...contract });
+}
+/** Validates the exact compiled Better Auth core profile. */
+export function defineRiffDBBetterAuthCoreProfile(input) {
+    if (input.schema !== RIFFDB_BETTER_AUTH_PROFILE_SCHEMA) {
+        reject("invalid_profile_schema");
+    }
+    if (input.betterAuthVersion !== BETTER_AUTH_PINNED_VERSION) {
+        reject("unsupported_better_auth_version");
+    }
+    if (input.idGeneration !== "uuid") {
+        reject("unsupported_id_generation");
+    }
+    if ((input.plugins?.length ?? 0) !== 0) {
+        reject("unsupported_plugin");
+    }
+    if (input.models.length !== BETTER_AUTH_CORE_MODELS.length) {
+        reject("invalid_model_inventory");
+    }
+    const supplied = new Map();
+    for (const model of input.models) {
+        if (supplied.has(model.name)) {
+            reject("invalid_model_inventory");
+        }
+        supplied.set(model.name, model);
+    }
+    const models = {};
+    for (const name of BETTER_AUTH_CORE_MODELS) {
+        const model = supplied.get(name);
+        if (model === undefined) {
+            reject("unsupported_model");
+        }
+        models[name] = Object.freeze({ name, fields: exactFields(name, model.fields) });
+    }
+    if ([...supplied].some(([name]) => !BETTER_AUTH_CORE_MODELS.includes(name))) {
+        reject("unsupported_model");
+    }
+    return Object.freeze({
+        schema: RIFFDB_BETTER_AUTH_PROFILE_SCHEMA,
+        betterAuthVersion: BETTER_AUTH_PINNED_VERSION,
+        idGeneration: "uuid",
+        plugins: Object.freeze([]),
+        models: Object.freeze(models),
+        contract: validateContractIdentity(input.contract),
+    });
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAiB,CAAC;AAC5D,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,0BAA0B,CAAU,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,iCAAiC,GAC5C,oCAA6C,CAAC;AAEhD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,MAAM;IACN,SAAS;IACT,SAAS;IACT,cAAc;CACN,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,IAAI,EAAE;QACJ,IAAI;QACJ,MAAM;QACN,OAAO;QACP,eAAe;QACf,OAAO;QACP,WAAW;QACX,WAAW;KACZ;IACD,OAAO,EAAE;QACP,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,WAAW;QACX,WAAW;QACX,WAAW;QACX,WAAW;QACX,WAAW;KACZ;IACD,OAAO,EAAE;QACP,IAAI;QACJ,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,aAAa;QACb,cAAc;QACd,sBAAsB;QACtB,uBAAuB;QACvB,OAAO;QACP,SAAS;QACT,UAAU;QACV,WAAW;QACX,WAAW;KACZ;IACD,YAAY,EAAE;QACZ,IAAI;QACJ,YAAY;QACZ,OAAO;QACP,WAAW;QACX,WAAW;QACX,WAAW;KACZ;CAC0E,CAAC;AAE9E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,MAAM,cAAc,GAAG,gCAAgC,CAAC;AA4CxD,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC1C,IAAI,CAAmC;IAEvD,YAAmB,IAAsC;QACvD,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,IAAsC;IACpD,MAAM,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,KAA0B,EAAE,MAAyB;IACxE,MAAM,QAAQ,GAAG,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IACE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACjC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,EACxD,CAAC;QACD,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAAgC;IAEhC,IACE,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,QAAQ,CAAC,OAAO,GAAG,CAAC;QACpB,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACvC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAC9C,CAAC;QACD,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,iCAAiC,CAC/C,KAAuC;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,iCAAiC,EAAE,CAAC;QACvD,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,0BAA0B,EAAE,CAAC;QAC3D,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,MAAM,EAAE,CAAC;QAC3D,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACpC,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,EAGd,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAA2B,CAAC,CAAC,EAAE,CAAC;QACnG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,iCAAiC;QACzC,iBAAiB,EAAE,0BAA0B;QAC7C,YAAY,EAAE,MAAM;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAgB;QACzC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC;KACnD,CAAC,CAAC;AACL,CAAC"}

package/dist/profiles/custom-fields/profile.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@riffdb/better-auth").RiffDBCompiledProfile;
+export default _default;
+//# sourceMappingURL=profile.d.ts.map

package/dist/profiles/custom-fields/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../profiles/custom-fields/profile.ts"],"names":[],"mappings":""}