@saacms/auth-better-auth 0.1.0

package/dist/adapter.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Better Auth → saacms `AuthAdapter` shim.
+ *
+ * Wraps a Better Auth instance and projects its session/user representation
+ * onto saacms's `User` shape (per `core/src/types/user.ts`). The runtime's
+ * `auth-middleware` calls `getSession(request)` once per request; this shim
+ * never throws out of that call — transport failures degrade to anonymous so
+ * routes can still serve public content.
+ *
+ * The package does NOT import `better-auth` at runtime. `BetterAuthLike` is
+ * a structural subset of the BA instance covering just the surface we use,
+ * which lets the package compile and test without pinning a BA version.
+ * The host supplies the real `betterAuth({...})` result via `opts.auth`.
+ */
+import type { AuthAdapter } from "@saacms/core";
+/**
+ * Structural subset of a Better Auth instance. We mirror only what we use
+ * (`api.getSession`) so this package isn't pinned to a specific BA version.
+ * Any object with this shape works; the real `betterAuth({...})` return
+ * value satisfies it.
+ */
+export interface BetterAuthLike {
+    readonly api: {
+        getSession(args: {
+            readonly headers: Headers;
+        }): Promise<{
+            readonly user?: {
+                readonly id: string;
+                readonly email?: string | null;
+                readonly role?: string | null;
+                readonly [k: string]: unknown;
+            };
+            readonly session?: {
+                readonly id: string;
+                readonly [k: string]: unknown;
+            };
+            readonly [k: string]: unknown;
+        } | null | undefined>;
+    };
+}
+export interface BetterAuthAdapterOptions {
+    /** The Better Auth instance — typically the result of `betterAuth({...})`. */
+    readonly auth: BetterAuthLike;
+    /** Optional async claims loader; called once per session resolution. */
+    readonly claimsLoader?: (userId: string) => Promise<Readonly<Record<string, unknown>>>;
+}
+export declare function betterAuthAdapter(opts: BetterAuthAdapterOptions): AuthAdapter;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,cAAc,CAAA;AAK3D;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE;QACZ,UAAU,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CACpD;YACE,QAAQ,CAAC,IAAI,CAAC,EAAE;gBACd,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;gBACnB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;gBAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;gBAC7B,QAAQ,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;aAC9B,CAAA;YACD,QAAQ,CAAC,OAAO,CAAC,EAAE;gBAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;aAAE,CAAA;YACzE,QAAQ,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;SAC9B,GACD,IAAI,GACJ,SAAS,CACZ,CAAA;KACF,CAAA;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;CACvF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,WAAW,CA2B7E"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @saacms/auth-better-auth — public surface.
+ *
+ * A thin shim adapting Better Auth's session-resolution API to saacms's
+ * `AuthAdapter` interface (per ADR 0008 + ADR 0020). Hosts wire this up so
+ * the runtime's `auth-middleware` can populate `c.set("user", user)` per
+ * request.
+ *
+ * v1 alpha: scaffold. Real implementation lands via a sandcastle dispatch.
+ */
+export { betterAuthAdapter } from "./adapter.ts";
+export type { BetterAuthAdapterOptions, BetterAuthLike } from "./adapter.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,42 @@
+// src/adapter.ts
+import { id } from "@saacms/core";
+var LOG_PREFIX = "[saacms/auth]";
+function betterAuthAdapter(opts) {
+  return {
+    name: "better-auth",
+    async getSession(request) {
+      let session;
+      try {
+        session = await opts.auth.api.getSession({ headers: request.headers });
+      } catch (err) {
+        console.warn(`${LOG_PREFIX} getSession threw:`, err);
+        return null;
+      }
+      if (session == null || session.user == null) {
+        return null;
+      }
+      const baUser = session.user;
+      const claims = await loadClaims(opts.claimsLoader, baUser.id);
+      return {
+        id: id.user(baUser.id),
+        email: baUser.email ?? null,
+        role: baUser.role ?? "user",
+        claims
+      };
+    }
+  };
+}
+async function loadClaims(loader, userId) {
+  if (loader == null) {
+    return {};
+  }
+  try {
+    return { ...await loader(userId) };
+  } catch (err) {
+    console.warn(`${LOG_PREFIX} claimsLoader threw:`, err);
+    return {};
+  }
+}
+export {
+  betterAuthAdapter
+};

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@saacms/auth-better-auth",
+  "version": "0.1.0",
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc --build",
+    "typecheck": "tsc --build --noEmit",
+    "prepack": "cp package.json package.json.pack-bak && bun run ../../scripts/prepack-pkg.ts",
+    "postpack": "mv package.json.pack-bak package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@saacms/core": "workspace:*"
+  },
+  "peerDependencies": {
+    "better-auth": "^1.0.0"
+  },
+  "peerDependenciesMeta": {
+    "better-auth": {
+      "optional": false
+    }
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "typescript": "^5.7.0"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts"
+}