@telestack/auth-sdk 1.0.2 → 1.1.0

package/dist/index.d.mts

@@ -88,6 +88,7 @@ interface SAMLConfig {
 interface TelestackConfig {
     url: string;
     tenantId: string;
+    apiKey?: string;
     googleClientId?: string;
     fetchOptions?: any;
 }

package/dist/index.d.ts

@@ -88,6 +88,7 @@ interface SAMLConfig {
 interface TelestackConfig {
     url: string;
     tenantId: string;
+    apiKey?: string;
     googleClientId?: string;
     fetchOptions?: any;
 }

package/dist/index.js

@@ -1,2 +1,266 @@
-"use strict";var c=Object.defineProperty;var y=Object.getOwnPropertyDescriptor;var I=Object.getOwnPropertyNames;var w=Object.prototype.hasOwnProperty;var C=(a,n)=>{for(var s in n)c(a,s,{get:n[s],enumerable:!0})},b=(a,n,s,r)=>{if(n&&typeof n=="object"||typeof n=="function")for(let e of I(n))!w.call(a,e)&&e!==s&&c(a,e,{get:()=>n[e],enumerable:!(r=y(n,e))||r.enumerable});return a};var A=a=>b(c({},"__esModule",{value:!0}),a);var v={};C(v,{TelestackAuth:()=>u,createTelestackAuth:()=>g});module.exports=A(v);var m=require("better-auth/client"),t=require("better-auth/client/plugins"),d=require("@better-auth/passkey/client"),f=require("@better-auth/sso/client"),g=a=>{let n=null,s=null,r=null,e=(0,m.createAuthClient)({baseURL:`${a.url}/api/v1/${a.tenantId}/auth`,fetchOptions:a.fetchOptions,plugins:[(0,t.magicLinkClient)(),(0,d.passkeyClient)(),(0,t.organizationClient)(),(0,f.ssoClient)(),(0,t.twoFactorClient)(),(0,t.usernameClient)(),(0,t.multiSessionClient)(),(0,t.jwtClient)(),(0,t.adminClient)(),(0,t.apiKeyClient)(),(0,t.phoneNumberClient)(),(0,t.emailOTPClient)(),(0,t.anonymousClient)(),(0,t.genericOAuthClient)(),(0,t.oneTimeTokenClient)(),(0,t.deviceAuthorizationClient)(),...a?.googleClientId?[(0,t.oneTapClient)({clientId:a.googleClientId})]:[]]}),p=e.useSession;p&&p.subscribe(i=>{n=i?.data});let h=e.organization?.useActiveOrganization;return h&&h.subscribe(i=>{s=i?.data}),{rawClient:e,auth:{signInWithEmail:e.signIn.email,signInWithUsername:e.signIn.username,signInWithPhone:e.signIn.phoneNumber,signInWithGoogle:i=>e.signIn.social({provider:"google",...i}),signInWithGithub:i=>e.signIn.social({provider:"github",...i}),signInWithPasskey:e.signIn.passkey,signInAnonymously:e.signIn.anonymous,sendMagicLink:async i=>await e.signIn.magicLink({email:i.email,callbackURL:i.callbackURL||window.location.href}),signInWithMagicLink:e.signIn.magicLink,sendOtp:async i=>await e.emailOtp.sendVerificationOtp({email:i.email,type:"sign-in"}),signInWithOtp:e.signIn.emailOtp,signInWithSiwe:e.siwe?.signIn,signUpWithEmail:e.signUp.email,signOut:e.signOut,verifyEmail:e.verifyEmail,forgetPassword:e.forgetPassword,resetPassword:e.resetPassword},mfa:{enableTwoFactor:e.twoFactor.enable,disableTwoFactor:e.twoFactor.disable,sendOtp:e.twoFactor.sendOtp,verifyOtp:e.twoFactor.verifyTotp},user:{getSession:async()=>{let i=await e.getSession();return n=i?.data,i},listSessions:e.listSessions,updateProfile:e.updateUser,changeEmail:e.changeEmail,changePassword:e.changePassword,deleteAccount:e.deleteUser},organization:{create:e.organization.create,update:e.organization.update,setActive:e.organization.setActive,list:async()=>{let i=await e.organization.list();return r=i?.data,i},inviteMember:e.organization.inviteMember,acceptInvitation:e.organization.acceptInvitation,rejectInvitation:e.organization.rejectInvitation,removeMember:e.organization.removeMember},admin:{listUsers:e.admin.listUsers,impersonateUser:e.admin.impersonateUser,banUser:e.admin.banUser},sso:{signIn:e.signIn.sso,register:e.sso.register},apiKey:{create:e.apiKey.create,list:e.apiKey.list,delete:e.apiKey.delete},get currentUser(){return{get profile(){return n?.user},get security(){return{mfaEnabled:n?.user?.twoFactorEnabled||!1,lastLogin:n?.user?.updatedAt,isAnonymous:n?.user?.isAnonymous||!1}},get organizations(){return{active:s,all:r}},get session(){return{id:n?.session?.id,expiresAt:n?.session?.expiresAt,userAgent:n?.session?.userAgent}}}},onAuthStateChanged(i){let o=e.useSession;return o?o.subscribe(l=>{i(l?.data?.user||null)}):()=>{}},async syncState(){let i=await e.getSession();if(n=i?.data,e.organization){let[o,l]=await Promise.all([e.organization.list(),e.organization.getActiveOrganization()]);r=o?.data,s=l?.data}return i}}},u=class{static instance=null;static config=null;static initialize(n){return this.config=n,this.instance=g(n),this.instance}static updateConfig(n){if(!this.config)throw new Error("Initialize SDK first");return this.config={...this.config,...n},this.instance=g(this.config),this.instance}static setToken(n){if(!this.config)throw new Error("Initialize SDK first");return this.updateConfig({fetchOptions:{...this.config.fetchOptions,headers:{...this.config.fetchOptions?.headers,Authorization:`Bearer ${n}`}}})}static getInstance(){if(!this.instance)throw new Error("TelestackAuth has not been initialized. Call initialize(config) first.");return this.instance}};0&&(module.exports={TelestackAuth,createTelestackAuth});
+import { createRequire } from "module"; const require = createRequire(import.meta.url);
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  TelestackAuth: () => TelestackAuth,
+  createTelestackAuth: () => createTelestackAuth
+});
+module.exports = __toCommonJS(index_exports);
+var import_client = require("better-auth/client");
+var import_plugins = require("better-auth/client/plugins");
+var import_client2 = require("@better-auth/passkey/client");
+var import_client3 = require("@better-auth/sso/client");
+var createTelestackAuth = (config) => {
+  let internalSession = null;
+  let internalActiveOrg = null;
+  let internalOrgs = null;
+  const rawClient = (0, import_client.createAuthClient)({
+    baseURL: `${config.url}/api/v1/${config.tenantId}/auth`,
+    fetchOptions: {
+      ...config.fetchOptions,
+      headers: {
+        ...config.fetchOptions?.headers,
+        ...config.apiKey ? { "X-Telestack-API-Key": config.apiKey } : {}
+      }
+    },
+    plugins: [
+      (0, import_plugins.magicLinkClient)(),
+      (0, import_client2.passkeyClient)(),
+      (0, import_plugins.organizationClient)(),
+      (0, import_client3.ssoClient)(),
+      (0, import_plugins.twoFactorClient)(),
+      (0, import_plugins.usernameClient)(),
+      (0, import_plugins.multiSessionClient)(),
+      (0, import_plugins.jwtClient)(),
+      (0, import_plugins.adminClient)(),
+      (0, import_plugins.apiKeyClient)(),
+      (0, import_plugins.phoneNumberClient)(),
+      (0, import_plugins.emailOTPClient)(),
+      (0, import_plugins.anonymousClient)(),
+      (0, import_plugins.genericOAuthClient)(),
+      (0, import_plugins.oneTimeTokenClient)(),
+      (0, import_plugins.deviceAuthorizationClient)(),
+      ...config?.googleClientId ? [(0, import_plugins.oneTapClient)({ clientId: config.googleClientId })] : []
+    ]
+  });
+  const sessionAtom = rawClient.useSession;
+  if (sessionAtom) {
+    sessionAtom.subscribe((state) => {
+      internalSession = state?.data;
+    });
+  }
+  const activeOrgAtom = rawClient.organization?.useActiveOrganization;
+  if (activeOrgAtom) {
+    activeOrgAtom.subscribe((state) => {
+      internalActiveOrg = state?.data;
+    });
+  }
+  return {
+    rawClient,
+    auth: {
+      signInWithEmail: rawClient.signIn.email,
+      signInWithUsername: rawClient.signIn.username,
+      signInWithPhone: rawClient.signIn.phoneNumber,
+      signInWithGoogle: (options) => rawClient.signIn.social({ provider: "google", ...options }),
+      signInWithGithub: (options) => rawClient.signIn.social({ provider: "github", ...options }),
+      signInWithPasskey: rawClient.signIn.passkey,
+      signInAnonymously: rawClient.signIn.anonymous,
+      sendMagicLink: async (options) => {
+        return await rawClient.signIn.magicLink({
+          email: options.email,
+          callbackURL: options.callbackURL || window.location.href
+        });
+      },
+      signInWithMagicLink: rawClient.signIn.magicLink,
+      sendOtp: async (options) => {
+        return await rawClient.emailOtp.sendVerificationOtp({
+          email: options.email,
+          type: "sign-in"
+        });
+      },
+      signInWithOtp: rawClient.signIn.emailOtp,
+      signInWithSiwe: rawClient.siwe?.signIn,
+      signUpWithEmail: rawClient.signUp.email,
+      signOut: rawClient.signOut,
+      verifyEmail: rawClient.verifyEmail,
+      forgetPassword: rawClient.forgetPassword,
+      resetPassword: rawClient.resetPassword
+    },
+    mfa: {
+      enableTwoFactor: rawClient.twoFactor.enable,
+      disableTwoFactor: rawClient.twoFactor.disable,
+      sendOtp: rawClient.twoFactor.sendOtp,
+      verifyOtp: rawClient.twoFactor.verifyTotp
+    },
+    user: {
+      getSession: async () => {
+        const res = await rawClient.getSession();
+        internalSession = res?.data;
+        return res;
+      },
+      listSessions: rawClient.listSessions,
+      updateProfile: rawClient.updateUser,
+      changeEmail: rawClient.changeEmail,
+      changePassword: rawClient.changePassword,
+      deleteAccount: rawClient.deleteUser
+    },
+    organization: {
+      create: rawClient.organization.create,
+      update: rawClient.organization.update,
+      setActive: rawClient.organization.setActive,
+      list: async () => {
+        const res = await rawClient.organization.list();
+        internalOrgs = res?.data;
+        return res;
+      },
+      inviteMember: rawClient.organization.inviteMember,
+      acceptInvitation: rawClient.organization.acceptInvitation,
+      rejectInvitation: rawClient.organization.rejectInvitation,
+      removeMember: rawClient.organization.removeMember
+    },
+    admin: {
+      listUsers: rawClient.admin.listUsers,
+      impersonateUser: rawClient.admin.impersonateUser,
+      banUser: rawClient.admin.banUser
+    },
+    sso: {
+      signIn: rawClient.signIn.sso,
+      register: rawClient.sso.register
+    },
+    apiKey: {
+      create: rawClient.apiKey.create,
+      list: rawClient.apiKey.list,
+      delete: rawClient.apiKey.delete
+    },
+    /**
+     * The Advanced User Context. Provides stateful access to user attributes,
+     * security status, and organizational roles without constant API calls.
+     */
+    get currentUser() {
+      return {
+        get profile() {
+          return internalSession?.user;
+        },
+        get security() {
+          return {
+            mfaEnabled: internalSession?.user?.twoFactorEnabled || false,
+            lastLogin: internalSession?.user?.updatedAt,
+            isAnonymous: internalSession?.user?.isAnonymous || false
+          };
+        },
+        get organizations() {
+          return {
+            active: internalActiveOrg,
+            all: internalOrgs
+          };
+        },
+        get session() {
+          return {
+            id: internalSession?.session?.id,
+            expiresAt: internalSession?.session?.expiresAt,
+            userAgent: internalSession?.session?.userAgent
+          };
+        }
+      };
+    },
+    /**
+     * Listens for authentication state changes (sign-in, sign-out, session refresh).
+     */
+    onAuthStateChanged(callback) {
+      const atom = rawClient.useSession;
+      if (atom) {
+        return atom.subscribe((state) => {
+          callback(state?.data?.user || null);
+        });
+      }
+      return () => {
+      };
+    },
+    /**
+     * Forces a synchronization of the local auth state with the server.
+     */
+    async syncState() {
+      const session = await rawClient.getSession();
+      internalSession = session?.data;
+      if (rawClient.organization) {
+        const [orgs, activeOrg] = await Promise.all([
+          rawClient.organization.list(),
+          rawClient.organization.getActiveOrganization()
+        ]);
+        internalOrgs = orgs?.data;
+        internalActiveOrg = activeOrg?.data;
+      }
+      return session;
+    }
+  };
+};
+var TelestackAuth = class {
+  static instance = null;
+  static config = null;
+  /**
+   * Initializes the TelestackAuth SDK. Must be called once at app startup.
+   */
+  static initialize(config) {
+    this.config = config;
+    this.instance = createTelestackAuth(config);
+    return this.instance;
+  }
+  /**
+   * Updates the SDK configuration (e.g., adding a token).
+   */
+  static updateConfig(config) {
+    if (!this.config) throw new Error("Initialize SDK first");
+    this.config = { ...this.config, ...config };
+    this.instance = createTelestackAuth(this.config);
+    return this.instance;
+  }
+  /**
+   * Sets the Bearer token for all subsequent requests.
+   */
+  static setToken(token) {
+    if (!this.config) throw new Error("Initialize SDK first");
+    return this.updateConfig({
+      fetchOptions: {
+        ...this.config.fetchOptions,
+        headers: {
+          ...this.config.fetchOptions?.headers,
+          "Authorization": `Bearer ${token}`
+        }
+      }
+    });
+  }
+  /**
+   * Retrieves the initialized instance of the SDK.
+   */
+  static getInstance() {
+    if (!this.instance) {
+      throw new Error("TelestackAuth has not been initialized. Call initialize(config) first.");
+    }
+    return this.instance;
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  TelestackAuth,
+  createTelestackAuth
+});
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createAuthClient } from \"better-auth/client\";\r\nimport {\r\n    magicLinkClient,\r\n    organizationClient,\r\n    twoFactorClient,\r\n    usernameClient,\r\n    multiSessionClient,\r\n    jwtClient,\r\n    adminClient,\r\n    apiKeyClient,\r\n    phoneNumberClient,\r\n    emailOTPClient,\r\n    oneTapClient,\r\n    genericOAuthClient,\r\n    oneTimeTokenClient,\r\n    deviceAuthorizationClient,\r\n    anonymousClient,\r\n} from \"better-auth/client/plugins\";\r\nimport { passkeyClient } from \"@better-auth/passkey/client\";\r\nimport { ssoClient } from \"@better-auth/sso/client\";\r\n\r\nexport interface TelestackConfig {\r\n    url: string;\r\n    tenantId: string;\r\n    googleClientId?: string;\r\n    fetchOptions?: any;\r\n}\r\n\r\n// Internal factory to preserve strict typing when wrapping methods\r\nexport const createTelestackAuth = (config: TelestackConfig) => {\r\n    let internalSession: any = null;\r\n    let internalActiveOrg: any = null;\r\n    let internalOrgs: any = null;\r\n\r\n    // Inlining the plugins array is MANDATORY for Better Auth strict TypeScript inference.\r\n    const rawClient = createAuthClient({\r\n        baseURL: `${config.url}/api/v1/${config.tenantId}/auth`,\r\n        fetchOptions: config.fetchOptions,\r\n        plugins: [\r\n            magicLinkClient(),\r\n            passkeyClient(),\r\n            organizationClient(),\r\n            ssoClient(),\r\n            twoFactorClient(),\r\n            usernameClient(),\r\n            multiSessionClient(),\r\n            jwtClient(),\r\n            adminClient(),\r\n            apiKeyClient(),\r\n            phoneNumberClient(),\r\n            emailOTPClient(),\r\n            anonymousClient(),\r\n            genericOAuthClient(),\r\n            oneTimeTokenClient(),\r\n            deviceAuthorizationClient(),\r\n            ...(config?.googleClientId ? [oneTapClient({ clientId: config.googleClientId })] : [])\r\n        ]\r\n    });\r\n\r\n    // Subscribe to atoms for live updates while the closure lives\r\n    const sessionAtom = (rawClient as any).useSession;\r\n    if (sessionAtom) {\r\n        sessionAtom.subscribe((state: any) => {\r\n            internalSession = state?.data;\r\n        });\r\n    }\r\n\r\n    const activeOrgAtom = (rawClient as any).organization?.useActiveOrganization;\r\n    if (activeOrgAtom) {\r\n        activeOrgAtom.subscribe((state: any) => {\r\n            internalActiveOrg = state?.data;\r\n        });\r\n    }\r\n\r\n    return {\r\n        rawClient,\r\n        auth: {\r\n            signInWithEmail: rawClient.signIn.email,\r\n            signInWithUsername: rawClient.signIn.username,\r\n            signInWithPhone: rawClient.signIn.phoneNumber,\r\n            signInWithGoogle: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"google\", ...options }),\r\n            signInWithGithub: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"github\", ...options }),\r\n            signInWithPasskey: rawClient.signIn.passkey,\r\n            signInAnonymously: rawClient.signIn.anonymous,\r\n            sendMagicLink: async (options: { email: string; callbackURL?: string }) => {\r\n                return await rawClient.signIn.magicLink({\r\n                    email: options.email,\r\n                    callbackURL: options.callbackURL || window.location.href,\r\n                });\r\n            },\r\n            signInWithMagicLink: rawClient.signIn.magicLink,\r\n            sendOtp: async (options: { email: string }) => {\r\n                return await rawClient.emailOtp.sendVerificationOtp({\r\n                    email: options.email,\r\n                    type: \"sign-in\"\r\n                });\r\n            },\r\n            signInWithOtp: rawClient.signIn.emailOtp,\r\n            signInWithSiwe: (rawClient as any).siwe?.signIn,\r\n            signUpWithEmail: rawClient.signUp.email,\r\n            signOut: rawClient.signOut,\r\n            verifyEmail: rawClient.verifyEmail,\r\n            forgetPassword: rawClient.forgetPassword,\r\n            resetPassword: rawClient.resetPassword,\r\n        },\r\n        mfa: {\r\n            enableTwoFactor: rawClient.twoFactor.enable,\r\n            disableTwoFactor: rawClient.twoFactor.disable,\r\n            sendOtp: rawClient.twoFactor.sendOtp,\r\n            verifyOtp: rawClient.twoFactor.verifyTotp,\r\n        },\r\n        user: {\r\n            getSession: async () => {\r\n                const res = await (rawClient.getSession() as any);\r\n                internalSession = res?.data;\r\n                return res;\r\n            },\r\n            listSessions: rawClient.listSessions,\r\n            updateProfile: rawClient.updateUser,\r\n            changeEmail: rawClient.changeEmail,\r\n            changePassword: rawClient.changePassword,\r\n            deleteAccount: rawClient.deleteUser,\r\n        },\r\n        organization: {\r\n            create: rawClient.organization.create,\r\n            update: rawClient.organization.update,\r\n            setActive: rawClient.organization.setActive,\r\n            list: async () => {\r\n                const res = await (rawClient.organization.list() as any);\r\n                internalOrgs = res?.data;\r\n                return res;\r\n            },\r\n            inviteMember: rawClient.organization.inviteMember,\r\n            acceptInvitation: rawClient.organization.acceptInvitation,\r\n            rejectInvitation: rawClient.organization.rejectInvitation,\r\n            removeMember: rawClient.organization.removeMember,\r\n        },\r\n        admin: {\r\n            listUsers: rawClient.admin.listUsers,\r\n            impersonateUser: rawClient.admin.impersonateUser,\r\n            banUser: rawClient.admin.banUser,\r\n        },\r\n        sso: {\r\n            signIn: rawClient.signIn.sso,\r\n            register: rawClient.sso.register,\r\n        },\r\n        apiKey: {\r\n            create: rawClient.apiKey.create,\r\n            list: rawClient.apiKey.list,\r\n            delete: rawClient.apiKey.delete\r\n        },\r\n        /**\r\n         * The Advanced User Context. Provides stateful access to user attributes,\r\n         * security status, and organizational roles without constant API calls.\r\n         */\r\n        get currentUser() {\r\n            return {\r\n                get profile() {\r\n                    return internalSession?.user;\r\n                },\r\n                get security() {\r\n                    return {\r\n                        mfaEnabled: internalSession?.user?.twoFactorEnabled || false,\r\n                        lastLogin: internalSession?.user?.updatedAt,\r\n                        isAnonymous: internalSession?.user?.isAnonymous || false,\r\n                    };\r\n                },\r\n                get organizations() {\r\n                    return {\r\n                        active: internalActiveOrg,\r\n                        all: internalOrgs,\r\n                    };\r\n                },\r\n                get session() {\r\n                    return {\r\n                        id: internalSession?.session?.id,\r\n                        expiresAt: internalSession?.session?.expiresAt,\r\n                        userAgent: internalSession?.session?.userAgent,\r\n                    };\r\n                },\r\n            };\r\n        },\r\n        /**\r\n         * Listens for authentication state changes (sign-in, sign-out, session refresh).\r\n         */\r\n        onAuthStateChanged(callback: (user: any | null) => void) {\r\n            const atom = (rawClient as any).useSession;\r\n            if (atom) {\r\n                return atom.subscribe((state: any) => {\r\n                    callback(state?.data?.user || null);\r\n                });\r\n            }\r\n            return () => { };\r\n        },\r\n        /**\r\n         * Forces a synchronization of the local auth state with the server.\r\n         */\r\n        async syncState() {\r\n            const session = await (rawClient.getSession() as any);\r\n            internalSession = session?.data;\r\n            if (rawClient.organization) {\r\n                const [orgs, activeOrg] = await Promise.all([\r\n                    (rawClient.organization as any).list(),\r\n                    (rawClient.organization as any).getActiveOrganization()\r\n                ]);\r\n                internalOrgs = (orgs as any)?.data;\r\n                internalActiveOrg = (activeOrg as any)?.data;\r\n            }\r\n            return session;\r\n        }\r\n    };\r\n};\r\n\r\nexport type TelestackAuthInstance = ReturnType<typeof createTelestackAuth>;\r\n\r\n/**\r\n * The core singleton SDK for TelestackAuth.\r\n * Designed entirely for extreme developer experience and Firebase-style fluency.\r\n */\r\nexport class TelestackAuth {\r\n    private static instance: TelestackAuthInstance | null = null;\r\n    private static config: TelestackConfig | null = null;\r\n\r\n    /**\r\n     * Initializes the TelestackAuth SDK. Must be called once at app startup.\r\n     */\r\n    public static initialize(config: TelestackConfig): TelestackAuthInstance {\r\n        this.config = config;\r\n        this.instance = createTelestackAuth(config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Updates the SDK configuration (e.g., adding a token).\r\n     */\r\n    public static updateConfig(config: Partial<TelestackConfig>): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        this.config = { ...this.config, ...config };\r\n        this.instance = createTelestackAuth(this.config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Sets the Bearer token for all subsequent requests.\r\n     */\r\n    public static setToken(token: string): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        return this.updateConfig({\r\n            fetchOptions: {\r\n                ...this.config.fetchOptions,\r\n                headers: {\r\n                    ...this.config.fetchOptions?.headers,\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            }\r\n        });\r\n    }\r\n\r\n    /**\r\n     * Retrieves the initialized instance of the SDK.\r\n     */\r\n    public static getInstance(): TelestackAuthInstance {\r\n        if (!this.instance) {\r\n            throw new Error(\"TelestackAuth has not been initialized. Call initialize(config) first.\");\r\n        }\r\n        return this.instance;\r\n    }\r\n}\r\n\r\n"],"mappings":"yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,mBAAAE,EAAA,wBAAAC,IAAA,eAAAC,EAAAJ,GAAA,IAAAK,EAAiC,8BACjCC,EAgBO,sCACPD,EAA8B,uCAC9BA,EAA0B,mCAUbF,EAAuBI,GAA4B,CAC5D,IAAIC,EAAuB,KACvBC,EAAyB,KACzBC,EAAoB,KAGlBC,KAAY,oBAAiB,CAC/B,QAAS,GAAGJ,EAAO,GAAG,WAAWA,EAAO,QAAQ,QAChD,aAAcA,EAAO,aACrB,QAAS,IACL,mBAAgB,KAChB,iBAAc,KACd,sBAAmB,KACnB,aAAU,KACV,mBAAgB,KAChB,kBAAe,KACf,sBAAmB,KACnB,aAAU,KACV,eAAY,KACZ,gBAAa,KACb,qBAAkB,KAClB,kBAAe,KACf,mBAAgB,KAChB,sBAAmB,KACnB,sBAAmB,KACnB,6BAA0B,EAC1B,GAAIA,GAAQ,eAAiB,IAAC,gBAAa,CAAE,SAAUA,EAAO,cAAe,CAAC,CAAC,EAAI,CAAC,CACxF,CACJ,CAAC,EAGKK,EAAeD,EAAkB,WACnCC,GACAA,EAAY,UAAWC,GAAe,CAClCL,EAAkBK,GAAO,IAC7B,CAAC,EAGL,IAAMC,EAAiBH,EAAkB,cAAc,sBACvD,OAAIG,GACAA,EAAc,UAAWD,GAAe,CACpCJ,EAAoBI,GAAO,IAC/B,CAAC,EAGE,CACH,UAAAF,EACA,KAAM,CACF,gBAAiBA,EAAU,OAAO,MAClC,mBAAoBA,EAAU,OAAO,SACrC,gBAAiBA,EAAU,OAAO,YAClC,iBAAmBI,GAA4DJ,EAAU,OAAO,OAAO,CAAE,SAAU,SAAU,GAAGI,CAAQ,CAAC,EACzI,iBAAmBA,GAA4DJ,EAAU,OAAO,OAAO,CAAE,SAAU,SAAU,GAAGI,CAAQ,CAAC,EACzI,kBAAmBJ,EAAU,OAAO,QACpC,kBAAmBA,EAAU,OAAO,UACpC,cAAe,MAAOI,GACX,MAAMJ,EAAU,OAAO,UAAU,CACpC,MAAOI,EAAQ,MACf,YAAaA,EAAQ,aAAe,OAAO,SAAS,IACxD,CAAC,EAEL,oBAAqBJ,EAAU,OAAO,UACtC,QAAS,MAAOI,GACL,MAAMJ,EAAU,SAAS,oBAAoB,CAChD,MAAOI,EAAQ,MACf,KAAM,SACV,CAAC,EAEL,cAAeJ,EAAU,OAAO,SAChC,eAAiBA,EAAkB,MAAM,OACzC,gBAAiBA,EAAU,OAAO,MAClC,QAASA,EAAU,QACnB,YAAaA,EAAU,YACvB,eAAgBA,EAAU,eAC1B,cAAeA,EAAU,aAC7B,EACA,IAAK,CACD,gBAAiBA,EAAU,UAAU,OACrC,iBAAkBA,EAAU,UAAU,QACtC,QAASA,EAAU,UAAU,QAC7B,UAAWA,EAAU,UAAU,UACnC,EACA,KAAM,CACF,WAAY,SAAY,CACpB,IAAMK,EAAM,MAAOL,EAAU,WAAW,EACxC,OAAAH,EAAkBQ,GAAK,KAChBA,CACX,EACA,aAAcL,EAAU,aACxB,cAAeA,EAAU,WACzB,YAAaA,EAAU,YACvB,eAAgBA,EAAU,eAC1B,cAAeA,EAAU,UAC7B,EACA,aAAc,CACV,OAAQA,EAAU,aAAa,OAC/B,OAAQA,EAAU,aAAa,OAC/B,UAAWA,EAAU,aAAa,UAClC,KAAM,SAAY,CACd,IAAMK,EAAM,MAAOL,EAAU,aAAa,KAAK,EAC/C,OAAAD,EAAeM,GAAK,KACbA,CACX,EACA,aAAcL,EAAU,aAAa,aACrC,iBAAkBA,EAAU,aAAa,iBACzC,iBAAkBA,EAAU,aAAa,iBACzC,aAAcA,EAAU,aAAa,YACzC,EACA,MAAO,CACH,UAAWA,EAAU,MAAM,UAC3B,gBAAiBA,EAAU,MAAM,gBACjC,QAASA,EAAU,MAAM,OAC7B,EACA,IAAK,CACD,OAAQA,EAAU,OAAO,IACzB,SAAUA,EAAU,IAAI,QAC5B,EACA,OAAQ,CACJ,OAAQA,EAAU,OAAO,OACzB,KAAMA,EAAU,OAAO,KACvB,OAAQA,EAAU,OAAO,MAC7B,EAKA,IAAI,aAAc,CACd,MAAO,CACH,IAAI,SAAU,CACV,OAAOH,GAAiB,IAC5B,EACA,IAAI,UAAW,CACX,MAAO,CACH,WAAYA,GAAiB,MAAM,kBAAoB,GACvD,UAAWA,GAAiB,MAAM,UAClC,YAAaA,GAAiB,MAAM,aAAe,EACvD,CACJ,EACA,IAAI,eAAgB,CAChB,MAAO,CACH,OAAQC,EACR,IAAKC,CACT,CACJ,EACA,IAAI,SAAU,CACV,MAAO,CACH,GAAIF,GAAiB,SAAS,GAC9B,UAAWA,GAAiB,SAAS,UACrC,UAAWA,GAAiB,SAAS,SACzC,CACJ,CACJ,CACJ,EAIA,mBAAmBS,EAAsC,CACrD,IAAMC,EAAQP,EAAkB,WAChC,OAAIO,EACOA,EAAK,UAAWL,GAAe,CAClCI,EAASJ,GAAO,MAAM,MAAQ,IAAI,CACtC,CAAC,EAEE,IAAM,CAAE,CACnB,EAIA,MAAM,WAAY,CACd,IAAMM,EAAU,MAAOR,EAAU,WAAW,EAE5C,GADAH,EAAkBW,GAAS,KACvBR,EAAU,aAAc,CACxB,GAAM,CAACS,EAAMC,CAAS,EAAI,MAAM,QAAQ,IAAI,CACvCV,EAAU,aAAqB,KAAK,EACpCA,EAAU,aAAqB,sBAAsB,CAC1D,CAAC,EACDD,EAAgBU,GAAc,KAC9BX,EAAqBY,GAAmB,IAC5C,CACA,OAAOF,CACX,CACJ,CACJ,EAQajB,EAAN,KAAoB,CACvB,OAAe,SAAyC,KACxD,OAAe,OAAiC,KAKhD,OAAc,WAAWK,EAAgD,CACrE,YAAK,OAASA,EACd,KAAK,SAAWJ,EAAoBI,CAAM,EACnC,KAAK,QAChB,CAKA,OAAc,aAAaA,EAAyD,CAChF,GAAI,CAAC,KAAK,OAAQ,MAAM,IAAI,MAAM,sBAAsB,EACxD,YAAK,OAAS,CAAE,GAAG,KAAK,OAAQ,GAAGA,CAAO,EAC1C,KAAK,SAAWJ,EAAoB,KAAK,MAAM,EACxC,KAAK,QAChB,CAKA,OAAc,SAASmB,EAAsC,CACzD,GAAI,CAAC,KAAK,OAAQ,MAAM,IAAI,MAAM,sBAAsB,EACxD,OAAO,KAAK,aAAa,CACrB,aAAc,CACV,GAAG,KAAK,OAAO,aACf,QAAS,CACL,GAAG,KAAK,OAAO,cAAc,QAC7B,cAAiB,UAAUA,CAAK,EACpC,CACJ,CACJ,CAAC,CACL,CAKA,OAAc,aAAqC,CAC/C,GAAI,CAAC,KAAK,SACN,MAAM,IAAI,MAAM,wEAAwE,EAE5F,OAAO,KAAK,QAChB,CACJ","names":["index_exports","__export","TelestackAuth","createTelestackAuth","__toCommonJS","import_client","import_plugins","config","internalSession","internalActiveOrg","internalOrgs","rawClient","sessionAtom","state","activeOrgAtom","options","res","callback","atom","session","orgs","activeOrg","token"]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createAuthClient } from \"better-auth/client\";\r\nimport {\r\n    magicLinkClient,\r\n    organizationClient,\r\n    twoFactorClient,\r\n    usernameClient,\r\n    multiSessionClient,\r\n    jwtClient,\r\n    adminClient,\r\n    apiKeyClient,\r\n    phoneNumberClient,\r\n    emailOTPClient,\r\n    oneTapClient,\r\n    genericOAuthClient,\r\n    oneTimeTokenClient,\r\n    deviceAuthorizationClient,\r\n    anonymousClient,\r\n} from \"better-auth/client/plugins\";\r\nimport { passkeyClient } from \"@better-auth/passkey/client\";\r\nimport { ssoClient } from \"@better-auth/sso/client\";\r\n\r\nexport interface TelestackConfig {\r\n    url: string;\r\n    tenantId: string;\r\n    apiKey?: string;\r\n    googleClientId?: string;\r\n    fetchOptions?: any;\r\n}\r\n\r\n// Internal factory to preserve strict typing when wrapping methods\r\nexport const createTelestackAuth = (config: TelestackConfig) => {\r\n    let internalSession: any = null;\r\n    let internalActiveOrg: any = null;\r\n    let internalOrgs: any = null;\r\n\r\n    // Inlining the plugins array is MANDATORY for Better Auth strict TypeScript inference.\r\n    const rawClient = createAuthClient({\r\n        baseURL: `${config.url}/api/v1/${config.tenantId}/auth`,\r\n        fetchOptions: {\r\n            ...config.fetchOptions,\r\n            headers: {\r\n                ...config.fetchOptions?.headers,\r\n                ...(config.apiKey ? { \"X-Telestack-API-Key\": config.apiKey } : {})\r\n            }\r\n        },\r\n        plugins: [\r\n            magicLinkClient(),\r\n            passkeyClient(),\r\n            organizationClient(),\r\n            ssoClient(),\r\n            twoFactorClient(),\r\n            usernameClient(),\r\n            multiSessionClient(),\r\n            jwtClient(),\r\n            adminClient(),\r\n            apiKeyClient(),\r\n            phoneNumberClient(),\r\n            emailOTPClient(),\r\n            anonymousClient(),\r\n            genericOAuthClient(),\r\n            oneTimeTokenClient(),\r\n            deviceAuthorizationClient(),\r\n            ...(config?.googleClientId ? [oneTapClient({ clientId: config.googleClientId })] : [])\r\n        ]\r\n    });\r\n\r\n    // Subscribe to atoms for live updates while the closure lives\r\n    const sessionAtom = (rawClient as any).useSession;\r\n    if (sessionAtom) {\r\n        sessionAtom.subscribe((state: any) => {\r\n            internalSession = state?.data;\r\n        });\r\n    }\r\n\r\n    const activeOrgAtom = (rawClient as any).organization?.useActiveOrganization;\r\n    if (activeOrgAtom) {\r\n        activeOrgAtom.subscribe((state: any) => {\r\n            internalActiveOrg = state?.data;\r\n        });\r\n    }\r\n\r\n    return {\r\n        rawClient,\r\n        auth: {\r\n            signInWithEmail: rawClient.signIn.email,\r\n            signInWithUsername: rawClient.signIn.username,\r\n            signInWithPhone: rawClient.signIn.phoneNumber,\r\n            signInWithGoogle: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"google\", ...options }),\r\n            signInWithGithub: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"github\", ...options }),\r\n            signInWithPasskey: rawClient.signIn.passkey,\r\n            signInAnonymously: rawClient.signIn.anonymous,\r\n            sendMagicLink: async (options: { email: string; callbackURL?: string }) => {\r\n                return await rawClient.signIn.magicLink({\r\n                    email: options.email,\r\n                    callbackURL: options.callbackURL || window.location.href,\r\n                });\r\n            },\r\n            signInWithMagicLink: rawClient.signIn.magicLink,\r\n            sendOtp: async (options: { email: string }) => {\r\n                return await rawClient.emailOtp.sendVerificationOtp({\r\n                    email: options.email,\r\n                    type: \"sign-in\"\r\n                });\r\n            },\r\n            signInWithOtp: rawClient.signIn.emailOtp,\r\n            signInWithSiwe: (rawClient as any).siwe?.signIn,\r\n            signUpWithEmail: rawClient.signUp.email,\r\n            signOut: rawClient.signOut,\r\n            verifyEmail: rawClient.verifyEmail,\r\n            forgetPassword: rawClient.forgetPassword,\r\n            resetPassword: rawClient.resetPassword,\r\n        },\r\n        mfa: {\r\n            enableTwoFactor: rawClient.twoFactor.enable,\r\n            disableTwoFactor: rawClient.twoFactor.disable,\r\n            sendOtp: rawClient.twoFactor.sendOtp,\r\n            verifyOtp: rawClient.twoFactor.verifyTotp,\r\n        },\r\n        user: {\r\n            getSession: async () => {\r\n                const res = await (rawClient.getSession() as any);\r\n                internalSession = res?.data;\r\n                return res;\r\n            },\r\n            listSessions: rawClient.listSessions,\r\n            updateProfile: rawClient.updateUser,\r\n            changeEmail: rawClient.changeEmail,\r\n            changePassword: rawClient.changePassword,\r\n            deleteAccount: rawClient.deleteUser,\r\n        },\r\n        organization: {\r\n            create: rawClient.organization.create,\r\n            update: rawClient.organization.update,\r\n            setActive: rawClient.organization.setActive,\r\n            list: async () => {\r\n                const res = await (rawClient.organization.list() as any);\r\n                internalOrgs = res?.data;\r\n                return res;\r\n            },\r\n            inviteMember: rawClient.organization.inviteMember,\r\n            acceptInvitation: rawClient.organization.acceptInvitation,\r\n            rejectInvitation: rawClient.organization.rejectInvitation,\r\n            removeMember: rawClient.organization.removeMember,\r\n        },\r\n        admin: {\r\n            listUsers: rawClient.admin.listUsers,\r\n            impersonateUser: rawClient.admin.impersonateUser,\r\n            banUser: rawClient.admin.banUser,\r\n        },\r\n        sso: {\r\n            signIn: rawClient.signIn.sso,\r\n            register: rawClient.sso.register,\r\n        },\r\n        apiKey: {\r\n            create: rawClient.apiKey.create,\r\n            list: rawClient.apiKey.list,\r\n            delete: rawClient.apiKey.delete\r\n        },\r\n        /**\r\n         * The Advanced User Context. Provides stateful access to user attributes,\r\n         * security status, and organizational roles without constant API calls.\r\n         */\r\n        get currentUser() {\r\n            return {\r\n                get profile() {\r\n                    return internalSession?.user;\r\n                },\r\n                get security() {\r\n                    return {\r\n                        mfaEnabled: internalSession?.user?.twoFactorEnabled || false,\r\n                        lastLogin: internalSession?.user?.updatedAt,\r\n                        isAnonymous: internalSession?.user?.isAnonymous || false,\r\n                    };\r\n                },\r\n                get organizations() {\r\n                    return {\r\n                        active: internalActiveOrg,\r\n                        all: internalOrgs,\r\n                    };\r\n                },\r\n                get session() {\r\n                    return {\r\n                        id: internalSession?.session?.id,\r\n                        expiresAt: internalSession?.session?.expiresAt,\r\n                        userAgent: internalSession?.session?.userAgent,\r\n                    };\r\n                },\r\n            };\r\n        },\r\n        /**\r\n         * Listens for authentication state changes (sign-in, sign-out, session refresh).\r\n         */\r\n        onAuthStateChanged(callback: (user: any | null) => void) {\r\n            const atom = (rawClient as any).useSession;\r\n            if (atom) {\r\n                return atom.subscribe((state: any) => {\r\n                    callback(state?.data?.user || null);\r\n                });\r\n            }\r\n            return () => { };\r\n        },\r\n        /**\r\n         * Forces a synchronization of the local auth state with the server.\r\n         */\r\n        async syncState() {\r\n            const session = await (rawClient.getSession() as any);\r\n            internalSession = session?.data;\r\n            if (rawClient.organization) {\r\n                const [orgs, activeOrg] = await Promise.all([\r\n                    (rawClient.organization as any).list(),\r\n                    (rawClient.organization as any).getActiveOrganization()\r\n                ]);\r\n                internalOrgs = (orgs as any)?.data;\r\n                internalActiveOrg = (activeOrg as any)?.data;\r\n            }\r\n            return session;\r\n        }\r\n    };\r\n};\r\n\r\nexport type TelestackAuthInstance = ReturnType<typeof createTelestackAuth>;\r\n\r\n/**\r\n * The core singleton SDK for TelestackAuth.\r\n * Designed entirely for extreme developer experience and Firebase-style fluency.\r\n */\r\nexport class TelestackAuth {\r\n    private static instance: TelestackAuthInstance | null = null;\r\n    private static config: TelestackConfig | null = null;\r\n\r\n    /**\r\n     * Initializes the TelestackAuth SDK. Must be called once at app startup.\r\n     */\r\n    public static initialize(config: TelestackConfig): TelestackAuthInstance {\r\n        this.config = config;\r\n        this.instance = createTelestackAuth(config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Updates the SDK configuration (e.g., adding a token).\r\n     */\r\n    public static updateConfig(config: Partial<TelestackConfig>): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        this.config = { ...this.config, ...config };\r\n        this.instance = createTelestackAuth(this.config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Sets the Bearer token for all subsequent requests.\r\n     */\r\n    public static setToken(token: string): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        return this.updateConfig({\r\n            fetchOptions: {\r\n                ...this.config.fetchOptions,\r\n                headers: {\r\n                    ...this.config.fetchOptions?.headers,\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            }\r\n        });\r\n    }\r\n\r\n    /**\r\n     * Retrieves the initialized instance of the SDK.\r\n     */\r\n    public static getInstance(): TelestackAuthInstance {\r\n        if (!this.instance) {\r\n            throw new Error(\"TelestackAuth has not been initialized. Call initialize(config) first.\");\r\n        }\r\n        return this.instance;\r\n    }\r\n}\r\n\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAiC;AACjC,qBAgBO;AACP,IAAAA,iBAA8B;AAC9B,IAAAA,iBAA0B;AAWnB,IAAM,sBAAsB,CAAC,WAA4B;AAC5D,MAAI,kBAAuB;AAC3B,MAAI,oBAAyB;AAC7B,MAAI,eAAoB;AAGxB,QAAM,gBAAY,gCAAiB;AAAA,IAC/B,SAAS,GAAG,OAAO,GAAG,WAAW,OAAO,QAAQ;AAAA,IAChD,cAAc;AAAA,MACV,GAAG,OAAO;AAAA,MACV,SAAS;AAAA,QACL,GAAG,OAAO,cAAc;AAAA,QACxB,GAAI,OAAO,SAAS,EAAE,uBAAuB,OAAO,OAAO,IAAI,CAAC;AAAA,MACpE;AAAA,IACJ;AAAA,IACA,SAAS;AAAA,UACL,gCAAgB;AAAA,UAChB,8BAAc;AAAA,UACd,mCAAmB;AAAA,UACnB,0BAAU;AAAA,UACV,gCAAgB;AAAA,UAChB,+BAAe;AAAA,UACf,mCAAmB;AAAA,UACnB,0BAAU;AAAA,UACV,4BAAY;AAAA,UACZ,6BAAa;AAAA,UACb,kCAAkB;AAAA,UAClB,+BAAe;AAAA,UACf,gCAAgB;AAAA,UAChB,mCAAmB;AAAA,UACnB,mCAAmB;AAAA,UACnB,0CAA0B;AAAA,MAC1B,GAAI,QAAQ,iBAAiB,KAAC,6BAAa,EAAE,UAAU,OAAO,eAAe,CAAC,CAAC,IAAI,CAAC;AAAA,IACxF;AAAA,EACJ,CAAC;AAGD,QAAM,cAAe,UAAkB;AACvC,MAAI,aAAa;AACb,gBAAY,UAAU,CAAC,UAAe;AAClC,wBAAkB,OAAO;AAAA,IAC7B,CAAC;AAAA,EACL;AAEA,QAAM,gBAAiB,UAAkB,cAAc;AACvD,MAAI,eAAe;AACf,kBAAc,UAAU,CAAC,UAAe;AACpC,0BAAoB,OAAO;AAAA,IAC/B,CAAC;AAAA,EACL;AAEA,SAAO;AAAA,IACH;AAAA,IACA,MAAM;AAAA,MACF,iBAAiB,UAAU,OAAO;AAAA,MAClC,oBAAoB,UAAU,OAAO;AAAA,MACrC,iBAAiB,UAAU,OAAO;AAAA,MAClC,kBAAkB,CAAC,YAA4D,UAAU,OAAO,OAAO,EAAE,UAAU,UAAU,GAAG,QAAQ,CAAC;AAAA,MACzI,kBAAkB,CAAC,YAA4D,UAAU,OAAO,OAAO,EAAE,UAAU,UAAU,GAAG,QAAQ,CAAC;AAAA,MACzI,mBAAmB,UAAU,OAAO;AAAA,MACpC,mBAAmB,UAAU,OAAO;AAAA,MACpC,eAAe,OAAO,YAAqD;AACvE,eAAO,MAAM,UAAU,OAAO,UAAU;AAAA,UACpC,OAAO,QAAQ;AAAA,UACf,aAAa,QAAQ,eAAe,OAAO,SAAS;AAAA,QACxD,CAAC;AAAA,MACL;AAAA,MACA,qBAAqB,UAAU,OAAO;AAAA,MACtC,SAAS,OAAO,YAA+B;AAC3C,eAAO,MAAM,UAAU,SAAS,oBAAoB;AAAA,UAChD,OAAO,QAAQ;AAAA,UACf,MAAM;AAAA,QACV,CAAC;AAAA,MACL;AAAA,MACA,eAAe,UAAU,OAAO;AAAA,MAChC,gBAAiB,UAAkB,MAAM;AAAA,MACzC,iBAAiB,UAAU,OAAO;AAAA,MAClC,SAAS,UAAU;AAAA,MACnB,aAAa,UAAU;AAAA,MACvB,gBAAgB,UAAU;AAAA,MAC1B,eAAe,UAAU;AAAA,IAC7B;AAAA,IACA,KAAK;AAAA,MACD,iBAAiB,UAAU,UAAU;AAAA,MACrC,kBAAkB,UAAU,UAAU;AAAA,MACtC,SAAS,UAAU,UAAU;AAAA,MAC7B,WAAW,UAAU,UAAU;AAAA,IACnC;AAAA,IACA,MAAM;AAAA,MACF,YAAY,YAAY;AACpB,cAAM,MAAM,MAAO,UAAU,WAAW;AACxC,0BAAkB,KAAK;AACvB,eAAO;AAAA,MACX;AAAA,MACA,cAAc,UAAU;AAAA,MACxB,eAAe,UAAU;AAAA,MACzB,aAAa,UAAU;AAAA,MACvB,gBAAgB,UAAU;AAAA,MAC1B,eAAe,UAAU;AAAA,IAC7B;AAAA,IACA,cAAc;AAAA,MACV,QAAQ,UAAU,aAAa;AAAA,MAC/B,QAAQ,UAAU,aAAa;AAAA,MAC/B,WAAW,UAAU,aAAa;AAAA,MAClC,MAAM,YAAY;AACd,cAAM,MAAM,MAAO,UAAU,aAAa,KAAK;AAC/C,uBAAe,KAAK;AACpB,eAAO;AAAA,MACX;AAAA,MACA,cAAc,UAAU,aAAa;AAAA,MACrC,kBAAkB,UAAU,aAAa;AAAA,MACzC,kBAAkB,UAAU,aAAa;AAAA,MACzC,cAAc,UAAU,aAAa;AAAA,IACzC;AAAA,IACA,OAAO;AAAA,MACH,WAAW,UAAU,MAAM;AAAA,MAC3B,iBAAiB,UAAU,MAAM;AAAA,MACjC,SAAS,UAAU,MAAM;AAAA,IAC7B;AAAA,IACA,KAAK;AAAA,MACD,QAAQ,UAAU,OAAO;AAAA,MACzB,UAAU,UAAU,IAAI;AAAA,IAC5B;AAAA,IACA,QAAQ;AAAA,MACJ,QAAQ,UAAU,OAAO;AAAA,MACzB,MAAM,UAAU,OAAO;AAAA,MACvB,QAAQ,UAAU,OAAO;AAAA,IAC7B;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,cAAc;AACd,aAAO;AAAA,QACH,IAAI,UAAU;AACV,iBAAO,iBAAiB;AAAA,QAC5B;AAAA,QACA,IAAI,WAAW;AACX,iBAAO;AAAA,YACH,YAAY,iBAAiB,MAAM,oBAAoB;AAAA,YACvD,WAAW,iBAAiB,MAAM;AAAA,YAClC,aAAa,iBAAiB,MAAM,eAAe;AAAA,UACvD;AAAA,QACJ;AAAA,QACA,IAAI,gBAAgB;AAChB,iBAAO;AAAA,YACH,QAAQ;AAAA,YACR,KAAK;AAAA,UACT;AAAA,QACJ;AAAA,QACA,IAAI,UAAU;AACV,iBAAO;AAAA,YACH,IAAI,iBAAiB,SAAS;AAAA,YAC9B,WAAW,iBAAiB,SAAS;AAAA,YACrC,WAAW,iBAAiB,SAAS;AAAA,UACzC;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA;AAAA;AAAA,IAIA,mBAAmB,UAAsC;AACrD,YAAM,OAAQ,UAAkB;AAChC,UAAI,MAAM;AACN,eAAO,KAAK,UAAU,CAAC,UAAe;AAClC,mBAAS,OAAO,MAAM,QAAQ,IAAI;AAAA,QACtC,CAAC;AAAA,MACL;AACA,aAAO,MAAM;AAAA,MAAE;AAAA,IACnB;AAAA;AAAA;AAAA;AAAA,IAIA,MAAM,YAAY;AACd,YAAM,UAAU,MAAO,UAAU,WAAW;AAC5C,wBAAkB,SAAS;AAC3B,UAAI,UAAU,cAAc;AACxB,cAAM,CAAC,MAAM,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,UACvC,UAAU,aAAqB,KAAK;AAAA,UACpC,UAAU,aAAqB,sBAAsB;AAAA,QAC1D,CAAC;AACD,uBAAgB,MAAc;AAC9B,4BAAqB,WAAmB;AAAA,MAC5C;AACA,aAAO;AAAA,IACX;AAAA,EACJ;AACJ;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACvB,OAAe,WAAyC;AAAA,EACxD,OAAe,SAAiC;AAAA;AAAA;AAAA;AAAA,EAKhD,OAAc,WAAW,QAAgD;AACrE,SAAK,SAAS;AACd,SAAK,WAAW,oBAAoB,MAAM;AAC1C,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,OAAc,aAAa,QAAyD;AAChF,QAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACxD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO;AAC1C,SAAK,WAAW,oBAAoB,KAAK,MAAM;AAC/C,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,OAAc,SAAS,OAAsC;AACzD,QAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACxD,WAAO,KAAK,aAAa;AAAA,MACrB,cAAc;AAAA,QACV,GAAG,KAAK,OAAO;AAAA,QACf,SAAS;AAAA,UACL,GAAG,KAAK,OAAO,cAAc;AAAA,UAC7B,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,OAAc,cAAqC;AAC/C,QAAI,CAAC,KAAK,UAAU;AAChB,YAAM,IAAI,MAAM,wEAAwE;AAAA,IAC5F;AACA,WAAO,KAAK;AAAA,EAChB;AACJ;","names":["import_client"]}

package/dist/index.mjs

@@ -1,2 +1,257 @@
-import{createAuthClient as p}from"better-auth/client";import{magicLinkClient as h,organizationClient as m,twoFactorClient as d,usernameClient as f,multiSessionClient as y,jwtClient as I,adminClient as w,apiKeyClient as C,phoneNumberClient as b,emailOTPClient as A,oneTapClient as v,genericOAuthClient as k,oneTimeTokenClient as z,deviceAuthorizationClient as O,anonymousClient as T}from"better-auth/client/plugins";import{passkeyClient as U}from"@better-auth/passkey/client";import{ssoClient as P}from"@better-auth/sso/client";var g=i=>{let n=null,s=null,r=null,e=p({baseURL:`${i.url}/api/v1/${i.tenantId}/auth`,fetchOptions:i.fetchOptions,plugins:[h(),U(),m(),P(),d(),f(),y(),I(),w(),C(),b(),A(),T(),k(),z(),O(),...i?.googleClientId?[v({clientId:i.googleClientId})]:[]]}),l=e.useSession;l&&l.subscribe(t=>{n=t?.data});let c=e.organization?.useActiveOrganization;return c&&c.subscribe(t=>{s=t?.data}),{rawClient:e,auth:{signInWithEmail:e.signIn.email,signInWithUsername:e.signIn.username,signInWithPhone:e.signIn.phoneNumber,signInWithGoogle:t=>e.signIn.social({provider:"google",...t}),signInWithGithub:t=>e.signIn.social({provider:"github",...t}),signInWithPasskey:e.signIn.passkey,signInAnonymously:e.signIn.anonymous,sendMagicLink:async t=>await e.signIn.magicLink({email:t.email,callbackURL:t.callbackURL||window.location.href}),signInWithMagicLink:e.signIn.magicLink,sendOtp:async t=>await e.emailOtp.sendVerificationOtp({email:t.email,type:"sign-in"}),signInWithOtp:e.signIn.emailOtp,signInWithSiwe:e.siwe?.signIn,signUpWithEmail:e.signUp.email,signOut:e.signOut,verifyEmail:e.verifyEmail,forgetPassword:e.forgetPassword,resetPassword:e.resetPassword},mfa:{enableTwoFactor:e.twoFactor.enable,disableTwoFactor:e.twoFactor.disable,sendOtp:e.twoFactor.sendOtp,verifyOtp:e.twoFactor.verifyTotp},user:{getSession:async()=>{let t=await e.getSession();return n=t?.data,t},listSessions:e.listSessions,updateProfile:e.updateUser,changeEmail:e.changeEmail,changePassword:e.changePassword,deleteAccount:e.deleteUser},organization:{create:e.organization.create,update:e.organization.update,setActive:e.organization.setActive,list:async()=>{let t=await e.organization.list();return r=t?.data,t},inviteMember:e.organization.inviteMember,acceptInvitation:e.organization.acceptInvitation,rejectInvitation:e.organization.rejectInvitation,removeMember:e.organization.removeMember},admin:{listUsers:e.admin.listUsers,impersonateUser:e.admin.impersonateUser,banUser:e.admin.banUser},sso:{signIn:e.signIn.sso,register:e.sso.register},apiKey:{create:e.apiKey.create,list:e.apiKey.list,delete:e.apiKey.delete},get currentUser(){return{get profile(){return n?.user},get security(){return{mfaEnabled:n?.user?.twoFactorEnabled||!1,lastLogin:n?.user?.updatedAt,isAnonymous:n?.user?.isAnonymous||!1}},get organizations(){return{active:s,all:r}},get session(){return{id:n?.session?.id,expiresAt:n?.session?.expiresAt,userAgent:n?.session?.userAgent}}}},onAuthStateChanged(t){let a=e.useSession;return a?a.subscribe(o=>{t(o?.data?.user||null)}):()=>{}},async syncState(){let t=await e.getSession();if(n=t?.data,e.organization){let[a,o]=await Promise.all([e.organization.list(),e.organization.getActiveOrganization()]);r=a?.data,s=o?.data}return t}}},u=class{static instance=null;static config=null;static initialize(n){return this.config=n,this.instance=g(n),this.instance}static updateConfig(n){if(!this.config)throw new Error("Initialize SDK first");return this.config={...this.config,...n},this.instance=g(this.config),this.instance}static setToken(n){if(!this.config)throw new Error("Initialize SDK first");return this.updateConfig({fetchOptions:{...this.config.fetchOptions,headers:{...this.config.fetchOptions?.headers,Authorization:`Bearer ${n}`}}})}static getInstance(){if(!this.instance)throw new Error("TelestackAuth has not been initialized. Call initialize(config) first.");return this.instance}};export{u as TelestackAuth,g as createTelestackAuth};
+import { createRequire } from "module"; const require = createRequire(import.meta.url);
+
+// src/index.ts
+import { createAuthClient } from "better-auth/client";
+import {
+  magicLinkClient,
+  organizationClient,
+  twoFactorClient,
+  usernameClient,
+  multiSessionClient,
+  jwtClient,
+  adminClient,
+  apiKeyClient,
+  phoneNumberClient,
+  emailOTPClient,
+  oneTapClient,
+  genericOAuthClient,
+  oneTimeTokenClient,
+  deviceAuthorizationClient,
+  anonymousClient
+} from "better-auth/client/plugins";
+import { passkeyClient } from "@better-auth/passkey/client";
+import { ssoClient } from "@better-auth/sso/client";
+var createTelestackAuth = (config) => {
+  let internalSession = null;
+  let internalActiveOrg = null;
+  let internalOrgs = null;
+  const rawClient = createAuthClient({
+    baseURL: `${config.url}/api/v1/${config.tenantId}/auth`,
+    fetchOptions: {
+      ...config.fetchOptions,
+      headers: {
+        ...config.fetchOptions?.headers,
+        ...config.apiKey ? { "X-Telestack-API-Key": config.apiKey } : {}
+      }
+    },
+    plugins: [
+      magicLinkClient(),
+      passkeyClient(),
+      organizationClient(),
+      ssoClient(),
+      twoFactorClient(),
+      usernameClient(),
+      multiSessionClient(),
+      jwtClient(),
+      adminClient(),
+      apiKeyClient(),
+      phoneNumberClient(),
+      emailOTPClient(),
+      anonymousClient(),
+      genericOAuthClient(),
+      oneTimeTokenClient(),
+      deviceAuthorizationClient(),
+      ...config?.googleClientId ? [oneTapClient({ clientId: config.googleClientId })] : []
+    ]
+  });
+  const sessionAtom = rawClient.useSession;
+  if (sessionAtom) {
+    sessionAtom.subscribe((state) => {
+      internalSession = state?.data;
+    });
+  }
+  const activeOrgAtom = rawClient.organization?.useActiveOrganization;
+  if (activeOrgAtom) {
+    activeOrgAtom.subscribe((state) => {
+      internalActiveOrg = state?.data;
+    });
+  }
+  return {
+    rawClient,
+    auth: {
+      signInWithEmail: rawClient.signIn.email,
+      signInWithUsername: rawClient.signIn.username,
+      signInWithPhone: rawClient.signIn.phoneNumber,
+      signInWithGoogle: (options) => rawClient.signIn.social({ provider: "google", ...options }),
+      signInWithGithub: (options) => rawClient.signIn.social({ provider: "github", ...options }),
+      signInWithPasskey: rawClient.signIn.passkey,
+      signInAnonymously: rawClient.signIn.anonymous,
+      sendMagicLink: async (options) => {
+        return await rawClient.signIn.magicLink({
+          email: options.email,
+          callbackURL: options.callbackURL || window.location.href
+        });
+      },
+      signInWithMagicLink: rawClient.signIn.magicLink,
+      sendOtp: async (options) => {
+        return await rawClient.emailOtp.sendVerificationOtp({
+          email: options.email,
+          type: "sign-in"
+        });
+      },
+      signInWithOtp: rawClient.signIn.emailOtp,
+      signInWithSiwe: rawClient.siwe?.signIn,
+      signUpWithEmail: rawClient.signUp.email,
+      signOut: rawClient.signOut,
+      verifyEmail: rawClient.verifyEmail,
+      forgetPassword: rawClient.forgetPassword,
+      resetPassword: rawClient.resetPassword
+    },
+    mfa: {
+      enableTwoFactor: rawClient.twoFactor.enable,
+      disableTwoFactor: rawClient.twoFactor.disable,
+      sendOtp: rawClient.twoFactor.sendOtp,
+      verifyOtp: rawClient.twoFactor.verifyTotp
+    },
+    user: {
+      getSession: async () => {
+        const res = await rawClient.getSession();
+        internalSession = res?.data;
+        return res;
+      },
+      listSessions: rawClient.listSessions,
+      updateProfile: rawClient.updateUser,
+      changeEmail: rawClient.changeEmail,
+      changePassword: rawClient.changePassword,
+      deleteAccount: rawClient.deleteUser
+    },
+    organization: {
+      create: rawClient.organization.create,
+      update: rawClient.organization.update,
+      setActive: rawClient.organization.setActive,
+      list: async () => {
+        const res = await rawClient.organization.list();
+        internalOrgs = res?.data;
+        return res;
+      },
+      inviteMember: rawClient.organization.inviteMember,
+      acceptInvitation: rawClient.organization.acceptInvitation,
+      rejectInvitation: rawClient.organization.rejectInvitation,
+      removeMember: rawClient.organization.removeMember
+    },
+    admin: {
+      listUsers: rawClient.admin.listUsers,
+      impersonateUser: rawClient.admin.impersonateUser,
+      banUser: rawClient.admin.banUser
+    },
+    sso: {
+      signIn: rawClient.signIn.sso,
+      register: rawClient.sso.register
+    },
+    apiKey: {
+      create: rawClient.apiKey.create,
+      list: rawClient.apiKey.list,
+      delete: rawClient.apiKey.delete
+    },
+    /**
+     * The Advanced User Context. Provides stateful access to user attributes,
+     * security status, and organizational roles without constant API calls.
+     */
+    get currentUser() {
+      return {
+        get profile() {
+          return internalSession?.user;
+        },
+        get security() {
+          return {
+            mfaEnabled: internalSession?.user?.twoFactorEnabled || false,
+            lastLogin: internalSession?.user?.updatedAt,
+            isAnonymous: internalSession?.user?.isAnonymous || false
+          };
+        },
+        get organizations() {
+          return {
+            active: internalActiveOrg,
+            all: internalOrgs
+          };
+        },
+        get session() {
+          return {
+            id: internalSession?.session?.id,
+            expiresAt: internalSession?.session?.expiresAt,
+            userAgent: internalSession?.session?.userAgent
+          };
+        }
+      };
+    },
+    /**
+     * Listens for authentication state changes (sign-in, sign-out, session refresh).
+     */
+    onAuthStateChanged(callback) {
+      const atom = rawClient.useSession;
+      if (atom) {
+        return atom.subscribe((state) => {
+          callback(state?.data?.user || null);
+        });
+      }
+      return () => {
+      };
+    },
+    /**
+     * Forces a synchronization of the local auth state with the server.
+     */
+    async syncState() {
+      const session = await rawClient.getSession();
+      internalSession = session?.data;
+      if (rawClient.organization) {
+        const [orgs, activeOrg] = await Promise.all([
+          rawClient.organization.list(),
+          rawClient.organization.getActiveOrganization()
+        ]);
+        internalOrgs = orgs?.data;
+        internalActiveOrg = activeOrg?.data;
+      }
+      return session;
+    }
+  };
+};
+var TelestackAuth = class {
+  static instance = null;
+  static config = null;
+  /**
+   * Initializes the TelestackAuth SDK. Must be called once at app startup.
+   */
+  static initialize(config) {
+    this.config = config;
+    this.instance = createTelestackAuth(config);
+    return this.instance;
+  }
+  /**
+   * Updates the SDK configuration (e.g., adding a token).
+   */
+  static updateConfig(config) {
+    if (!this.config) throw new Error("Initialize SDK first");
+    this.config = { ...this.config, ...config };
+    this.instance = createTelestackAuth(this.config);
+    return this.instance;
+  }
+  /**
+   * Sets the Bearer token for all subsequent requests.
+   */
+  static setToken(token) {
+    if (!this.config) throw new Error("Initialize SDK first");
+    return this.updateConfig({
+      fetchOptions: {
+        ...this.config.fetchOptions,
+        headers: {
+          ...this.config.fetchOptions?.headers,
+          "Authorization": `Bearer ${token}`
+        }
+      }
+    });
+  }
+  /**
+   * Retrieves the initialized instance of the SDK.
+   */
+  static getInstance() {
+    if (!this.instance) {
+      throw new Error("TelestackAuth has not been initialized. Call initialize(config) first.");
+    }
+    return this.instance;
+  }
+};
+export {
+  TelestackAuth,
+  createTelestackAuth
+};
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createAuthClient } from \"better-auth/client\";\r\nimport {\r\n    magicLinkClient,\r\n    organizationClient,\r\n    twoFactorClient,\r\n    usernameClient,\r\n    multiSessionClient,\r\n    jwtClient,\r\n    adminClient,\r\n    apiKeyClient,\r\n    phoneNumberClient,\r\n    emailOTPClient,\r\n    oneTapClient,\r\n    genericOAuthClient,\r\n    oneTimeTokenClient,\r\n    deviceAuthorizationClient,\r\n    anonymousClient,\r\n} from \"better-auth/client/plugins\";\r\nimport { passkeyClient } from \"@better-auth/passkey/client\";\r\nimport { ssoClient } from \"@better-auth/sso/client\";\r\n\r\nexport interface TelestackConfig {\r\n    url: string;\r\n    tenantId: string;\r\n    googleClientId?: string;\r\n    fetchOptions?: any;\r\n}\r\n\r\n// Internal factory to preserve strict typing when wrapping methods\r\nexport const createTelestackAuth = (config: TelestackConfig) => {\r\n    let internalSession: any = null;\r\n    let internalActiveOrg: any = null;\r\n    let internalOrgs: any = null;\r\n\r\n    // Inlining the plugins array is MANDATORY for Better Auth strict TypeScript inference.\r\n    const rawClient = createAuthClient({\r\n        baseURL: `${config.url}/api/v1/${config.tenantId}/auth`,\r\n        fetchOptions: config.fetchOptions,\r\n        plugins: [\r\n            magicLinkClient(),\r\n            passkeyClient(),\r\n            organizationClient(),\r\n            ssoClient(),\r\n            twoFactorClient(),\r\n            usernameClient(),\r\n            multiSessionClient(),\r\n            jwtClient(),\r\n            adminClient(),\r\n            apiKeyClient(),\r\n            phoneNumberClient(),\r\n            emailOTPClient(),\r\n            anonymousClient(),\r\n            genericOAuthClient(),\r\n            oneTimeTokenClient(),\r\n            deviceAuthorizationClient(),\r\n            ...(config?.googleClientId ? [oneTapClient({ clientId: config.googleClientId })] : [])\r\n        ]\r\n    });\r\n\r\n    // Subscribe to atoms for live updates while the closure lives\r\n    const sessionAtom = (rawClient as any).useSession;\r\n    if (sessionAtom) {\r\n        sessionAtom.subscribe((state: any) => {\r\n            internalSession = state?.data;\r\n        });\r\n    }\r\n\r\n    const activeOrgAtom = (rawClient as any).organization?.useActiveOrganization;\r\n    if (activeOrgAtom) {\r\n        activeOrgAtom.subscribe((state: any) => {\r\n            internalActiveOrg = state?.data;\r\n        });\r\n    }\r\n\r\n    return {\r\n        rawClient,\r\n        auth: {\r\n            signInWithEmail: rawClient.signIn.email,\r\n            signInWithUsername: rawClient.signIn.username,\r\n            signInWithPhone: rawClient.signIn.phoneNumber,\r\n            signInWithGoogle: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"google\", ...options }),\r\n            signInWithGithub: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"github\", ...options }),\r\n            signInWithPasskey: rawClient.signIn.passkey,\r\n            signInAnonymously: rawClient.signIn.anonymous,\r\n            sendMagicLink: async (options: { email: string; callbackURL?: string }) => {\r\n                return await rawClient.signIn.magicLink({\r\n                    email: options.email,\r\n                    callbackURL: options.callbackURL || window.location.href,\r\n                });\r\n            },\r\n            signInWithMagicLink: rawClient.signIn.magicLink,\r\n            sendOtp: async (options: { email: string }) => {\r\n                return await rawClient.emailOtp.sendVerificationOtp({\r\n                    email: options.email,\r\n                    type: \"sign-in\"\r\n                });\r\n            },\r\n            signInWithOtp: rawClient.signIn.emailOtp,\r\n            signInWithSiwe: (rawClient as any).siwe?.signIn,\r\n            signUpWithEmail: rawClient.signUp.email,\r\n            signOut: rawClient.signOut,\r\n            verifyEmail: rawClient.verifyEmail,\r\n            forgetPassword: rawClient.forgetPassword,\r\n            resetPassword: rawClient.resetPassword,\r\n        },\r\n        mfa: {\r\n            enableTwoFactor: rawClient.twoFactor.enable,\r\n            disableTwoFactor: rawClient.twoFactor.disable,\r\n            sendOtp: rawClient.twoFactor.sendOtp,\r\n            verifyOtp: rawClient.twoFactor.verifyTotp,\r\n        },\r\n        user: {\r\n            getSession: async () => {\r\n                const res = await (rawClient.getSession() as any);\r\n                internalSession = res?.data;\r\n                return res;\r\n            },\r\n            listSessions: rawClient.listSessions,\r\n            updateProfile: rawClient.updateUser,\r\n            changeEmail: rawClient.changeEmail,\r\n            changePassword: rawClient.changePassword,\r\n            deleteAccount: rawClient.deleteUser,\r\n        },\r\n        organization: {\r\n            create: rawClient.organization.create,\r\n            update: rawClient.organization.update,\r\n            setActive: rawClient.organization.setActive,\r\n            list: async () => {\r\n                const res = await (rawClient.organization.list() as any);\r\n                internalOrgs = res?.data;\r\n                return res;\r\n            },\r\n            inviteMember: rawClient.organization.inviteMember,\r\n            acceptInvitation: rawClient.organization.acceptInvitation,\r\n            rejectInvitation: rawClient.organization.rejectInvitation,\r\n            removeMember: rawClient.organization.removeMember,\r\n        },\r\n        admin: {\r\n            listUsers: rawClient.admin.listUsers,\r\n            impersonateUser: rawClient.admin.impersonateUser,\r\n            banUser: rawClient.admin.banUser,\r\n        },\r\n        sso: {\r\n            signIn: rawClient.signIn.sso,\r\n            register: rawClient.sso.register,\r\n        },\r\n        apiKey: {\r\n            create: rawClient.apiKey.create,\r\n            list: rawClient.apiKey.list,\r\n            delete: rawClient.apiKey.delete\r\n        },\r\n        /**\r\n         * The Advanced User Context. Provides stateful access to user attributes,\r\n         * security status, and organizational roles without constant API calls.\r\n         */\r\n        get currentUser() {\r\n            return {\r\n                get profile() {\r\n                    return internalSession?.user;\r\n                },\r\n                get security() {\r\n                    return {\r\n                        mfaEnabled: internalSession?.user?.twoFactorEnabled || false,\r\n                        lastLogin: internalSession?.user?.updatedAt,\r\n                        isAnonymous: internalSession?.user?.isAnonymous || false,\r\n                    };\r\n                },\r\n                get organizations() {\r\n                    return {\r\n                        active: internalActiveOrg,\r\n                        all: internalOrgs,\r\n                    };\r\n                },\r\n                get session() {\r\n                    return {\r\n                        id: internalSession?.session?.id,\r\n                        expiresAt: internalSession?.session?.expiresAt,\r\n                        userAgent: internalSession?.session?.userAgent,\r\n                    };\r\n                },\r\n            };\r\n        },\r\n        /**\r\n         * Listens for authentication state changes (sign-in, sign-out, session refresh).\r\n         */\r\n        onAuthStateChanged(callback: (user: any | null) => void) {\r\n            const atom = (rawClient as any).useSession;\r\n            if (atom) {\r\n                return atom.subscribe((state: any) => {\r\n                    callback(state?.data?.user || null);\r\n                });\r\n            }\r\n            return () => { };\r\n        },\r\n        /**\r\n         * Forces a synchronization of the local auth state with the server.\r\n         */\r\n        async syncState() {\r\n            const session = await (rawClient.getSession() as any);\r\n            internalSession = session?.data;\r\n            if (rawClient.organization) {\r\n                const [orgs, activeOrg] = await Promise.all([\r\n                    (rawClient.organization as any).list(),\r\n                    (rawClient.organization as any).getActiveOrganization()\r\n                ]);\r\n                internalOrgs = (orgs as any)?.data;\r\n                internalActiveOrg = (activeOrg as any)?.data;\r\n            }\r\n            return session;\r\n        }\r\n    };\r\n};\r\n\r\nexport type TelestackAuthInstance = ReturnType<typeof createTelestackAuth>;\r\n\r\n/**\r\n * The core singleton SDK for TelestackAuth.\r\n * Designed entirely for extreme developer experience and Firebase-style fluency.\r\n */\r\nexport class TelestackAuth {\r\n    private static instance: TelestackAuthInstance | null = null;\r\n    private static config: TelestackConfig | null = null;\r\n\r\n    /**\r\n     * Initializes the TelestackAuth SDK. Must be called once at app startup.\r\n     */\r\n    public static initialize(config: TelestackConfig): TelestackAuthInstance {\r\n        this.config = config;\r\n        this.instance = createTelestackAuth(config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Updates the SDK configuration (e.g., adding a token).\r\n     */\r\n    public static updateConfig(config: Partial<TelestackConfig>): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        this.config = { ...this.config, ...config };\r\n        this.instance = createTelestackAuth(this.config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Sets the Bearer token for all subsequent requests.\r\n     */\r\n    public static setToken(token: string): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        return this.updateConfig({\r\n            fetchOptions: {\r\n                ...this.config.fetchOptions,\r\n                headers: {\r\n                    ...this.config.fetchOptions?.headers,\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            }\r\n        });\r\n    }\r\n\r\n    /**\r\n     * Retrieves the initialized instance of the SDK.\r\n     */\r\n    public static getInstance(): TelestackAuthInstance {\r\n        if (!this.instance) {\r\n            throw new Error(\"TelestackAuth has not been initialized. Call initialize(config) first.\");\r\n        }\r\n        return this.instance;\r\n    }\r\n}\r\n\r\n"],"mappings":"AAAA,OAAS,oBAAAA,MAAwB,qBACjC,OACI,mBAAAC,EACA,sBAAAC,EACA,mBAAAC,EACA,kBAAAC,EACA,sBAAAC,EACA,aAAAC,EACA,eAAAC,EACA,gBAAAC,EACA,qBAAAC,EACA,kBAAAC,EACA,gBAAAC,EACA,sBAAAC,EACA,sBAAAC,EACA,6BAAAC,EACA,mBAAAC,MACG,6BACP,OAAS,iBAAAC,MAAqB,8BAC9B,OAAS,aAAAC,MAAiB,0BAUnB,IAAMC,EAAuBC,GAA4B,CAC5D,IAAIC,EAAuB,KACvBC,EAAyB,KACzBC,EAAoB,KAGlBC,EAAYvB,EAAiB,CAC/B,QAAS,GAAGmB,EAAO,GAAG,WAAWA,EAAO,QAAQ,QAChD,aAAcA,EAAO,aACrB,QAAS,CACLlB,EAAgB,EAChBe,EAAc,EACdd,EAAmB,EACnBe,EAAU,EACVd,EAAgB,EAChBC,EAAe,EACfC,EAAmB,EACnBC,EAAU,EACVC,EAAY,EACZC,EAAa,EACbC,EAAkB,EAClBC,EAAe,EACfK,EAAgB,EAChBH,EAAmB,EACnBC,EAAmB,EACnBC,EAA0B,EAC1B,GAAIK,GAAQ,eAAiB,CAACR,EAAa,CAAE,SAAUQ,EAAO,cAAe,CAAC,CAAC,EAAI,CAAC,CACxF,CACJ,CAAC,EAGKK,EAAeD,EAAkB,WACnCC,GACAA,EAAY,UAAWC,GAAe,CAClCL,EAAkBK,GAAO,IAC7B,CAAC,EAGL,IAAMC,EAAiBH,EAAkB,cAAc,sBACvD,OAAIG,GACAA,EAAc,UAAWD,GAAe,CACpCJ,EAAoBI,GAAO,IAC/B,CAAC,EAGE,CACH,UAAAF,EACA,KAAM,CACF,gBAAiBA,EAAU,OAAO,MAClC,mBAAoBA,EAAU,OAAO,SACrC,gBAAiBA,EAAU,OAAO,YAClC,iBAAmBI,GAA4DJ,EAAU,OAAO,OAAO,CAAE,SAAU,SAAU,GAAGI,CAAQ,CAAC,EACzI,iBAAmBA,GAA4DJ,EAAU,OAAO,OAAO,CAAE,SAAU,SAAU,GAAGI,CAAQ,CAAC,EACzI,kBAAmBJ,EAAU,OAAO,QACpC,kBAAmBA,EAAU,OAAO,UACpC,cAAe,MAAOI,GACX,MAAMJ,EAAU,OAAO,UAAU,CACpC,MAAOI,EAAQ,MACf,YAAaA,EAAQ,aAAe,OAAO,SAAS,IACxD,CAAC,EAEL,oBAAqBJ,EAAU,OAAO,UACtC,QAAS,MAAOI,GACL,MAAMJ,EAAU,SAAS,oBAAoB,CAChD,MAAOI,EAAQ,MACf,KAAM,SACV,CAAC,EAEL,cAAeJ,EAAU,OAAO,SAChC,eAAiBA,EAAkB,MAAM,OACzC,gBAAiBA,EAAU,OAAO,MAClC,QAASA,EAAU,QACnB,YAAaA,EAAU,YACvB,eAAgBA,EAAU,eAC1B,cAAeA,EAAU,aAC7B,EACA,IAAK,CACD,gBAAiBA,EAAU,UAAU,OACrC,iBAAkBA,EAAU,UAAU,QACtC,QAASA,EAAU,UAAU,QAC7B,UAAWA,EAAU,UAAU,UACnC,EACA,KAAM,CACF,WAAY,SAAY,CACpB,IAAMK,EAAM,MAAOL,EAAU,WAAW,EACxC,OAAAH,EAAkBQ,GAAK,KAChBA,CACX,EACA,aAAcL,EAAU,aACxB,cAAeA,EAAU,WACzB,YAAaA,EAAU,YACvB,eAAgBA,EAAU,eAC1B,cAAeA,EAAU,UAC7B,EACA,aAAc,CACV,OAAQA,EAAU,aAAa,OAC/B,OAAQA,EAAU,aAAa,OAC/B,UAAWA,EAAU,aAAa,UAClC,KAAM,SAAY,CACd,IAAMK,EAAM,MAAOL,EAAU,aAAa,KAAK,EAC/C,OAAAD,EAAeM,GAAK,KACbA,CACX,EACA,aAAcL,EAAU,aAAa,aACrC,iBAAkBA,EAAU,aAAa,iBACzC,iBAAkBA,EAAU,aAAa,iBACzC,aAAcA,EAAU,aAAa,YACzC,EACA,MAAO,CACH,UAAWA,EAAU,MAAM,UAC3B,gBAAiBA,EAAU,MAAM,gBACjC,QAASA,EAAU,MAAM,OAC7B,EACA,IAAK,CACD,OAAQA,EAAU,OAAO,IACzB,SAAUA,EAAU,IAAI,QAC5B,EACA,OAAQ,CACJ,OAAQA,EAAU,OAAO,OACzB,KAAMA,EAAU,OAAO,KACvB,OAAQA,EAAU,OAAO,MAC7B,EAKA,IAAI,aAAc,CACd,MAAO,CACH,IAAI,SAAU,CACV,OAAOH,GAAiB,IAC5B,EACA,IAAI,UAAW,CACX,MAAO,CACH,WAAYA,GAAiB,MAAM,kBAAoB,GACvD,UAAWA,GAAiB,MAAM,UAClC,YAAaA,GAAiB,MAAM,aAAe,EACvD,CACJ,EACA,IAAI,eAAgB,CAChB,MAAO,CACH,OAAQC,EACR,IAAKC,CACT,CACJ,EACA,IAAI,SAAU,CACV,MAAO,CACH,GAAIF,GAAiB,SAAS,GAC9B,UAAWA,GAAiB,SAAS,UACrC,UAAWA,GAAiB,SAAS,SACzC,CACJ,CACJ,CACJ,EAIA,mBAAmBS,EAAsC,CACrD,IAAMC,EAAQP,EAAkB,WAChC,OAAIO,EACOA,EAAK,UAAWL,GAAe,CAClCI,EAASJ,GAAO,MAAM,MAAQ,IAAI,CACtC,CAAC,EAEE,IAAM,CAAE,CACnB,EAIA,MAAM,WAAY,CACd,IAAMM,EAAU,MAAOR,EAAU,WAAW,EAE5C,GADAH,EAAkBW,GAAS,KACvBR,EAAU,aAAc,CACxB,GAAM,CAACS,EAAMC,CAAS,EAAI,MAAM,QAAQ,IAAI,CACvCV,EAAU,aAAqB,KAAK,EACpCA,EAAU,aAAqB,sBAAsB,CAC1D,CAAC,EACDD,EAAgBU,GAAc,KAC9BX,EAAqBY,GAAmB,IAC5C,CACA,OAAOF,CACX,CACJ,CACJ,EAQaG,EAAN,KAAoB,CACvB,OAAe,SAAyC,KACxD,OAAe,OAAiC,KAKhD,OAAc,WAAWf,EAAgD,CACrE,YAAK,OAASA,EACd,KAAK,SAAWD,EAAoBC,CAAM,EACnC,KAAK,QAChB,CAKA,OAAc,aAAaA,EAAyD,CAChF,GAAI,CAAC,KAAK,OAAQ,MAAM,IAAI,MAAM,sBAAsB,EACxD,YAAK,OAAS,CAAE,GAAG,KAAK,OAAQ,GAAGA,CAAO,EAC1C,KAAK,SAAWD,EAAoB,KAAK,MAAM,EACxC,KAAK,QAChB,CAKA,OAAc,SAASiB,EAAsC,CACzD,GAAI,CAAC,KAAK,OAAQ,MAAM,IAAI,MAAM,sBAAsB,EACxD,OAAO,KAAK,aAAa,CACrB,aAAc,CACV,GAAG,KAAK,OAAO,aACf,QAAS,CACL,GAAG,KAAK,OAAO,cAAc,QAC7B,cAAiB,UAAUA,CAAK,EACpC,CACJ,CACJ,CAAC,CACL,CAKA,OAAc,aAAqC,CAC/C,GAAI,CAAC,KAAK,SACN,MAAM,IAAI,MAAM,wEAAwE,EAE5F,OAAO,KAAK,QAChB,CACJ","names":["createAuthClient","magicLinkClient","organizationClient","twoFactorClient","usernameClient","multiSessionClient","jwtClient","adminClient","apiKeyClient","phoneNumberClient","emailOTPClient","oneTapClient","genericOAuthClient","oneTimeTokenClient","deviceAuthorizationClient","anonymousClient","passkeyClient","ssoClient","createTelestackAuth","config","internalSession","internalActiveOrg","internalOrgs","rawClient","sessionAtom","state","activeOrgAtom","options","res","callback","atom","session","orgs","activeOrg","TelestackAuth","token"]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createAuthClient } from \"better-auth/client\";\r\nimport {\r\n    magicLinkClient,\r\n    organizationClient,\r\n    twoFactorClient,\r\n    usernameClient,\r\n    multiSessionClient,\r\n    jwtClient,\r\n    adminClient,\r\n    apiKeyClient,\r\n    phoneNumberClient,\r\n    emailOTPClient,\r\n    oneTapClient,\r\n    genericOAuthClient,\r\n    oneTimeTokenClient,\r\n    deviceAuthorizationClient,\r\n    anonymousClient,\r\n} from \"better-auth/client/plugins\";\r\nimport { passkeyClient } from \"@better-auth/passkey/client\";\r\nimport { ssoClient } from \"@better-auth/sso/client\";\r\n\r\nexport interface TelestackConfig {\r\n    url: string;\r\n    tenantId: string;\r\n    apiKey?: string;\r\n    googleClientId?: string;\r\n    fetchOptions?: any;\r\n}\r\n\r\n// Internal factory to preserve strict typing when wrapping methods\r\nexport const createTelestackAuth = (config: TelestackConfig) => {\r\n    let internalSession: any = null;\r\n    let internalActiveOrg: any = null;\r\n    let internalOrgs: any = null;\r\n\r\n    // Inlining the plugins array is MANDATORY for Better Auth strict TypeScript inference.\r\n    const rawClient = createAuthClient({\r\n        baseURL: `${config.url}/api/v1/${config.tenantId}/auth`,\r\n        fetchOptions: {\r\n            ...config.fetchOptions,\r\n            headers: {\r\n                ...config.fetchOptions?.headers,\r\n                ...(config.apiKey ? { \"X-Telestack-API-Key\": config.apiKey } : {})\r\n            }\r\n        },\r\n        plugins: [\r\n            magicLinkClient(),\r\n            passkeyClient(),\r\n            organizationClient(),\r\n            ssoClient(),\r\n            twoFactorClient(),\r\n            usernameClient(),\r\n            multiSessionClient(),\r\n            jwtClient(),\r\n            adminClient(),\r\n            apiKeyClient(),\r\n            phoneNumberClient(),\r\n            emailOTPClient(),\r\n            anonymousClient(),\r\n            genericOAuthClient(),\r\n            oneTimeTokenClient(),\r\n            deviceAuthorizationClient(),\r\n            ...(config?.googleClientId ? [oneTapClient({ clientId: config.googleClientId })] : [])\r\n        ]\r\n    });\r\n\r\n    // Subscribe to atoms for live updates while the closure lives\r\n    const sessionAtom = (rawClient as any).useSession;\r\n    if (sessionAtom) {\r\n        sessionAtom.subscribe((state: any) => {\r\n            internalSession = state?.data;\r\n        });\r\n    }\r\n\r\n    const activeOrgAtom = (rawClient as any).organization?.useActiveOrganization;\r\n    if (activeOrgAtom) {\r\n        activeOrgAtom.subscribe((state: any) => {\r\n            internalActiveOrg = state?.data;\r\n        });\r\n    }\r\n\r\n    return {\r\n        rawClient,\r\n        auth: {\r\n            signInWithEmail: rawClient.signIn.email,\r\n            signInWithUsername: rawClient.signIn.username,\r\n            signInWithPhone: rawClient.signIn.phoneNumber,\r\n            signInWithGoogle: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"google\", ...options }),\r\n            signInWithGithub: (options?: Parameters<typeof rawClient.signIn.social>[0]) => rawClient.signIn.social({ provider: \"github\", ...options }),\r\n            signInWithPasskey: rawClient.signIn.passkey,\r\n            signInAnonymously: rawClient.signIn.anonymous,\r\n            sendMagicLink: async (options: { email: string; callbackURL?: string }) => {\r\n                return await rawClient.signIn.magicLink({\r\n                    email: options.email,\r\n                    callbackURL: options.callbackURL || window.location.href,\r\n                });\r\n            },\r\n            signInWithMagicLink: rawClient.signIn.magicLink,\r\n            sendOtp: async (options: { email: string }) => {\r\n                return await rawClient.emailOtp.sendVerificationOtp({\r\n                    email: options.email,\r\n                    type: \"sign-in\"\r\n                });\r\n            },\r\n            signInWithOtp: rawClient.signIn.emailOtp,\r\n            signInWithSiwe: (rawClient as any).siwe?.signIn,\r\n            signUpWithEmail: rawClient.signUp.email,\r\n            signOut: rawClient.signOut,\r\n            verifyEmail: rawClient.verifyEmail,\r\n            forgetPassword: rawClient.forgetPassword,\r\n            resetPassword: rawClient.resetPassword,\r\n        },\r\n        mfa: {\r\n            enableTwoFactor: rawClient.twoFactor.enable,\r\n            disableTwoFactor: rawClient.twoFactor.disable,\r\n            sendOtp: rawClient.twoFactor.sendOtp,\r\n            verifyOtp: rawClient.twoFactor.verifyTotp,\r\n        },\r\n        user: {\r\n            getSession: async () => {\r\n                const res = await (rawClient.getSession() as any);\r\n                internalSession = res?.data;\r\n                return res;\r\n            },\r\n            listSessions: rawClient.listSessions,\r\n            updateProfile: rawClient.updateUser,\r\n            changeEmail: rawClient.changeEmail,\r\n            changePassword: rawClient.changePassword,\r\n            deleteAccount: rawClient.deleteUser,\r\n        },\r\n        organization: {\r\n            create: rawClient.organization.create,\r\n            update: rawClient.organization.update,\r\n            setActive: rawClient.organization.setActive,\r\n            list: async () => {\r\n                const res = await (rawClient.organization.list() as any);\r\n                internalOrgs = res?.data;\r\n                return res;\r\n            },\r\n            inviteMember: rawClient.organization.inviteMember,\r\n            acceptInvitation: rawClient.organization.acceptInvitation,\r\n            rejectInvitation: rawClient.organization.rejectInvitation,\r\n            removeMember: rawClient.organization.removeMember,\r\n        },\r\n        admin: {\r\n            listUsers: rawClient.admin.listUsers,\r\n            impersonateUser: rawClient.admin.impersonateUser,\r\n            banUser: rawClient.admin.banUser,\r\n        },\r\n        sso: {\r\n            signIn: rawClient.signIn.sso,\r\n            register: rawClient.sso.register,\r\n        },\r\n        apiKey: {\r\n            create: rawClient.apiKey.create,\r\n            list: rawClient.apiKey.list,\r\n            delete: rawClient.apiKey.delete\r\n        },\r\n        /**\r\n         * The Advanced User Context. Provides stateful access to user attributes,\r\n         * security status, and organizational roles without constant API calls.\r\n         */\r\n        get currentUser() {\r\n            return {\r\n                get profile() {\r\n                    return internalSession?.user;\r\n                },\r\n                get security() {\r\n                    return {\r\n                        mfaEnabled: internalSession?.user?.twoFactorEnabled || false,\r\n                        lastLogin: internalSession?.user?.updatedAt,\r\n                        isAnonymous: internalSession?.user?.isAnonymous || false,\r\n                    };\r\n                },\r\n                get organizations() {\r\n                    return {\r\n                        active: internalActiveOrg,\r\n                        all: internalOrgs,\r\n                    };\r\n                },\r\n                get session() {\r\n                    return {\r\n                        id: internalSession?.session?.id,\r\n                        expiresAt: internalSession?.session?.expiresAt,\r\n                        userAgent: internalSession?.session?.userAgent,\r\n                    };\r\n                },\r\n            };\r\n        },\r\n        /**\r\n         * Listens for authentication state changes (sign-in, sign-out, session refresh).\r\n         */\r\n        onAuthStateChanged(callback: (user: any | null) => void) {\r\n            const atom = (rawClient as any).useSession;\r\n            if (atom) {\r\n                return atom.subscribe((state: any) => {\r\n                    callback(state?.data?.user || null);\r\n                });\r\n            }\r\n            return () => { };\r\n        },\r\n        /**\r\n         * Forces a synchronization of the local auth state with the server.\r\n         */\r\n        async syncState() {\r\n            const session = await (rawClient.getSession() as any);\r\n            internalSession = session?.data;\r\n            if (rawClient.organization) {\r\n                const [orgs, activeOrg] = await Promise.all([\r\n                    (rawClient.organization as any).list(),\r\n                    (rawClient.organization as any).getActiveOrganization()\r\n                ]);\r\n                internalOrgs = (orgs as any)?.data;\r\n                internalActiveOrg = (activeOrg as any)?.data;\r\n            }\r\n            return session;\r\n        }\r\n    };\r\n};\r\n\r\nexport type TelestackAuthInstance = ReturnType<typeof createTelestackAuth>;\r\n\r\n/**\r\n * The core singleton SDK for TelestackAuth.\r\n * Designed entirely for extreme developer experience and Firebase-style fluency.\r\n */\r\nexport class TelestackAuth {\r\n    private static instance: TelestackAuthInstance | null = null;\r\n    private static config: TelestackConfig | null = null;\r\n\r\n    /**\r\n     * Initializes the TelestackAuth SDK. Must be called once at app startup.\r\n     */\r\n    public static initialize(config: TelestackConfig): TelestackAuthInstance {\r\n        this.config = config;\r\n        this.instance = createTelestackAuth(config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Updates the SDK configuration (e.g., adding a token).\r\n     */\r\n    public static updateConfig(config: Partial<TelestackConfig>): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        this.config = { ...this.config, ...config };\r\n        this.instance = createTelestackAuth(this.config);\r\n        return this.instance;\r\n    }\r\n\r\n    /**\r\n     * Sets the Bearer token for all subsequent requests.\r\n     */\r\n    public static setToken(token: string): TelestackAuthInstance {\r\n        if (!this.config) throw new Error(\"Initialize SDK first\");\r\n        return this.updateConfig({\r\n            fetchOptions: {\r\n                ...this.config.fetchOptions,\r\n                headers: {\r\n                    ...this.config.fetchOptions?.headers,\r\n                    \"Authorization\": `Bearer ${token}`\r\n                }\r\n            }\r\n        });\r\n    }\r\n\r\n    /**\r\n     * Retrieves the initialized instance of the SDK.\r\n     */\r\n    public static getInstance(): TelestackAuthInstance {\r\n        if (!this.instance) {\r\n            throw new Error(\"TelestackAuth has not been initialized. Call initialize(config) first.\");\r\n        }\r\n        return this.instance;\r\n    }\r\n}\r\n\r\n"],"mappings":";;;AAAA,SAAS,wBAAwB;AACjC;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB;AAWnB,IAAM,sBAAsB,CAAC,WAA4B;AAC5D,MAAI,kBAAuB;AAC3B,MAAI,oBAAyB;AAC7B,MAAI,eAAoB;AAGxB,QAAM,YAAY,iBAAiB;AAAA,IAC/B,SAAS,GAAG,OAAO,GAAG,WAAW,OAAO,QAAQ;AAAA,IAChD,cAAc;AAAA,MACV,GAAG,OAAO;AAAA,MACV,SAAS;AAAA,QACL,GAAG,OAAO,cAAc;AAAA,QACxB,GAAI,OAAO,SAAS,EAAE,uBAAuB,OAAO,OAAO,IAAI,CAAC;AAAA,MACpE;AAAA,IACJ;AAAA,IACA,SAAS;AAAA,MACL,gBAAgB;AAAA,MAChB,cAAc;AAAA,MACd,mBAAmB;AAAA,MACnB,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,mBAAmB;AAAA,MACnB,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,aAAa;AAAA,MACb,kBAAkB;AAAA,MAClB,eAAe;AAAA,MACf,gBAAgB;AAAA,MAChB,mBAAmB;AAAA,MACnB,mBAAmB;AAAA,MACnB,0BAA0B;AAAA,MAC1B,GAAI,QAAQ,iBAAiB,CAAC,aAAa,EAAE,UAAU,OAAO,eAAe,CAAC,CAAC,IAAI,CAAC;AAAA,IACxF;AAAA,EACJ,CAAC;AAGD,QAAM,cAAe,UAAkB;AACvC,MAAI,aAAa;AACb,gBAAY,UAAU,CAAC,UAAe;AAClC,wBAAkB,OAAO;AAAA,IAC7B,CAAC;AAAA,EACL;AAEA,QAAM,gBAAiB,UAAkB,cAAc;AACvD,MAAI,eAAe;AACf,kBAAc,UAAU,CAAC,UAAe;AACpC,0BAAoB,OAAO;AAAA,IAC/B,CAAC;AAAA,EACL;AAEA,SAAO;AAAA,IACH;AAAA,IACA,MAAM;AAAA,MACF,iBAAiB,UAAU,OAAO;AAAA,MAClC,oBAAoB,UAAU,OAAO;AAAA,MACrC,iBAAiB,UAAU,OAAO;AAAA,MAClC,kBAAkB,CAAC,YAA4D,UAAU,OAAO,OAAO,EAAE,UAAU,UAAU,GAAG,QAAQ,CAAC;AAAA,MACzI,kBAAkB,CAAC,YAA4D,UAAU,OAAO,OAAO,EAAE,UAAU,UAAU,GAAG,QAAQ,CAAC;AAAA,MACzI,mBAAmB,UAAU,OAAO;AAAA,MACpC,mBAAmB,UAAU,OAAO;AAAA,MACpC,eAAe,OAAO,YAAqD;AACvE,eAAO,MAAM,UAAU,OAAO,UAAU;AAAA,UACpC,OAAO,QAAQ;AAAA,UACf,aAAa,QAAQ,eAAe,OAAO,SAAS;AAAA,QACxD,CAAC;AAAA,MACL;AAAA,MACA,qBAAqB,UAAU,OAAO;AAAA,MACtC,SAAS,OAAO,YAA+B;AAC3C,eAAO,MAAM,UAAU,SAAS,oBAAoB;AAAA,UAChD,OAAO,QAAQ;AAAA,UACf,MAAM;AAAA,QACV,CAAC;AAAA,MACL;AAAA,MACA,eAAe,UAAU,OAAO;AAAA,MAChC,gBAAiB,UAAkB,MAAM;AAAA,MACzC,iBAAiB,UAAU,OAAO;AAAA,MAClC,SAAS,UAAU;AAAA,MACnB,aAAa,UAAU;AAAA,MACvB,gBAAgB,UAAU;AAAA,MAC1B,eAAe,UAAU;AAAA,IAC7B;AAAA,IACA,KAAK;AAAA,MACD,iBAAiB,UAAU,UAAU;AAAA,MACrC,kBAAkB,UAAU,UAAU;AAAA,MACtC,SAAS,UAAU,UAAU;AAAA,MAC7B,WAAW,UAAU,UAAU;AAAA,IACnC;AAAA,IACA,MAAM;AAAA,MACF,YAAY,YAAY;AACpB,cAAM,MAAM,MAAO,UAAU,WAAW;AACxC,0BAAkB,KAAK;AACvB,eAAO;AAAA,MACX;AAAA,MACA,cAAc,UAAU;AAAA,MACxB,eAAe,UAAU;AAAA,MACzB,aAAa,UAAU;AAAA,MACvB,gBAAgB,UAAU;AAAA,MAC1B,eAAe,UAAU;AAAA,IAC7B;AAAA,IACA,cAAc;AAAA,MACV,QAAQ,UAAU,aAAa;AAAA,MAC/B,QAAQ,UAAU,aAAa;AAAA,MAC/B,WAAW,UAAU,aAAa;AAAA,MAClC,MAAM,YAAY;AACd,cAAM,MAAM,MAAO,UAAU,aAAa,KAAK;AAC/C,uBAAe,KAAK;AACpB,eAAO;AAAA,MACX;AAAA,MACA,cAAc,UAAU,aAAa;AAAA,MACrC,kBAAkB,UAAU,aAAa;AAAA,MACzC,kBAAkB,UAAU,aAAa;AAAA,MACzC,cAAc,UAAU,aAAa;AAAA,IACzC;AAAA,IACA,OAAO;AAAA,MACH,WAAW,UAAU,MAAM;AAAA,MAC3B,iBAAiB,UAAU,MAAM;AAAA,MACjC,SAAS,UAAU,MAAM;AAAA,IAC7B;AAAA,IACA,KAAK;AAAA,MACD,QAAQ,UAAU,OAAO;AAAA,MACzB,UAAU,UAAU,IAAI;AAAA,IAC5B;AAAA,IACA,QAAQ;AAAA,MACJ,QAAQ,UAAU,OAAO;AAAA,MACzB,MAAM,UAAU,OAAO;AAAA,MACvB,QAAQ,UAAU,OAAO;AAAA,IAC7B;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,cAAc;AACd,aAAO;AAAA,QACH,IAAI,UAAU;AACV,iBAAO,iBAAiB;AAAA,QAC5B;AAAA,QACA,IAAI,WAAW;AACX,iBAAO;AAAA,YACH,YAAY,iBAAiB,MAAM,oBAAoB;AAAA,YACvD,WAAW,iBAAiB,MAAM;AAAA,YAClC,aAAa,iBAAiB,MAAM,eAAe;AAAA,UACvD;AAAA,QACJ;AAAA,QACA,IAAI,gBAAgB;AAChB,iBAAO;AAAA,YACH,QAAQ;AAAA,YACR,KAAK;AAAA,UACT;AAAA,QACJ;AAAA,QACA,IAAI,UAAU;AACV,iBAAO;AAAA,YACH,IAAI,iBAAiB,SAAS;AAAA,YAC9B,WAAW,iBAAiB,SAAS;AAAA,YACrC,WAAW,iBAAiB,SAAS;AAAA,UACzC;AAAA,QACJ;AAAA,MACJ;AAAA,IACJ;AAAA;AAAA;AAAA;AAAA,IAIA,mBAAmB,UAAsC;AACrD,YAAM,OAAQ,UAAkB;AAChC,UAAI,MAAM;AACN,eAAO,KAAK,UAAU,CAAC,UAAe;AAClC,mBAAS,OAAO,MAAM,QAAQ,IAAI;AAAA,QACtC,CAAC;AAAA,MACL;AACA,aAAO,MAAM;AAAA,MAAE;AAAA,IACnB;AAAA;AAAA;AAAA;AAAA,IAIA,MAAM,YAAY;AACd,YAAM,UAAU,MAAO,UAAU,WAAW;AAC5C,wBAAkB,SAAS;AAC3B,UAAI,UAAU,cAAc;AACxB,cAAM,CAAC,MAAM,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,UACvC,UAAU,aAAqB,KAAK;AAAA,UACpC,UAAU,aAAqB,sBAAsB;AAAA,QAC1D,CAAC;AACD,uBAAgB,MAAc;AAC9B,4BAAqB,WAAmB;AAAA,MAC5C;AACA,aAAO;AAAA,IACX;AAAA,EACJ;AACJ;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACvB,OAAe,WAAyC;AAAA,EACxD,OAAe,SAAiC;AAAA;AAAA;AAAA;AAAA,EAKhD,OAAc,WAAW,QAAgD;AACrE,SAAK,SAAS;AACd,SAAK,WAAW,oBAAoB,MAAM;AAC1C,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,OAAc,aAAa,QAAyD;AAChF,QAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACxD,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,OAAO;AAC1C,SAAK,WAAW,oBAAoB,KAAK,MAAM;AAC/C,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,OAAc,SAAS,OAAsC;AACzD,QAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACxD,WAAO,KAAK,aAAa;AAAA,MACrB,cAAc;AAAA,QACV,GAAG,KAAK,OAAO;AAAA,QACf,SAAS;AAAA,UACL,GAAG,KAAK,OAAO,cAAc;AAAA,UAC7B,iBAAiB,UAAU,KAAK;AAAA,QACpC;AAAA,MACJ;AAAA,IACJ,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA,EAKA,OAAc,cAAqC;AAC/C,QAAI,CAAC,KAAK,UAAU;AAChB,YAAM,IAAI,MAAM,wEAAwE;AAAA,IAC5F;AACA,WAAO,KAAK;AAAA,EAChB;AACJ;","names":[]}

package/package.json

@@ -1,24 +1,32 @@
 {
   "name": "@telestack/auth-sdk",
-  "version": "1.0.2",
+  "version": "1.1.0",
   "description": "Firebase-style fluent SDK for TelestackAuth",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",
   "scripts": {
     "build": "tsup",
-    "dev": "tsup --watch"
+    "dev": "tsup --watch",
+    "prepublishOnly": "npm run build"
   },
   "keywords": [],
   "author": "",
   "license": "ISC",
-  "dependencies": {
+  "peerDependencies": {
+    "better-auth": "^1.4.20",
     "@better-auth/passkey": "^1.4.20",
-    "@better-auth/sso": "^1.4.20",
-    "better-auth": "^1.4.20"
+    "@better-auth/sso": "^1.4.20"
   },
   "devDependencies": {
     "tsup": "^8.5.1",
-    "typescript": "^5.9.3"
-  }
+    "typescript": "^5.9.3",
+    "better-auth": "^1.4.20",
+    "@better-auth/passkey": "^1.4.20",
+    "@better-auth/sso": "^1.4.20"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ]
 }