@tulip-systems/core 0.6.1 → 0.8.0

package/dist/modules/auth/handler/{init.d.mts → service.server.d.mts}

@@ -1,9 +1,8 @@
 import { Role as Role$1, createAccessControl } from "../lib/permissions.mjs";
+import { TDatabaseSchema } from "../../database/lib/types.mjs";
+import { Database } from "../../database/lib/service.server.mjs";
 import { TulipConfig } from "../../config/lib/config.mjs";
-import { TDatabaseSchema } from "../../config/db/types.mjs";
-import { DatabaseClient } from "../../config/db/init.mjs";
-import { EmailClient } from "../../config/providers/email.mjs";
-import "../../../config/server.mjs";
+import { Email } from "../../emails/lib/service.server.mjs";
 import "../../../config.mjs";
 import * as zod from "zod";
 import * as _better_auth_passkey_client0 from "@better-auth/passkey/client";
@@ -11,22 +10,30 @@ import * as _better_auth_passkey0 from "@better-auth/passkey";
 import * as better_auth_plugins0 from "better-auth/plugins";
 import * as better_auth0 from "better-auth";
 
-//#region src/modules/auth/handler/init.d.ts
+//#region src/modules/auth/handler/service.server.d.ts
 declare const authCookiePrefix = "tulip";
 type InitAuthProps<TSchema extends TDatabaseSchema> = {
-  db: DatabaseClient<TSchema>;
-  email: EmailClient;
+  db: Database<TSchema>;
+  email: Email;
   config: TulipConfig;
   ac: ReturnType<typeof createAccessControl>;
   roles: { [key in string]?: Role$1 };
+  allowedHosts: string[];
+  defaultRole?: string;
 };
-declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<TSchema>): better_auth0.Auth<{
+/**
+ * Create the Better Auth server instance.
+ */
+declare function createAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<TSchema>): better_auth0.Auth<{
   advanced: {
     cookiePrefix: string;
     database: {
       generateId: () => false;
     };
   };
+  baseURL: {
+    allowedHosts: string[];
+  };
   database: (options: better_auth0.BetterAuthOptions) => better_auth0.DBAdapter<better_auth0.BetterAuthOptions>;
   emailAndPassword: {
     enabled: true;
@@ -52,14 +59,6 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
     after: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
   };
   plugins: [{
-    id: "next-cookies";
-    hooks: {
-      after: {
-        matcher(ctx: better_auth0.HookEndpointContext): true;
-        handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
-      }[];
-    };
-  }, {
     id: "passkey";
     endpoints: {
       generatePasskeyRegistrationOptions: better_auth0.StrictEndpoint<"/passkey/generate-register-options", {
@@ -356,7 +355,7 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
             };
           };
         };
-      }, _better_auth_passkey0.Passkey | null>;
+      }, _better_auth_passkey0.Passkey>;
       verifyPasskeyAuthentication: better_auth0.StrictEndpoint<"/passkey/verify-authentication", {
         method: "POST";
         body: zod.ZodObject<{
@@ -617,13 +616,13 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
       };
     };
     $ERROR_CODES: {
-      readonly CHALLENGE_NOT_FOUND: "Challenge not found";
-      readonly YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: "You are not allowed to register this passkey";
-      readonly FAILED_TO_VERIFY_REGISTRATION: "Failed to verify registration";
-      readonly PASSKEY_NOT_FOUND: "Passkey not found";
-      readonly AUTHENTICATION_FAILED: "Authentication failed";
-      readonly UNABLE_TO_CREATE_SESSION: "Unable to create session";
-      readonly FAILED_TO_UPDATE_PASSKEY: "Failed to update passkey";
+      CHALLENGE_NOT_FOUND: better_auth0.RawError<"CHALLENGE_NOT_FOUND">;
+      YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY">;
+      FAILED_TO_VERIFY_REGISTRATION: better_auth0.RawError<"FAILED_TO_VERIFY_REGISTRATION">;
+      PASSKEY_NOT_FOUND: better_auth0.RawError<"PASSKEY_NOT_FOUND">;
+      AUTHENTICATION_FAILED: better_auth0.RawError<"AUTHENTICATION_FAILED">;
+      UNABLE_TO_CREATE_SESSION: better_auth0.RawError<"UNABLE_TO_CREATE_SESSION">;
+      FAILED_TO_UPDATE_PASSKEY: better_auth0.RawError<"FAILED_TO_UPDATE_PASSKEY">;
     };
     options: _better_auth_passkey0.PasskeyOptions | undefined;
   }, {
@@ -689,7 +688,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -733,7 +741,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -815,7 +832,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -848,7 +874,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         query: zod.ZodObject<{
@@ -870,15 +905,19 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
             desc: "desc";
           }>>;
           filterField: zod.ZodOptional<zod.ZodString>;
-          filterValue: zod.ZodOptional<zod.ZodUnion<[zod.ZodUnion<[zod.ZodString, zod.ZodNumber]>, zod.ZodBoolean]>>;
+          filterValue: zod.ZodOptional<zod.ZodUnion<[zod.ZodUnion<[zod.ZodUnion<[zod.ZodUnion<[zod.ZodString, zod.ZodNumber]>, zod.ZodBoolean]>, zod.ZodArray<zod.ZodString>]>, zod.ZodArray<zod.ZodNumber>]>>;
           filterOperator: zod.ZodOptional<zod.ZodEnum<{
             eq: "eq";
             ne: "ne";
-            lt: "lt";
-            lte: "lte";
             gt: "gt";
             gte: "gte";
+            lt: "lt";
+            lte: "lte";
+            in: "in";
+            not_in: "not_in";
             contains: "contains";
+            starts_with: "starts_with";
+            ends_with: "ends_with";
           }>>;
         }, better_auth0.$strip>;
         metadata: {
@@ -921,18 +960,22 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
       }, {
         users: better_auth_plugins0.UserWithRole[];
         total: number;
-        limit: number | undefined;
-        offset: number | undefined;
-      } | {
-        users: never[];
-        total: number;
       }>;
       listUserSessions: better_auth0.StrictEndpoint<"/admin/list-user-sessions", {
         method: "POST";
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         body: zod.ZodObject<{
@@ -976,7 +1019,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -1016,7 +1068,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -1054,7 +1115,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -1129,7 +1199,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -1167,7 +1246,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -1205,7 +1293,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -1244,7 +1341,16 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             user: better_auth_plugins0.UserWithRole;
-            session: better_auth0.Session;
+            session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
           };
         }>)[];
         metadata: {
@@ -1295,11 +1401,6 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
                   schema: {
                     type: "object";
                     properties: {
-                      permission: {
-                        type: string;
-                        description: string;
-                        deprecated: boolean;
-                      };
                       permissions: {
                         type: string;
                         description: string;
@@ -1333,17 +1434,11 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
             };
           };
           $Infer: {
-            body: ({
-              permission: {
-                readonly [x: string]: better_auth0.LiteralString[] | undefined;
-              };
-              permissions?: never | undefined;
-            } | {
+            body: {
               permissions: {
                 readonly [x: string]: better_auth0.LiteralString[] | undefined;
               };
-              permission?: never | undefined;
-            }) & {
+            } & {
               userId?: string | undefined;
               role?: string | undefined;
             };
@@ -1355,27 +1450,27 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
       }>;
     };
     $ERROR_CODES: {
-      readonly FAILED_TO_CREATE_USER: "Failed to create user";
-      readonly USER_ALREADY_EXISTS: "User already exists.";
-      readonly USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL: "User already exists. Use another email.";
-      readonly YOU_CANNOT_BAN_YOURSELF: "You cannot ban yourself";
-      readonly YOU_ARE_NOT_ALLOWED_TO_CHANGE_USERS_ROLE: "You are not allowed to change users role";
-      readonly YOU_ARE_NOT_ALLOWED_TO_CREATE_USERS: "You are not allowed to create users";
-      readonly YOU_ARE_NOT_ALLOWED_TO_LIST_USERS: "You are not allowed to list users";
-      readonly YOU_ARE_NOT_ALLOWED_TO_LIST_USERS_SESSIONS: "You are not allowed to list users sessions";
-      readonly YOU_ARE_NOT_ALLOWED_TO_BAN_USERS: "You are not allowed to ban users";
-      readonly YOU_ARE_NOT_ALLOWED_TO_IMPERSONATE_USERS: "You are not allowed to impersonate users";
-      readonly YOU_ARE_NOT_ALLOWED_TO_REVOKE_USERS_SESSIONS: "You are not allowed to revoke users sessions";
-      readonly YOU_ARE_NOT_ALLOWED_TO_DELETE_USERS: "You are not allowed to delete users";
-      readonly YOU_ARE_NOT_ALLOWED_TO_SET_USERS_PASSWORD: "You are not allowed to set users password";
-      readonly BANNED_USER: "You have been banned from this application";
-      readonly YOU_ARE_NOT_ALLOWED_TO_GET_USER: "You are not allowed to get user";
-      readonly NO_DATA_TO_UPDATE: "No data to update";
-      readonly YOU_ARE_NOT_ALLOWED_TO_UPDATE_USERS: "You are not allowed to update users";
-      readonly YOU_CANNOT_REMOVE_YOURSELF: "You cannot remove yourself";
-      readonly YOU_ARE_NOT_ALLOWED_TO_SET_NON_EXISTENT_VALUE: "You are not allowed to set a non-existent role value";
-      readonly YOU_CANNOT_IMPERSONATE_ADMINS: "You cannot impersonate admins";
-      readonly INVALID_ROLE_TYPE: "Invalid role type";
+      USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL: better_auth0.RawError<"USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL">;
+      FAILED_TO_CREATE_USER: better_auth0.RawError<"FAILED_TO_CREATE_USER">;
+      USER_ALREADY_EXISTS: better_auth0.RawError<"USER_ALREADY_EXISTS">;
+      YOU_CANNOT_BAN_YOURSELF: better_auth0.RawError<"YOU_CANNOT_BAN_YOURSELF">;
+      YOU_ARE_NOT_ALLOWED_TO_CHANGE_USERS_ROLE: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CHANGE_USERS_ROLE">;
+      YOU_ARE_NOT_ALLOWED_TO_CREATE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_USERS">;
+      YOU_ARE_NOT_ALLOWED_TO_LIST_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_LIST_USERS">;
+      YOU_ARE_NOT_ALLOWED_TO_LIST_USERS_SESSIONS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_LIST_USERS_SESSIONS">;
+      YOU_ARE_NOT_ALLOWED_TO_BAN_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_BAN_USERS">;
+      YOU_ARE_NOT_ALLOWED_TO_IMPERSONATE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_IMPERSONATE_USERS">;
+      YOU_ARE_NOT_ALLOWED_TO_REVOKE_USERS_SESSIONS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_REVOKE_USERS_SESSIONS">;
+      YOU_ARE_NOT_ALLOWED_TO_DELETE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_USERS">;
+      YOU_ARE_NOT_ALLOWED_TO_SET_USERS_PASSWORD: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_SET_USERS_PASSWORD">;
+      BANNED_USER: better_auth0.RawError<"BANNED_USER">;
+      YOU_ARE_NOT_ALLOWED_TO_GET_USER: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_GET_USER">;
+      NO_DATA_TO_UPDATE: better_auth0.RawError<"NO_DATA_TO_UPDATE">;
+      YOU_ARE_NOT_ALLOWED_TO_UPDATE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_USERS">;
+      YOU_CANNOT_REMOVE_YOURSELF: better_auth0.RawError<"YOU_CANNOT_REMOVE_YOURSELF">;
+      YOU_ARE_NOT_ALLOWED_TO_SET_NON_EXISTENT_VALUE: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_SET_NON_EXISTENT_VALUE">;
+      YOU_CANNOT_IMPERSONATE_ADMINS: better_auth0.RawError<"YOU_CANNOT_IMPERSONATE_ADMINS">;
+      INVALID_ROLE_TYPE: better_auth0.RawError<"INVALID_ROLE_TYPE">;
     };
     schema: {
       user: {
@@ -1427,6 +1522,7 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         statements: better_auth_plugins0.Statements;
       };
       adminRoles: string[];
+      defaultRole: string;
     }>;
   }, {
     id: "email-otp";
@@ -1448,6 +1544,7 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
           email: zod.ZodString;
           type: zod.ZodEnum<{
             "sign-in": "sign-in";
+            "change-email": "change-email";
             "email-verification": "email-verification";
             "forget-password": "forget-password";
           }>;
@@ -1484,6 +1581,7 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
           email: zod.ZodString;
           type: zod.ZodEnum<{
             "sign-in": "sign-in";
+            "change-email": "change-email";
             "email-verification": "email-verification";
             "forget-password": "forget-password";
           }>;
@@ -1513,6 +1611,7 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
           email: zod.ZodString;
           type: zod.ZodEnum<{
             "sign-in": "sign-in";
+            "change-email": "change-email";
             "email-verification": "email-verification";
             "forget-password": "forget-password";
           }>;
@@ -1554,6 +1653,7 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
           email: zod.ZodString;
           type: zod.ZodEnum<{
             "sign-in": "sign-in";
+            "change-email": "change-email";
             "email-verification": "email-verification";
             "forget-password": "forget-password";
           }>;
@@ -1651,10 +1751,12 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
       }>;
       signInEmailOTP: better_auth0.StrictEndpoint<"/sign-in/email-otp", {
         method: "POST";
-        body: zod.ZodObject<{
+        body: zod.ZodIntersection<zod.ZodObject<{
           email: zod.ZodString;
           otp: zod.ZodString;
-        }, better_auth0.$strip>;
+          name: zod.ZodOptional<zod.ZodString>;
+          image: zod.ZodOptional<zod.ZodString>;
+        }, better_auth0.$strip>, zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
         metadata: {
           openapi: {
             operationId: string;
@@ -1773,10 +1875,120 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
             responses: {
               200: {
                 description: string;
-                contnt: {
+                content: {
                   "application/json": {
                     schema: {
-                      type: string;
+                      type: "object";
+                      properties: {
+                        success: {
+                          type: string;
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        success: boolean;
+      }>;
+      requestEmailChangeEmailOTP: better_auth0.StrictEndpoint<"/email-otp/request-email-change", {
+        method: "POST";
+        body: zod.ZodObject<{
+          newEmail: zod.ZodString;
+          otp: zod.ZodOptional<zod.ZodString>;
+        }, better_auth0.$strip>;
+        use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>)[];
+        metadata: {
+          openapi: {
+            operationId: string;
+            description: string;
+            responses: {
+              200: {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        success: {
+                          type: string;
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        success: boolean;
+      }>;
+      changeEmailEmailOTP: better_auth0.StrictEndpoint<"/email-otp/change-email", {
+        method: "POST";
+        body: zod.ZodObject<{
+          newEmail: zod.ZodString;
+          otp: zod.ZodString;
+        }, better_auth0.$strip>;
+        use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>)[];
+        metadata: {
+          openapi: {
+            operationId: string;
+            description: string;
+            responses: {
+              200: {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
                       properties: {
                         success: {
                           type: string;
@@ -1799,11 +2011,6 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
         handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
-    $ERROR_CODES: {
-      readonly OTP_EXPIRED: "OTP expired";
-      readonly INVALID_OTP: "Invalid OTP";
-      readonly TOO_MANY_ATTEMPTS: "Too many attempts";
-    };
     rateLimit: ({
       pathMatcher(path: string): path is "/email-otp/send-verification-otp";
       window: number;
@@ -1832,11 +2039,36 @@ declare function initAuth<TSchema extends TDatabaseSchema>(props: InitAuthProps<
       pathMatcher(path: string): path is "/forget-password/email-otp";
       window: number;
       max: number;
+    } | {
+      pathMatcher(path: string): path is "/email-otp/request-email-change";
+      window: number;
+      max: number;
+    } | {
+      pathMatcher(path: string): path is "/email-otp/change-email";
+      window: number;
+      max: number;
     })[];
     options: better_auth_plugins0.EmailOTPOptions;
+    $ERROR_CODES: {
+      OTP_EXPIRED: better_auth0.RawError<"OTP_EXPIRED">;
+      INVALID_OTP: better_auth0.RawError<"INVALID_OTP">;
+      TOO_MANY_ATTEMPTS: better_auth0.RawError<"TOO_MANY_ATTEMPTS">;
+    };
   }];
 }>;
-type AuthClient = ReturnType<typeof initAuth>;
+/**
+ * Better Auth instance type returned by `Auth.init()`.
+ */
+type Auth = ReturnType<typeof createAuth>;
+/**
+ * Auth service namespace.
+ *
+ * @example
+ * const auth = Auth.init({ db, email, config, ac, roles, allowedHosts });
+ */
+declare const Auth: {
+  init: typeof createAuth;
+};
 //#endregion
-export { AuthClient, authCookiePrefix, initAuth };
-//# sourceMappingURL=init.d.mts.map
+export { Auth, authCookiePrefix };
+//# sourceMappingURL=service.server.d.mts.map

package/dist/modules/auth/handler/service.server.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.server.d.mts","names":[],"sources":["../../../../src/modules/auth/handler/service.server.ts"],"mappings":";;;;;;;;;;;;;cAea,gBAAA;AAAA,KAER,aAAA,iBAA8B,eAAA;EACjC,EAAA,EAAI,QAAA,CAAS,OAAA;EACb,KAAA,EAAO,KAAA;EACP,MAAA,EAAQ,WAAA;EACR,EAAA,EAAI,UAAA,QAAkB,mBAAA;EACtB,KAAA,sBACoB,MAAA;EAEpB,YAAA;EACA,WAAA;AAAA;;AAXsC;;iBAiB/B,UAAA,iBAA2B,eAAA,CAAA,CAAiB,KAAA,EAAO,aAAA,CAAc,OAAA,iBAAQ,IAAA;;;;;;;;;;sBAAT,YAAA,CAAA,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyF7D,IAAA,GAAO,UAAA,QAAkB,UAAA;;;;;;;cAQxB,IAAA;eAEZ,UAAA;AAAA"}