@velajs/better-auth 0.2.2 → 0.3.0

package/README.md

@@ -145,15 +145,15 @@ class AppModule {}
 
 ## Calling better-auth from services & controllers
 
-Inject the auth instance via the `BETTER_AUTH` token. The full `auth.api.*` surface is available — list sessions, revoke, impersonate, anything better-auth exposes server-side.
+Inject `BetterAuthService` — a normal `@Injectable()` exposing the underlying better-auth instance plus convenience getters for `.api` and `.handler`. The full `auth.api.*` surface is available: list sessions, revoke, impersonate, anything better-auth exposes server-side.
 
 ```ts
 import { Inject, Injectable } from '@velajs/vela';
-import { BETTER_AUTH, type BetterAuthInstance } from '@velajs/better-auth';
+import { BetterAuthService } from '@velajs/better-auth';
 
 @Injectable()
 class AdminUserService {
-  constructor(@Inject(BETTER_AUTH) private readonly auth: BetterAuthInstance) {}
+  constructor(@Inject(BetterAuthService) private readonly auth: BetterAuthService) {}
 
   listSessions(userId: string) {
     return this.auth.api.listUserSessions({ userId });
@@ -164,6 +164,8 @@ class AdminUserService {
 }
 ```
 
+Under `forRootAsync`, the underlying `betterAuth({...})` instance is constructed **lazily on first `.auth` / `.api` / `.handler` access**. That's what makes Cloudflare bindings (D1, KV, R2) work: the user factory only runs after request-time middleware has populated env. No proxies, no lifecycle hooks — just a service with a cached field.
+
 ## Decorators
 
 | Decorator           | Purpose                                                                  |
@@ -210,13 +212,13 @@ Set `mountHandler: false` and mount the catch-all yourself if you need a base pa
 
 ```ts
 import { Controller, All, Req, Inject, Injectable } from '@velajs/vela';
-import { BETTER_AUTH, Public } from '@velajs/better-auth';
+import { BetterAuthService, Public } from '@velajs/better-auth';
 
 @Public(true)
 @Controller('/auth')
 @Injectable()
 class CustomCatchallController {
-  constructor(@Inject(BETTER_AUTH) private auth: BetterAuthInstance) {}
+  constructor(@Inject(BetterAuthService) private auth: BetterAuthService) {}
   @All('/*') handle(@Req() c: Context) { return this.auth.handler(c.req.raw); }
 }
 ```

package/dist/better-auth.controller.d.ts

@@ -1,7 +1,21 @@
-import type { Context } from 'hono';
-import { BetterAuthService } from './better-auth.service';
-export declare class BetterAuthCatchallController {
-    private readonly auth;
-    constructor(auth: BetterAuthService);
-    handle(c: Context): Promise<Response>;
-}
+import { type Type } from '@velajs/vela';
+/**
+ * Build a catch-all controller that mounts better-auth's handler at `basePath`
+ * (default `/api/auth`). This is a factory because vela reads a controller's
+ * route off the class at decoration time, so a custom base path needs its own
+ * decorated class — the path can't be parametrized on a single shared class.
+ *
+ * Two base paths to keep consistent:
+ * - this `basePath` is RELATIVE to vela's `globalPrefix` (always prepended);
+ * - better-auth routes against its OWN absolute `basePath` (the one you pass to
+ *   `betterAuth({ basePath })`), which must equal `globalPrefix + basePath`.
+ *
+ * Both default to `/api/auth`, so the no-prefix / no-config case just works.
+ */
+export declare function createBetterAuthCatchallController(basePath?: string): Type;
+/**
+ * Default-path (`/api/auth`) catch-all controller. Retained for back-compat;
+ * `BetterAuthModule` now mounts {@link createBetterAuthCatchallController} with
+ * the configured `basePath`. Prefer the factory for a custom base path.
+ */
+export declare const BetterAuthCatchallController: Type;

package/dist/better-auth.controller.js

@@ -15,34 +15,54 @@ function _ts_param(paramIndex, decorator) {
 import { All, Controller, Inject, Injectable, Req } from "@velajs/vela";
 import { BetterAuthService } from "./better-auth.service.js";
 import { Public } from "./decorators/public.decorator.js";
-export class BetterAuthCatchallController {
-    auth;
-    // Inject the service — its `.handler` getter triggers lazy construction
-    // of the underlying betterAuth() instance on first access, AFTER any
-    // runtime adapter middleware (Cloudflare env capture) has run.
-    constructor(auth){
-        this.auth = auth;
-    }
-    async handle(c) {
-        return this.auth.handler(c.req.raw);
-    }
+/**
+ * Build a catch-all controller that mounts better-auth's handler at `basePath`
+ * (default `/api/auth`). This is a factory because vela reads a controller's
+ * route off the class at decoration time, so a custom base path needs its own
+ * decorated class — the path can't be parametrized on a single shared class.
+ *
+ * Two base paths to keep consistent:
+ * - this `basePath` is RELATIVE to vela's `globalPrefix` (always prepended);
+ * - better-auth routes against its OWN absolute `basePath` (the one you pass to
+ *   `betterAuth({ basePath })`), which must equal `globalPrefix + basePath`.
+ *
+ * Both default to `/api/auth`, so the no-prefix / no-config case just works.
+ */ export function createBetterAuthCatchallController(basePath = '/api/auth') {
+    let BetterAuthCatchallController = class BetterAuthCatchallController {
+        auth;
+        // Inject the service — its `.handler` getter triggers lazy construction
+        // of the underlying betterAuth() instance on first access, AFTER any
+        // runtime adapter middleware (Cloudflare env capture) has run.
+        constructor(auth){
+            this.auth = auth;
+        }
+        async handle(c) {
+            return this.auth.handler(c.req.raw);
+        }
+    };
+    _ts_decorate([
+        All('/*'),
+        _ts_param(0, Req()),
+        _ts_metadata("design:type", Function),
+        _ts_metadata("design:paramtypes", [
+            typeof Context === "undefined" ? Object : Context
+        ]),
+        _ts_metadata("design:returntype", Promise)
+    ], BetterAuthCatchallController.prototype, "handle", null);
+    BetterAuthCatchallController = _ts_decorate([
+        Public(true),
+        Controller(basePath),
+        Injectable(),
+        _ts_param(0, Inject(BetterAuthService)),
+        _ts_metadata("design:type", Function),
+        _ts_metadata("design:paramtypes", [
+            typeof BetterAuthService === "undefined" ? Object : BetterAuthService
+        ])
+    ], BetterAuthCatchallController);
+    return BetterAuthCatchallController;
 }
-_ts_decorate([
-    All('/*'),
-    _ts_param(0, Req()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof Context === "undefined" ? Object : Context
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], BetterAuthCatchallController.prototype, "handle", null);
-BetterAuthCatchallController = _ts_decorate([
-    Public(true),
-    Controller('/api/auth'),
-    Injectable(),
-    _ts_param(0, Inject(BetterAuthService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof BetterAuthService === "undefined" ? Object : BetterAuthService
-    ])
-], BetterAuthCatchallController);
+/**
+ * Default-path (`/api/auth`) catch-all controller. Retained for back-compat;
+ * `BetterAuthModule` now mounts {@link createBetterAuthCatchallController} with
+ * the configured `basePath`. Prefer the factory for a custom base path.
+ */ export const BetterAuthCatchallController = createBetterAuthCatchallController();

package/dist/better-auth.module.js

@@ -1,5 +1,5 @@
 import { APP_GUARD, stableHash } from "@velajs/vela";
-import { BetterAuthCatchallController } from "./better-auth.controller.js";
+import { createBetterAuthCatchallController } from "./better-auth.controller.js";
 import { BetterAuthService, BETTER_AUTH_BUILDER } from "./better-auth.service.js";
 import { BETTER_AUTH_OPTIONS } from "./better-auth.tokens.js";
 import { AuthGuard } from "./guards/auth.guard.js";
@@ -24,7 +24,7 @@ export class BetterAuthModule {
             }),
             providers,
             controllers: normalized.mountHandler ? [
-                BetterAuthCatchallController
+                createBetterAuthCatchallController(normalized.basePath)
             ] : [],
             exports: [
                 BetterAuthService,
@@ -100,7 +100,7 @@ export class BetterAuthModule {
             imports: options.imports ?? [],
             providers,
             controllers: mountHandler ? [
-                BetterAuthCatchallController
+                createBetterAuthCatchallController(basePath)
             ] : [],
             exports: [
                 BetterAuthService,

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { BetterAuthModule } from './better-auth.module';
 export { BetterAuthService } from './better-auth.service';
-export { BetterAuthCatchallController } from './better-auth.controller';
+export { BetterAuthCatchallController, createBetterAuthCatchallController, } from './better-auth.controller';
 export { BETTER_AUTH_OPTIONS, AUTH_USER_KEY, AUTH_SESSION_KEY, } from './better-auth.tokens';
 export { AuthGuard } from './guards/auth.guard';
 export { RolesGuard } from './guards/roles.guard';

package/dist/index.js

@@ -1,7 +1,7 @@
 // Module
 export { BetterAuthModule } from "./better-auth.module.js";
 export { BetterAuthService } from "./better-auth.service.js";
-export { BetterAuthCatchallController } from "./better-auth.controller.js";
+export { BetterAuthCatchallController, createBetterAuthCatchallController } from "./better-auth.controller.js";
 // Tokens & symbols
 export { BETTER_AUTH_OPTIONS, AUTH_USER_KEY, AUTH_SESSION_KEY } from "./better-auth.tokens.js";
 // Guards

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velajs/better-auth",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "better-auth integration for the Vela framework",
   "type": "module",
   "main": "./dist/index.js",
@@ -17,6 +17,13 @@
     "LICENSE",
     "CHANGELOG.md"
   ],
+  "scripts": {
+    "build": "rm -rf dist && swc src -d dist --strip-leading-paths && tsc --emitDeclarationOnly",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "prepare": "swc src -d dist --strip-leading-paths && tsc --emitDeclarationOnly",
+    "prepublishOnly": "pnpm run typecheck && pnpm test"
+  },
   "sideEffects": false,
   "keywords": [
     "vela",
@@ -47,19 +54,21 @@
     "hono": ">=4"
   },
   "devDependencies": {
-    "@swc/cli": "^0.8.0",
-    "@swc/core": "^1.15.11",
+    "@swc/cli": "^0.8.1",
+    "@swc/core": "^1.15.41",
     "@velajs/testing": "^0.2.1",
-    "@velajs/vela": "^1.8.2",
-    "better-auth": "^1.2.0",
-    "hono": "^4",
-    "typescript": "^5",
+    "@velajs/vela": "^1.8.5",
+    "better-auth": "^1.6.20",
+    "hono": "^4.12.26",
+    "typescript": "^6.0.3",
     "unplugin-swc": "^1.5.9",
-    "vitest": "^4.0.18"
+    "vitest": "^4.1.9"
   },
-  "scripts": {
-    "build": "rm -rf dist && swc src -d dist --strip-leading-paths && tsc --emitDeclarationOnly",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit"
+  "packageManager": "pnpm@10.20.0",
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "@swc/core",
+      "esbuild"
+    ]
   }
-}
+}