@vexcms/better-auth 0.1.0-alpha.2 → 0.1.0-alpha.20

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/pluginSchemas.generated.ts","../src/pluginSchemas.ts","../src/collections.ts"],"sourcesContent":["// ⚠️ AUTO-GENERATED — DO NOT EDIT ⚠️\n// Snapshot of every modelled Better Auth plugin's DB schema, harvested from\n// the real plugin factories by `pluginSchemas.test.ts`. Regenerate after a\n// Better Auth upgrade with `pnpm --filter @vexcms/better-auth gen:auth-schemas`;\n// the same test fails when this file and the installed version disagree.\n//\n// It exists so `betterAuthCollections()` can run in a browser bundle: reading\n// these schemas costs ~1 KB, instantiating the plugins that declare them costs\n// ~154 KB gzipped.\n\nimport type { PluginDBSchema } from \"./pluginSchemas\";\n\n/** Declared DB schema per plugin descriptor key. */\nexport const PLUGIN_SCHEMAS: Record<string, PluginDBSchema> = {\n  \"admin\": {\n    \"user\": {\n      \"fields\": {\n        \"role\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"banned\": {\n          \"type\": \"boolean\",\n          \"defaultValue\": false,\n          \"required\": false,\n          \"input\": false\n        },\n        \"banReason\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"banExpires\": {\n          \"type\": \"date\",\n          \"required\": false,\n          \"input\": false\n        }\n      }\n    },\n    \"session\": {\n      \"fields\": {\n        \"impersonatedBy\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        }\n      }\n    }\n  },\n  \"anonymous\": {\n    \"user\": {\n      \"fields\": {\n        \"isAnonymous\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"input\": false,\n          \"defaultValue\": false\n        }\n      }\n    }\n  },\n  \"apiKey\": {\n    \"apikey\": {\n      \"fields\": {\n        \"configId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"defaultValue\": \"default\",\n          \"input\": false,\n          \"index\": true\n        },\n        \"name\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"start\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"referenceId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"input\": false,\n          \"index\": true\n        },\n        \"prefix\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"key\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"input\": false,\n          \"index\": true\n        },\n        \"refillInterval\": {\n          \"type\": \"number\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"refillAmount\": {\n          \"type\": \"number\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"lastRefillAt\": {\n          \"type\": \"date\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"enabled\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"input\": false,\n          \"defaultValue\": true\n        },\n        \"rateLimitEnabled\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"input\": false,\n          \"defaultValue\": true\n        },\n        \"rateLimitTimeWindow\": {\n          \"type\": \"number\",\n          \"required\": false,\n          \"input\": false,\n          \"defaultValue\": 86400000\n        },\n        \"rateLimitMax\": {\n          \"type\": \"number\",\n          \"required\": false,\n          \"input\": false,\n          \"defaultValue\": 10\n        },\n        \"requestCount\": {\n          \"type\": \"number\",\n          \"required\": false,\n          \"input\": false,\n          \"defaultValue\": 0\n        },\n        \"remaining\": {\n          \"type\": \"number\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"lastRequest\": {\n          \"type\": \"date\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"expiresAt\": {\n          \"type\": \"date\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true,\n          \"input\": false\n        },\n        \"updatedAt\": {\n          \"type\": \"date\",\n          \"required\": true,\n          \"input\": false\n        },\n        \"permissions\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"metadata\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": true,\n          \"transform\": {}\n        }\n      }\n    }\n  },\n  \"convex\": {\n    \"user\": {\n      \"fields\": {\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        }\n      }\n    },\n    \"jwks\": {\n      \"fields\": {\n        \"publicKey\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"privateKey\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"expiresAt\": {\n          \"type\": \"date\",\n          \"required\": false\n        }\n      }\n    }\n  },\n  \"deviceAuthorization\": {\n    \"deviceCode\": {\n      \"fields\": {\n        \"deviceCode\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"userCode\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"expiresAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"status\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"lastPolledAt\": {\n          \"type\": \"date\",\n          \"required\": false\n        },\n        \"pollingInterval\": {\n          \"type\": \"number\",\n          \"required\": false\n        },\n        \"clientId\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"scope\": {\n          \"type\": \"string\",\n          \"required\": false\n        }\n      }\n    }\n  },\n  \"jwt\": {\n    \"jwks\": {\n      \"fields\": {\n        \"publicKey\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"privateKey\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"expiresAt\": {\n          \"type\": \"date\",\n          \"required\": false\n        }\n      }\n    }\n  },\n  \"mcp\": {\n    \"oauthApplication\": {\n      \"modelName\": \"oauthApplication\",\n      \"fields\": {\n        \"name\": {\n          \"type\": \"string\"\n        },\n        \"icon\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"metadata\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"clientId\": {\n          \"type\": \"string\",\n          \"unique\": true\n        },\n        \"clientSecret\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"redirectUrls\": {\n          \"type\": \"string\"\n        },\n        \"type\": {\n          \"type\": \"string\"\n        },\n        \"disabled\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"defaultValue\": false\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\"\n        },\n        \"updatedAt\": {\n          \"type\": \"date\"\n        }\n      }\n    },\n    \"oauthAccessToken\": {\n      \"modelName\": \"oauthAccessToken\",\n      \"fields\": {\n        \"accessToken\": {\n          \"type\": \"string\",\n          \"unique\": true\n        },\n        \"refreshToken\": {\n          \"type\": \"string\",\n          \"unique\": true\n        },\n        \"accessTokenExpiresAt\": {\n          \"type\": \"date\"\n        },\n        \"refreshTokenExpiresAt\": {\n          \"type\": \"date\"\n        },\n        \"clientId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"oauthApplication\",\n            \"field\": \"clientId\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"scopes\": {\n          \"type\": \"string\"\n        },\n        \"createdAt\": {\n          \"type\": \"date\"\n        },\n        \"updatedAt\": {\n          \"type\": \"date\"\n        }\n      }\n    },\n    \"oauthConsent\": {\n      \"modelName\": \"oauthConsent\",\n      \"fields\": {\n        \"clientId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"oauthApplication\",\n            \"field\": \"clientId\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"scopes\": {\n          \"type\": \"string\"\n        },\n        \"createdAt\": {\n          \"type\": \"date\"\n        },\n        \"updatedAt\": {\n          \"type\": \"date\"\n        },\n        \"consentGiven\": {\n          \"type\": \"boolean\"\n        }\n      }\n    }\n  },\n  \"oidcProvider\": {\n    \"oauthApplication\": {\n      \"modelName\": \"oauthApplication\",\n      \"fields\": {\n        \"name\": {\n          \"type\": \"string\"\n        },\n        \"icon\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"metadata\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"clientId\": {\n          \"type\": \"string\",\n          \"unique\": true\n        },\n        \"clientSecret\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"redirectUrls\": {\n          \"type\": \"string\"\n        },\n        \"type\": {\n          \"type\": \"string\"\n        },\n        \"disabled\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"defaultValue\": false\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\"\n        },\n        \"updatedAt\": {\n          \"type\": \"date\"\n        }\n      }\n    },\n    \"oauthAccessToken\": {\n      \"modelName\": \"oauthAccessToken\",\n      \"fields\": {\n        \"accessToken\": {\n          \"type\": \"string\",\n          \"unique\": true\n        },\n        \"refreshToken\": {\n          \"type\": \"string\",\n          \"unique\": true\n        },\n        \"accessTokenExpiresAt\": {\n          \"type\": \"date\"\n        },\n        \"refreshTokenExpiresAt\": {\n          \"type\": \"date\"\n        },\n        \"clientId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"oauthApplication\",\n            \"field\": \"clientId\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"scopes\": {\n          \"type\": \"string\"\n        },\n        \"createdAt\": {\n          \"type\": \"date\"\n        },\n        \"updatedAt\": {\n          \"type\": \"date\"\n        }\n      }\n    },\n    \"oauthConsent\": {\n      \"modelName\": \"oauthConsent\",\n      \"fields\": {\n        \"clientId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"oauthApplication\",\n            \"field\": \"clientId\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\",\n            \"onDelete\": \"cascade\"\n          },\n          \"index\": true\n        },\n        \"scopes\": {\n          \"type\": \"string\"\n        },\n        \"createdAt\": {\n          \"type\": \"date\"\n        },\n        \"updatedAt\": {\n          \"type\": \"date\"\n        },\n        \"consentGiven\": {\n          \"type\": \"boolean\"\n        }\n      }\n    }\n  },\n  \"organization\": {\n    \"organization\": {\n      \"fields\": {\n        \"name\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true\n        },\n        \"slug\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"unique\": true,\n          \"sortable\": true,\n          \"index\": true\n        },\n        \"logo\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"metadata\": {\n          \"type\": \"string\",\n          \"required\": false\n        }\n      }\n    },\n    \"member\": {\n      \"fields\": {\n        \"organizationId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"organization\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"role\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true,\n          \"defaultValue\": \"member\"\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        }\n      }\n    },\n    \"invitation\": {\n      \"fields\": {\n        \"organizationId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"organization\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"email\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true,\n          \"index\": true\n        },\n        \"role\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"sortable\": true\n        },\n        \"status\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true,\n          \"defaultValue\": \"pending\"\n        },\n        \"expiresAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"inviterId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\"\n          },\n          \"required\": true\n        }\n      }\n    },\n    \"session\": {\n      \"fields\": {\n        \"activeOrganizationId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        }\n      }\n    }\n  },\n  \"organization.teams\": {\n    \"organization\": {\n      \"fields\": {\n        \"name\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true\n        },\n        \"slug\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"unique\": true,\n          \"sortable\": true,\n          \"index\": true\n        },\n        \"logo\": {\n          \"type\": \"string\",\n          \"required\": false\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"metadata\": {\n          \"type\": \"string\",\n          \"required\": false\n        }\n      }\n    },\n    \"team\": {\n      \"fields\": {\n        \"name\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"organizationId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"organization\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"updatedAt\": {\n          \"type\": \"date\",\n          \"required\": false\n        }\n      }\n    },\n    \"teamMember\": {\n      \"fields\": {\n        \"teamId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"team\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": false\n        }\n      }\n    },\n    \"member\": {\n      \"fields\": {\n        \"organizationId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"organization\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"role\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true,\n          \"defaultValue\": \"member\"\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        }\n      }\n    },\n    \"invitation\": {\n      \"fields\": {\n        \"organizationId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"references\": {\n            \"model\": \"organization\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"email\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true,\n          \"index\": true\n        },\n        \"role\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"sortable\": true\n        },\n        \"teamId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"sortable\": true\n        },\n        \"status\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"sortable\": true,\n          \"defaultValue\": \"pending\"\n        },\n        \"expiresAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        },\n        \"inviterId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\"\n          },\n          \"required\": true\n        }\n      }\n    },\n    \"session\": {\n      \"fields\": {\n        \"activeOrganizationId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        },\n        \"activeTeamId\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"input\": false\n        }\n      }\n    }\n  },\n  \"phoneNumber\": {\n    \"user\": {\n      \"fields\": {\n        \"phoneNumber\": {\n          \"type\": \"string\",\n          \"required\": false,\n          \"unique\": true,\n          \"sortable\": true,\n          \"returned\": true\n        },\n        \"phoneNumberVerified\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"returned\": true,\n          \"input\": false\n        }\n      }\n    }\n  },\n  \"siwe\": {\n    \"walletAddress\": {\n      \"fields\": {\n        \"userId\": {\n          \"type\": \"string\",\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\"\n          },\n          \"required\": true,\n          \"index\": true\n        },\n        \"address\": {\n          \"type\": \"string\",\n          \"required\": true\n        },\n        \"chainId\": {\n          \"type\": \"number\",\n          \"required\": true\n        },\n        \"isPrimary\": {\n          \"type\": \"boolean\",\n          \"defaultValue\": false\n        },\n        \"createdAt\": {\n          \"type\": \"date\",\n          \"required\": true\n        }\n      }\n    }\n  },\n  \"twoFactor\": {\n    \"user\": {\n      \"fields\": {\n        \"twoFactorEnabled\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"defaultValue\": false,\n          \"input\": false\n        }\n      }\n    },\n    \"twoFactor\": {\n      \"fields\": {\n        \"secret\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"returned\": false,\n          \"index\": true\n        },\n        \"backupCodes\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"returned\": false\n        },\n        \"userId\": {\n          \"type\": \"string\",\n          \"required\": true,\n          \"returned\": false,\n          \"references\": {\n            \"model\": \"user\",\n            \"field\": \"id\"\n          },\n          \"index\": true\n        },\n        \"verified\": {\n          \"type\": \"boolean\",\n          \"required\": false,\n          \"defaultValue\": true,\n          \"input\": false\n        },\n        \"failedVerificationCount\": {\n          \"type\": \"number\",\n          \"required\": false,\n          \"defaultValue\": 0,\n          \"input\": false,\n          \"returned\": false\n        },\n        \"lockedUntil\": {\n          \"type\": \"date\",\n          \"required\": false,\n          \"input\": false,\n          \"returned\": false\n        }\n      }\n    }\n  }\n};\n","import type { DBFieldAttribute } from \"better-auth\";\n// Type-only namespace import: erased entirely by the compiler, so deriving the\n// plugin-name union below costs the client bundle nothing. A value import here\n// would pull every plugin factory (~684 KB) into any graph that touches it.\nimport type * as BetterAuthPlugins from \"better-auth/plugins\";\n\nimport { PLUGIN_SCHEMAS } from \"./pluginSchemas.generated\";\n\n/**\n * A Better Auth plugin's DB schema contribution — one entry per table it adds\n * or extends.\n *\n * Declared structurally rather than imported from `@better-auth/core/db`:\n * that package is a transitive dependency of `better-auth`, not one this\n * package declares, so naming it in a public type would be an undeclared\n * dependency on consumers' resolution.\n */\nexport type PluginDBSchema = Record<\n  string,\n  {\n    fields: Record<string, DBFieldAttribute>;\n    modelName?: string | undefined;\n    disableMigration?: boolean | undefined;\n  }\n>;\n\n/**\n * Every export of `better-auth/plugins` that is a plugin factory — derived\n * from the module's own types, so the union tracks upstream automatically:\n * a Better Auth release that adds a plugin adds a member here with no code\n * change, and {@link UnclassifiedPlugin} turns that into a compile error in\n * this package until the plugin is classified.\n */\nexport type BetterAuthPluginName = {\n  [K in keyof typeof BetterAuthPlugins]: (typeof BetterAuthPlugins)[K] extends (\n    ...args: never[]\n  ) => {\n    id: string;\n  }\n    ? K\n    : never;\n}[keyof typeof BetterAuthPlugins];\n\n/**\n * Per-table overrides a plugin's own `schema` option accepts — renaming its\n * table or adding fields to it. Mirrors Better Auth's `schema` option shape so\n * the value can be authored once and passed to both the real plugin factory\n * and {@link betterAuthCollections}.\n */\nexport type PluginSchemaOverride = Record<\n  string,\n  {\n    modelName?: string | undefined;\n    /** Column renames, keyed by the plugin's own field name. */\n    fields?: Record<string, string> | undefined;\n    additionalFields?: Record<string, DBFieldAttribute> | undefined;\n  }\n>;\n\n/**\n * Plugins whose DB schema this package models. `true` enables a plugin with\n * its default schema; an object supplies the SCHEMA-AFFECTING options only.\n *\n * Runtime options (`adminRoles`, `sendInvitationEmail`, OAuth secrets, …) are\n * deliberately absent: this descriptor is authored in a client-safe module and\n * accepting a plugin's full option type is how a server callback — and\n * whatever it closes over — would end up in the browser bundle. Options that\n * do not change the schema cannot change what the admin panel renders, so\n * nothing is lost by keeping them on the server's real plugin instances.\n */\nexport interface ModelledPluginDescriptors {\n  /** Roles, bans, and impersonation fields on `user`/`session`. */\n  admin?: true | { schema?: PluginSchemaOverride };\n  /** `isAnonymous` on `user`. */\n  anonymous?: true | { schema?: PluginSchemaOverride };\n  /** The `apikey` table. */\n  apiKey?: true | { schema?: PluginSchemaOverride };\n  /** `userId` on `user`, plus the `jwks` table the Convex plugin's JWT half adds. */\n  convex?: true | { schema?: PluginSchemaOverride };\n  /** The `deviceCode` table. */\n  deviceAuthorization?: true | { schema?: PluginSchemaOverride };\n  /** The `jwks` table. */\n  jwt?: true | { schema?: PluginSchemaOverride };\n  /** The OAuth application/access-token/consent tables. */\n  mcp?: true | { schema?: PluginSchemaOverride };\n  /** The OAuth application/access-token/consent tables. */\n  oidcProvider?: true | { schema?: PluginSchemaOverride };\n  /**\n   * Organizations, members, and invitations — plus `team`/`teamMember` when\n   * `teams` is enabled, which is the one option that changes which tables exist.\n   */\n  organization?: true | { teams?: boolean; schema?: PluginSchemaOverride };\n  /** `phoneNumber`/`phoneNumberVerified` on `user`. */\n  phoneNumber?: true | { schema?: PluginSchemaOverride };\n  /** The `walletAddress` table. */\n  siwe?: true | { schema?: PluginSchemaOverride };\n  /** The `twoFactor` table and `twoFactorEnabled` on `user`. */\n  twoFactor?: true | { schema?: PluginSchemaOverride };\n}\n\n/** A plugin name this package models. */\nexport type ModelledPluginName = keyof ModelledPluginDescriptors;\n\n/**\n * Plugins that exist upstream but contribute no tables, or whose schema this\n * package does not model. Passing one is a type error naming the escape hatch:\n * read its `schema` off your real plugin instance on the server and hand the\n * value to `betterAuthCollections`'s `extraSchema`.\n */\nexport type UnmodelledPluginDescriptor<TName extends string> = {\n  readonly __unmodelled_plugin_pass_its_schema_via_extraSchema: TName;\n};\n\n/**\n * Plugin names neither modelled nor explicitly acknowledged as unmodelled.\n * Always `never`; {@link assertEveryPluginClassified} makes a non-`never`\n * value a compile error naming the plugin a Better Auth release just added.\n */\nexport type UnclassifiedPlugin = Exclude<\n  BetterAuthPluginName,\n  ModelledPluginName | UnmodelledPluginName\n>;\n\n/**\n * Upstream plugins knowingly left unmodelled. Enumerated rather than inferred\n * so adding a plugin upstream breaks this package's typecheck instead of\n * silently widening the accepted descriptor map.\n */\nexport type UnmodelledPluginName =\n  | \"backupCode2fa\"\n  | \"bearer\"\n  | \"captcha\"\n  | \"customSession\"\n  | \"emailOTP\"\n  | \"genericOAuth\"\n  | \"haveIBeenPwned\"\n  | \"lastLoginMethod\"\n  | \"magicLink\"\n  | \"multiSession\"\n  | \"oAuthProxy\"\n  | \"oauthPopup\"\n  | \"oneTap\"\n  | \"oneTimeToken\"\n  | \"openAPI\"\n  | \"otp2fa\"\n  | \"passkey\"\n  | \"sso\"\n  | \"testUtils\"\n  | \"totp2fa\"\n  | \"twoFactorClient\"\n  | \"username\";\n\n/**\n * The `plugins` map `betterAuthCollections` accepts: modelled plugins carry a\n * descriptor, every other upstream plugin is rejected with a message pointing\n * at `extraSchema`.\n */\nexport type BetterAuthPluginDescriptors = ModelledPluginDescriptors & {\n  [K in UnmodelledPluginName]?: UnmodelledPluginDescriptor<K>;\n};\n\n/**\n * Compile-time proof that every plugin `better-auth/plugins` exports is either\n * modelled or explicitly unmodelled.\n *\n * A Better Auth upgrade that adds a plugin fails this assignment with the new\n * plugin's name in the error — add it to {@link ModelledPluginDescriptors} (and\n * the probe table in `pluginSchemas.test.ts`) or to {@link UnmodelledPluginName}.\n */\nconst assertEveryPluginClassified: UnclassifiedPlugin extends never\n  ? true\n  : UnclassifiedPlugin = true;\nvoid assertEveryPluginClassified;\n\n/**\n * Resolves a descriptor map into the plain plugin stubs `getAuthTables` reads.\n *\n * Each enabled plugin contributes its generated schema snapshot with the\n * caller's `schema` overrides applied the same way the real plugin applies\n * them: `additionalFields` are spread into the table (plugins do this\n * themselves when building their schema, so the snapshot — generated with no\n * overrides — cannot already contain them), then Better Auth's own\n * the same field renames and `modelName` override Better Auth's `mergeSchema` applies.\n *\n * @param props.plugins - Descriptor map; omitted or `undefined` entries contribute nothing.\n * @param props.extraSchema - Schemas of plugins this package does not model, taken from a real plugin instance's `schema`.\n * @returns One `{ id, schema }` stub per contributing plugin, in descriptor-key order.\n * @throws {Error} When a descriptor names a plugin with no modelled schema.\n */\nexport function resolvePluginStubs(props: {\n  plugins?: BetterAuthPluginDescriptors | undefined;\n  extraSchema?: PluginDBSchema | PluginDBSchema[] | undefined;\n}): { id: string; schema: PluginDBSchema }[] {\n  const stubs: { id: string; schema: PluginDBSchema }[] = [];\n\n  for (const [name, descriptor] of Object.entries(props.plugins ?? {})) {\n    if (descriptor === undefined || descriptor === false) continue;\n    const options = descriptor === true ? {} : (descriptor as Record<string, unknown>);\n    const key =\n      name === \"organization\" && options.teams === true ? \"organization.teams\" : name;\n    const generated = PLUGIN_SCHEMAS[key];\n    if (generated === undefined) {\n      throw new Error(\n        `betterAuthCollections: no schema is modelled for the \"${name}\" plugin. ` +\n          `Read \\`schema\\` off your real plugin instance on the server and pass it as \\`extraSchema\\`.`,\n      );\n    }\n\n    // Cloned because the override merge below rewrites `modelName`/`fieldName`\n    // and PLUGIN_SCHEMAS is module-level state shared by every call.\n    const schema = structuredClone(generated);\n    for (const [table, tableOverride] of Object.entries(\n      (options.schema ?? {}) as PluginSchemaOverride,\n    )) {\n      const target = schema[table];\n      if (target === undefined || tableOverride === undefined) continue;\n      // Plugins spread `additionalFields` into their own schema at build time,\n      // so the snapshot — generated without overrides — never carries them.\n      if (tableOverride.additionalFields !== undefined) {\n        target.fields = { ...target.fields, ...tableOverride.additionalFields };\n      }\n      // Same semantics as Better Auth's `mergeSchema`, reimplemented rather\n      // than imported: pulling it from `better-auth/db` defeats that barrel's\n      // tree-shaking and costs the client bundle 77 KB gzipped instead of 1 KB.\n      if (tableOverride.modelName !== undefined) {\n        target.modelName = tableOverride.modelName;\n      }\n      for (const [field, fieldName] of Object.entries(tableOverride.fields ?? {})) {\n        const attribute = target.fields[field];\n        if (attribute !== undefined) attribute.fieldName = fieldName;\n      }\n    }\n\n    stubs.push({ id: name, schema });\n  }\n\n  const extra = props.extraSchema;\n  if (extra !== undefined) {\n    for (const [index, schema] of (Array.isArray(extra) ? extra : [extra]).entries()) {\n      stubs.push({ id: `extraSchema-${index}`, schema });\n    }\n  }\n\n  return stubs;\n}\n","import type { AuthCollectionConfig } from \"@vexcms/core\";\nimport type { BetterAuthOptions, DBFieldAttribute } from \"better-auth\";\n\nimport { betterAuthAdapter } from \"./adapter\";\nimport type {\n  BetterAuthPluginDescriptors,\n  PluginDBSchema,\n} from \"./pluginSchemas\";\nimport { resolvePluginStubs } from \"./pluginSchemas\";\n\n/** Schema-affecting settings for one of Better Auth's four core tables. */\nexport interface BetterAuthCoreTableInput {\n  /** Table name this model is stored under. Defaults to Better Auth's own (`user`, `session`, …). */\n  modelName?: string | undefined;\n  /** Renames of Better Auth's built-in columns. */\n  fields?: Record<string, string> | undefined;\n  /** Extra columns on this table, in Better Auth's `DBFieldAttribute` shape. */\n  additionalFields?: Record<string, DBFieldAttribute> | undefined;\n}\n\n/**\n * Client-safe description of a Better Auth setup — everything that determines\n * which collections exist and which fields they carry, and nothing else.\n *\n * Author this once in a module with no server imports (conventionally\n * `src/auth/schema.ts`), spread it into your `authOptions` beside the secret,\n * base URL, and real plugin instances, and pass the whole object to\n * {@link betterAuthCollections} from `vex.config.ts`. `plugins` is ignored by\n * `BetterAuthOptions` — it is a descriptor map, not plugin instances — so\n * `authOptions` drops that one key and overrides it with the real factories.\n *\n * @see {@link betterAuthCollections}\n */\nexport interface BetterAuthSchemaInput {\n  /** The user table. */\n  user?: BetterAuthCoreTableInput | undefined;\n  /** The session table. */\n  session?: BetterAuthCoreTableInput | undefined;\n  /** The account table. */\n  account?: BetterAuthCoreTableInput | undefined;\n  /** The verification table. */\n  verification?: BetterAuthCoreTableInput | undefined;\n  /**\n   * Which Better Auth plugins are registered, and their schema-affecting\n   * options. `true` takes a plugin's default schema.\n   */\n  plugins?: BetterAuthPluginDescriptors | undefined;\n  /**\n   * Schemas of plugins `@vexcms/better-auth` does not model — read `schema`\n   * off the real plugin instance on your server and pass the value here.\n   */\n  extraSchema?: PluginDBSchema | PluginDBSchema[] | undefined;\n}\n\n/**\n * Builds the Vex auth collections a Better Auth setup implies, without\n * instantiating a single Better Auth plugin.\n *\n * Runs Better Auth's own `getAuthTables` over plain `{ id, schema }` plugin\n * stubs resolved from this package's generated schema snapshot, then converts\n * the result with the same pipeline `betterAuthAdapter` uses on the server —\n * so the collections are identical to the live adapter's by construction, and\n * `packages/better-auth/src/pluginSchemas.test.ts` asserts exactly that.\n *\n * Safe to call from `vex.config.ts`: the whole graph is `@vexcms/core` plus\n * `better-auth/db` (~1 KB gzipped). Instantiating real plugin factories here\n * instead would add ~154 KB gzipped to the admin bundle.\n *\n * @param schema - The client-safe description of your Better Auth setup.\n * @returns The auth collections, ready for `defineConfig({ authCollections })`.\n * @throws {Error} When `plugins` names a plugin whose schema is not modelled — use `extraSchema`.\n *\n * @example\n * ```ts\n * // src/auth/schema.ts — no server imports, safe in the browser bundle\n * export const authSchema = {\n *   user: { modelName: \"user\", additionalFields: { roles: { type: \"string[]\", required: true } } },\n *   plugins: { admin: true, anonymous: true, organization: { teams: true }, convex: true },\n * } satisfies BetterAuthSchemaInput;\n *\n * // src/vex.config.ts\n * export default defineConfig({ authCollections: betterAuthCollections(authSchema) });\n *\n * // src/auth/options.ts — one source of truth for model names and fields\n * const { plugins: _descriptors, ...schemaOptions } = authSchema;\n * export const authOptions: BetterAuthOptions = {\n *   ...schemaOptions,\n *   secret: process.env.BETTER_AUTH_SECRET,\n *   plugins: createPlugins(),\n * };\n * ```\n *\n * @see {@link BetterAuthSchemaInput} for the input shape\n * @see {@link betterAuthAdapter} for the server-side adapter that verifies this result\n */\nexport function betterAuthCollections(\n  schema: BetterAuthSchemaInput = {},\n): AuthCollectionConfig[] {\n  const { plugins, extraSchema, ...coreTables } = schema;\n  const config: BetterAuthOptions = {\n    ...coreTables,\n    plugins: resolvePluginStubs({ plugins, extraSchema }) as never,\n  };\n  return betterAuthAdapter({ config }).collections;\n}\n"],"mappings":";;;;;AAaO,IAAM,iBAAiD;AAAA,EAC5D,SAAS;AAAA,IACP,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,gBAAgB;AAAA,UAChB,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,cAAc;AAAA,UACZ,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,UAAU;AAAA,QACR,kBAAkB;AAAA,UAChB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,gBAAgB;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,UAAU;AAAA,MACR,UAAU;AAAA,QACR,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,gBAAgB;AAAA,UAChB,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,OAAO;AAAA,UACL,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA,kBAAkB;AAAA,UAChB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,gBAAgB;AAAA,QAClB;AAAA,QACA,oBAAoB;AAAA,UAClB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,gBAAgB;AAAA,QAClB;AAAA,QACA,uBAAuB;AAAA,UACrB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,gBAAgB;AAAA,QAClB;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,gBAAgB;AAAA,QAClB;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,gBAAgB;AAAA,QAClB;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,aAAa,CAAC;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,cAAc;AAAA,UACZ,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,uBAAuB;AAAA,IACrB,cAAc;AAAA,MACZ,UAAU;AAAA,QACR,cAAc;AAAA,UACZ,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,mBAAmB;AAAA,UACjB,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,cAAc;AAAA,UACZ,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,oBAAoB;AAAA,MAClB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,QAAQ;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,UAAU;AAAA,QACZ;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,gBAAgB;AAAA,QAClB;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,UAAU;AAAA,QACZ;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,UAAU;AAAA,QACZ;AAAA,QACA,wBAAwB;AAAA,UACtB,QAAQ;AAAA,QACV;AAAA,QACA,yBAAyB;AAAA,UACvB,QAAQ;AAAA,QACV;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,gBAAgB;AAAA,MACd,aAAa;AAAA,MACb,UAAU;AAAA,QACR,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,oBAAoB;AAAA,MAClB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,QAAQ;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,UAAU;AAAA,QACZ;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,QACV;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,gBAAgB;AAAA,QAClB;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,oBAAoB;AAAA,MAClB,aAAa;AAAA,MACb,UAAU;AAAA,QACR,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,UAAU;AAAA,QACZ;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,UAAU;AAAA,QACZ;AAAA,QACA,wBAAwB;AAAA,UACtB,QAAQ;AAAA,QACV;AAAA,QACA,yBAAyB;AAAA,UACvB,QAAQ;AAAA,QACV;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,IACA,gBAAgB;AAAA,MACd,aAAa;AAAA,MACb,UAAU;AAAA,QACR,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,YACT,YAAY;AAAA,UACd;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,QACV;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,gBAAgB;AAAA,MACd,UAAU;AAAA,QACR,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,UAAU;AAAA,QACR,kBAAkB;AAAA,UAChB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,gBAAgB;AAAA,QAClB;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,UAAU;AAAA,QACR,kBAAkB;AAAA,UAChB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,gBAAgB;AAAA,QAClB;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,UAAU;AAAA,QACR,wBAAwB;AAAA,UACtB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,sBAAsB;AAAA,IACpB,gBAAgB;AAAA,MACd,UAAU;AAAA,QACR,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,kBAAkB;AAAA,UAChB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,UAAU;AAAA,QACR,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,UAAU;AAAA,QACR,kBAAkB;AAAA,UAChB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,gBAAgB;AAAA,QAClB;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,cAAc;AAAA,MACZ,UAAU;AAAA,QACR,kBAAkB;AAAA,UAChB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,QAAQ;AAAA,UACN,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,gBAAgB;AAAA,QAClB;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,IACA,WAAW;AAAA,MACT,UAAU;AAAA,QACR,wBAAwB;AAAA,UACtB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,gBAAgB;AAAA,UACd,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAAA,QACA,uBAAuB;AAAA,UACrB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,iBAAiB;AAAA,MACf,UAAU;AAAA,QACR,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,WAAW;AAAA,UACT,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,aAAa;AAAA,UACX,QAAQ;AAAA,UACR,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,QAAQ;AAAA,MACN,UAAU;AAAA,QACR,oBAAoB;AAAA,UAClB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,gBAAgB;AAAA,UAChB,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,UAAU;AAAA,QACR,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,SAAS;AAAA,QACX;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,QACd;AAAA,QACA,UAAU;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,YAAY;AAAA,UACZ,cAAc;AAAA,YACZ,SAAS;AAAA,YACT,SAAS;AAAA,UACX;AAAA,UACA,SAAS;AAAA,QACX;AAAA,QACA,YAAY;AAAA,UACV,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,gBAAgB;AAAA,UAChB,SAAS;AAAA,QACX;AAAA,QACA,2BAA2B;AAAA,UACzB,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,gBAAgB;AAAA,UAChB,SAAS;AAAA,UACT,YAAY;AAAA,QACd;AAAA,QACA,eAAe;AAAA,UACb,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACxvBO,SAAS,mBAAmB,OAGU;AAC3C,QAAM,QAAkD,CAAC;AAEzD,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,WAAW,CAAC,CAAC,GAAG;AACpE,QAAI,eAAe,UAAa,eAAe,MAAO;AACtD,UAAM,UAAU,eAAe,OAAO,CAAC,IAAK;AAC5C,UAAM,MACJ,SAAS,kBAAkB,QAAQ,UAAU,OAAO,uBAAuB;AAC7E,UAAM,YAAY,eAAe,GAAG;AACpC,QAAI,cAAc,QAAW;AAC3B,YAAM,IAAI;AAAA,QACR,yDAAyD,IAAI;AAAA,MAE/D;AAAA,IACF;AAIA,UAAM,SAAS,gBAAgB,SAAS;AACxC,eAAW,CAAC,OAAO,aAAa,KAAK,OAAO;AAAA,MACzC,QAAQ,UAAU,CAAC;AAAA,IACtB,GAAG;AACD,YAAM,SAAS,OAAO,KAAK;AAC3B,UAAI,WAAW,UAAa,kBAAkB,OAAW;AAGzD,UAAI,cAAc,qBAAqB,QAAW;AAChD,eAAO,SAAS,EAAE,GAAG,OAAO,QAAQ,GAAG,cAAc,iBAAiB;AAAA,MACxE;AAIA,UAAI,cAAc,cAAc,QAAW;AACzC,eAAO,YAAY,cAAc;AAAA,MACnC;AACA,iBAAW,CAAC,OAAO,SAAS,KAAK,OAAO,QAAQ,cAAc,UAAU,CAAC,CAAC,GAAG;AAC3E,cAAM,YAAY,OAAO,OAAO,KAAK;AACrC,YAAI,cAAc,OAAW,WAAU,YAAY;AAAA,MACrD;AAAA,IACF;AAEA,UAAM,KAAK,EAAE,IAAI,MAAM,OAAO,CAAC;AAAA,EACjC;AAEA,QAAM,QAAQ,MAAM;AACpB,MAAI,UAAU,QAAW;AACvB,eAAW,CAAC,OAAO,MAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK,GAAG,QAAQ,GAAG;AAChF,YAAM,KAAK,EAAE,IAAI,eAAe,KAAK,IAAI,OAAO,CAAC;AAAA,IACnD;AAAA,EACF;AAEA,SAAO;AACT;;;ACrJO,SAAS,sBACd,SAAgC,CAAC,GACT;AACxB,QAAM,EAAE,SAAS,aAAa,GAAG,WAAW,IAAI;AAChD,QAAM,SAA4B;AAAA,IAChC,GAAG;AAAA,IACH,SAAS,mBAAmB,EAAE,SAAS,YAAY,CAAC;AAAA,EACtD;AACA,SAAO,kBAAkB,EAAE,OAAO,CAAC,EAAE;AACvC;","names":[]}

package/dist/collections.d.ts

@@ -0,0 +1,88 @@
+import type { AuthCollectionConfig } from "@vexcms/core";
+import type { DBFieldAttribute } from "better-auth";
+import type { BetterAuthPluginDescriptors, PluginDBSchema } from "./pluginSchemas";
+/** Schema-affecting settings for one of Better Auth's four core tables. */
+export interface BetterAuthCoreTableInput {
+    /** Table name this model is stored under. Defaults to Better Auth's own (`user`, `session`, …). */
+    modelName?: string | undefined;
+    /** Renames of Better Auth's built-in columns. */
+    fields?: Record<string, string> | undefined;
+    /** Extra columns on this table, in Better Auth's `DBFieldAttribute` shape. */
+    additionalFields?: Record<string, DBFieldAttribute> | undefined;
+}
+/**
+ * Client-safe description of a Better Auth setup — everything that determines
+ * which collections exist and which fields they carry, and nothing else.
+ *
+ * Author this once in a module with no server imports (conventionally
+ * `src/auth/schema.ts`), spread it into your `authOptions` beside the secret,
+ * base URL, and real plugin instances, and pass the whole object to
+ * {@link betterAuthCollections} from `vex.config.ts`. `plugins` is ignored by
+ * `BetterAuthOptions` — it is a descriptor map, not plugin instances — so
+ * `authOptions` drops that one key and overrides it with the real factories.
+ *
+ * @see {@link betterAuthCollections}
+ */
+export interface BetterAuthSchemaInput {
+    /** The user table. */
+    user?: BetterAuthCoreTableInput | undefined;
+    /** The session table. */
+    session?: BetterAuthCoreTableInput | undefined;
+    /** The account table. */
+    account?: BetterAuthCoreTableInput | undefined;
+    /** The verification table. */
+    verification?: BetterAuthCoreTableInput | undefined;
+    /**
+     * Which Better Auth plugins are registered, and their schema-affecting
+     * options. `true` takes a plugin's default schema.
+     */
+    plugins?: BetterAuthPluginDescriptors | undefined;
+    /**
+     * Schemas of plugins `@vexcms/better-auth` does not model — read `schema`
+     * off the real plugin instance on your server and pass the value here.
+     */
+    extraSchema?: PluginDBSchema | PluginDBSchema[] | undefined;
+}
+/**
+ * Builds the Vex auth collections a Better Auth setup implies, without
+ * instantiating a single Better Auth plugin.
+ *
+ * Runs Better Auth's own `getAuthTables` over plain `{ id, schema }` plugin
+ * stubs resolved from this package's generated schema snapshot, then converts
+ * the result with the same pipeline `betterAuthAdapter` uses on the server —
+ * so the collections are identical to the live adapter's by construction, and
+ * `packages/better-auth/src/pluginSchemas.test.ts` asserts exactly that.
+ *
+ * Safe to call from `vex.config.ts`: the whole graph is `@vexcms/core` plus
+ * `better-auth/db` (~1 KB gzipped). Instantiating real plugin factories here
+ * instead would add ~154 KB gzipped to the admin bundle.
+ *
+ * @param schema - The client-safe description of your Better Auth setup.
+ * @returns The auth collections, ready for `defineConfig({ authCollections })`.
+ * @throws {Error} When `plugins` names a plugin whose schema is not modelled — use `extraSchema`.
+ *
+ * @example
+ * ```ts
+ * // src/auth/schema.ts — no server imports, safe in the browser bundle
+ * export const authSchema = {
+ *   user: { modelName: "user", additionalFields: { roles: { type: "string[]", required: true } } },
+ *   plugins: { admin: true, anonymous: true, organization: { teams: true }, convex: true },
+ * } satisfies BetterAuthSchemaInput;
+ *
+ * // src/vex.config.ts
+ * export default defineConfig({ authCollections: betterAuthCollections(authSchema) });
+ *
+ * // src/auth/options.ts — one source of truth for model names and fields
+ * const { plugins: _descriptors, ...schemaOptions } = authSchema;
+ * export const authOptions: BetterAuthOptions = {
+ *   ...schemaOptions,
+ *   secret: process.env.BETTER_AUTH_SECRET,
+ *   plugins: createPlugins(),
+ * };
+ * ```
+ *
+ * @see {@link BetterAuthSchemaInput} for the input shape
+ * @see {@link betterAuthAdapter} for the server-side adapter that verifies this result
+ */
+export declare function betterAuthCollections(schema?: BetterAuthSchemaInput): AuthCollectionConfig[];
+//# sourceMappingURL=collections.d.ts.map

package/dist/collections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../src/collections.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGvE,OAAO,KAAK,EACV,2BAA2B,EAC3B,cAAc,EACf,MAAM,iBAAiB,CAAC;AAGzB,2EAA2E;AAC3E,MAAM,WAAW,wBAAwB;IACvC,mGAAmG;IACnG,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC5C,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,CAAC;CACjE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,sBAAsB;IACtB,IAAI,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC5C,yBAAyB;IACzB,OAAO,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC/C,yBAAyB;IACzB,OAAO,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC/C,8BAA8B;IAC9B,YAAY,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACpD;;;OAGG;IACH,OAAO,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAClD;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,GAAG,cAAc,EAAE,GAAG,SAAS,CAAC;CAC7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,GAAE,qBAA0B,GACjC,oBAAoB,EAAE,CAOxB"}

package/dist/convex/anonRole.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Builds a `databaseHooks.user.create.before` hook that stamps a distinct
+ * role onto every user the Better Auth `anonymous()` plugin creates — lining
+ * up `defineAccess({ anonRole })` with a real, inspectable role instead of
+ * relying solely on the "roles resolved empty" fallback.
+ *
+ * Without this, an anonymous-plugin user still goes through the same
+ * `additionalFields` default-fill as every other new user (better-auth's
+ * adapter factory applies `roles`' configured `defaultValue` to any field the
+ * creating call omits), so it silently ends up with the SAME role as a
+ * regular signed-up account rather than a distinct anon one — and
+ * `hasPermission`'s empty-roles → `anonRole` fallback never fires for it,
+ * because its `roles` array is never actually empty.
+ *
+ * This hook runs before that default-fill (`databaseHooks` `create.before`
+ * wins over field defaults) and only touches documents the anonymous plugin
+ * created (`user.isAnonymous === true`); every other creation path is left
+ * untouched.
+ *
+ * @param role - The role string to assign. Pass the same value given to
+ *   `defineAccess({ anonRole })` so the two stay in lockstep by construction.
+ * @returns A `databaseHooks.user` value — spread into `authOptions.databaseHooks.user`,
+ *   or pass directly as `databaseHooks: { user: anonRoleDatabaseHook(role) }` when
+ *   no other user hooks are configured.
+ *
+ * @example
+ * ```ts
+ * import { anonRoleDatabaseHook } from "@vexcms/better-auth";
+ *
+ * export const authOptions: BetterAuthOptions = {
+ *   // ...
+ *   databaseHooks: {
+ *     user: anonRoleDatabaseHook(USER_ROLES.anon),
+ *   },
+ * };
+ * ```
+ */
+export declare function anonRoleDatabaseHook(role: string): {
+    create: {
+        before: (user: Record<string, unknown>) => Promise<{
+            data: Record<string, unknown>;
+        }>;
+    };
+};
+//# sourceMappingURL=anonRole.d.ts.map

package/dist/convex/anonRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anonRole.d.ts","sourceRoot":"","sources":["../../src/convex/anonRole.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG;IAClD,MAAM,EAAE;QACN,MAAM,EAAE,CACN,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC;KACjD,CAAC;CACH,CAQA"}

package/dist/convex/getAuth.d.ts

@@ -9,18 +9,21 @@ import type { CollectionSlug, VexApiAuth } from "@vexcms/core";
  * `identity.sessionId` (appended to every token by the plugin) → session
  * document → `session.activeOrganizationId` → organization document.
  * Documents are read fresh on every request, so role changes and
- * `identity.sessionId` (appended to every token by the plugin) → session
- * document → `session.activeOrganizationId` → organization document.
- * Documents are read fresh on every request, so role changes and
  * org switches apply immediately — claims are only used as ids, never
  * as authorization data.
  *
+ * `orgCollectionSlug` is only required when `resolveOrgs` is true — a
+ * project with organizations disabled can omit it entirely. Passing
+ * `resolveOrgs: true` without an `orgCollectionSlug` skips org resolution
+ * (same as `resolveOrgs: false`) rather than throwing, since the omission
+ * is a config mistake, not a request-time error worth failing loudly for.
+ *
  * @returns { user, organization }, @see {@link VexApiAuth}
  *
  */
 export declare function createGetAuth<TCollectionSlug extends CollectionSlug = CollectionSlug>(props: {
     userCollectionSlug: TCollectionSlug;
-    orgCollectionSlug: TCollectionSlug;
+    orgCollectionSlug?: TCollectionSlug;
     sessionCollectionSlug: TCollectionSlug;
     resolveOrgs?: boolean;
 }): <DataModel extends GenericDataModel>(ctx: GenericQueryCtx<DataModel> | GenericMutationCtx<DataModel>) => Promise<VexApiAuth>;

package/dist/convex/getAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getAuth.d.ts","sourceRoot":"","sources":["../../src/convex/getAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE3F,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/D;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,eAAe,SAAS,cAAc,GAAG,cAAc,EAAE,KAAK,EAAE;IAC5F,kBAAkB,EAAE,eAAe,CAAC;IACpC,iBAAiB,EAAE,eAAe,CAAC;IACnC,qBAAqB,EAAE,eAAe,CAAC;IACvC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,IACe,SAAS,SAAS,gBAAgB,EAC9C,KAAK,eAAe,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAC9D,OAAO,CAAC,UAAU,CAAC,CA0BvB"}
+{"version":3,"file":"getAuth.d.ts","sourceRoot":"","sources":["../../src/convex/getAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE3F,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAAC,eAAe,SAAS,cAAc,GAAG,cAAc,EAAE,KAAK,EAAE;IAC5F,kBAAkB,EAAE,eAAe,CAAC;IACpC,iBAAiB,CAAC,EAAE,eAAe,CAAC;IACpC,qBAAqB,EAAE,eAAe,CAAC;IACvC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,IACe,SAAS,SAAS,gBAAgB,EAC9C,KAAK,eAAe,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAC9D,OAAO,CAAC,UAAU,CAAC,CA2BvB"}

package/dist/convex/index.d.ts

@@ -41,8 +41,8 @@ export type AuthDbApiOptions<DataModel extends GenericDataModel> = {
 export declare function authDbApi<DataModel extends GenericDataModel>(options: AuthDbApiOptions<DataModel>): {
     dbCreate: import("convex/server").RegisteredMutation<"internal", {
         select?: string[] | undefined;
-        data: any;
         model: string;
+        data: any;
         betterAuthSchema: string;
     }, Promise<import("convex/server").GenericDocument | null>>;
     dbFindOne: import("convex/server").RegisteredQuery<"internal", {
@@ -67,16 +67,16 @@ export declare function authDbApi<DataModel extends GenericDataModel>(options: A
         betterAuthSchema: string;
     }, Promise<number>>;
     dbUpdate: import("convex/server").RegisteredMutation<"internal", {
+        update: any;
         model: string;
         betterAuthSchema: string;
         where: any[];
-        update: any;
     }, Promise<import("convex/server").GenericDocument | null>>;
     dbUpdateMany: import("convex/server").RegisteredMutation<"internal", {
+        update: any;
         model: string;
         betterAuthSchema: string;
         where: any[];
-        update: any;
     }, Promise<number>>;
     dbDelete: import("convex/server").RegisteredMutation<"internal", {
         model: string;
@@ -114,4 +114,5 @@ export declare function createBetterAuthAdapter<DataModel extends GenericDataMod
 export { convexAdapter } from "./adapter";
 export * from "./types";
 export * from "./getAuth";
+export * from "./anonRole";
 //# sourceMappingURL=index.d.ts.map

package/dist/convex/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/convex/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAGhB,eAAe,EACf,YAAY,EACZ,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAIvB;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,SAAS,SAAS,gBAAgB,IAAI;IACjE,0DAA0D;IAC1D,MAAM,EAAE,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,qEAAqE;IACrE,gBAAgB,EAAE,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,kEAAkE;IAClE,aAAa,EAAE,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;CACpD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,SAAS,CAAC,SAAS,SAAS,gBAAgB,EAC1D,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmFrC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,SAAS,gBAAgB,EACxE,GAAG,EAAE,gBAAgB,CAAC,SAAS,CAAC,0FAGjC;AAED,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/convex/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAGhB,eAAe,EACf,YAAY,EACZ,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAIvB;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,SAAS,SAAS,gBAAgB,IAAI;IACjE,0DAA0D;IAC1D,MAAM,EAAE,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,qEAAqE;IACrE,gBAAgB,EAAE,eAAe,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzD,kEAAkE;IAClE,aAAa,EAAE,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;CACpD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,SAAS,CAAC,SAAS,SAAS,gBAAgB,EAC1D,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmFrC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,SAAS,gBAAgB,EACxE,GAAG,EAAE,gBAAgB,CAAC,SAAS,CAAC,0FAGjC;AAED,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC"}

package/dist/index.d.ts

@@ -1,20 +1,34 @@
 /**
- * @vexcms/better-auth package entry point.
+ * Entry point for the `@vexcms/better-auth` package.
  *
- * Integrates [Better Auth](https://better-auth.com/) with VexCMS as the auth backend.
- * Call `betterAuthAdapter()` in `vex.config.ts` to register Better Auth collections
- * as VexCMS collections. Use `authDbApi()` and `createBetterAuthAdapter()` in your
- * Convex schema to wire the DB adapter.
+ * Integrates [Better Auth](https://better-auth.com/) with VexCMS as the auth backend. This is
+ * the **server-only** half of the package — it re-exports `betterAuthAdapter()`, which closes
+ * over your real Better Auth options (plugin factories, secrets), and Convex DB-adapter wiring.
+ * Never import this entry point from client code; the browser imports
+ * `@vexcms/better-auth/client` instead, which derives the same collections from a plain-data
+ * schema description with no plugin factories or environment reads.
+ *
+ * Call `betterAuthAdapter()` in `vex.config.server.ts` to register Better Auth collections
+ * as VexCMS collections — `defineServerConfig()` also uses its `collections` to verify the
+ * `authCollections` the client config declared still match, throwing `VexAuthConfigError` on
+ * drift. Use `authDbApi()` and `createBetterAuthAdapter()` in your Convex schema to wire the
+ * DB adapter.
  *
  * @example
  * ```ts
- * // vex.config.ts
+ * // vex.config.server.ts
  * import { betterAuthAdapter } from "@vexcms/better-auth";
+ * import { defineServerConfig } from "@vexcms/core";
+ *
  * import { authOptions } from "~/auth/options";
  *
- * export default defineConfig({
- *   auth: betterAuthAdapter({ config: authOptions }),
- *   collections: [posts],
+ * import vexConfig from "./vex.config";
+ *
+ * export default defineServerConfig({
+ *   config: vexConfig,
+ *   server: {
+ *     auth: { adapter: betterAuthAdapter({ config: authOptions }) },
+ *   },
  * });
  * ```
  *
@@ -39,7 +53,8 @@
  *
  * @see {@link betterAuthAdapter} for the main Vex auth adapter function
  * @see {@link authDbApi} for wiring the Convex DB operations
+ * @see {@link better-auth/src!betterAuthCollections} for the client-safe half, from `@vexcms/better-auth/client`
  */
 export { betterAuthAdapter, type BetterAuthAdapterOptions } from "./adapter";
-export { authDbApi, createBetterAuthAdapter, convexAdapter, createGetAuth, type CreateBetterAuthAdapterArgs, type CreateBetterAuthAdapterResult, } from "./convex";
+export { authDbApi, createBetterAuthAdapter, convexAdapter, createGetAuth, anonRoleDatabaseHook, type CreateBetterAuthAdapterArgs, type CreateBetterAuthAdapterResult, } from "./convex";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,OAAO,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EACL,SAAS,EACT,uBAAuB,EACvB,aAAa,EACb,aAAa,EACb,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,GACnC,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,EAAE,iBAAiB,EAAE,KAAK,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EACL,SAAS,EACT,uBAAuB,EACvB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,GACnC,MAAM,UAAU,CAAC"}