better-auth-lead 0.4.0 → 0.4.2

package/README.md

@@ -113,6 +113,7 @@ To enable email verification, you need to pass a function that sends a verificat
 - `lead`: The lead object.
 - `url`: The URL to send to the user which contains the token.
 - `token`: A verification token used to complete the email verification.
+- `unsubscribeUrl`: The endpoint URL for one-click unsubscribe (RFC 8058). Use this in `List-Unsubscribe` email headers.
 
 and a `request` object as the second parameter.
 
@@ -125,7 +126,7 @@ import { sendEmail } from './email'; // your email sending function
 export const auth = betterAuth({
   plugins: [
     lead({
-      sendVerificationEmail: async ({ lead, url, token }) => {
+      sendVerificationEmail: async ({ lead, url, token, unsubscribeUrl }) => {
         const { verificationEmailSentAt } = lead;
         if (
           verificationEmailSentAt &&
@@ -141,6 +142,12 @@ export const auth = betterAuth({
           to: lead.email,
           subject: 'Newsletter: Verify your email address',
           text: `Click the link to verify your email: ${url}`,
+          // One-click unsubscribe headers (RFC 8058)
+          // Supported by Gmail, Apple Mail, and Yahoo Mail.
+          headers: {
+            'List-Unsubscribe': `<${unsubscribeUrl}>`,
+            'List-Unsubscribe-Post': 'List-Unsubscribe=One-Click',
+          },
         });
 
         return true;

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { r as LeadOptions, t as lead } from "./index-E9vItimA.mjs";
+import { r as LeadOptions, t as lead } from "./index-BRWNSNS3.mjs";
 import { StandardSchemaV1 } from "better-auth";
 
 //#region src/client.d.ts

package/dist/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":[],"sources":["../src/client.ts"],"sourcesContent":["import type { StandardSchemaV1 } from 'better-auth';\nimport type { BetterAuthClientPlugin } from 'better-auth/client';\n\nimport type { lead } from './index';\nimport type { LeadOptions } from './type';\n\nexport const leadClient = <TMetadata = undefined>() => {\n  type O = [TMetadata] extends [undefined]\n    ? LeadOptions\n    : LeadOptions & { metadata: { validationSchema: StandardSchemaV1<unknown, TMetadata> } };\n  return {\n    id: 'lead',\n    $InferServerPlugin: {} as ReturnType<typeof lead<O>>,\n  } satisfies BetterAuthClientPlugin;\n};\n"],"mappings":";AAMA,MAAa,mBAA0C;AAIrD,QAAO;EACL,IAAI;EACJ,oBAAoB,EAAE;EACvB"}
+{"version":3,"file":"client.mjs","names":[],"sources":["../src/client.ts"],"sourcesContent":["import type { StandardSchemaV1 } from 'better-auth';\nimport type { BetterAuthClientPlugin } from 'better-auth/client';\n\nimport type { lead } from './index';\nimport type { LeadOptions } from './type';\n\nexport const leadClient = <TMetadata = undefined>() => {\n  type O = [TMetadata] extends [undefined]\n    ? LeadOptions\n    : LeadOptions & { metadata: { validationSchema: StandardSchemaV1<unknown, TMetadata> } };\n  return {\n    id: 'lead',\n    $InferServerPlugin: {} as ReturnType<typeof lead<O>>,\n  } satisfies BetterAuthClientPlugin;\n};\n"],"mappings":";AAMA,MAAa,mBAA0C;CAIrD,OAAO;EACL,IAAI;EACJ,oBAAoB,CAAC;CACvB;AACF"}

package/dist/{index-E9vItimA.d.mts → index-BRWNSNS3.d.mts}

@@ -1,6 +1,4 @@
-import * as better_auth0 from "better-auth";
 import { InferOptionSchema, StandardSchemaV1 } from "better-auth";
-import * as zod from "zod";
 
 //#region src/schema.d.ts
 declare const lead$1: {
@@ -55,12 +53,14 @@ interface LeadOptions {
    * @param lead the lead to send the verification email to
    * @param url the verification url
    * @param token the verification token
+   * @param unsubscribeUrl the one-click unsubscribe URL (RFC 8058) to include in List-Unsubscribe headers
    */
 
   data: {
     lead: Lead;
     url: string;
     token: string;
+    unsubscribeUrl: string;
   }, request?: Request) => Promise<boolean>;
   onEmailVerified?: (
   /**
@@ -76,6 +76,13 @@ interface LeadOptions {
    * @default 3600 seconds (1 hour)
    */
   expiresIn?: number;
+  /**
+   * Number of seconds the unsubscribe token is valid for.
+   * Should be long-lived since users may click the link long
+   * after receiving the email.
+   * @default undefined (no expiry)
+   */
+  unsubscribeExpiresIn?: number;
   /**
    * Rate limit configuration for /lead/subscribe and /lead/resend endpoints.
    */
@@ -156,19 +163,19 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     };
   };
   endpoints: {
-    subscribe: better_auth0.StrictEndpoint<"/lead/subscribe", {
+    subscribe: import("better-auth").StrictEndpoint<"/lead/subscribe", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
-      }, better_auth0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
+      }, import("better-auth").$strip>;
       metadata: {
         $Infer: {
           body: {
             email: string;
             metadata?: (O extends {
               metadata: {
-                validationSchema: better_auth0.StandardSchemaV1<unknown, infer Out>;
+                validationSchema: import("better-auth").StandardSchemaV1<unknown, infer Out>;
               };
             } ? Out : Record<string, any>) | undefined;
           };
@@ -177,43 +184,43 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     }, {
       status: boolean;
     }>;
-    verify: better_auth0.StrictEndpoint<"/lead/verify", {
+    verify: import("better-auth").StrictEndpoint<"/lead/verify", {
       method: "GET";
-      query: zod.ZodObject<{
-        token: zod.ZodString;
-      }, better_auth0.$strip>;
+      query: import("zod").ZodObject<{
+        token: import("zod").ZodString;
+      }, import("better-auth").$strip>;
     }, {
       status: boolean;
     }>;
-    unsubscribe: better_auth0.StrictEndpoint<"/lead/unsubscribe", {
+    unsubscribe: import("better-auth").StrictEndpoint<"/lead/unsubscribe", {
       method: "POST";
-      body: zod.ZodObject<{
-        id: zod.ZodString;
-      }, better_auth0.$strip>;
+      query: import("zod").ZodObject<{
+        token: import("zod").ZodString;
+      }, import("better-auth").$strip>;
     }, {
       status: boolean;
     }>;
-    resend: better_auth0.StrictEndpoint<"/lead/resend", {
+    resend: import("better-auth").StrictEndpoint<"/lead/resend", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-      }, better_auth0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+      }, import("better-auth").$strip>;
     }, {
       status: boolean;
     }>;
-    update: better_auth0.StrictEndpoint<"/lead/update", {
+    update: import("better-auth").StrictEndpoint<"/lead/update", {
       method: "POST";
-      body: zod.ZodObject<{
-        id: zod.ZodString;
-        metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
-      }, better_auth0.$strip>;
+      body: import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
+      }, import("better-auth").$strip>;
       metadata: {
         $Infer: {
           body: {
             id: string;
             metadata?: (O extends {
               metadata: {
-                validationSchema: better_auth0.StandardSchemaV1<unknown, infer Out>;
+                validationSchema: import("better-auth").StandardSchemaV1<unknown, infer Out>;
               };
             } ? Out : Record<string, any>) | undefined;
           };
@@ -230,12 +237,12 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     max: number;
   }[];
   $ERROR_CODES: {
-    INVALID_EMAIL: better_auth0.RawError<"INVALID_EMAIL">;
-    INVALID_TOKEN: better_auth0.RawError<"INVALID_TOKEN">;
-    TOKEN_EXPIRED: better_auth0.RawError<"TOKEN_EXPIRED">;
-    INVALID_METADATA: better_auth0.RawError<"INVALID_METADATA">;
+    INVALID_EMAIL: import("better-auth").RawError<"INVALID_EMAIL">;
+    INVALID_TOKEN: import("better-auth").RawError<"INVALID_TOKEN">;
+    TOKEN_EXPIRED: import("better-auth").RawError<"TOKEN_EXPIRED">;
+    INVALID_METADATA: import("better-auth").RawError<"INVALID_METADATA">;
   };
 };
 //#endregion
 export { LeadPayload as i, Lead as n, LeadOptions as r, lead as t };
-//# sourceMappingURL=index-E9vItimA.d.mts.map
+//# sourceMappingURL=index-BRWNSNS3.d.mts.map

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { i as LeadPayload, n as Lead, r as LeadOptions, t as lead } from "./index-E9vItimA.mjs";
-export { Lead, LeadOptions, LeadPayload, lead };
+import { i as LeadPayload, n as Lead, r as LeadOptions, t as lead } from "./index-BRWNSNS3.mjs";
+export { type Lead, type LeadOptions, type LeadPayload, lead };

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { BASE_ERROR_CODES, defineErrorCodes } from "better-auth";
 import { APIError, createAuthEndpoint, createEmailVerificationToken } from "better-auth/api";
-import { jwtVerify } from "jose";
+import { SignJWT, jwtVerify } from "jose";
 import { JWTExpired } from "jose/errors";
 import * as z from "zod";
 import { mergeSchema } from "better-auth/db";
@@ -54,10 +54,13 @@ const subscribe = (options) => createAuthEndpoint("/lead/subscribe", {
 	if (options.sendVerificationEmail && lead && !lead.emailVerified) {
 		const token = await createEmailVerificationToken(ctx.context.secret, normalizedEmail, void 0, options.expiresIn ?? 3600);
 		const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;
+		const unsubscribeToken = await createUnsubscribeToken(ctx.context.secret, lead.id, options.unsubscribeExpiresIn);
+		const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;
 		if (await options.sendVerificationEmail({
 			lead,
 			url,
-			token
+			token,
+			unsubscribeUrl
 		}, ctx.request)) await ctx.context.adapter.update({
 			model: "lead",
 			where: [{
@@ -104,12 +107,19 @@ const verify = (options) => createAuthEndpoint("/lead/verify", {
 	if (options.onEmailVerified) await ctx.context.runInBackgroundOrAwait(options.onEmailVerified({ lead }, ctx.request));
 	return ctx.json({ status: true });
 });
-const unsubscribeSchema = z.object({ id: z.string().meta({ description: "The id of the lead to unsubscribe" }) });
+const unsubscribeQuerySchema = z.object({ token: z.string().meta({ description: "Signed unsubscribe token" }) });
 const unsubscribe = (options) => createAuthEndpoint("/lead/unsubscribe", {
 	method: "POST",
-	body: unsubscribeSchema
+	query: unsubscribeQuerySchema
 }, async (ctx) => {
-	const { id } = ctx.body;
+	let payload;
+	try {
+		payload = (await jwtVerify(ctx.query.token, new TextEncoder().encode(ctx.context.secret), { algorithms: ["HS256"] })).payload;
+	} catch (e) {
+		if (e instanceof JWTExpired) throw APIError.from("UNAUTHORIZED", LEAD_ERROR_CODES.TOKEN_EXPIRED);
+		throw APIError.from("UNAUTHORIZED", LEAD_ERROR_CODES.INVALID_TOKEN);
+	}
+	const id = payload["id"];
 	if (!await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
@@ -145,10 +155,13 @@ const resend = (options) => createAuthEndpoint("/lead/resend", {
 	if (options.sendVerificationEmail && lead && !lead.emailVerified) {
 		const token = await createEmailVerificationToken(ctx.context.secret, normalizedEmail, void 0, options.expiresIn ?? 3600);
 		const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;
+		const unsubscribeToken = await createUnsubscribeToken(ctx.context.secret, lead.id, options.unsubscribeExpiresIn);
+		const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;
 		if (await options.sendVerificationEmail({
 			lead,
 			url,
-			token
+			token,
+			unsubscribeUrl
 		}, ctx.request)) await ctx.context.adapter.update({
 			model: "lead",
 			where: [{
@@ -188,6 +201,11 @@ const update = (options) => createAuthEndpoint("/lead/update", {
 	});
 	return ctx.json({ status: true });
 });
+async function createUnsubscribeToken(secret, leadId, expiresIn) {
+	const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: "HS256" }).setIssuedAt();
+	if (expiresIn !== void 0) jwt.setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn);
+	return jwt.sign(new TextEncoder().encode(secret));
+}
 function validateMetadata(options, metadata, logger) {
 	if (!metadata || !options.metadata?.validationSchema) return metadata;
 	const validationResult = options.metadata.validationSchema["~standard"].validate(metadata);

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n});\n","import { BASE_ERROR_CODES, type InternalLogger, type StandardSchemaV1 } from 'better-auth';\nimport { APIError, createAuthEndpoint, createEmailVerificationToken } from 'better-auth/api';\nimport { jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\nconst subscribeSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      const normalizedEmail = email.toLowerCase();\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: {\n              email: normalizedEmail,\n              metadata: metadata ? JSON.stringify(metadata) : undefined,\n            },\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [\n              {\n                field: 'email',\n                value: normalizedEmail,\n              },\n            ],\n          });\n        }\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const parsed = subscribeSchema.parse(jwt.payload);\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.emailVerified) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n        update: {\n          emailVerified: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onEmailVerified) {\n        await ctx.context.runInBackgroundOrAwait(options.onEmailVerified({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeSchema = z.object({\n  id: z.string().meta({\n    description: 'The id of the lead to unsubscribe',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      body: unsubscribeSchema,\n    },\n    async (ctx) => {\n      const { id } = ctx.body;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const normalizedEmail = email.toLowerCase();\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  id: z.string().meta({\n    description: 'The id of the lead to update',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            id: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { id } = ctx.body;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: true,\n        unique: true,\n      },\n      emailVerified: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      verificationEmailSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport { resend, subscribe, unsubscribe, update, verify } from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints: {\n      subscribe: subscribe(options),\n      verify: verify(options),\n      unsubscribe: unsubscribe(options),\n      resend: resend(options),\n      update: update(options),\n    },\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;CACnB,CAAC;;;ACSF,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,QAAQ,CAAC,KAAK,EACrB,aAAa,6BACd,CAAC;CACF,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EACtD,aAAa,8CACd,CAAC;CACH,CAAC;AAEF,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,EAAE,EAIT,EACF;CACF,EACD,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;AAGtB,KAAI,CADiB,EAAE,OAAO,CAAC,UAAU,MAAM,CAC7B,QAChB,OAAM,SAAS,KAAK,eAAe,iBAAiB,cAAc;CAGpE,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,OACb;CAED,MAAM,kBAAkB,MAAM,aAAa;CAE3C,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;GACR,CACF;EACF,CAAC;AAEF,KAAI,CAAC,KACH,KAAI;AACF,SAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;IACJ,OAAO;IACP,UAAU,WAAW,KAAK,UAAU,SAAS,GAAG,KAAA;IACjD;GACF,CAAC;UACK,GAAG;AACV,MAAI,QAAQ,OAAO,KAAK,sBAAsB;AAC9C,SAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CACL;IACE,OAAO;IACP,OAAO;IACR,CACF;GACF,CAAC;;AAIN,KAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,KACtB;EACD,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;AAWxD,MATa,MAAM,QAAQ,sBACzB;GACE;GACA;GACA;GACD,EACD,IAAI,QACL,CAGC,OAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;IAAiB,CAAC;GACnD,QAAQ,EAAE,yCAAyB,IAAI,MAAM,EAAE;GAChD,CAAC;;AAIN,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;EAEL;AAEH,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,QAAQ,CAAC,KAAK,EACrB,aAAa,iCACd,CAAC,EACH,CAAC;AAEF,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;CACR,EACD,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,UAAU,OAAO,IAAI,aAAa,CAAC,OAAO,IAAI,QAAQ,OAAO,EAAE,EACzE,YAAY,CAAC,QAAQ,EACtB,CAAC;UACK,GAAG;AACV,MAAI,aAAa,WACf,OAAM,SAAS,KAAK,gBAAgB,iBAAiB,cAAc;AAErE,QAAM,SAAS,KAAK,gBAAgB,iBAAiB,cAAc;;CAGrE,MAAM,SAAS,gBAAgB,MAAM,IAAI,QAAQ;CAEjD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;GACf,CACF;EACF,CAAC;AAEF,KAAI,CAAC,KACH,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;AAGJ,KAAI,KAAK,cACP,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;AAGJ,QAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;GACf,CACF;EACD,QAAQ,EACN,eAAe,MAChB;EACF,CAAC;AAEF,KAAI,CAAC,KACH,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;AAGJ,KAAI,QAAQ,gBACV,OAAM,IAAI,QAAQ,uBAAuB,QAAQ,gBAAgB,EAAE,MAAM,EAAE,IAAI,QAAQ,CAAC;AAG1F,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;EAEL;AAEH,MAAM,oBAAoB,EAAE,OAAO,EACjC,IAAI,EAAE,QAAQ,CAAC,KAAK,EAClB,aAAa,qCACd,CAAC,EACH,CAAC;AAEF,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,MAAM;CACP,EACD,OAAO,QAAQ;CACb,MAAM,EAAE,OAAO,IAAI;AAYnB,KAAI,CAVS,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;GACR,CACF;EACF,CAAC,CAGA,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;AAGJ,OAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;GACR,CACF;EACF,CAAC;AAEF,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;EAEL;AAEH,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,QAAQ,CAAC,KAAK,EACrB,aAAa,qDACd,CAAC,EACH,CAAC;AAEF,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACP,EACD,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;AAGtB,KAAI,CADiB,EAAE,OAAO,CAAC,UAAU,MAAM,CAC7B,QAChB,OAAM,SAAS,KAAK,eAAe,iBAAiB,cAAc;CAGpE,MAAM,kBAAkB,MAAM,aAAa;CAE3C,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;GACR,CACF;EACF,CAAC;AAEF,KAAI,CAAC,KACH,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;AAGJ,KAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,KACtB;EACD,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;AAWxD,MATa,MAAM,QAAQ,sBACzB;GACE;GACA;GACA;GACD,EACD,IAAI,QACL,CAGC,OAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;IAAiB,CAAC;GACnD,QAAQ,EAAE,yCAAyB,IAAI,MAAM,EAAE;GAChD,CAAC;;AAIN,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;EAEL;AAEH,MAAM,eAAe,EAAE,OAAO;CAC5B,IAAI,EAAE,QAAQ,CAAC,KAAK,EAClB,aAAa,gCACd,CAAC;CACF,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EACtD,aAAa,8CACd,CAAC;CACH,CAAC;AAEF,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,EAAE,EAIT,EACF;CACF,EACD,OAAO,QAAQ;CACb,MAAM,EAAE,OAAO,IAAI;AAYnB,KAAI,CAVS,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;GACR,CACF;EACF,CAAC,CAGA,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;CAGJ,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,OACb;AAED,OAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;GACR,CACF;EACD,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,SAAS,GAAG,KAAA,GACjD;EACF,CAAC;AAEF,QAAO,IAAI,KAAK,EACd,QAAQ,MACT,CAAC;EAEL;AAEH,SAAS,iBACP,SACA,UACA,QACA;AACA,KAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,iBAClC,QAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,SAAS;AAE1F,KAAI,4BAA4B,QAC9B,OAAM,SAAS,KAAK,yBAAyB,iBAAiB,+BAA+B;AAG/F,KAAI,iBAAiB,QAAQ;AAC3B,SAAO,MAAM,oBAAoB,iBAAiB,OAAO;AACzD,QAAM,SAAS,KAAK,eAAe,iBAAiB,iBAAiB;;AAGvE,QAAO,iBAAiB;;;;ACrZ1B,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,MAAM;EAC9B,UAAU;EACV,OAAO;EACR;CACD,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,MAAM;EAC9B,gCAAgB,IAAI,MAAM;EAC1B,UAAU;EACV,OAAO;EACR;CACD,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;EACT;CACD,eAAe;EACb,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;EACR;CACD,yBAAyB;EACvB,MAAM;EACN,UAAU;EACV,OAAO;EACR;CACD,UAAU;EACR,MAAM;EACN,UAAU;EACX;CACF,EACF,EACF;AAED,MAAa,aAAoC,YAAe;AAC9D,QAAO,YAAYA,QAAM,QAAQ,OAAO;;;;ACvC1C,MAAa,QAA+B,UAAa,EAAE,KAAU;AACnE,QAAO;EACL,IAAI;EACJ,QAAQ,UAAU,QAAQ;EAC1B,WAAW;GACT,WAAW,UAAU,QAAQ;GAC7B,QAAQ,OAAO,QAAQ;GACvB,aAAa,YAAY,QAAQ;GACjC,QAAQ,OAAO,QAAQ;GACvB,QAAQ,OAAO,QAAQ;GACxB;EACQ;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,eAAe,CAAC,SAAS,KAAK;GACzE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;GAChC,CACF;EACD,cAAc;EACf"}
+{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n});\n","import { BASE_ERROR_CODES, type InternalLogger, type StandardSchemaV1 } from 'better-auth';\nimport { APIError, createAuthEndpoint, createEmailVerificationToken } from 'better-auth/api';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\nconst subscribeSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      const normalizedEmail = email.toLowerCase();\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: {\n              email: normalizedEmail,\n              metadata: metadata ? JSON.stringify(metadata) : undefined,\n            },\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [\n              {\n                field: 'email',\n                value: normalizedEmail,\n              },\n            ],\n          });\n        }\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const parsed = subscribeSchema.parse(jwt.payload);\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.emailVerified) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n        update: {\n          emailVerified: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onEmailVerified) {\n        await ctx.context.runInBackgroundOrAwait(options.onEmailVerified({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeQuerySchema = z.object({\n  token: z.string().meta({\n    description: 'Signed unsubscribe token',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      query: unsubscribeQuerySchema,\n    },\n    async (ctx) => {\n      let payload: JWTPayload;\n      try {\n        const result = await jwtVerify(\n          ctx.query.token,\n          new TextEncoder().encode(ctx.context.secret),\n          { algorithms: ['HS256'] },\n        );\n        payload = result.payload;\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const id = payload['id'] as string;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const normalizedEmail = email.toLowerCase();\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  id: z.string().meta({\n    description: 'The id of the lead to update',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            id: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { id } = ctx.body;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nasync function createUnsubscribeToken(secret: string, leadId: string, expiresIn?: number) {\n  const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: 'HS256' }).setIssuedAt();\n  if (expiresIn !== undefined) {\n    jwt.setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn);\n  }\n  return jwt.sign(new TextEncoder().encode(secret));\n}\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: true,\n        unique: true,\n      },\n      emailVerified: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      verificationEmailSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport { resend, subscribe, unsubscribe, update, verify } from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints: {\n      subscribe: subscribe(options),\n      verify: verify(options),\n      unsubscribe: unsubscribe(options),\n      resend: resend(options),\n      update: update(options),\n    },\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;AACpB,CAAC;;;ACSD,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,4BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAGtB,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;CAGnE,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,kBAAkB,MAAM,YAAY;CAE1C,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,IAAI;EACF,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;IACJ,OAAO;IACP,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;GAClD;EACF,CAAC;CACH,SAAS,GAAG;EACV,IAAI,QAAQ,OAAO,KAAK,qBAAqB;EAC7C,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CACL;IACE,OAAO;IACP,OAAO;GACT,CACF;EACF,CAAC;CACH;CAGF,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAYxE,IAAI,MAVe,QAAQ,sBACzB;GACE;GACA;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;GAAgB,CAAC;GAClD,QAAQ,EAAE,yCAAyB,IAAI,KAAK,EAAE;EAChD,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,gCACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,UAAU,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAAG,EACzE,YAAY,CAAC,OAAO,EACtB,CAAC;CACH,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,SAAS,gBAAgB,MAAM,IAAI,OAAO;CAEhD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;EAChB,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,KAAK,eACP,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;EAChB,CACF;EACA,QAAQ,EACN,eAAe,KACjB;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,iBACV,MAAM,IAAI,QAAQ,uBAAuB,QAAQ,gBAAgB,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC;CAGzF,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,yBAAyB,EAAE,OAAO,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,2BACf,CAAC,EACH,CAAC;AAED,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,IAAI;CACJ,IAAI;EAMF,WAAU,MALW,UACnB,IAAI,MAAM,OACV,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAC3C,EAAE,YAAY,CAAC,OAAO,EAAE,CAC1B,GACiB;CACnB,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,KAAK,QAAQ;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,oDACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;AACR,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAGtB,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;CAGnE,MAAM,kBAAkB,MAAM,YAAY;CAE1C,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAYxE,IAAI,MAVe,QAAQ,sBACzB;GACE;GACA;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;GAAgB,CAAC;GAClD,QAAQ,EAAE,yCAAyB,IAAI,KAAK,EAAE;EAChD,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO;CAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAClB,aAAa,+BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,OAAO,IAAI;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;EACA,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA,EAClD;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,eAAe,uBAAuB,QAAgB,QAAgB,WAAoB;CACxF,MAAM,MAAM,IAAI,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EAAE,YAAY;CACzF,IAAI,cAAc,KAAA,GAChB,IAAI,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS;CAEjE,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAClD;AAEA,SAAS,iBACP,SACA,UACA,QACA;CACA,IAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,kBAClC,OAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,QAAQ;CAEzF,IAAI,4BAA4B,SAC9B,MAAM,SAAS,KAAK,yBAAyB,iBAAiB,8BAA8B;CAG9F,IAAI,iBAAiB,QAAQ;EAC3B,OAAO,MAAM,oBAAoB,iBAAiB,MAAM;EACxD,MAAM,SAAS,KAAK,eAAe,iBAAiB,gBAAgB;CACtE;CAEA,OAAO,iBAAiB;AAC1B;;;AC3bA,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,UAAU;EACV,OAAO;CACT;CACA,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,gCAAgB,IAAI,KAAK;EACzB,UAAU;EACV,OAAO;CACT;CACA,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;CACV;CACA,eAAe;EACb,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;CACT;CACA,yBAAyB;EACvB,MAAM;EACN,UAAU;EACV,OAAO;CACT;CACA,UAAU;EACR,MAAM;EACN,UAAU;CACZ;AACF,EACF,EACF;AAEA,MAAa,aAAoC,YAAe;CAC9D,OAAO,YAAYA,QAAM,QAAQ,MAAM;AACzC;;;ACxCA,MAAa,QAA+B,UAAa,CAAC,MAAW;CACnE,OAAO;EACL,IAAI;EACJ,QAAQ,UAAU,OAAO;EACzB,WAAW;GACT,WAAW,UAAU,OAAO;GAC5B,QAAQ,OAAO,OAAO;GACtB,aAAa,YAAY,OAAO;GAChC,QAAQ,OAAO,OAAO;GACtB,QAAQ,OAAO,OAAO;EACxB;EACS;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,cAAc,EAAE,SAAS,IAAI;GACxE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;EACjC,CACF;EACA,cAAc;CAChB;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth-lead",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Better Auth Lead plugin",
   "homepage": "https://github.com/marcjulian/better-auth-plugins#readme",
   "bugs": {
@@ -25,15 +25,15 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "jose": "^6.2.1",
-    "zod": "^4.3.6"
+    "jose": "^6.2.3",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/node": "^25.3.5",
     "bumpp": "^10.4.1",
-    "tsdown": "^0.21.1",
+    "tsdown": "^0.22.0",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.18"
+    "vitest": "^4.1.7"
   },
   "peerDependencies": {
     "better-auth": "^1.5.0"