better-auth-lead 0.4.3 → 0.5.0

package/README.md

@@ -56,6 +56,8 @@ const authClient = createAuthClient({
 
 ### Subscribe
 
+Provide an `email` to subscribe an anonymous lead:
+
 ```ts
 // POST /lead/subscribe
 const { data, error } = await authClient.lead.subscribe({
@@ -67,6 +69,19 @@ const { data, error } = await authClient.lead.subscribe({
 });
 ```
 
+Or omit `email` to subscribe the currently authenticated user. The lead is associated to the session user's `id` (a valid session cookie is required):
+
+```ts
+// POST /lead/subscribe
+const { data, error } = await authClient.lead.subscribe({
+  metadata: {
+    preferences: 'engineering',
+  },
+});
+```
+
+If neither `email` nor an active session is provided, the endpoint responds with `400 Bad Request` (`EMAIL_OR_SESSION_REQUIRED`).
+
 ### Verify
 
 ```ts
@@ -80,7 +95,7 @@ await authClient.lead.verify({
 
 ### Unsubscribe
 
-The unsubscribe endpoint is designed for [RFC 8058](https://www.rfc-editor.org/rfc/rfc8058) one-click unsubscribe. The signed `token` is embedded in the `unsubscribeUrl` provided to `sendVerificationEmail` and should be used in `List-Unsubscribe` email headers — email clients (Gmail, Apple Mail, Yahoo Mail) will POST to this URL automatically when the user clicks "Unsubscribe".
+The unsubscribe endpoint is designed for [RFC 8058](https://www.rfc-editor.org/rfc/rfc8058) one-click unsubscribe. The signed `token` is embedded in the `unsubscribeUrl` provided to `sendConfirmationEmail` and should be used in `List-Unsubscribe` email headers — email clients (Gmail, Apple Mail, Yahoo Mail) will POST to this URL automatically when the user clicks "Unsubscribe".
 
 ```ts
 // POST /lead/unsubscribe?token=<signed-token>
@@ -89,8 +104,17 @@ const { data, error } = await authClient.lead.unsubscribe({
 });
 ```
 
+For an authenticated user (e.g. from a "Manage preferences" page in your app), use the session-based endpoint. It requires a valid session and deletes the lead associated with the session user's `id`:
+
+```ts
+// POST /lead/unsubscribe-session
+const { data, error } = await authClient.lead.unsubscribeSession();
+```
+
 ### Resend
 
+Resend the confirmation email by `email`:
+
 ```ts
 // POST /lead/resend
 const { data, error } = await authClient.lead.resend({
@@ -98,25 +122,82 @@ const { data, error } = await authClient.lead.resend({
 });
 ```
 
+Or omit `email` to resend for the currently authenticated user (lead is looked up by the session user's `id`):
+
+```ts
+// POST /lead/resend
+const { data, error } = await authClient.lead.resend();
+```
+
+If neither `email` nor an active session is provided, the endpoint responds with `400 Bad Request` (`EMAIL_OR_SESSION_REQUIRED`).
+
 ### Update
 
+Update the metadata of the lead associated with the currently authenticated user. Requires a valid session — the lead is looked up by the session user's `id`:
+
 ```ts
 // POST /lead/update
 const { data, error } = await authClient.lead.update({
-  id: 'lead-id',
   metadata: {
     preferences: 'ai',
   },
 });
 ```
 
-### Email Verification
+If no session is present the endpoint responds with `401 Unauthorized`.
+
+### List (admin)
+
+Optional admin endpoint to list all leads. Requires the better-auth [`admin`](https://www.better-auth.com/docs/plugins/admin) plugin to be registered, and must be opted in via `admin.enabled`:
+
+```ts
+// server/auth.ts
+import { betterAuth } from 'better-auth';
+import { admin } from 'better-auth/plugins';
+import { lead } from 'better-auth-lead';
+
+export const auth = betterAuth({
+  plugins: [
+    admin(),
+    lead({
+      admin: {
+        enabled: true,
+        // Optional. Roles allowed to call /lead/list. Default: ['admin'].
+        // Checked against session.user.role (admin plugin supports
+        // comma-separated roles).
+        roles: ['admin', 'editor'],
+      },
+    }),
+  ],
+});
+```
+
+```ts
+// GET /lead/list?limit=100&offset=0
+const { data, error } = await authClient.lead.list({
+  query: {
+    limit: 100, // optional, default 100, max 1000
+    offset: 0, // optional, default 0
+  },
+});
+```
+
+The response includes the page of `leads`, the `total` number of leads in the database, and the resolved `limit` and `offset` for client-side pagination.
+
+Responses:
 
-To enable email verification, you need to pass a function that sends a verification email with a link. The `sendVerificationEmail` takes a data object with the following properties:
+- `404 Not Found` (`ADMIN_PLUGIN_REQUIRED`) if the admin plugin is not registered.
+- `403 Forbidden` (`FORBIDDEN`) if the session user's role is not in `admin.roles`.
+- `401 Unauthorized` if no session is present.
+
+### Email Confirmation
+
+To enable double opt-in email confirmation, pass a `sendConfirmationEmail` function. It receives a data object with:
 
 - `lead`: The lead object.
-- `url`: The URL to send to the user which contains the token.
-- `token`: A verification token used to complete the email verification.
+- `email`: The lead's email address.
+- `url`: The URL containing the confirmation token to send to the user.
+- `token`: The confirmation token used to complete the verification.
 - `unsubscribeUrl`: The endpoint URL for one-click unsubscribe (RFC 8058). Use this in `List-Unsubscribe` email headers.
 
 and a `request` object as the second parameter.
@@ -130,22 +211,22 @@ import { sendEmail } from './email'; // your email sending function
 export const auth = betterAuth({
   plugins: [
     lead({
-      sendVerificationEmail: async ({ lead, url, token, unsubscribeUrl }) => {
-        const { verificationEmailSentAt } = lead;
+      sendConfirmationEmail: async ({ lead, email, url, token, unsubscribeUrl }) => {
+        const { confirmationSentAt } = lead;
         if (
-          verificationEmailSentAt &&
-          Date.now() - verificationEmailSentAt.getTime() < 60 * 1000 // 1 minute
+          confirmationSentAt &&
+          Date.now() - confirmationSentAt.getTime() < 60 * 1000 // 1 minute
         ) {
           console.log(
-            `Skipping sending verification email to ${lead.email} because a recent email was already sent.`,
+            `Skipping sending confirmation email to ${email} because a recent email was already sent.`,
           );
           return false;
         }
 
         void sendEmail({
-          to: lead.email,
-          subject: 'Newsletter: Verify your email address',
-          text: `Click the link to verify your email: ${url}`,
+          to: email,
+          subject: 'Newsletter: Confirm your subscription',
+          text: `Click the link to confirm your subscription: ${url}`,
           // One-click unsubscribe headers (RFC 8058)
           // Supported by Gmail, Apple Mail, and Yahoo Mail.
           headers: {
@@ -156,9 +237,9 @@ export const auth = betterAuth({
 
         return true;
       },
-      onEmailVerified: async ({ lead }) => {
-        // do something when a lead's email is verified
-        console.log(`Lead ${lead.email} has been verified!`);
+      onConfirmed: async ({ lead }) => {
+        // do something when a lead confirms their subscription
+        console.log(`Lead ${lead} has confirmed their subscription!`);
       },
     }),
   ],
@@ -167,7 +248,7 @@ export const auth = betterAuth({
 
 > Avoid awaiting the email sending to prevent timing attacks.
 
-Additionally, you can provide an `onEmailVerified` callback to execute logic after a lead's email is verified.
+Additionally, you can provide an `onConfirmed` callback to execute logic after a lead confirms their subscription.
 
 ### Metadata Validation
 
@@ -218,6 +299,11 @@ await authClient.lead.subscribe({
   email: 'user@example.com',
   metadata: { preferences: 'engineering' },
 });
+
+// or for the currently authenticated user (omit email)
+await authClient.lead.subscribe({
+  metadata: { preferences: 'engineering' },
+});
 ```
 
 ## Schema
@@ -226,29 +312,33 @@ await authClient.lead.subscribe({
 
 Table name: `lead`
 
-|  Field                  |  Type   |  Key   |  Description                                      |
-| ----------------------- | ------- | ------ | ------------------------------------------------- |
-| id                      | string  | pk     | Unique identifier for each lead                   |
-| email                   | string  | unique | Email address of the lead                         |
-| emailVerified           | boolean |        | Whether the email is verified                     |
-| verificationEmailSentAt | Date    | ?      | Timestamp of when the verification email was sent |
-| metadata                | json    | ?      | Additional data about the lead                    |
-| createdAt               | date    |        | Timestamp of lead creation                        |
-| updatedAt               | date    |        | Timestamp of last update                          |
+| Field              | Type    | Key    | Description                                       |
+| ------------------ | ------- | ------ | ------------------------------------------------- |
+| id                 | string  | pk     | Unique identifier for each lead                   |
+| email              | string? | unique | Email address of the lead (optional)              |
+| userId             | string? | unique | ID of an associated better-auth user (optional)   |
+| confirmed          | boolean |        | Whether the lead has confirmed their subscription |
+| confirmationSentAt | Date    | ?      | Timestamp of when the confirmation email was sent |
+| metadata           | json    | ?      | Additional data about the lead                    |
+| createdAt          | date    |        | Timestamp of lead creation                        |
+| updatedAt          | date    |        | Timestamp of last update                          |
 
 #### Prisma
 
 ```prisma
 model Lead {
-  id                      String    @id
-  createdAt               DateTime  @default(now())
-  updatedAt               DateTime  @updatedAt
-  email                   String
-  emailVerified           Boolean   @default(false)
-  verificationEmailSentAt DateTime?
-  metadata                String?
+  id                 String    @id
+  createdAt          DateTime  @default(now())
+  updatedAt          DateTime  @updatedAt
+  email              String?
+  userId             String?
+  confirmed          Boolean   @default(false)
+  confirmationSentAt DateTime?
+  metadata           String?
+  user               User?     @relation(fields: [userId], references: [id], onDelete: Cascade)
 
   @@unique([email])
+  @@unique([userId])
   @@map("lead")
 }
 ```

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { r as LeadOptions, t as lead } from "./index-P6m89iLp.mjs";
+import { r as LeadOptions, t as lead } from "./index-DOhc8vla.mjs";
 import { StandardSchemaV1 } from "better-auth";
 
 //#region src/client.d.ts

package/dist/{index-P6m89iLp.d.mts → index-DOhc8vla.d.mts}

@@ -19,16 +19,25 @@ declare const lead$1: {
       };
       email: {
         type: "string";
-        required: true;
+        required: false;
         unique: true;
       };
-      emailVerified: {
+      userId: {
+        type: "string";
+        required: false;
+        unique: true;
+        references: {
+          model: string;
+          field: string;
+        };
+      };
+      confirmed: {
         type: "boolean";
         defaultValue: false;
         required: true;
         input: false;
       };
-      verificationEmailSentAt: {
+      confirmationSentAt: {
         type: "date";
         required: false;
         input: false;
@@ -48,30 +57,32 @@ interface LeadOptions {
    * @param data the data object
    * @param request the request object
    */
-  sendVerificationEmail?: (
+  sendConfirmationEmail?: (
   /**
-   * @param lead the lead to send the verification email to
-   * @param url the verification url
-   * @param token the verification token
+   * @param lead the lead to send the confirmation email to
+   * @param email the email address to send the confirmation to
+   * @param url the confirmation url
+   * @param token the confirmation token
    * @param unsubscribeUrl the one-click unsubscribe URL (RFC 8058) to include in List-Unsubscribe headers
    */
 
   data: {
     lead: Lead;
+    email: string;
     url: string;
     token: string;
     unsubscribeUrl: string;
   }, request?: Request) => Promise<boolean>;
-  onEmailVerified?: (
+  onConfirmed?: (
   /**
-   * @param lead the lead that was verified
+   * @param lead the lead that confirmed their subscription
    */
 
   data: {
     lead: Lead;
   }, request?: Request) => Promise<void>;
   /**
-   * Number of seconds the verification token is
+   * Number of seconds the confirmation token is
    * valid for.
    * @default 3600 seconds (1 hour)
    */
@@ -105,6 +116,25 @@ interface LeadOptions {
   metadata?: {
     validationSchema?: StandardSchemaV1;
   };
+  /**
+   * Admin-only endpoints. Requires the better-auth `admin` plugin to be
+   * registered. When enabled, exposes `GET /lead/list` which returns all
+   * leads to users whose role matches `admin.roles`.
+   */
+  admin?: {
+    /**
+     * Enable admin endpoints (e.g. `/lead/list`).
+     * @default false
+     */
+    enabled?: boolean;
+    /**
+     * Roles allowed to call admin endpoints. The check is performed against
+     * `session.user.role` (added by the admin plugin), which may contain a
+     * comma-separated list of roles.
+     * @default ['admin']
+     */
+    roles?: string[];
+  };
 }
 interface Lead {
   /**
@@ -113,12 +143,17 @@ interface Lead {
   id: string;
   createdAt: Date;
   updatedAt: Date;
-  email: string;
-  emailVerified: boolean;
-  verificationEmailSentAt: Date | null;
+  email: string | null;
+  userId: string | null;
+  confirmed: boolean;
+  confirmationSentAt: Date | null;
   metadata?: string;
 }
-type LeadPayload = Omit<Lead, 'id' | 'createdAt' | 'updatedAt' | 'emailVerified' | 'verificationEmailSentAt'>;
+type LeadPayload = {
+  email?: string | null;
+  userId?: string | null;
+  metadata?: string;
+};
 //#endregion
 //#region src/index.d.ts
 declare const lead: <O extends LeadOptions>(options?: O) => {
@@ -141,16 +176,25 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
         };
         email: {
           type: "string";
-          required: true;
+          required: false;
           unique: true;
         };
-        emailVerified: {
+        userId: {
+          type: "string";
+          required: false;
+          unique: true;
+          references: {
+            model: string;
+            field: string;
+          };
+        };
+        confirmed: {
           type: "boolean";
           defaultValue: false;
           required: true;
           input: false;
         };
-        verificationEmailSentAt: {
+        confirmationSentAt: {
           type: "date";
           required: false;
           input: false;
@@ -163,16 +207,51 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     };
   };
   endpoints: {
+    list?: import("better-auth").StrictEndpoint<"/lead/list", {
+      method: "GET";
+      query: import("zod").ZodObject<{
+        limit: import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>;
+        offset: import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>;
+      }, import("better-auth").$strip>;
+      use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+    }, {
+      leads: Lead[];
+      total: number;
+      limit: number;
+      offset: number;
+    }> | undefined;
     subscribe: import("better-auth").StrictEndpoint<"/lead/subscribe", {
       method: "POST";
       body: import("zod").ZodObject<{
-        email: import("zod").ZodString;
+        email: import("zod").ZodOptional<import("zod").ZodString>;
         metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
       }, import("better-auth").$strip>;
       metadata: {
         $Infer: {
           body: {
-            email: string;
+            email?: string;
             metadata?: (O extends {
               metadata: {
                 validationSchema: import("better-auth").StandardSchemaV1<unknown, infer Out>;
@@ -203,10 +282,38 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     }, {
       status: boolean;
     }>;
+    unsubscribeSession: import("better-auth").StrictEndpoint<"/lead/unsubscribe-session", {
+      method: "POST";
+      use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+    }, {
+      status: boolean;
+    }>;
     resend: import("better-auth").StrictEndpoint<"/lead/resend", {
       method: "POST";
       body: import("zod").ZodObject<{
-        email: import("zod").ZodString;
+        email: import("zod").ZodOptional<import("zod").ZodString>;
       }, import("better-auth").$strip>;
     }, {
       status: boolean;
@@ -214,13 +321,34 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     update: import("better-auth").StrictEndpoint<"/lead/update", {
       method: "POST";
       body: import("zod").ZodObject<{
-        id: import("zod").ZodString;
         metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
       }, import("better-auth").$strip>;
+      use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
       metadata: {
         $Infer: {
           body: {
-            id: string;
             metadata?: (O extends {
               metadata: {
                 validationSchema: import("better-auth").StandardSchemaV1<unknown, infer Out>;
@@ -240,12 +368,15 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     max: number;
   }[];
   $ERROR_CODES: {
+    FORBIDDEN: import("better-auth").RawError<"FORBIDDEN">;
     INVALID_EMAIL: import("better-auth").RawError<"INVALID_EMAIL">;
     INVALID_TOKEN: import("better-auth").RawError<"INVALID_TOKEN">;
     TOKEN_EXPIRED: import("better-auth").RawError<"TOKEN_EXPIRED">;
     INVALID_METADATA: import("better-auth").RawError<"INVALID_METADATA">;
+    EMAIL_OR_SESSION_REQUIRED: import("better-auth").RawError<"EMAIL_OR_SESSION_REQUIRED">;
+    ADMIN_PLUGIN_REQUIRED: import("better-auth").RawError<"ADMIN_PLUGIN_REQUIRED">;
   };
 };
 //#endregion
 export { LeadPayload as i, Lead as n, LeadOptions as r, lead as t };
-//# sourceMappingURL=index-P6m89iLp.d.mts.map
+//# sourceMappingURL=index-DOhc8vla.d.mts.map

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { i as LeadPayload, n as Lead, r as LeadOptions, t as lead } from "./index-P6m89iLp.mjs";
+import { i as LeadPayload, n as Lead, r as LeadOptions, t as lead } from "./index-DOhc8vla.mjs";
 export { type Lead, type LeadOptions, type LeadPayload, lead };

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { BASE_ERROR_CODES, defineErrorCodes } from "better-auth";
-import { APIError, createAuthEndpoint, createEmailVerificationToken } from "better-auth/api";
+import { APIError, createAuthEndpoint, getSessionFromCtx, sessionMiddleware } from "better-auth/api";
 import { SignJWT, jwtVerify } from "jose";
 import { JWTExpired } from "jose/errors";
 import * as z from "zod";
@@ -9,12 +9,15 @@ const LEAD_ERROR_CODES = defineErrorCodes({
 	INVALID_EMAIL: "Invalid email",
 	INVALID_TOKEN: "Invalid token",
 	TOKEN_EXPIRED: "Token expired",
-	INVALID_METADATA: "Invalid metadata"
+	INVALID_METADATA: "Invalid metadata",
+	EMAIL_OR_SESSION_REQUIRED: "Email or session is required",
+	ADMIN_PLUGIN_REQUIRED: "Admin plugin is required",
+	FORBIDDEN: "Forbidden"
 });
 //#endregion
 //#region src/routes.ts
 const subscribeSchema = z.object({
-	email: z.string().meta({ description: "Email address of the lead" }),
+	email: z.string().optional().meta({ description: "Email address of the lead" }),
 	metadata: z.record(z.string(), z.any()).optional().meta({ description: "Additional metadata to store with the lead" })
 });
 const subscribe = (options) => createAuthEndpoint("/lead/subscribe", {
@@ -22,52 +25,76 @@ const subscribe = (options) => createAuthEndpoint("/lead/subscribe", {
 	body: subscribeSchema,
 	metadata: { $Infer: { body: {} } }
 }, async (ctx) => {
-	const { email } = ctx.body;
-	if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
+	const email = ctx.body.email;
 	const metadata = validateMetadata(options, ctx.body.metadata, ctx.context.logger);
-	const normalizedEmail = email.toLowerCase();
+	let identifierType;
+	let leadIdentifier;
+	let leadEmail;
+	let createData;
+	if (email) {
+		if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
+		leadIdentifier = email.toLowerCase();
+		identifierType = "email";
+		leadEmail = leadIdentifier;
+		createData = {
+			email: leadIdentifier,
+			metadata: metadata ? JSON.stringify(metadata) : void 0
+		};
+	} else {
+		const session = await getSessionFromCtx(ctx);
+		if (!session) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);
+		leadIdentifier = session.user.id;
+		identifierType = "user";
+		leadEmail = session.user.email;
+		createData = {
+			userId: leadIdentifier,
+			metadata: metadata ? JSON.stringify(metadata) : void 0
+		};
+	}
+	const whereField = identifierType === "email" ? "email" : "userId";
 	let lead = await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: normalizedEmail
+			field: whereField,
+			value: leadIdentifier
 		}]
 	});
 	if (!lead) try {
 		lead = await ctx.context.adapter.create({
 			model: "lead",
-			data: {
-				email: normalizedEmail,
-				metadata: metadata ? JSON.stringify(metadata) : void 0
-			}
+			data: createData
 		});
 	} catch (e) {
 		ctx.context.logger.info("Error creating lead");
 		lead = await ctx.context.adapter.findOne({
 			model: "lead",
 			where: [{
-				field: "email",
-				value: normalizedEmail
+				field: whereField,
+				value: leadIdentifier
 			}]
 		});
 	}
-	if (options.sendVerificationEmail && lead && !lead.emailVerified) {
-		const token = await createEmailVerificationToken(ctx.context.secret, normalizedEmail, void 0, options.expiresIn ?? 3600);
+	if (options.sendConfirmationEmail && lead && !lead.confirmed) {
+		const token = await createConfirmationToken(ctx.context.secret, {
+			identifier: leadIdentifier,
+			type: identifierType
+		}, options.expiresIn ?? 3600);
 		const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;
 		const unsubscribeToken = await createUnsubscribeToken(ctx.context.secret, lead.id, options.unsubscribeExpiresIn);
 		const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;
-		if (await options.sendVerificationEmail({
+		if (await options.sendConfirmationEmail({
 			lead,
+			email: leadEmail,
 			url,
 			token,
 			unsubscribeUrl
 		}, ctx.request)) await ctx.context.adapter.update({
 			model: "lead",
 			where: [{
-				field: "email",
-				value: normalizedEmail
+				field: whereField,
+				value: leadIdentifier
 			}],
-			update: { verificationEmailSentAt: /* @__PURE__ */ new Date() }
+			update: { confirmationSentAt: /* @__PURE__ */ new Date() }
 		});
 	}
 	return ctx.json({ status: true });
@@ -85,26 +112,30 @@ const verify = (options) => createAuthEndpoint("/lead/verify", {
 		if (e instanceof JWTExpired) throw APIError.from("UNAUTHORIZED", LEAD_ERROR_CODES.TOKEN_EXPIRED);
 		throw APIError.from("UNAUTHORIZED", LEAD_ERROR_CODES.INVALID_TOKEN);
 	}
-	const parsed = subscribeSchema.parse(jwt.payload);
+	const parsed = z.object({
+		identifier: z.string(),
+		type: z.enum(["email", "user"])
+	}).parse(jwt.payload);
+	const whereField = parsed.type === "user" ? "userId" : "email";
 	let lead = await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: parsed.email
+			field: whereField,
+			value: parsed.identifier
 		}]
 	});
 	if (!lead) return ctx.json({ status: true });
-	if (lead.emailVerified) return ctx.json({ status: true });
+	if (lead.confirmed) return ctx.json({ status: true });
 	lead = await ctx.context.adapter.update({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: parsed.email
+			field: whereField,
+			value: parsed.identifier
 		}],
-		update: { emailVerified: true }
+		update: { confirmed: true }
 	});
 	if (!lead) return ctx.json({ status: true });
-	if (options.onEmailVerified) await ctx.context.runInBackgroundOrAwait(options.onEmailVerified({ lead }, ctx.request));
+	if (options.onConfirmed) await ctx.context.runInBackgroundOrAwait(options.onConfirmed({ lead }, ctx.request));
 	return ctx.json({ status: true });
 });
 const unsubscribeQuerySchema = z.object({ token: z.string().meta({ description: "Signed unsubscribe token" }) });
@@ -137,71 +168,137 @@ const unsubscribe = (options) => createAuthEndpoint("/lead/unsubscribe", {
 	});
 	return ctx.json({ status: true });
 });
-const resendSchema = z.object({ email: z.string().meta({ description: "Email address to resend the verification email to" }) });
+const unsubscribeSession = (_options) => createAuthEndpoint("/lead/unsubscribe-session", {
+	method: "POST",
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	const userId = ctx.context.session.user.id;
+	if (!await ctx.context.adapter.findOne({
+		model: "lead",
+		where: [{
+			field: "userId",
+			value: userId
+		}]
+	})) return ctx.json({ status: true });
+	await ctx.context.adapter.delete({
+		model: "lead",
+		where: [{
+			field: "userId",
+			value: userId
+		}]
+	});
+	return ctx.json({ status: true });
+});
+const resendSchema = z.object({ email: z.string().optional().meta({ description: "Email address to resend the verification email to" }) });
 const resend = (options) => createAuthEndpoint("/lead/resend", {
 	method: "POST",
 	body: resendSchema
 }, async (ctx) => {
-	const { email } = ctx.body;
-	if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
-	const normalizedEmail = email.toLowerCase();
+	const email = ctx.body.email;
+	let identifierType;
+	let leadIdentifier;
+	let leadEmail;
+	if (email) {
+		if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
+		leadIdentifier = email.toLowerCase();
+		identifierType = "email";
+		leadEmail = leadIdentifier;
+	} else {
+		const session = await getSessionFromCtx(ctx);
+		if (!session) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);
+		leadIdentifier = session.user.id;
+		identifierType = "user";
+		leadEmail = session.user.email;
+	}
+	const whereField = identifierType === "email" ? "email" : "userId";
 	const lead = await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: normalizedEmail
+			field: whereField,
+			value: leadIdentifier
 		}]
 	});
 	if (!lead) return ctx.json({ status: true });
-	if (options.sendVerificationEmail && lead && !lead.emailVerified) {
-		const token = await createEmailVerificationToken(ctx.context.secret, normalizedEmail, void 0, options.expiresIn ?? 3600);
+	if (options.sendConfirmationEmail && !lead.confirmed) {
+		const token = await createConfirmationToken(ctx.context.secret, {
+			identifier: leadIdentifier,
+			type: identifierType
+		}, options.expiresIn ?? 3600);
 		const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;
 		const unsubscribeToken = await createUnsubscribeToken(ctx.context.secret, lead.id, options.unsubscribeExpiresIn);
 		const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;
-		if (await options.sendVerificationEmail({
+		if (await options.sendConfirmationEmail({
 			lead,
+			email: leadEmail,
 			url,
 			token,
 			unsubscribeUrl
 		}, ctx.request)) await ctx.context.adapter.update({
 			model: "lead",
 			where: [{
-				field: "email",
-				value: normalizedEmail
+				field: whereField,
+				value: leadIdentifier
 			}],
-			update: { verificationEmailSentAt: /* @__PURE__ */ new Date() }
+			update: { confirmationSentAt: /* @__PURE__ */ new Date() }
 		});
 	}
 	return ctx.json({ status: true });
 });
-const updateSchema = z.object({
-	id: z.string().meta({ description: "The id of the lead to update" }),
-	metadata: z.record(z.string(), z.any()).optional().meta({ description: "Additional metadata to store with the lead" })
-});
+const updateSchema = z.object({ metadata: z.record(z.string(), z.any()).optional().meta({ description: "Additional metadata to store with the lead" }) });
 const update = (options) => createAuthEndpoint("/lead/update", {
 	method: "POST",
 	body: updateSchema,
+	use: [sessionMiddleware],
 	metadata: { $Infer: { body: {} } }
 }, async (ctx) => {
-	const { id } = ctx.body;
+	const userId = ctx.context.session.user.id;
 	if (!await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "id",
-			value: id
+			field: "userId",
+			value: userId
 		}]
 	})) return ctx.json({ status: true });
 	const metadata = validateMetadata(options, ctx.body.metadata, ctx.context.logger);
 	await ctx.context.adapter.update({
 		model: "lead",
 		where: [{
-			field: "id",
-			value: id
+			field: "userId",
+			value: userId
 		}],
 		update: { metadata: metadata ? JSON.stringify(metadata) : void 0 }
 	});
 	return ctx.json({ status: true });
 });
+const listQuerySchema = z.object({
+	limit: z.coerce.number().meta({ description: "The number of lead to return" }).optional(),
+	offset: z.coerce.number().meta({ description: "The offset to start from" }).optional()
+});
+const list = (options) => createAuthEndpoint("/lead/list", {
+	method: "GET",
+	query: listQuerySchema,
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	if (!ctx.context.hasPlugin("admin")) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);
+	const allowedRoles = options.admin?.roles ?? ["admin"];
+	if (!(ctx.context.session.user.role ?? "").split(",").map((r) => r.trim()).filter(Boolean).some((r) => allowedRoles.includes(r))) throw APIError.from("FORBIDDEN", LEAD_ERROR_CODES.FORBIDDEN);
+	const limit = ctx.query.limit ?? 100;
+	const offset = ctx.query.offset ?? 0;
+	const [leads, total] = await Promise.all([ctx.context.adapter.findMany({
+		model: "lead",
+		limit,
+		offset
+	}), ctx.context.adapter.count({ model: "lead" })]);
+	return ctx.json({
+		leads,
+		total,
+		limit,
+		offset
+	});
+});
+async function createConfirmationToken(secret, payload, expiresIn) {
+	return new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn).sign(new TextEncoder().encode(secret));
+}
 async function createUnsubscribeToken(secret, leadId, expiresIn) {
 	const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: "HS256" }).setIssuedAt();
 	if (expiresIn !== void 0) jwt.setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn);
@@ -235,16 +332,25 @@ const lead$1 = { lead: { fields: {
 	},
 	email: {
 		type: "string",
-		required: true,
+		required: false,
 		unique: true
 	},
-	emailVerified: {
+	userId: {
+		type: "string",
+		required: false,
+		unique: true,
+		references: {
+			model: "user",
+			field: "id"
+		}
+	},
+	confirmed: {
 		type: "boolean",
 		defaultValue: false,
 		required: true,
 		input: false
 	},
-	verificationEmailSentAt: {
+	confirmationSentAt: {
 		type: "date",
 		required: false,
 		input: false
@@ -260,16 +366,19 @@ const getSchema = (options) => {
 //#endregion
 //#region src/index.ts
 const lead = (options = {}) => {
+	const endpoints = {
+		subscribe: subscribe(options),
+		verify: verify(options),
+		unsubscribe: unsubscribe(options),
+		unsubscribeSession: unsubscribeSession(options),
+		resend: resend(options),
+		update: update(options),
+		...options.admin?.enabled ? { list: list(options) } : {}
+	};
 	return {
 		id: "lead",
 		schema: getSchema(options),
-		endpoints: {
-			subscribe: subscribe(options),
-			verify: verify(options),
-			unsubscribe: unsubscribe(options),
-			resend: resend(options),
-			update: update(options)
-		},
+		endpoints,
 		options,
 		rateLimit: [{
 			pathMatcher: (path) => ["/lead/subscribe", "/lead/resend"].includes(path),

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n});\n","import { BASE_ERROR_CODES, type InternalLogger, type StandardSchemaV1 } from 'better-auth';\nimport { APIError, createAuthEndpoint, createEmailVerificationToken } from 'better-auth/api';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\nconst subscribeSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      const normalizedEmail = email.toLowerCase();\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: {\n              email: normalizedEmail,\n              metadata: metadata ? JSON.stringify(metadata) : undefined,\n            },\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [\n              {\n                field: 'email',\n                value: normalizedEmail,\n              },\n            ],\n          });\n        }\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const parsed = subscribeSchema.parse(jwt.payload);\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.emailVerified) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n        update: {\n          emailVerified: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onEmailVerified) {\n        await ctx.context.runInBackgroundOrAwait(options.onEmailVerified({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeQuerySchema = z.object({\n  token: z.string().meta({\n    description: 'Signed unsubscribe token',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      query: unsubscribeQuerySchema,\n      metadata: {\n        // Empty array overrides the router-level JSON-only restriction,\n        // allowing POST with no body (required for RFC 8058 one-click unsubscribe).\n        allowedMediaTypes: [],\n      },\n    },\n    async (ctx) => {\n      let payload: JWTPayload;\n      try {\n        const result = await jwtVerify(\n          ctx.query.token,\n          new TextEncoder().encode(ctx.context.secret),\n          { algorithms: ['HS256'] },\n        );\n        payload = result.payload;\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const id = payload['id'] as string;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const normalizedEmail = email.toLowerCase();\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  id: z.string().meta({\n    description: 'The id of the lead to update',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            id: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { id } = ctx.body;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nasync function createUnsubscribeToken(secret: string, leadId: string, expiresIn?: number) {\n  const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: 'HS256' }).setIssuedAt();\n  if (expiresIn !== undefined) {\n    jwt.setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn);\n  }\n  return jwt.sign(new TextEncoder().encode(secret));\n}\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: true,\n        unique: true,\n      },\n      emailVerified: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      verificationEmailSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport { resend, subscribe, unsubscribe, update, verify } from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints: {\n      subscribe: subscribe(options),\n      verify: verify(options),\n      unsubscribe: unsubscribe(options),\n      resend: resend(options),\n      update: update(options),\n    },\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;AACpB,CAAC;;;ACSD,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,4BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAGtB,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;CAGnE,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,kBAAkB,MAAM,YAAY;CAE1C,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,IAAI;EACF,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;IACJ,OAAO;IACP,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;GAClD;EACF,CAAC;CACH,SAAS,GAAG;EACV,IAAI,QAAQ,OAAO,KAAK,qBAAqB;EAC7C,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CACL;IACE,OAAO;IACP,OAAO;GACT,CACF;EACF,CAAC;CACH;CAGF,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAYxE,IAAI,MAVe,QAAQ,sBACzB;GACE;GACA;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;GAAgB,CAAC;GAClD,QAAQ,EAAE,yCAAyB,IAAI,KAAK,EAAE;EAChD,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,gCACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,UAAU,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAAG,EACzE,YAAY,CAAC,OAAO,EACtB,CAAC;CACH,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,SAAS,gBAAgB,MAAM,IAAI,OAAO;CAEhD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;EAChB,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,KAAK,eACP,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;EAChB,CACF;EACA,QAAQ,EACN,eAAe,KACjB;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,iBACV,MAAM,IAAI,QAAQ,uBAAuB,QAAQ,gBAAgB,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC;CAGzF,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,yBAAyB,EAAE,OAAO,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,2BACf,CAAC,EACH,CAAC;AAED,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,OAAO;CACP,UAAU,EAGR,mBAAmB,CAAC,EACtB;AACF,GACA,OAAO,QAAQ;CACb,IAAI;CACJ,IAAI;EAMF,WAAU,MALW,UACnB,IAAI,MAAM,OACV,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAC3C,EAAE,YAAY,CAAC,OAAO,EAAE,CAC1B,GACiB;CACnB,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,KAAK,QAAQ;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,oDACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;AACR,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAGtB,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;CAGnE,MAAM,kBAAkB,MAAM,YAAY;CAE1C,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAYxE,IAAI,MAVe,QAAQ,sBACzB;GACE;GACA;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;GAAgB,CAAC;GAClD,QAAQ,EAAE,yCAAyB,IAAI,KAAK,EAAE;EAChD,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO;CAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAClB,aAAa,+BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,OAAO,IAAI;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;EACA,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA,EAClD;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,eAAe,uBAAuB,QAAgB,QAAgB,WAAoB;CACxF,MAAM,MAAM,IAAI,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EAAE,YAAY;CACzF,IAAI,cAAc,KAAA,GAChB,IAAI,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS;CAEjE,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAClD;AAEA,SAAS,iBACP,SACA,UACA,QACA;CACA,IAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,kBAClC,OAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,QAAQ;CAEzF,IAAI,4BAA4B,SAC9B,MAAM,SAAS,KAAK,yBAAyB,iBAAiB,8BAA8B;CAG9F,IAAI,iBAAiB,QAAQ;EAC3B,OAAO,MAAM,oBAAoB,iBAAiB,MAAM;EACxD,MAAM,SAAS,KAAK,eAAe,iBAAiB,gBAAgB;CACtE;CAEA,OAAO,iBAAiB;AAC1B;;;AChcA,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,UAAU;EACV,OAAO;CACT;CACA,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,gCAAgB,IAAI,KAAK;EACzB,UAAU;EACV,OAAO;CACT;CACA,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;CACV;CACA,eAAe;EACb,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;CACT;CACA,yBAAyB;EACvB,MAAM;EACN,UAAU;EACV,OAAO;CACT;CACA,UAAU;EACR,MAAM;EACN,UAAU;CACZ;AACF,EACF,EACF;AAEA,MAAa,aAAoC,YAAe;CAC9D,OAAO,YAAYA,QAAM,QAAQ,MAAM;AACzC;;;ACxCA,MAAa,QAA+B,UAAa,CAAC,MAAW;CACnE,OAAO;EACL,IAAI;EACJ,QAAQ,UAAU,OAAO;EACzB,WAAW;GACT,WAAW,UAAU,OAAO;GAC5B,QAAQ,OAAO,OAAO;GACtB,aAAa,YAAY,OAAO;GAChC,QAAQ,OAAO,OAAO;GACtB,QAAQ,OAAO,OAAO;EACxB;EACS;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,cAAc,EAAE,SAAS,IAAI;GACxE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;EACjC,CACF;EACA,cAAc;CAChB;AACF"}
+{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n  EMAIL_OR_SESSION_REQUIRED: 'Email or session is required',\n  ADMIN_PLUGIN_REQUIRED: 'Admin plugin is required',\n  FORBIDDEN: 'Forbidden',\n});\n","import { BASE_ERROR_CODES, type InternalLogger, type StandardSchemaV1 } from 'better-auth';\nimport {\n  APIError,\n  createAuthEndpoint,\n  getSessionFromCtx,\n  sessionMiddleware,\n} from 'better-auth/api';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\ntype IdentifierType = 'email' | 'user';\n\nconst subscribeSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email?: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n      let createData: LeadPayload;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n        createData = {\n          email: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n        createData = {\n          userId: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: createData,\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n          });\n        }\n      }\n\n      if (options.sendConfirmationEmail && lead && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const confirmationPayloadSchema = z.object({\n        identifier: z.string(),\n        type: z.enum(['email', 'user']),\n      });\n      const parsed = confirmationPayloadSchema.parse(jwt.payload);\n\n      const whereField = parsed.type === 'user' ? 'userId' : 'email';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.confirmed) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n        update: {\n          confirmed: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onConfirmed) {\n        await ctx.context.runInBackgroundOrAwait(options.onConfirmed({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeQuerySchema = z.object({\n  token: z.string().meta({\n    description: 'Signed unsubscribe token',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      query: unsubscribeQuerySchema,\n      metadata: {\n        // Empty array overrides the router-level JSON-only restriction,\n        // allowing POST with no body (required for RFC 8058 one-click unsubscribe).\n        allowedMediaTypes: [],\n      },\n    },\n    async (ctx) => {\n      let payload: JWTPayload;\n      try {\n        const result = await jwtVerify(\n          ctx.query.token,\n          new TextEncoder().encode(ctx.context.secret),\n          { algorithms: ['HS256'] },\n        );\n        payload = result.payload;\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const id = payload['id'] as string;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nexport const unsubscribeSession = <O extends LeadOptions>(_options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe-session',\n    {\n      method: 'POST',\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendConfirmationEmail && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      use: [sessionMiddleware],\n      metadata: {\n        $Infer: {\n          body: {} as {\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst listQuerySchema = z.object({\n  limit: z.coerce\n    .number()\n    .meta({\n      description: 'The number of lead to return',\n    })\n    .optional(),\n  offset: z.coerce\n    .number()\n    .meta({\n      description: 'The offset to start from',\n    })\n    .optional(),\n});\n\nexport const list = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/list',\n    {\n      method: 'GET',\n      query: listQuerySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const limit = ctx.query.limit ?? 100;\n      const offset = ctx.query.offset ?? 0;\n\n      const [leads, total] = await Promise.all([\n        ctx.context.adapter.findMany<Lead>({\n          model: 'lead',\n          limit,\n          offset,\n        }),\n        ctx.context.adapter.count({ model: 'lead' }),\n      ]);\n\n      return ctx.json({ leads, total, limit, offset });\n    },\n  );\n\nasync function createConfirmationToken(\n  secret: string,\n  payload: { identifier: string; type: IdentifierType },\n  expiresIn: number,\n) {\n  return new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn)\n    .sign(new TextEncoder().encode(secret));\n}\n\nasync function createUnsubscribeToken(secret: string, leadId: string, expiresIn?: number) {\n  const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: 'HS256' }).setIssuedAt();\n  if (expiresIn !== undefined) {\n    jwt.setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn);\n  }\n  return jwt.sign(new TextEncoder().encode(secret));\n}\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: false,\n        unique: true,\n      },\n      userId: {\n        type: 'string',\n        required: false,\n        unique: true,\n        references: {\n          model: 'user',\n          field: 'id',\n        },\n      },\n      confirmed: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      confirmationSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport { list, resend, subscribe, unsubscribe, unsubscribeSession, update, verify } from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  const endpoints = {\n    subscribe: subscribe(options),\n    verify: verify(options),\n    unsubscribe: unsubscribe(options),\n    unsubscribeSession: unsubscribeSession(options),\n    resend: resend(options),\n    update: update(options),\n    ...(options.admin?.enabled ? { list: list(options) } : {}),\n  };\n\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints,\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;CAClB,2BAA2B;CAC3B,uBAAuB;CACvB,WAAW;AACb,CAAC;;;ACaD,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,4BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;EACZ,aAAa;GACX,OAAO;GACP,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAG/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;EACzB,aAAa;GACX,QAAQ;GACR,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,IAAI;EACF,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;EACR,CAAC;CACH,SAAS,GAAG;EACV,IAAI,QAAQ,OAAO,KAAK,qBAAqB;EAC7C,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;EACtD,CAAC;CACH;CAGF,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,WAAW;EAC5D,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,gCACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,UAAU,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAAG,EACzE,YAAY,CAAC,OAAO,EACtB,CAAC;CACH,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAMA,MAAM,SAJ4B,EAAE,OAAO;EACzC,YAAY,EAAE,OAAO;EACrB,MAAM,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;CAChC,CACuC,EAAE,MAAM,IAAI,OAAO;CAE1D,MAAM,aAAa,OAAO,SAAS,SAAS,WAAW;CAEvD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;CACzD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,KAAK,WACP,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;EACvD,QAAQ,EACN,WAAW,KACb;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,aACV,MAAM,IAAI,QAAQ,uBAAuB,QAAQ,YAAY,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC;CAGrF,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,yBAAyB,EAAE,OAAO,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,2BACf,CAAC,EACH,CAAC;AAED,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,OAAO;CACP,UAAU,EAGR,mBAAmB,CAAC,EACtB;AACF,GACA,OAAO,QAAQ;CACb,IAAI;CACJ,IAAI;EAMF,WAAU,MALW,UACnB,IAAI,MAAM,OACV,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAC3C,EAAE,YAAY,CAAC,OAAO,EAAE,CAC1B,GACiB;CACnB,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,KAAK,QAAQ;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAa,sBAA6C,aACxD,mBACE,6BACA;CACE,QAAQ;CACR,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,oDACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;AACR,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;CACd,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAE/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;CAC3B;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,yBAAyB,CAAC,KAAK,WAAW;EACpD,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,KAAK,CAAC,iBAAiB;CACvB,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAGT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;EAC1C,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA,EAClD;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OACN,OAAO,EACP,KAAK,EACJ,aAAa,+BACf,CAAC,EACA,SAAS;CACZ,QAAQ,EAAE,OACP,OAAO,EACP,KAAK,EACJ,aAAa,2BACf,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAa,QAA+B,YAC1C,mBACE,cACA;CACE,QAAQ;CACR,OAAO;CACP,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAG7D,MAAM,QAAQ,IAAI,MAAM,SAAS;CACjC,MAAM,SAAS,IAAI,MAAM,UAAU;CAEnC,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,IAAI,CACvC,IAAI,QAAQ,QAAQ,SAAe;EACjC,OAAO;EACP;EACA;CACF,CAAC,GACD,IAAI,QAAQ,QAAQ,MAAM,EAAE,OAAO,OAAO,CAAC,CAC7C,CAAC;CAED,OAAO,IAAI,KAAK;EAAE;EAAO;EAAO;EAAO;CAAO,CAAC;AACjD,CACF;AAEF,eAAe,wBACb,QACA,SACA,WACA;CACA,OAAO,IAAI,QAAQ,OAAO,EACvB,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS,EAC3D,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAC1C;AAEA,eAAe,uBAAuB,QAAgB,QAAgB,WAAoB;CACxF,MAAM,MAAM,IAAI,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EAAE,YAAY;CACzF,IAAI,cAAc,KAAA,GAChB,IAAI,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS;CAEjE,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAClD;AAEA,SAAS,iBACP,SACA,UACA,QACA;CACA,IAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,kBAClC,OAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,QAAQ;CAEzF,IAAI,4BAA4B,SAC9B,MAAM,SAAS,KAAK,yBAAyB,iBAAiB,8BAA8B;CAG9F,IAAI,iBAAiB,QAAQ;EAC3B,OAAO,MAAM,oBAAoB,iBAAiB,MAAM;EACxD,MAAM,SAAS,KAAK,eAAe,iBAAiB,gBAAgB;CACtE;CAEA,OAAO,iBAAiB;AAC1B;;;ACxjBA,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,UAAU;EACV,OAAO;CACT;CACA,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,gCAAgB,IAAI,KAAK;EACzB,UAAU;EACV,OAAO;CACT;CACA,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;CACV;CACA,QAAQ;EACN,MAAM;EACN,UAAU;EACV,QAAQ;EACR,YAAY;GACV,OAAO;GACP,OAAO;EACT;CACF;CACA,WAAW;EACT,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;CACT;CACA,oBAAoB;EAClB,MAAM;EACN,UAAU;EACV,OAAO;CACT;CACA,UAAU;EACR,MAAM;EACN,UAAU;CACZ;AACF,EACF,EACF;AAEA,MAAa,aAAoC,YAAe;CAC9D,OAAO,YAAYA,QAAM,QAAQ,MAAM;AACzC;;;ACjDA,MAAa,QAA+B,UAAa,CAAC,MAAW;CACnE,MAAM,YAAY;EAChB,WAAW,UAAU,OAAO;EAC5B,QAAQ,OAAO,OAAO;EACtB,aAAa,YAAY,OAAO;EAChC,oBAAoB,mBAAmB,OAAO;EAC9C,QAAQ,OAAO,OAAO;EACtB,QAAQ,OAAO,OAAO;EACtB,GAAI,QAAQ,OAAO,UAAU,EAAE,MAAM,KAAK,OAAO,EAAE,IAAI,CAAC;CAC1D;CAEA,OAAO;EACL,IAAI;EACJ,QAAQ,UAAU,OAAO;EACzB;EACS;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,cAAc,EAAE,SAAS,IAAI;GACxE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;EACjC,CACF;EACA,cAAc;CAChB;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth-lead",
-  "version": "0.4.3",
+  "version": "0.5.0",
   "description": "Better Auth Lead plugin",
   "homepage": "https://github.com/marcjulian/better-auth-plugins#readme",
   "bugs": {