better-auth-lead 0.4.3 → 0.6.0

package/dist/index.mjs

@@ -1,5 +1,6 @@
 import { BASE_ERROR_CODES, defineErrorCodes } from "better-auth";
-import { APIError, createAuthEndpoint, createEmailVerificationToken } from "better-auth/api";
+import { whereOperators } from "better-auth/adapters";
+import { APIError, createAuthEndpoint, getSessionFromCtx, sessionMiddleware } from "better-auth/api";
 import { SignJWT, jwtVerify } from "jose";
 import { JWTExpired } from "jose/errors";
 import * as z from "zod";
@@ -9,12 +10,16 @@ const LEAD_ERROR_CODES = defineErrorCodes({
 	INVALID_EMAIL: "Invalid email",
 	INVALID_TOKEN: "Invalid token",
 	TOKEN_EXPIRED: "Token expired",
-	INVALID_METADATA: "Invalid metadata"
+	INVALID_METADATA: "Invalid metadata",
+	EMAIL_OR_SESSION_REQUIRED: "Email or session is required",
+	ADMIN_PLUGIN_REQUIRED: "Admin plugin is required",
+	FORBIDDEN: "Forbidden",
+	LEAD_NOT_FOUND: "Lead not found"
 });
 //#endregion
 //#region src/routes.ts
 const subscribeSchema = z.object({
-	email: z.string().meta({ description: "Email address of the lead" }),
+	email: z.string().optional().meta({ description: "Email address of the lead" }),
 	metadata: z.record(z.string(), z.any()).optional().meta({ description: "Additional metadata to store with the lead" })
 });
 const subscribe = (options) => createAuthEndpoint("/lead/subscribe", {
@@ -22,52 +27,76 @@ const subscribe = (options) => createAuthEndpoint("/lead/subscribe", {
 	body: subscribeSchema,
 	metadata: { $Infer: { body: {} } }
 }, async (ctx) => {
-	const { email } = ctx.body;
-	if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
+	const email = ctx.body.email;
 	const metadata = validateMetadata(options, ctx.body.metadata, ctx.context.logger);
-	const normalizedEmail = email.toLowerCase();
+	let identifierType;
+	let leadIdentifier;
+	let leadEmail;
+	let createData;
+	if (email) {
+		if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
+		leadIdentifier = email.toLowerCase();
+		identifierType = "email";
+		leadEmail = leadIdentifier;
+		createData = {
+			email: leadIdentifier,
+			metadata: metadata ? JSON.stringify(metadata) : void 0
+		};
+	} else {
+		const session = await getSessionFromCtx(ctx);
+		if (!session) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);
+		leadIdentifier = session.user.id;
+		identifierType = "user";
+		leadEmail = session.user.email;
+		createData = {
+			userId: leadIdentifier,
+			metadata: metadata ? JSON.stringify(metadata) : void 0
+		};
+	}
+	const whereField = identifierType === "email" ? "email" : "userId";
 	let lead = await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: normalizedEmail
+			field: whereField,
+			value: leadIdentifier
 		}]
 	});
 	if (!lead) try {
 		lead = await ctx.context.adapter.create({
 			model: "lead",
-			data: {
-				email: normalizedEmail,
-				metadata: metadata ? JSON.stringify(metadata) : void 0
-			}
+			data: createData
 		});
 	} catch (e) {
 		ctx.context.logger.info("Error creating lead");
 		lead = await ctx.context.adapter.findOne({
 			model: "lead",
 			where: [{
-				field: "email",
-				value: normalizedEmail
+				field: whereField,
+				value: leadIdentifier
 			}]
 		});
 	}
-	if (options.sendVerificationEmail && lead && !lead.emailVerified) {
-		const token = await createEmailVerificationToken(ctx.context.secret, normalizedEmail, void 0, options.expiresIn ?? 3600);
+	if (options.sendConfirmationEmail && lead && !lead.confirmed) {
+		const token = await createConfirmationToken(ctx.context.secret, {
+			identifier: leadIdentifier,
+			type: identifierType
+		}, options.expiresIn ?? 3600);
 		const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;
 		const unsubscribeToken = await createUnsubscribeToken(ctx.context.secret, lead.id, options.unsubscribeExpiresIn);
 		const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;
-		if (await options.sendVerificationEmail({
+		if (await options.sendConfirmationEmail({
 			lead,
+			email: leadEmail,
 			url,
 			token,
 			unsubscribeUrl
 		}, ctx.request)) await ctx.context.adapter.update({
 			model: "lead",
 			where: [{
-				field: "email",
-				value: normalizedEmail
+				field: whereField,
+				value: leadIdentifier
 			}],
-			update: { verificationEmailSentAt: /* @__PURE__ */ new Date() }
+			update: { confirmationSentAt: /* @__PURE__ */ new Date() }
 		});
 	}
 	return ctx.json({ status: true });
@@ -85,26 +114,30 @@ const verify = (options) => createAuthEndpoint("/lead/verify", {
 		if (e instanceof JWTExpired) throw APIError.from("UNAUTHORIZED", LEAD_ERROR_CODES.TOKEN_EXPIRED);
 		throw APIError.from("UNAUTHORIZED", LEAD_ERROR_CODES.INVALID_TOKEN);
 	}
-	const parsed = subscribeSchema.parse(jwt.payload);
+	const parsed = z.object({
+		identifier: z.string(),
+		type: z.enum(["email", "user"])
+	}).parse(jwt.payload);
+	const whereField = parsed.type === "user" ? "userId" : "email";
 	let lead = await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: parsed.email
+			field: whereField,
+			value: parsed.identifier
 		}]
 	});
 	if (!lead) return ctx.json({ status: true });
-	if (lead.emailVerified) return ctx.json({ status: true });
+	if (lead.confirmed) return ctx.json({ status: true });
 	lead = await ctx.context.adapter.update({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: parsed.email
+			field: whereField,
+			value: parsed.identifier
 		}],
-		update: { emailVerified: true }
+		update: { confirmed: true }
 	});
 	if (!lead) return ctx.json({ status: true });
-	if (options.onEmailVerified) await ctx.context.runInBackgroundOrAwait(options.onEmailVerified({ lead }, ctx.request));
+	if (options.onConfirmed) await ctx.context.runInBackgroundOrAwait(options.onConfirmed({ lead }, ctx.request));
 	return ctx.json({ status: true });
 });
 const unsubscribeQuerySchema = z.object({ token: z.string().meta({ description: "Signed unsubscribe token" }) });
@@ -137,71 +170,209 @@ const unsubscribe = (options) => createAuthEndpoint("/lead/unsubscribe", {
 	});
 	return ctx.json({ status: true });
 });
-const resendSchema = z.object({ email: z.string().meta({ description: "Email address to resend the verification email to" }) });
+const unsubscribeSession = (_options) => createAuthEndpoint("/lead/unsubscribe-session", {
+	method: "POST",
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	const userId = ctx.context.session.user.id;
+	if (!await ctx.context.adapter.findOne({
+		model: "lead",
+		where: [{
+			field: "userId",
+			value: userId
+		}]
+	})) return ctx.json({ status: true });
+	await ctx.context.adapter.delete({
+		model: "lead",
+		where: [{
+			field: "userId",
+			value: userId
+		}]
+	});
+	return ctx.json({ status: true });
+});
+const resendSchema = z.object({ email: z.string().optional().meta({ description: "Email address to resend the verification email to" }) });
 const resend = (options) => createAuthEndpoint("/lead/resend", {
 	method: "POST",
 	body: resendSchema
 }, async (ctx) => {
-	const { email } = ctx.body;
-	if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
-	const normalizedEmail = email.toLowerCase();
+	const email = ctx.body.email;
+	let identifierType;
+	let leadIdentifier;
+	let leadEmail;
+	if (email) {
+		if (!z.email().safeParse(email).success) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.INVALID_EMAIL);
+		leadIdentifier = email.toLowerCase();
+		identifierType = "email";
+		leadEmail = leadIdentifier;
+	} else {
+		const session = await getSessionFromCtx(ctx);
+		if (!session) throw APIError.from("BAD_REQUEST", LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);
+		leadIdentifier = session.user.id;
+		identifierType = "user";
+		leadEmail = session.user.email;
+	}
+	const whereField = identifierType === "email" ? "email" : "userId";
 	const lead = await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "email",
-			value: normalizedEmail
+			field: whereField,
+			value: leadIdentifier
 		}]
 	});
 	if (!lead) return ctx.json({ status: true });
-	if (options.sendVerificationEmail && lead && !lead.emailVerified) {
-		const token = await createEmailVerificationToken(ctx.context.secret, normalizedEmail, void 0, options.expiresIn ?? 3600);
+	if (options.sendConfirmationEmail && !lead.confirmed) {
+		const token = await createConfirmationToken(ctx.context.secret, {
+			identifier: leadIdentifier,
+			type: identifierType
+		}, options.expiresIn ?? 3600);
 		const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;
 		const unsubscribeToken = await createUnsubscribeToken(ctx.context.secret, lead.id, options.unsubscribeExpiresIn);
 		const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;
-		if (await options.sendVerificationEmail({
+		if (await options.sendConfirmationEmail({
 			lead,
+			email: leadEmail,
 			url,
 			token,
 			unsubscribeUrl
 		}, ctx.request)) await ctx.context.adapter.update({
 			model: "lead",
 			where: [{
-				field: "email",
-				value: normalizedEmail
+				field: whereField,
+				value: leadIdentifier
 			}],
-			update: { verificationEmailSentAt: /* @__PURE__ */ new Date() }
+			update: { confirmationSentAt: /* @__PURE__ */ new Date() }
 		});
 	}
 	return ctx.json({ status: true });
 });
-const updateSchema = z.object({
-	id: z.string().meta({ description: "The id of the lead to update" }),
-	metadata: z.record(z.string(), z.any()).optional().meta({ description: "Additional metadata to store with the lead" })
-});
+const updateSchema = z.object({ metadata: z.record(z.string(), z.any()).optional().meta({ description: "Additional metadata to store with the lead" }) });
 const update = (options) => createAuthEndpoint("/lead/update", {
 	method: "POST",
 	body: updateSchema,
+	use: [sessionMiddleware],
 	metadata: { $Infer: { body: {} } }
 }, async (ctx) => {
-	const { id } = ctx.body;
+	const userId = ctx.context.session.user.id;
 	if (!await ctx.context.adapter.findOne({
 		model: "lead",
 		where: [{
-			field: "id",
-			value: id
+			field: "userId",
+			value: userId
 		}]
 	})) return ctx.json({ status: true });
 	const metadata = validateMetadata(options, ctx.body.metadata, ctx.context.logger);
 	await ctx.context.adapter.update({
 		model: "lead",
 		where: [{
-			field: "id",
-			value: id
+			field: "userId",
+			value: userId
 		}],
 		update: { metadata: metadata ? JSON.stringify(metadata) : void 0 }
 	});
 	return ctx.json({ status: true });
 });
+const listQuerySchema = z.object({
+	searchValue: z.string().optional().meta({ description: "The value to search for. Eg: \"some name\"" }),
+	searchField: z.enum(["email"]).meta({ description: "The field to search in, defaults to email." }).optional(),
+	searchOperator: z.enum([
+		"contains",
+		"starts_with",
+		"ends_with"
+	]).meta({ description: "The operator to use for the search. Can be `contains`, `starts_with` or `ends_with`. Eg: \"contains\"" }).optional(),
+	limit: z.coerce.number().meta({ description: "The number of lead to return" }).optional(),
+	offset: z.coerce.number().meta({ description: "The offset to start from" }).optional(),
+	sortBy: z.string().meta({ description: "The field to sort by" }).optional(),
+	sortDirection: z.enum(["asc", "desc"]).meta({ description: "The direction to sort by" }).optional(),
+	filterField: z.string().meta({ description: "The field to filter by" }).optional(),
+	filterValue: z.string().meta({ description: "The value to filter by" }).or(z.number()).or(z.boolean()).or(z.array(z.string())).or(z.array(z.number())).optional(),
+	filterOperator: z.enum(whereOperators).meta({ description: "The operator to use for the filter" }).optional()
+});
+const listLeads = (options) => createAuthEndpoint("/lead/list-leads", {
+	method: "GET",
+	query: listQuerySchema,
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	if (!ctx.context.hasPlugin("admin")) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);
+	const allowedRoles = options.admin?.roles ?? ["admin"];
+	if (!(ctx.context.session.user.role ?? "").split(",").map((r) => r.trim()).filter(Boolean).some((r) => allowedRoles.includes(r))) throw APIError.from("FORBIDDEN", LEAD_ERROR_CODES.FORBIDDEN);
+	const where = [];
+	if (ctx.query?.searchValue) where.push({
+		field: ctx.query.searchField || "email",
+		operator: ctx.query.searchOperator || "contains",
+		value: ctx.query.searchValue
+	});
+	if (ctx.query?.filterValue !== void 0) where.push({
+		field: ctx.query.filterField || "email",
+		operator: ctx.query.filterOperator || "eq",
+		value: ctx.query.filterValue
+	});
+	const limit = ctx.query.limit ?? 100;
+	const offset = ctx.query.offset ?? 0;
+	const [leads, total] = await Promise.all([ctx.context.adapter.findMany({
+		model: "lead",
+		limit,
+		offset,
+		...ctx.query.sortBy && { sortBy: {
+			field: ctx.query.sortBy,
+			direction: ctx.query.sortDirection || "asc"
+		} },
+		where: where.length ? where : void 0
+	}), ctx.context.adapter.count({ model: "lead" })]);
+	return ctx.json({
+		leads,
+		total,
+		limit,
+		offset
+	});
+});
+const getLeadQuerySchema = z.object({ id: z.string().meta({ description: "The id of the Lead" }) });
+const getLead = (options) => createAuthEndpoint("lead/get-lead", {
+	method: "POST",
+	query: getLeadQuerySchema,
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	if (!ctx.context.hasPlugin("admin")) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);
+	const allowedRoles = options.admin?.roles ?? ["admin"];
+	if (!(ctx.context.session.user.role ?? "").split(",").map((r) => r.trim()).filter(Boolean).some((r) => allowedRoles.includes(r))) throw APIError.from("FORBIDDEN", LEAD_ERROR_CODES.FORBIDDEN);
+	const lead = await ctx.context.adapter.findOne({
+		model: "lead",
+		where: [{
+			field: "id",
+			value: ctx.body.leadId
+		}]
+	});
+	if (!lead) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.LEAD_NOT_FOUND);
+	return lead;
+});
+const removeLeadBodySchema = z.object({ leadId: z.coerce.string().meta({ description: "The lead id" }) });
+const removeLead = (options) => createAuthEndpoint("lead/remove-lead", {
+	method: "POST",
+	body: removeLeadBodySchema,
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	if (!ctx.context.hasPlugin("admin")) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);
+	const allowedRoles = options.admin?.roles ?? ["admin"];
+	if (!(ctx.context.session.user.role ?? "").split(",").map((r) => r.trim()).filter(Boolean).some((r) => allowedRoles.includes(r))) throw APIError.from("FORBIDDEN", LEAD_ERROR_CODES.FORBIDDEN);
+	if (!await ctx.context.adapter.findOne({
+		model: "lead",
+		where: [{
+			field: "id",
+			value: ctx.body.leadId
+		}]
+	})) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.LEAD_NOT_FOUND);
+	await ctx.context.adapter.delete({
+		model: "lead",
+		where: [{
+			field: "id",
+			value: ctx.body.leadId
+		}]
+	});
+	return ctx.json({ success: true });
+});
+async function createConfirmationToken(secret, payload, expiresIn) {
+	return new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn).sign(new TextEncoder().encode(secret));
+}
 async function createUnsubscribeToken(secret, leadId, expiresIn) {
 	const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: "HS256" }).setIssuedAt();
 	if (expiresIn !== void 0) jwt.setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn);
@@ -235,16 +406,25 @@ const lead$1 = { lead: { fields: {
 	},
 	email: {
 		type: "string",
-		required: true,
+		required: false,
 		unique: true
 	},
-	emailVerified: {
+	userId: {
+		type: "string",
+		required: false,
+		unique: true,
+		references: {
+			model: "user",
+			field: "id"
+		}
+	},
+	confirmed: {
 		type: "boolean",
 		defaultValue: false,
 		required: true,
 		input: false
 	},
-	verificationEmailSentAt: {
+	confirmationSentAt: {
 		type: "date",
 		required: false,
 		input: false
@@ -260,16 +440,23 @@ const getSchema = (options) => {
 //#endregion
 //#region src/index.ts
 const lead = (options = {}) => {
+	const endpoints = {
+		subscribe: subscribe(options),
+		verify: verify(options),
+		unsubscribe: unsubscribe(options),
+		unsubscribeSession: unsubscribeSession(options),
+		resend: resend(options),
+		update: update(options),
+		...options.admin?.enabled ? {
+			listLeads: listLeads(options),
+			getLead: getLead(options),
+			removeLead: removeLead(options)
+		} : {}
+	};
 	return {
 		id: "lead",
 		schema: getSchema(options),
-		endpoints: {
-			subscribe: subscribe(options),
-			verify: verify(options),
-			unsubscribe: unsubscribe(options),
-			resend: resend(options),
-			update: update(options)
-		},
+		endpoints,
 		options,
 		rateLimit: [{
 			pathMatcher: (path) => ["/lead/subscribe", "/lead/resend"].includes(path),

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n});\n","import { BASE_ERROR_CODES, type InternalLogger, type StandardSchemaV1 } from 'better-auth';\nimport { APIError, createAuthEndpoint, createEmailVerificationToken } from 'better-auth/api';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\nconst subscribeSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      const normalizedEmail = email.toLowerCase();\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: {\n              email: normalizedEmail,\n              metadata: metadata ? JSON.stringify(metadata) : undefined,\n            },\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [\n              {\n                field: 'email',\n                value: normalizedEmail,\n              },\n            ],\n          });\n        }\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const parsed = subscribeSchema.parse(jwt.payload);\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.emailVerified) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: parsed.email,\n          },\n        ],\n        update: {\n          emailVerified: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onEmailVerified) {\n        await ctx.context.runInBackgroundOrAwait(options.onEmailVerified({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeQuerySchema = z.object({\n  token: z.string().meta({\n    description: 'Signed unsubscribe token',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      query: unsubscribeQuerySchema,\n      metadata: {\n        // Empty array overrides the router-level JSON-only restriction,\n        // allowing POST with no body (required for RFC 8058 one-click unsubscribe).\n        allowedMediaTypes: [],\n      },\n    },\n    async (ctx) => {\n      let payload: JWTPayload;\n      try {\n        const result = await jwtVerify(\n          ctx.query.token,\n          new TextEncoder().encode(ctx.context.secret),\n          { algorithms: ['HS256'] },\n        );\n        payload = result.payload;\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const id = payload['id'] as string;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const { email } = ctx.body;\n\n      const isValidEmail = z.email().safeParse(email);\n      if (!isValidEmail.success) {\n        throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n      }\n\n      const normalizedEmail = email.toLowerCase();\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'email',\n            value: normalizedEmail,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendVerificationEmail && lead && !lead.emailVerified) {\n        const token = await createEmailVerificationToken(\n          ctx.context.secret,\n          normalizedEmail,\n          undefined,\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendVerificationEmail(\n          {\n            lead,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: 'email', value: normalizedEmail }],\n            update: { verificationEmailSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  id: z.string().meta({\n    description: 'The id of the lead to update',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            id: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const { id } = ctx.body;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nasync function createUnsubscribeToken(secret: string, leadId: string, expiresIn?: number) {\n  const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: 'HS256' }).setIssuedAt();\n  if (expiresIn !== undefined) {\n    jwt.setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn);\n  }\n  return jwt.sign(new TextEncoder().encode(secret));\n}\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: true,\n        unique: true,\n      },\n      emailVerified: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      verificationEmailSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport { resend, subscribe, unsubscribe, update, verify } from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints: {\n      subscribe: subscribe(options),\n      verify: verify(options),\n      unsubscribe: unsubscribe(options),\n      resend: resend(options),\n      update: update(options),\n    },\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;AACpB,CAAC;;;ACSD,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,4BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAGtB,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;CAGnE,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,kBAAkB,MAAM,YAAY;CAE1C,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,IAAI;EACF,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;IACJ,OAAO;IACP,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;GAClD;EACF,CAAC;CACH,SAAS,GAAG;EACV,IAAI,QAAQ,OAAO,KAAK,qBAAqB;EAC7C,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CACL;IACE,OAAO;IACP,OAAO;GACT,CACF;EACF,CAAC;CACH;CAGF,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAYxE,IAAI,MAVe,QAAQ,sBACzB;GACE;GACA;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;GAAgB,CAAC;GAClD,QAAQ,EAAE,yCAAyB,IAAI,KAAK,EAAE;EAChD,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,gCACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,UAAU,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAAG,EACzE,YAAY,CAAC,OAAO,EACtB,CAAC;CACH,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,SAAS,gBAAgB,MAAM,IAAI,OAAO;CAEhD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;EAChB,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,KAAK,eACP,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO,OAAO;EAChB,CACF;EACA,QAAQ,EACN,eAAe,KACjB;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,iBACV,MAAM,IAAI,QAAQ,uBAAuB,QAAQ,gBAAgB,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC;CAGzF,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,yBAAyB,EAAE,OAAO,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,2BACf,CAAC,EACH,CAAC;AAED,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,OAAO;CACP,UAAU,EAGR,mBAAmB,CAAC,EACtB;AACF,GACA,OAAO,QAAQ;CACb,IAAI;CACJ,IAAI;EAMF,WAAU,MALW,UACnB,IAAI,MAAM,OACV,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAC3C,EAAE,YAAY,CAAC,OAAO,EAAE,CAC1B,GACiB;CACnB,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,KAAK,QAAQ;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,oDACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;AACR,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAGtB,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;CAGnE,MAAM,kBAAkB,MAAM,YAAY;CAE1C,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,eAAe;EAChE,MAAM,QAAQ,MAAM,6BAClB,IAAI,QAAQ,QACZ,iBACA,KAAA,GACA,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAYxE,IAAI,MAVe,QAAQ,sBACzB;GACE;GACA;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAS,OAAO;GAAgB,CAAC;GAClD,QAAQ,EAAE,yCAAyB,IAAI,KAAK,EAAE;EAChD,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO;CAC5B,IAAI,EAAE,OAAO,EAAE,KAAK,EAClB,aAAa,+BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,OAAO,IAAI;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;EACA,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA,EAClD;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,eAAe,uBAAuB,QAAgB,QAAgB,WAAoB;CACxF,MAAM,MAAM,IAAI,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EAAE,YAAY;CACzF,IAAI,cAAc,KAAA,GAChB,IAAI,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS;CAEjE,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAClD;AAEA,SAAS,iBACP,SACA,UACA,QACA;CACA,IAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,kBAClC,OAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,QAAQ;CAEzF,IAAI,4BAA4B,SAC9B,MAAM,SAAS,KAAK,yBAAyB,iBAAiB,8BAA8B;CAG9F,IAAI,iBAAiB,QAAQ;EAC3B,OAAO,MAAM,oBAAoB,iBAAiB,MAAM;EACxD,MAAM,SAAS,KAAK,eAAe,iBAAiB,gBAAgB;CACtE;CAEA,OAAO,iBAAiB;AAC1B;;;AChcA,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,UAAU;EACV,OAAO;CACT;CACA,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,gCAAgB,IAAI,KAAK;EACzB,UAAU;EACV,OAAO;CACT;CACA,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;CACV;CACA,eAAe;EACb,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;CACT;CACA,yBAAyB;EACvB,MAAM;EACN,UAAU;EACV,OAAO;CACT;CACA,UAAU;EACR,MAAM;EACN,UAAU;CACZ;AACF,EACF,EACF;AAEA,MAAa,aAAoC,YAAe;CAC9D,OAAO,YAAYA,QAAM,QAAQ,MAAM;AACzC;;;ACxCA,MAAa,QAA+B,UAAa,CAAC,MAAW;CACnE,OAAO;EACL,IAAI;EACJ,QAAQ,UAAU,OAAO;EACzB,WAAW;GACT,WAAW,UAAU,OAAO;GAC5B,QAAQ,OAAO,OAAO;GACtB,aAAa,YAAY,OAAO;GAChC,QAAQ,OAAO,OAAO;GACtB,QAAQ,OAAO,OAAO;EACxB;EACS;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,cAAc,EAAE,SAAS,IAAI;GACxE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;EACjC,CACF;EACA,cAAc;CAChB;AACF"}
+{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n  EMAIL_OR_SESSION_REQUIRED: 'Email or session is required',\n  ADMIN_PLUGIN_REQUIRED: 'Admin plugin is required',\n  FORBIDDEN: 'Forbidden',\n  LEAD_NOT_FOUND: 'Lead not found',\n});\n","import {\n  BASE_ERROR_CODES,\n  type InternalLogger,\n  type StandardSchemaV1,\n  type Where,\n} from 'better-auth';\nimport { whereOperators } from 'better-auth/adapters';\nimport {\n  APIError,\n  createAuthEndpoint,\n  getSessionFromCtx,\n  sessionMiddleware,\n} from 'better-auth/api';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\ntype IdentifierType = 'email' | 'user';\n\nconst subscribeSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email?: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n      let createData: LeadPayload;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n        createData = {\n          email: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n        createData = {\n          userId: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: createData,\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n          });\n        }\n      }\n\n      if (options.sendConfirmationEmail && lead && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const confirmationPayloadSchema = z.object({\n        identifier: z.string(),\n        type: z.enum(['email', 'user']),\n      });\n      const parsed = confirmationPayloadSchema.parse(jwt.payload);\n\n      const whereField = parsed.type === 'user' ? 'userId' : 'email';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.confirmed) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n        update: {\n          confirmed: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onConfirmed) {\n        await ctx.context.runInBackgroundOrAwait(options.onConfirmed({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeQuerySchema = z.object({\n  token: z.string().meta({\n    description: 'Signed unsubscribe token',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      query: unsubscribeQuerySchema,\n      metadata: {\n        // Empty array overrides the router-level JSON-only restriction,\n        // allowing POST with no body (required for RFC 8058 one-click unsubscribe).\n        allowedMediaTypes: [],\n      },\n    },\n    async (ctx) => {\n      let payload: JWTPayload;\n      try {\n        const result = await jwtVerify(\n          ctx.query.token,\n          new TextEncoder().encode(ctx.context.secret),\n          { algorithms: ['HS256'] },\n        );\n        payload = result.payload;\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const id = payload['id'] as string;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nexport const unsubscribeSession = <O extends LeadOptions>(_options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe-session',\n    {\n      method: 'POST',\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendConfirmationEmail && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      use: [sessionMiddleware],\n      metadata: {\n        $Infer: {\n          body: {} as {\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst listQuerySchema = z.object({\n  searchValue: z.string().optional().meta({\n    description: 'The value to search for. Eg: \"some name\"',\n  }),\n  searchField: z\n    .enum(['email'])\n    .meta({\n      description: 'The field to search in, defaults to email.',\n    })\n    .optional(),\n  searchOperator: z\n    .enum(['contains', 'starts_with', 'ends_with'])\n    .meta({\n      description:\n        'The operator to use for the search. Can be `contains`, `starts_with` or `ends_with`. Eg: \"contains\"',\n    })\n    .optional(),\n  limit: z.coerce\n    .number()\n    .meta({\n      description: 'The number of lead to return',\n    })\n    .optional(),\n  offset: z.coerce\n    .number()\n    .meta({\n      description: 'The offset to start from',\n    })\n    .optional(),\n  sortBy: z\n    .string()\n    .meta({\n      description: 'The field to sort by',\n    })\n    .optional(),\n  sortDirection: z\n    .enum(['asc', 'desc'])\n    .meta({\n      description: 'The direction to sort by',\n    })\n    .optional(),\n  filterField: z\n    .string()\n    .meta({\n      description: 'The field to filter by',\n    })\n    .optional(),\n  filterValue: z\n    .string()\n    .meta({\n      description: 'The value to filter by',\n    })\n    .or(z.number())\n    .or(z.boolean())\n    .or(z.array(z.string()))\n    .or(z.array(z.number()))\n    .optional(),\n  filterOperator: z\n    .enum(whereOperators)\n    .meta({\n      description: 'The operator to use for the filter',\n    })\n    .optional(),\n});\n\nexport const listLeads = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/list-leads',\n    {\n      method: 'GET',\n      query: listQuerySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const where: Where[] = [];\n\n      if (ctx.query?.searchValue) {\n        where.push({\n          field: ctx.query.searchField || 'email',\n          operator: ctx.query.searchOperator || 'contains',\n          value: ctx.query.searchValue,\n        });\n      }\n\n      if (ctx.query?.filterValue !== undefined) {\n        where.push({\n          field: ctx.query.filterField || 'email',\n          operator: ctx.query.filterOperator || 'eq',\n          value: ctx.query.filterValue,\n        });\n      }\n\n      const limit = ctx.query.limit ?? 100;\n      const offset = ctx.query.offset ?? 0;\n\n      const [leads, total] = await Promise.all([\n        ctx.context.adapter.findMany<Lead>({\n          model: 'lead',\n          limit,\n          offset,\n          ...(ctx.query.sortBy && {\n            sortBy: {\n              field: ctx.query.sortBy,\n              direction: ctx.query.sortDirection || 'asc',\n            },\n          }),\n          where: where.length ? where : undefined,\n        }),\n        ctx.context.adapter.count({ model: 'lead' }),\n      ]);\n\n      return ctx.json({ leads, total, limit, offset });\n    },\n  );\n\nconst getLeadQuerySchema = z.object({\n  id: z.string().meta({\n    description: 'The id of the Lead',\n  }),\n});\n\nexport const getLead = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    'lead/get-lead',\n    {\n      method: 'POST',\n      query: getLeadQuerySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'id', value: ctx.body.leadId }],\n      });\n\n      if (!lead) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.LEAD_NOT_FOUND);\n      }\n\n      return lead;\n    },\n  );\n\nconst removeLeadBodySchema = z.object({\n  leadId: z.coerce.string().meta({\n    description: 'The lead id',\n  }),\n});\n\nexport const removeLead = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    'lead/remove-lead',\n    {\n      method: 'POST',\n      body: removeLeadBodySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'id', value: ctx.body.leadId }],\n      });\n\n      if (!lead) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.LEAD_NOT_FOUND);\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [{ field: 'id', value: ctx.body.leadId }],\n      });\n\n      return ctx.json({ success: true });\n    },\n  );\n\nasync function createConfirmationToken(\n  secret: string,\n  payload: { identifier: string; type: IdentifierType },\n  expiresIn: number,\n) {\n  return new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn)\n    .sign(new TextEncoder().encode(secret));\n}\n\nasync function createUnsubscribeToken(secret: string, leadId: string, expiresIn?: number) {\n  const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: 'HS256' }).setIssuedAt();\n  if (expiresIn !== undefined) {\n    jwt.setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn);\n  }\n  return jwt.sign(new TextEncoder().encode(secret));\n}\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: false,\n        unique: true,\n      },\n      userId: {\n        type: 'string',\n        required: false,\n        unique: true,\n        references: {\n          model: 'user',\n          field: 'id',\n        },\n      },\n      confirmed: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      confirmationSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport {\n  getLead,\n  listLeads,\n  removeLead,\n  resend,\n  subscribe,\n  unsubscribe,\n  unsubscribeSession,\n  update,\n  verify,\n} from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  const endpoints = {\n    subscribe: subscribe(options),\n    verify: verify(options),\n    unsubscribe: unsubscribe(options),\n    unsubscribeSession: unsubscribeSession(options),\n    resend: resend(options),\n    update: update(options),\n    ...(options.admin?.enabled\n      ? {\n          listLeads: listLeads(options),\n          getLead: getLead(options),\n          removeLead: removeLead(options),\n        }\n      : {}),\n  };\n\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints,\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;CAClB,2BAA2B;CAC3B,uBAAuB;CACvB,WAAW;CACX,gBAAgB;AAClB,CAAC;;;ACkBD,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,4BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;EACZ,aAAa;GACX,OAAO;GACP,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAG/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;EACzB,aAAa;GACX,QAAQ;GACR,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,IAAI;EACF,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;EACR,CAAC;CACH,SAAS,GAAG;EACV,IAAI,QAAQ,OAAO,KAAK,qBAAqB;EAC7C,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;EACtD,CAAC;CACH;CAGF,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,WAAW;EAC5D,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,gCACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,UAAU,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAAG,EACzE,YAAY,CAAC,OAAO,EACtB,CAAC;CACH,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAMA,MAAM,SAJ4B,EAAE,OAAO;EACzC,YAAY,EAAE,OAAO;EACrB,MAAM,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;CAChC,CACuC,EAAE,MAAM,IAAI,OAAO;CAE1D,MAAM,aAAa,OAAO,SAAS,SAAS,WAAW;CAEvD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;CACzD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,KAAK,WACP,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;EACvD,QAAQ,EACN,WAAW,KACb;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,aACV,MAAM,IAAI,QAAQ,uBAAuB,QAAQ,YAAY,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC;CAGrF,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,yBAAyB,EAAE,OAAO,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,2BACf,CAAC,EACH,CAAC;AAED,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,OAAO;CACP,UAAU,EAGR,mBAAmB,CAAC,EACtB;AACF,GACA,OAAO,QAAQ;CACb,IAAI;CACJ,IAAI;EAMF,WAAU,MALW,UACnB,IAAI,MAAM,OACV,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAC3C,EAAE,YAAY,CAAC,OAAO,EAAE,CAC1B,GACiB;CACnB,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,KAAK,QAAQ;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAa,sBAA6C,aACxD,mBACE,6BACA;CACE,QAAQ;CACR,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,oDACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;AACR,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;CACd,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAE/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;CAC3B;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,yBAAyB,CAAC,KAAK,WAAW;EACpD,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,KAAK,CAAC,iBAAiB;CACvB,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAGT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;EAC1C,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA,EAClD;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,kBAAkB,EAAE,OAAO;CAC/B,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EACtC,aAAa,6CACf,CAAC;CACD,aAAa,EACV,KAAK,CAAC,OAAO,CAAC,EACd,KAAK,EACJ,aAAa,6CACf,CAAC,EACA,SAAS;CACZ,gBAAgB,EACb,KAAK;EAAC;EAAY;EAAe;CAAW,CAAC,EAC7C,KAAK,EACJ,aACE,wGACJ,CAAC,EACA,SAAS;CACZ,OAAO,EAAE,OACN,OAAO,EACP,KAAK,EACJ,aAAa,+BACf,CAAC,EACA,SAAS;CACZ,QAAQ,EAAE,OACP,OAAO,EACP,KAAK,EACJ,aAAa,2BACf,CAAC,EACA,SAAS;CACZ,QAAQ,EACL,OAAO,EACP,KAAK,EACJ,aAAa,uBACf,CAAC,EACA,SAAS;CACZ,eAAe,EACZ,KAAK,CAAC,OAAO,MAAM,CAAC,EACpB,KAAK,EACJ,aAAa,2BACf,CAAC,EACA,SAAS;CACZ,aAAa,EACV,OAAO,EACP,KAAK,EACJ,aAAa,yBACf,CAAC,EACA,SAAS;CACZ,aAAa,EACV,OAAO,EACP,KAAK,EACJ,aAAa,yBACf,CAAC,EACA,GAAG,EAAE,OAAO,CAAC,EACb,GAAG,EAAE,QAAQ,CAAC,EACd,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,EACtB,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,EACtB,SAAS;CACZ,gBAAgB,EACb,KAAK,cAAc,EACnB,KAAK,EACJ,aAAa,qCACf,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,oBACA;CACE,QAAQ;CACR,OAAO;CACP,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAG7D,MAAM,QAAiB,CAAC;CAExB,IAAI,IAAI,OAAO,aACb,MAAM,KAAK;EACT,OAAO,IAAI,MAAM,eAAe;EAChC,UAAU,IAAI,MAAM,kBAAkB;EACtC,OAAO,IAAI,MAAM;CACnB,CAAC;CAGH,IAAI,IAAI,OAAO,gBAAgB,KAAA,GAC7B,MAAM,KAAK;EACT,OAAO,IAAI,MAAM,eAAe;EAChC,UAAU,IAAI,MAAM,kBAAkB;EACtC,OAAO,IAAI,MAAM;CACnB,CAAC;CAGH,MAAM,QAAQ,IAAI,MAAM,SAAS;CACjC,MAAM,SAAS,IAAI,MAAM,UAAU;CAEnC,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,IAAI,CACvC,IAAI,QAAQ,QAAQ,SAAe;EACjC,OAAO;EACP;EACA;EACA,GAAI,IAAI,MAAM,UAAU,EACtB,QAAQ;GACN,OAAO,IAAI,MAAM;GACjB,WAAW,IAAI,MAAM,iBAAiB;EACxC,EACF;EACA,OAAO,MAAM,SAAS,QAAQ,KAAA;CAChC,CAAC,GACD,IAAI,QAAQ,QAAQ,MAAM,EAAE,OAAO,OAAO,CAAC,CAC7C,CAAC;CAED,OAAO,IAAI,KAAK;EAAE;EAAO;EAAO;EAAO;CAAO,CAAC;AACjD,CACF;AAEF,MAAM,qBAAqB,EAAE,OAAO,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK,EAClB,aAAa,qBACf,CAAC,EACH,CAAC;AAED,MAAa,WAAkC,YAC7C,mBACE,iBACA;CACE,QAAQ;CACR,OAAO;CACP,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAG7D,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAM,OAAO,IAAI,KAAK;EAAO,CAAC;CACjD,CAAC;CAED,IAAI,CAAC,MACH,MAAM,SAAS,KAAK,aAAa,iBAAiB,cAAc;CAGlE,OAAO;AACT,CACF;AAEF,MAAM,uBAAuB,EAAE,OAAO,EACpC,QAAQ,EAAE,OAAO,OAAO,EAAE,KAAK,EAC7B,aAAa,cACf,CAAC,EACH,CAAC;AAED,MAAa,cAAqC,YAChD,mBACE,oBACA;CACE,QAAQ;CACR,MAAM;CACN,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAQ7D,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAM,OAAO,IAAI,KAAK;EAAO,CAAC;CACjD,CAAC,GAGC,MAAM,SAAS,KAAK,aAAa,iBAAiB,cAAc;CAGlE,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAM,OAAO,IAAI,KAAK;EAAO,CAAC;CACjD,CAAC;CAED,OAAO,IAAI,KAAK,EAAE,SAAS,KAAK,CAAC;AACnC,CACF;AAEF,eAAe,wBACb,QACA,SACA,WACA;CACA,OAAO,IAAI,QAAQ,OAAO,EACvB,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS,EAC3D,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAC1C;AAEA,eAAe,uBAAuB,QAAgB,QAAgB,WAAoB;CACxF,MAAM,MAAM,IAAI,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EAAE,YAAY;CACzF,IAAI,cAAc,KAAA,GAChB,IAAI,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS;CAEjE,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAClD;AAEA,SAAS,iBACP,SACA,UACA,QACA;CACA,IAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,kBAClC,OAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,QAAQ;CAEzF,IAAI,4BAA4B,SAC9B,MAAM,SAAS,KAAK,yBAAyB,iBAAiB,8BAA8B;CAG9F,IAAI,iBAAiB,QAAQ;EAC3B,OAAO,MAAM,oBAAoB,iBAAiB,MAAM;EACxD,MAAM,SAAS,KAAK,eAAe,iBAAiB,gBAAgB;CACtE;CAEA,OAAO,iBAAiB;AAC1B;;;ACtuBA,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,UAAU;EACV,OAAO;CACT;CACA,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,gCAAgB,IAAI,KAAK;EACzB,UAAU;EACV,OAAO;CACT;CACA,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;CACV;CACA,QAAQ;EACN,MAAM;EACN,UAAU;EACV,QAAQ;EACR,YAAY;GACV,OAAO;GACP,OAAO;EACT;CACF;CACA,WAAW;EACT,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;CACT;CACA,oBAAoB;EAClB,MAAM;EACN,UAAU;EACV,OAAO;CACT;CACA,UAAU;EACR,MAAM;EACN,UAAU;CACZ;AACF,EACF,EACF;AAEA,MAAa,aAAoC,YAAe;CAC9D,OAAO,YAAYA,QAAM,QAAQ,MAAM;AACzC;;;ACvCA,MAAa,QAA+B,UAAa,CAAC,MAAW;CACnE,MAAM,YAAY;EAChB,WAAW,UAAU,OAAO;EAC5B,QAAQ,OAAO,OAAO;EACtB,aAAa,YAAY,OAAO;EAChC,oBAAoB,mBAAmB,OAAO;EAC9C,QAAQ,OAAO,OAAO;EACtB,QAAQ,OAAO,OAAO;EACtB,GAAI,QAAQ,OAAO,UACf;GACE,WAAW,UAAU,OAAO;GAC5B,SAAS,QAAQ,OAAO;GACxB,YAAY,WAAW,OAAO;EAChC,IACA,CAAC;CACP;CAEA,OAAO;EACL,IAAI;EACJ,QAAQ,UAAU,OAAO;EACzB;EACS;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,cAAc,EAAE,SAAS,IAAI;GACxE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;EACjC,CACF;EACA,cAAc;CAChB;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth-lead",
-  "version": "0.4.3",
+  "version": "0.6.0",
   "description": "Better Auth Lead plugin",
   "homepage": "https://github.com/marcjulian/better-auth-plugins#readme",
   "bugs": {
@@ -29,10 +29,10 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@types/node": "^25.3.5",
-    "bumpp": "^10.4.1",
+    "@types/node": "^25.6.2",
+    "bumpp": "^11.1.0",
     "tsdown": "^0.22.0",
-    "typescript": "^5.9.3",
+    "typescript": "^6.0.3",
     "vitest": "^4.1.7"
   },
   "peerDependencies": {