better-auth-lead 0.5.0 → 0.6.0

package/README.md

@@ -146,9 +146,14 @@ const { data, error } = await authClient.lead.update({
 
 If no session is present the endpoint responds with `401 Unauthorized`.
 
-### List (admin)
+### Admin
 
-Optional admin endpoint to list all leads. Requires the better-auth [`admin`](https://www.better-auth.com/docs/plugins/admin) plugin to be registered, and must be opted in via `admin.enabled`:
+The lead plugin ships with a set of admin-only endpoints to manage leads: `listLead`, `getLead`, and `removeLead`. They are only available when:
+
+1. The better-auth [`admin`](https://www.better-auth.com/docs/plugins/admin) plugin is registered.
+2. The `admin.enabled` lead option is set to `true`.
+
+Enable them in your auth config:
 
 ```ts
 // server/auth.ts
@@ -162,8 +167,9 @@ export const auth = betterAuth({
     lead({
       admin: {
         enabled: true,
-        // Optional. Roles allowed to call /lead/list. Default: ['admin'].
-        // Checked against session.user.role (admin plugin supports
+        // Optional. Roles allowed to call the admin endpoints.
+        // Default: ['admin'].
+        // Checked against session.user.role (the admin plugin supports
         // comma-separated roles).
         roles: ['admin', 'editor'],
       },
@@ -172,11 +178,23 @@ export const auth = betterAuth({
 });
 ```
 
+#### List leads
+
+List a page of leads with optional search, filter, sort, and pagination. Requires a session with a role in `admin.roles`.
+
 ```ts
-// GET /lead/list?limit=100&offset=0
-const { data, error } = await authClient.lead.list({
+// GET /lead/list-leads
+const { data, error } = await authClient.lead.listLeads({
   query: {
-    limit: 100, // optional, default 100, max 1000
+    searchValue: 'user@example.com', // optional
+    searchField: 'email', // optional, default 'email'
+    searchOperator: 'contains', // optional: 'contains' | 'starts_with' | 'ends_with'
+    filterField: 'confirmed', // optional
+    filterValue: true, // optional
+    filterOperator: 'eq', // optional: any better-auth where operator
+    sortBy: 'createdAt', // optional
+    sortDirection: 'desc', // optional: 'asc' | 'desc'
+    limit: 100, // optional, default 100
     offset: 0, // optional, default 0
   },
 });
@@ -184,9 +202,41 @@ const { data, error } = await authClient.lead.list({
 
 The response includes the page of `leads`, the `total` number of leads in the database, and the resolved `limit` and `offset` for client-side pagination.
 
-Responses:
+#### Get a lead
+
+Fetch a single lead by `id`. Requires a session with a role in `admin.roles`.
+
+```ts
+// POST /lead/get-lead
+const { data, error } = await authClient.lead.getLead({
+  query: {
+    id: 'lead-id',
+  },
+});
+```
+
+Returns the lead object, or `404 Not Found` (`LEAD_NOT_FOUND`) if no lead matches the id.
 
-- `404 Not Found` (`ADMIN_PLUGIN_REQUIRED`) if the admin plugin is not registered.
+#### Remove a lead
+
+Delete a single lead by `id`. Requires a session with a role in `admin.roles`.
+
+```ts
+// POST /lead/remove-lead
+const { data, error } = await authClient.lead.removeLead({
+  body: {
+    leadId: 'lead-id',
+  },
+});
+```
+
+Returns `{ success: true }` on success, or `404 Not Found` (`LEAD_NOT_FOUND`) if no lead matches the id.
+
+#### Responses
+
+All admin endpoints share the following responses:
+
+- `404 Not Found` (`ADMIN_PLUGIN_REQUIRED`) if the admin plugin is not registered or `admin.enabled` is not set.
 - `403 Forbidden` (`FORBIDDEN`) if the session user's role is not in `admin.roles`.
 - `401 Unauthorized` if no session is present.
 
@@ -332,10 +382,10 @@ model Lead {
   updatedAt          DateTime  @updatedAt
   email              String?
   userId             String?
+  user               User?     @relation(fields: [userId], references: [id], onDelete: Cascade)
   confirmed          Boolean   @default(false)
   confirmationSentAt DateTime?
   metadata           String?
-  user               User?     @relation(fields: [userId], references: [id], onDelete: Cascade)
 
   @@unique([email])
   @@unique([userId])

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { r as LeadOptions, t as lead } from "./index-DOhc8vla.mjs";
+import { r as LeadOptions, t as lead } from "./index-BX1SlAVz.mjs";
 import { StandardSchemaV1 } from "better-auth";
 
 //#region src/client.d.ts

package/dist/{index-DOhc8vla.d.mts → index-BX1SlAVz.d.mts}

@@ -207,11 +207,40 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     };
   };
   endpoints: {
-    list?: import("better-auth").StrictEndpoint<"/lead/list", {
+    listLeads?: import("better-auth").StrictEndpoint<"/lead/list-leads", {
       method: "GET";
       query: import("zod").ZodObject<{
+        searchValue: import("zod").ZodOptional<import("zod").ZodString>;
+        searchField: import("zod").ZodOptional<import("zod").ZodEnum<{
+          email: "email";
+        }>>;
+        searchOperator: import("zod").ZodOptional<import("zod").ZodEnum<{
+          contains: "contains";
+          starts_with: "starts_with";
+          ends_with: "ends_with";
+        }>>;
         limit: import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>;
         offset: import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>;
+        sortBy: import("zod").ZodOptional<import("zod").ZodString>;
+        sortDirection: import("zod").ZodOptional<import("zod").ZodEnum<{
+          asc: "asc";
+          desc: "desc";
+        }>>;
+        filterField: import("zod").ZodOptional<import("zod").ZodString>;
+        filterValue: import("zod").ZodOptional<import("zod").ZodUnion<[import("zod").ZodUnion<[import("zod").ZodUnion<[import("zod").ZodUnion<[import("zod").ZodString, import("zod").ZodNumber]>, import("zod").ZodBoolean]>, import("zod").ZodArray<import("zod").ZodString>]>, import("zod").ZodArray<import("zod").ZodNumber>]>>;
+        filterOperator: import("zod").ZodOptional<import("zod").ZodEnum<{
+          in: "in";
+          contains: "contains";
+          starts_with: "starts_with";
+          ends_with: "ends_with";
+          eq: "eq";
+          ne: "ne";
+          lt: "lt";
+          lte: "lte";
+          gt: "gt";
+          gte: "gte";
+          not_in: "not_in";
+        }>>;
       }, import("better-auth").$strip>;
       use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
         session: {
@@ -242,6 +271,66 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
       limit: number;
       offset: number;
     }> | undefined;
+    getLead?: import("better-auth").StrictEndpoint<"lead/get-lead", {
+      method: "POST";
+      query: import("zod").ZodObject<{
+        id: import("zod").ZodString;
+      }, import("better-auth").$strip>;
+      use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+    }, Lead> | undefined;
+    removeLead?: import("better-auth").StrictEndpoint<"lead/remove-lead", {
+      method: "POST";
+      body: import("zod").ZodObject<{
+        leadId: import("zod").ZodCoercedString<unknown>;
+      }, import("better-auth").$strip>;
+      use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        session: {
+          session: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          user: Record<string, any> & {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+        };
+      }>)[];
+    }, {
+      success: boolean;
+    }> | undefined;
     subscribe: import("better-auth").StrictEndpoint<"/lead/subscribe", {
       method: "POST";
       body: import("zod").ZodObject<{
@@ -375,8 +464,9 @@ declare const lead: <O extends LeadOptions>(options?: O) => {
     INVALID_METADATA: import("better-auth").RawError<"INVALID_METADATA">;
     EMAIL_OR_SESSION_REQUIRED: import("better-auth").RawError<"EMAIL_OR_SESSION_REQUIRED">;
     ADMIN_PLUGIN_REQUIRED: import("better-auth").RawError<"ADMIN_PLUGIN_REQUIRED">;
+    LEAD_NOT_FOUND: import("better-auth").RawError<"LEAD_NOT_FOUND">;
   };
 };
 //#endregion
 export { LeadPayload as i, Lead as n, LeadOptions as r, lead as t };
-//# sourceMappingURL=index-DOhc8vla.d.mts.map
+//# sourceMappingURL=index-BX1SlAVz.d.mts.map

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { i as LeadPayload, n as Lead, r as LeadOptions, t as lead } from "./index-DOhc8vla.mjs";
+import { i as LeadPayload, n as Lead, r as LeadOptions, t as lead } from "./index-BX1SlAVz.mjs";
 export { type Lead, type LeadOptions, type LeadPayload, lead };

package/dist/index.mjs

@@ -1,4 +1,5 @@
 import { BASE_ERROR_CODES, defineErrorCodes } from "better-auth";
+import { whereOperators } from "better-auth/adapters";
 import { APIError, createAuthEndpoint, getSessionFromCtx, sessionMiddleware } from "better-auth/api";
 import { SignJWT, jwtVerify } from "jose";
 import { JWTExpired } from "jose/errors";
@@ -12,7 +13,8 @@ const LEAD_ERROR_CODES = defineErrorCodes({
 	INVALID_METADATA: "Invalid metadata",
 	EMAIL_OR_SESSION_REQUIRED: "Email or session is required",
 	ADMIN_PLUGIN_REQUIRED: "Admin plugin is required",
-	FORBIDDEN: "Forbidden"
+	FORBIDDEN: "Forbidden",
+	LEAD_NOT_FOUND: "Lead not found"
 });
 //#endregion
 //#region src/routes.ts
@@ -271,10 +273,22 @@ const update = (options) => createAuthEndpoint("/lead/update", {
 	return ctx.json({ status: true });
 });
 const listQuerySchema = z.object({
+	searchValue: z.string().optional().meta({ description: "The value to search for. Eg: \"some name\"" }),
+	searchField: z.enum(["email"]).meta({ description: "The field to search in, defaults to email." }).optional(),
+	searchOperator: z.enum([
+		"contains",
+		"starts_with",
+		"ends_with"
+	]).meta({ description: "The operator to use for the search. Can be `contains`, `starts_with` or `ends_with`. Eg: \"contains\"" }).optional(),
 	limit: z.coerce.number().meta({ description: "The number of lead to return" }).optional(),
-	offset: z.coerce.number().meta({ description: "The offset to start from" }).optional()
+	offset: z.coerce.number().meta({ description: "The offset to start from" }).optional(),
+	sortBy: z.string().meta({ description: "The field to sort by" }).optional(),
+	sortDirection: z.enum(["asc", "desc"]).meta({ description: "The direction to sort by" }).optional(),
+	filterField: z.string().meta({ description: "The field to filter by" }).optional(),
+	filterValue: z.string().meta({ description: "The value to filter by" }).or(z.number()).or(z.boolean()).or(z.array(z.string())).or(z.array(z.number())).optional(),
+	filterOperator: z.enum(whereOperators).meta({ description: "The operator to use for the filter" }).optional()
 });
-const list = (options) => createAuthEndpoint("/lead/list", {
+const listLeads = (options) => createAuthEndpoint("/lead/list-leads", {
 	method: "GET",
 	query: listQuerySchema,
 	use: [sessionMiddleware]
@@ -282,12 +296,28 @@ const list = (options) => createAuthEndpoint("/lead/list", {
 	if (!ctx.context.hasPlugin("admin")) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);
 	const allowedRoles = options.admin?.roles ?? ["admin"];
 	if (!(ctx.context.session.user.role ?? "").split(",").map((r) => r.trim()).filter(Boolean).some((r) => allowedRoles.includes(r))) throw APIError.from("FORBIDDEN", LEAD_ERROR_CODES.FORBIDDEN);
+	const where = [];
+	if (ctx.query?.searchValue) where.push({
+		field: ctx.query.searchField || "email",
+		operator: ctx.query.searchOperator || "contains",
+		value: ctx.query.searchValue
+	});
+	if (ctx.query?.filterValue !== void 0) where.push({
+		field: ctx.query.filterField || "email",
+		operator: ctx.query.filterOperator || "eq",
+		value: ctx.query.filterValue
+	});
 	const limit = ctx.query.limit ?? 100;
 	const offset = ctx.query.offset ?? 0;
 	const [leads, total] = await Promise.all([ctx.context.adapter.findMany({
 		model: "lead",
 		limit,
-		offset
+		offset,
+		...ctx.query.sortBy && { sortBy: {
+			field: ctx.query.sortBy,
+			direction: ctx.query.sortDirection || "asc"
+		} },
+		where: where.length ? where : void 0
 	}), ctx.context.adapter.count({ model: "lead" })]);
 	return ctx.json({
 		leads,
@@ -296,6 +326,50 @@ const list = (options) => createAuthEndpoint("/lead/list", {
 		offset
 	});
 });
+const getLeadQuerySchema = z.object({ id: z.string().meta({ description: "The id of the Lead" }) });
+const getLead = (options) => createAuthEndpoint("lead/get-lead", {
+	method: "POST",
+	query: getLeadQuerySchema,
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	if (!ctx.context.hasPlugin("admin")) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);
+	const allowedRoles = options.admin?.roles ?? ["admin"];
+	if (!(ctx.context.session.user.role ?? "").split(",").map((r) => r.trim()).filter(Boolean).some((r) => allowedRoles.includes(r))) throw APIError.from("FORBIDDEN", LEAD_ERROR_CODES.FORBIDDEN);
+	const lead = await ctx.context.adapter.findOne({
+		model: "lead",
+		where: [{
+			field: "id",
+			value: ctx.body.leadId
+		}]
+	});
+	if (!lead) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.LEAD_NOT_FOUND);
+	return lead;
+});
+const removeLeadBodySchema = z.object({ leadId: z.coerce.string().meta({ description: "The lead id" }) });
+const removeLead = (options) => createAuthEndpoint("lead/remove-lead", {
+	method: "POST",
+	body: removeLeadBodySchema,
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	if (!ctx.context.hasPlugin("admin")) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);
+	const allowedRoles = options.admin?.roles ?? ["admin"];
+	if (!(ctx.context.session.user.role ?? "").split(",").map((r) => r.trim()).filter(Boolean).some((r) => allowedRoles.includes(r))) throw APIError.from("FORBIDDEN", LEAD_ERROR_CODES.FORBIDDEN);
+	if (!await ctx.context.adapter.findOne({
+		model: "lead",
+		where: [{
+			field: "id",
+			value: ctx.body.leadId
+		}]
+	})) throw APIError.from("NOT_FOUND", LEAD_ERROR_CODES.LEAD_NOT_FOUND);
+	await ctx.context.adapter.delete({
+		model: "lead",
+		where: [{
+			field: "id",
+			value: ctx.body.leadId
+		}]
+	});
+	return ctx.json({ success: true });
+});
 async function createConfirmationToken(secret, payload, expiresIn) {
 	return new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn).sign(new TextEncoder().encode(secret));
 }
@@ -373,7 +447,11 @@ const lead = (options = {}) => {
 		unsubscribeSession: unsubscribeSession(options),
 		resend: resend(options),
 		update: update(options),
-		...options.admin?.enabled ? { list: list(options) } : {}
+		...options.admin?.enabled ? {
+			listLeads: listLeads(options),
+			getLead: getLead(options),
+			removeLead: removeLead(options)
+		} : {}
 	};
 	return {
 		id: "lead",

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n  EMAIL_OR_SESSION_REQUIRED: 'Email or session is required',\n  ADMIN_PLUGIN_REQUIRED: 'Admin plugin is required',\n  FORBIDDEN: 'Forbidden',\n});\n","import { BASE_ERROR_CODES, type InternalLogger, type StandardSchemaV1 } from 'better-auth';\nimport {\n  APIError,\n  createAuthEndpoint,\n  getSessionFromCtx,\n  sessionMiddleware,\n} from 'better-auth/api';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\ntype IdentifierType = 'email' | 'user';\n\nconst subscribeSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email?: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n      let createData: LeadPayload;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n        createData = {\n          email: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n        createData = {\n          userId: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: createData,\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n          });\n        }\n      }\n\n      if (options.sendConfirmationEmail && lead && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const confirmationPayloadSchema = z.object({\n        identifier: z.string(),\n        type: z.enum(['email', 'user']),\n      });\n      const parsed = confirmationPayloadSchema.parse(jwt.payload);\n\n      const whereField = parsed.type === 'user' ? 'userId' : 'email';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.confirmed) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n        update: {\n          confirmed: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onConfirmed) {\n        await ctx.context.runInBackgroundOrAwait(options.onConfirmed({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeQuerySchema = z.object({\n  token: z.string().meta({\n    description: 'Signed unsubscribe token',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      query: unsubscribeQuerySchema,\n      metadata: {\n        // Empty array overrides the router-level JSON-only restriction,\n        // allowing POST with no body (required for RFC 8058 one-click unsubscribe).\n        allowedMediaTypes: [],\n      },\n    },\n    async (ctx) => {\n      let payload: JWTPayload;\n      try {\n        const result = await jwtVerify(\n          ctx.query.token,\n          new TextEncoder().encode(ctx.context.secret),\n          { algorithms: ['HS256'] },\n        );\n        payload = result.payload;\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const id = payload['id'] as string;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nexport const unsubscribeSession = <O extends LeadOptions>(_options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe-session',\n    {\n      method: 'POST',\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendConfirmationEmail && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      use: [sessionMiddleware],\n      metadata: {\n        $Infer: {\n          body: {} as {\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst listQuerySchema = z.object({\n  limit: z.coerce\n    .number()\n    .meta({\n      description: 'The number of lead to return',\n    })\n    .optional(),\n  offset: z.coerce\n    .number()\n    .meta({\n      description: 'The offset to start from',\n    })\n    .optional(),\n});\n\nexport const list = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/list',\n    {\n      method: 'GET',\n      query: listQuerySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const limit = ctx.query.limit ?? 100;\n      const offset = ctx.query.offset ?? 0;\n\n      const [leads, total] = await Promise.all([\n        ctx.context.adapter.findMany<Lead>({\n          model: 'lead',\n          limit,\n          offset,\n        }),\n        ctx.context.adapter.count({ model: 'lead' }),\n      ]);\n\n      return ctx.json({ leads, total, limit, offset });\n    },\n  );\n\nasync function createConfirmationToken(\n  secret: string,\n  payload: { identifier: string; type: IdentifierType },\n  expiresIn: number,\n) {\n  return new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn)\n    .sign(new TextEncoder().encode(secret));\n}\n\nasync function createUnsubscribeToken(secret: string, leadId: string, expiresIn?: number) {\n  const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: 'HS256' }).setIssuedAt();\n  if (expiresIn !== undefined) {\n    jwt.setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn);\n  }\n  return jwt.sign(new TextEncoder().encode(secret));\n}\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: false,\n        unique: true,\n      },\n      userId: {\n        type: 'string',\n        required: false,\n        unique: true,\n        references: {\n          model: 'user',\n          field: 'id',\n        },\n      },\n      confirmed: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      confirmationSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport { list, resend, subscribe, unsubscribe, unsubscribeSession, update, verify } from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  const endpoints = {\n    subscribe: subscribe(options),\n    verify: verify(options),\n    unsubscribe: unsubscribe(options),\n    unsubscribeSession: unsubscribeSession(options),\n    resend: resend(options),\n    update: update(options),\n    ...(options.admin?.enabled ? { list: list(options) } : {}),\n  };\n\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints,\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;CAClB,2BAA2B;CAC3B,uBAAuB;CACvB,WAAW;AACb,CAAC;;;ACaD,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,4BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;EACZ,aAAa;GACX,OAAO;GACP,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAG/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;EACzB,aAAa;GACX,QAAQ;GACR,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,IAAI;EACF,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;EACR,CAAC;CACH,SAAS,GAAG;EACV,IAAI,QAAQ,OAAO,KAAK,qBAAqB;EAC7C,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;EACtD,CAAC;CACH;CAGF,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,WAAW;EAC5D,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,gCACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,UAAU,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAAG,EACzE,YAAY,CAAC,OAAO,EACtB,CAAC;CACH,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAMA,MAAM,SAJ4B,EAAE,OAAO;EACzC,YAAY,EAAE,OAAO;EACrB,MAAM,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;CAChC,CACuC,EAAE,MAAM,IAAI,OAAO;CAE1D,MAAM,aAAa,OAAO,SAAS,SAAS,WAAW;CAEvD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;CACzD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,KAAK,WACP,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;EACvD,QAAQ,EACN,WAAW,KACb;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,aACV,MAAM,IAAI,QAAQ,uBAAuB,QAAQ,YAAY,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC;CAGrF,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,yBAAyB,EAAE,OAAO,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,2BACf,CAAC,EACH,CAAC;AAED,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,OAAO;CACP,UAAU,EAGR,mBAAmB,CAAC,EACtB;AACF,GACA,OAAO,QAAQ;CACb,IAAI;CACJ,IAAI;EAMF,WAAU,MALW,UACnB,IAAI,MAAM,OACV,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAC3C,EAAE,YAAY,CAAC,OAAO,EAAE,CAC1B,GACiB;CACnB,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,KAAK,QAAQ;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAa,sBAA6C,aACxD,mBACE,6BACA;CACE,QAAQ;CACR,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,oDACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;AACR,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;CACd,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAE/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;CAC3B;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,yBAAyB,CAAC,KAAK,WAAW;EACpD,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,KAAK,CAAC,iBAAiB;CACvB,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAGT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;EAC1C,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA,EAClD;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OACN,OAAO,EACP,KAAK,EACJ,aAAa,+BACf,CAAC,EACA,SAAS;CACZ,QAAQ,EAAE,OACP,OAAO,EACP,KAAK,EACJ,aAAa,2BACf,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAa,QAA+B,YAC1C,mBACE,cACA;CACE,QAAQ;CACR,OAAO;CACP,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAG7D,MAAM,QAAQ,IAAI,MAAM,SAAS;CACjC,MAAM,SAAS,IAAI,MAAM,UAAU;CAEnC,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,IAAI,CACvC,IAAI,QAAQ,QAAQ,SAAe;EACjC,OAAO;EACP;EACA;CACF,CAAC,GACD,IAAI,QAAQ,QAAQ,MAAM,EAAE,OAAO,OAAO,CAAC,CAC7C,CAAC;CAED,OAAO,IAAI,KAAK;EAAE;EAAO;EAAO;EAAO;CAAO,CAAC;AACjD,CACF;AAEF,eAAe,wBACb,QACA,SACA,WACA;CACA,OAAO,IAAI,QAAQ,OAAO,EACvB,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS,EAC3D,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAC1C;AAEA,eAAe,uBAAuB,QAAgB,QAAgB,WAAoB;CACxF,MAAM,MAAM,IAAI,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EAAE,YAAY;CACzF,IAAI,cAAc,KAAA,GAChB,IAAI,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS;CAEjE,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAClD;AAEA,SAAS,iBACP,SACA,UACA,QACA;CACA,IAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,kBAClC,OAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,QAAQ;CAEzF,IAAI,4BAA4B,SAC9B,MAAM,SAAS,KAAK,yBAAyB,iBAAiB,8BAA8B;CAG9F,IAAI,iBAAiB,QAAQ;EAC3B,OAAO,MAAM,oBAAoB,iBAAiB,MAAM;EACxD,MAAM,SAAS,KAAK,eAAe,iBAAiB,gBAAgB;CACtE;CAEA,OAAO,iBAAiB;AAC1B;;;ACxjBA,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,UAAU;EACV,OAAO;CACT;CACA,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,gCAAgB,IAAI,KAAK;EACzB,UAAU;EACV,OAAO;CACT;CACA,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;CACV;CACA,QAAQ;EACN,MAAM;EACN,UAAU;EACV,QAAQ;EACR,YAAY;GACV,OAAO;GACP,OAAO;EACT;CACF;CACA,WAAW;EACT,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;CACT;CACA,oBAAoB;EAClB,MAAM;EACN,UAAU;EACV,OAAO;CACT;CACA,UAAU;EACR,MAAM;EACN,UAAU;CACZ;AACF,EACF,EACF;AAEA,MAAa,aAAoC,YAAe;CAC9D,OAAO,YAAYA,QAAM,QAAQ,MAAM;AACzC;;;ACjDA,MAAa,QAA+B,UAAa,CAAC,MAAW;CACnE,MAAM,YAAY;EAChB,WAAW,UAAU,OAAO;EAC5B,QAAQ,OAAO,OAAO;EACtB,aAAa,YAAY,OAAO;EAChC,oBAAoB,mBAAmB,OAAO;EAC9C,QAAQ,OAAO,OAAO;EACtB,QAAQ,OAAO,OAAO;EACtB,GAAI,QAAQ,OAAO,UAAU,EAAE,MAAM,KAAK,OAAO,EAAE,IAAI,CAAC;CAC1D;CAEA,OAAO;EACL,IAAI;EACJ,QAAQ,UAAU,OAAO;EACzB;EACS;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,cAAc,EAAE,SAAS,IAAI;GACxE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;EACjC,CACF;EACA,cAAc;CAChB;AACF"}
+{"version":3,"file":"index.mjs","names":["lead"],"sources":["../src/error-codes.ts","../src/routes.ts","../src/schema.ts","../src/index.ts"],"sourcesContent":["import { defineErrorCodes } from 'better-auth';\n\nexport const LEAD_ERROR_CODES = defineErrorCodes({\n  INVALID_EMAIL: 'Invalid email',\n  INVALID_TOKEN: 'Invalid token',\n  TOKEN_EXPIRED: 'Token expired',\n  INVALID_METADATA: 'Invalid metadata',\n  EMAIL_OR_SESSION_REQUIRED: 'Email or session is required',\n  ADMIN_PLUGIN_REQUIRED: 'Admin plugin is required',\n  FORBIDDEN: 'Forbidden',\n  LEAD_NOT_FOUND: 'Lead not found',\n});\n","import {\n  BASE_ERROR_CODES,\n  type InternalLogger,\n  type StandardSchemaV1,\n  type Where,\n} from 'better-auth';\nimport { whereOperators } from 'better-auth/adapters';\nimport {\n  APIError,\n  createAuthEndpoint,\n  getSessionFromCtx,\n  sessionMiddleware,\n} from 'better-auth/api';\nimport { SignJWT, jwtVerify } from 'jose';\nimport type { JWTPayload, JWTVerifyResult } from 'jose';\nimport { JWTExpired } from 'jose/errors';\nimport * as z from 'zod';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport type { Lead, LeadOptions, LeadPayload } from './type';\n\ntype InferMetadata<O extends LeadOptions> = O extends {\n  metadata: { validationSchema: StandardSchemaV1<unknown, infer Out> };\n}\n  ? Out\n  : Record<string, any>;\n\ntype IdentifierType = 'email' | 'user';\n\nconst subscribeSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address of the lead',\n  }),\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const subscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/subscribe',\n    {\n      method: 'POST',\n      body: subscribeSchema,\n      metadata: {\n        $Infer: {\n          body: {} as {\n            email?: string;\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n      let createData: LeadPayload;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n        createData = {\n          email: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n        createData = {\n          userId: leadIdentifier,\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        };\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        try {\n          lead = await ctx.context.adapter.create<LeadPayload, Lead>({\n            model: 'lead',\n            data: createData,\n          });\n        } catch (e) {\n          ctx.context.logger.info('Error creating lead');\n          lead = await ctx.context.adapter.findOne<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n          });\n        }\n      }\n\n      if (options.sendConfirmationEmail && lead && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst verifySchema = z.object({\n  token: z.string().meta({\n    description: 'The token to verify the email',\n  }),\n});\n\nexport const verify = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/verify',\n    {\n      method: 'GET',\n      query: verifySchema,\n    },\n    async (ctx) => {\n      const { token } = ctx.query;\n\n      let jwt: JWTVerifyResult<JWTPayload>;\n      try {\n        jwt = await jwtVerify(token, new TextEncoder().encode(ctx.context.secret), {\n          algorithms: ['HS256'],\n        });\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const confirmationPayloadSchema = z.object({\n        identifier: z.string(),\n        type: z.enum(['email', 'user']),\n      });\n      const parsed = confirmationPayloadSchema.parse(jwt.payload);\n\n      const whereField = parsed.type === 'user' ? 'userId' : 'email';\n\n      let lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (lead.confirmed) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      lead = await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: parsed.identifier }],\n        update: {\n          confirmed: true,\n        },\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.onConfirmed) {\n        await ctx.context.runInBackgroundOrAwait(options.onConfirmed({ lead }, ctx.request));\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst unsubscribeQuerySchema = z.object({\n  token: z.string().meta({\n    description: 'Signed unsubscribe token',\n  }),\n});\n\nexport const unsubscribe = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe',\n    {\n      method: 'POST',\n      query: unsubscribeQuerySchema,\n      metadata: {\n        // Empty array overrides the router-level JSON-only restriction,\n        // allowing POST with no body (required for RFC 8058 one-click unsubscribe).\n        allowedMediaTypes: [],\n      },\n    },\n    async (ctx) => {\n      let payload: JWTPayload;\n      try {\n        const result = await jwtVerify(\n          ctx.query.token,\n          new TextEncoder().encode(ctx.context.secret),\n          { algorithms: ['HS256'] },\n        );\n        payload = result.payload;\n      } catch (e) {\n        if (e instanceof JWTExpired) {\n          throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.TOKEN_EXPIRED);\n        }\n        throw APIError.from('UNAUTHORIZED', LEAD_ERROR_CODES.INVALID_TOKEN);\n      }\n\n      const id = payload['id'] as string;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [\n          {\n            field: 'id',\n            value: id,\n          },\n        ],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nexport const unsubscribeSession = <O extends LeadOptions>(_options: O) =>\n  createAuthEndpoint(\n    '/lead/unsubscribe-session',\n    {\n      method: 'POST',\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst resendSchema = z.object({\n  email: z.string().optional().meta({\n    description: 'Email address to resend the verification email to',\n  }),\n});\n\nexport const resend = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/resend',\n    {\n      method: 'POST',\n      body: resendSchema,\n    },\n    async (ctx) => {\n      const email = ctx.body.email;\n\n      let identifierType: IdentifierType;\n      let leadIdentifier: string;\n      let leadEmail: string;\n\n      if (email) {\n        const isValidEmail = z.email().safeParse(email);\n        if (!isValidEmail.success) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_EMAIL);\n        }\n\n        leadIdentifier = email.toLowerCase();\n        identifierType = 'email';\n        leadEmail = leadIdentifier;\n      } else {\n        const session = await getSessionFromCtx(ctx);\n\n        if (!session) {\n          throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.EMAIL_OR_SESSION_REQUIRED);\n        }\n        leadIdentifier = session.user.id;\n        identifierType = 'user';\n        leadEmail = session.user.email;\n      }\n\n      const whereField = identifierType === 'email' ? 'email' : 'userId';\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: whereField, value: leadIdentifier }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      if (options.sendConfirmationEmail && !lead.confirmed) {\n        const token = await createConfirmationToken(\n          ctx.context.secret,\n          { identifier: leadIdentifier, type: identifierType },\n          options.expiresIn ?? 3600,\n        );\n        const url = `${ctx.context.baseURL}/lead/verify?token=${token}`;\n        const unsubscribeToken = await createUnsubscribeToken(\n          ctx.context.secret,\n          lead.id,\n          options.unsubscribeExpiresIn,\n        );\n        const unsubscribeUrl = `${ctx.context.baseURL}/lead/unsubscribe?token=${unsubscribeToken}`;\n\n        const sent = await options.sendConfirmationEmail(\n          {\n            lead,\n            email: leadEmail,\n            url,\n            token,\n            unsubscribeUrl,\n          },\n          ctx.request,\n        );\n\n        if (sent) {\n          await ctx.context.adapter.update<Lead>({\n            model: 'lead',\n            where: [{ field: whereField, value: leadIdentifier }],\n            update: { confirmationSentAt: new Date() },\n          });\n        }\n      }\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst updateSchema = z.object({\n  metadata: z.record(z.string(), z.any()).optional().meta({\n    description: 'Additional metadata to store with the lead',\n  }),\n});\n\nexport const update = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/update',\n    {\n      method: 'POST',\n      body: updateSchema,\n      use: [sessionMiddleware],\n      metadata: {\n        $Infer: {\n          body: {} as {\n            metadata?: InferMetadata<O>;\n          },\n        },\n      },\n    },\n    async (ctx) => {\n      const userId = ctx.context.session.user.id;\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n      });\n\n      if (!lead) {\n        return ctx.json({\n          status: true,\n        });\n      }\n\n      const metadata = validateMetadata(\n        options,\n        ctx.body.metadata as Record<string, any> | undefined,\n        ctx.context.logger,\n      );\n\n      await ctx.context.adapter.update<Lead>({\n        model: 'lead',\n        where: [{ field: 'userId', value: userId }],\n        update: {\n          metadata: metadata ? JSON.stringify(metadata) : undefined,\n        },\n      });\n\n      return ctx.json({\n        status: true,\n      });\n    },\n  );\n\nconst listQuerySchema = z.object({\n  searchValue: z.string().optional().meta({\n    description: 'The value to search for. Eg: \"some name\"',\n  }),\n  searchField: z\n    .enum(['email'])\n    .meta({\n      description: 'The field to search in, defaults to email.',\n    })\n    .optional(),\n  searchOperator: z\n    .enum(['contains', 'starts_with', 'ends_with'])\n    .meta({\n      description:\n        'The operator to use for the search. Can be `contains`, `starts_with` or `ends_with`. Eg: \"contains\"',\n    })\n    .optional(),\n  limit: z.coerce\n    .number()\n    .meta({\n      description: 'The number of lead to return',\n    })\n    .optional(),\n  offset: z.coerce\n    .number()\n    .meta({\n      description: 'The offset to start from',\n    })\n    .optional(),\n  sortBy: z\n    .string()\n    .meta({\n      description: 'The field to sort by',\n    })\n    .optional(),\n  sortDirection: z\n    .enum(['asc', 'desc'])\n    .meta({\n      description: 'The direction to sort by',\n    })\n    .optional(),\n  filterField: z\n    .string()\n    .meta({\n      description: 'The field to filter by',\n    })\n    .optional(),\n  filterValue: z\n    .string()\n    .meta({\n      description: 'The value to filter by',\n    })\n    .or(z.number())\n    .or(z.boolean())\n    .or(z.array(z.string()))\n    .or(z.array(z.number()))\n    .optional(),\n  filterOperator: z\n    .enum(whereOperators)\n    .meta({\n      description: 'The operator to use for the filter',\n    })\n    .optional(),\n});\n\nexport const listLeads = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    '/lead/list-leads',\n    {\n      method: 'GET',\n      query: listQuerySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const where: Where[] = [];\n\n      if (ctx.query?.searchValue) {\n        where.push({\n          field: ctx.query.searchField || 'email',\n          operator: ctx.query.searchOperator || 'contains',\n          value: ctx.query.searchValue,\n        });\n      }\n\n      if (ctx.query?.filterValue !== undefined) {\n        where.push({\n          field: ctx.query.filterField || 'email',\n          operator: ctx.query.filterOperator || 'eq',\n          value: ctx.query.filterValue,\n        });\n      }\n\n      const limit = ctx.query.limit ?? 100;\n      const offset = ctx.query.offset ?? 0;\n\n      const [leads, total] = await Promise.all([\n        ctx.context.adapter.findMany<Lead>({\n          model: 'lead',\n          limit,\n          offset,\n          ...(ctx.query.sortBy && {\n            sortBy: {\n              field: ctx.query.sortBy,\n              direction: ctx.query.sortDirection || 'asc',\n            },\n          }),\n          where: where.length ? where : undefined,\n        }),\n        ctx.context.adapter.count({ model: 'lead' }),\n      ]);\n\n      return ctx.json({ leads, total, limit, offset });\n    },\n  );\n\nconst getLeadQuerySchema = z.object({\n  id: z.string().meta({\n    description: 'The id of the Lead',\n  }),\n});\n\nexport const getLead = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    'lead/get-lead',\n    {\n      method: 'POST',\n      query: getLeadQuerySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'id', value: ctx.body.leadId }],\n      });\n\n      if (!lead) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.LEAD_NOT_FOUND);\n      }\n\n      return lead;\n    },\n  );\n\nconst removeLeadBodySchema = z.object({\n  leadId: z.coerce.string().meta({\n    description: 'The lead id',\n  }),\n});\n\nexport const removeLead = <O extends LeadOptions>(options: O) =>\n  createAuthEndpoint(\n    'lead/remove-lead',\n    {\n      method: 'POST',\n      body: removeLeadBodySchema,\n      use: [sessionMiddleware],\n    },\n    async (ctx) => {\n      if (!ctx.context.hasPlugin('admin')) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.ADMIN_PLUGIN_REQUIRED);\n      }\n\n      const allowedRoles = options.admin?.roles ?? ['admin'];\n      const userRole = (ctx.context.session.user as { role?: string }).role ?? '';\n      const userRoles = userRole\n        .split(',')\n        .map((r) => r.trim())\n        .filter(Boolean);\n      const hasRole = userRoles.some((r) => allowedRoles.includes(r));\n\n      if (!hasRole) {\n        throw APIError.from('FORBIDDEN', LEAD_ERROR_CODES.FORBIDDEN);\n      }\n\n      const lead = await ctx.context.adapter.findOne<Lead>({\n        model: 'lead',\n        where: [{ field: 'id', value: ctx.body.leadId }],\n      });\n\n      if (!lead) {\n        throw APIError.from('NOT_FOUND', LEAD_ERROR_CODES.LEAD_NOT_FOUND);\n      }\n\n      await ctx.context.adapter.delete({\n        model: 'lead',\n        where: [{ field: 'id', value: ctx.body.leadId }],\n      });\n\n      return ctx.json({ success: true });\n    },\n  );\n\nasync function createConfirmationToken(\n  secret: string,\n  payload: { identifier: string; type: IdentifierType },\n  expiresIn: number,\n) {\n  return new SignJWT(payload)\n    .setProtectedHeader({ alg: 'HS256' })\n    .setIssuedAt()\n    .setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn)\n    .sign(new TextEncoder().encode(secret));\n}\n\nasync function createUnsubscribeToken(secret: string, leadId: string, expiresIn?: number) {\n  const jwt = new SignJWT({ id: leadId }).setProtectedHeader({ alg: 'HS256' }).setIssuedAt();\n  if (expiresIn !== undefined) {\n    jwt.setExpirationTime(Math.floor(Date.now() / 1000) + expiresIn);\n  }\n  return jwt.sign(new TextEncoder().encode(secret));\n}\n\nfunction validateMetadata(\n  options: LeadOptions,\n  metadata: Record<string, any> | undefined,\n  logger: InternalLogger,\n) {\n  if (!metadata || !options.metadata?.validationSchema) {\n    return metadata;\n  }\n  const validationResult = options.metadata.validationSchema['~standard'].validate(metadata);\n\n  if (validationResult instanceof Promise) {\n    throw APIError.from('INTERNAL_SERVER_ERROR', BASE_ERROR_CODES.ASYNC_VALIDATION_NOT_SUPPORTED);\n  }\n\n  if (validationResult.issues) {\n    logger.error('Invalid metadata', validationResult.issues);\n    throw APIError.from('BAD_REQUEST', LEAD_ERROR_CODES.INVALID_METADATA);\n  }\n\n  return validationResult.value as Record<string, any>;\n}\n","import { type BetterAuthPluginDBSchema } from 'better-auth';\nimport { mergeSchema } from 'better-auth/db';\n\nimport type { LeadOptions } from './type';\n\nexport const lead = {\n  lead: {\n    fields: {\n      createdAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        required: true,\n        input: false,\n      },\n      updatedAt: {\n        type: 'date',\n        defaultValue: () => new Date(),\n        onUpdate: () => new Date(),\n        required: true,\n        input: false,\n      },\n      email: {\n        type: 'string',\n        required: false,\n        unique: true,\n      },\n      userId: {\n        type: 'string',\n        required: false,\n        unique: true,\n        references: {\n          model: 'user',\n          field: 'id',\n        },\n      },\n      confirmed: {\n        type: 'boolean',\n        defaultValue: false,\n        required: true,\n        input: false,\n      },\n      confirmationSentAt: {\n        type: 'date',\n        required: false,\n        input: false,\n      },\n      metadata: {\n        type: 'string',\n        required: false,\n      },\n    },\n  },\n} satisfies BetterAuthPluginDBSchema;\n\nexport const getSchema = <O extends LeadOptions>(options: O) => {\n  return mergeSchema(lead, options.schema);\n};\n","import type { BetterAuthPlugin } from 'better-auth';\n\nimport { LEAD_ERROR_CODES } from './error-codes';\nimport {\n  getLead,\n  listLeads,\n  removeLead,\n  resend,\n  subscribe,\n  unsubscribe,\n  unsubscribeSession,\n  update,\n  verify,\n} from './routes';\nimport { getSchema } from './schema';\nimport type { LeadOptions } from './type';\n\nexport const lead = <O extends LeadOptions>(options: O = {} as O) => {\n  const endpoints = {\n    subscribe: subscribe(options),\n    verify: verify(options),\n    unsubscribe: unsubscribe(options),\n    unsubscribeSession: unsubscribeSession(options),\n    resend: resend(options),\n    update: update(options),\n    ...(options.admin?.enabled\n      ? {\n          listLeads: listLeads(options),\n          getLead: getLead(options),\n          removeLead: removeLead(options),\n        }\n      : {}),\n  };\n\n  return {\n    id: 'lead',\n    schema: getSchema(options),\n    endpoints,\n    options: options as NoInfer<O>,\n    rateLimit: [\n      {\n        pathMatcher: (path) => ['/lead/subscribe', '/lead/resend'].includes(path),\n        window: options.rateLimit?.window ?? 10,\n        max: options.rateLimit?.max ?? 3,\n      },\n    ],\n    $ERROR_CODES: LEAD_ERROR_CODES,\n  } satisfies BetterAuthPlugin;\n};\n\nexport type * from './type';\n"],"mappings":";;;;;;;;AAEA,MAAa,mBAAmB,iBAAiB;CAC/C,eAAe;CACf,eAAe;CACf,eAAe;CACf,kBAAkB;CAClB,2BAA2B;CAC3B,uBAAuB;CACvB,WAAW;CACX,gBAAgB;AAClB,CAAC;;;ACkBD,MAAM,kBAAkB,EAAE,OAAO;CAC/B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,4BACf,CAAC;CACD,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC;AACH,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,mBACA;CACE,QAAQ;CACR,MAAM;CACN,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAIT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;EACZ,aAAa;GACX,OAAO;GACP,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAG/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;EACzB,aAAa;GACX,QAAQ;GACR,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA;EAClD;CACF;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,IAAI;EACF,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAA0B;GACzD,OAAO;GACP,MAAM;EACR,CAAC;CACH,SAAS,GAAG;EACV,IAAI,QAAQ,OAAO,KAAK,qBAAqB;EAC7C,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;GAC7C,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;EACtD,CAAC;CACH;CAGF,IAAI,QAAQ,yBAAyB,QAAQ,CAAC,KAAK,WAAW;EAC5D,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,gCACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,OAAO;AACT,GACA,OAAO,QAAQ;CACb,MAAM,EAAE,UAAU,IAAI;CAEtB,IAAI;CACJ,IAAI;EACF,MAAM,MAAM,UAAU,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAAG,EACzE,YAAY,CAAC,OAAO,EACtB,CAAC;CACH,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAMA,MAAM,SAJ4B,EAAE,OAAO;EACzC,YAAY,EAAE,OAAO;EACrB,MAAM,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC;CAChC,CACuC,EAAE,MAAM,IAAI,OAAO;CAE1D,MAAM,aAAa,OAAO,SAAS,SAAS,WAAW;CAEvD,IAAI,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACjD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;CACzD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,KAAK,WACP,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,OAAO,MAAM,IAAI,QAAQ,QAAQ,OAAa;EAC5C,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO,OAAO;EAAW,CAAC;EACvD,QAAQ,EACN,WAAW,KACb;CACF,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,aACV,MAAM,IAAI,QAAQ,uBAAuB,QAAQ,YAAY,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC;CAGrF,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,yBAAyB,EAAE,OAAO,EACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EACrB,aAAa,2BACf,CAAC,EACH,CAAC;AAED,MAAa,eAAsC,YACjD,mBACE,qBACA;CACE,QAAQ;CACR,OAAO;CACP,UAAU,EAGR,mBAAmB,CAAC,EACtB;AACF,GACA,OAAO,QAAQ;CACb,IAAI;CACJ,IAAI;EAMF,WAAU,MALW,UACnB,IAAI,MAAM,OACV,IAAI,YAAY,EAAE,OAAO,IAAI,QAAQ,MAAM,GAC3C,EAAE,YAAY,CAAC,OAAO,EAAE,CAC1B,GACiB;CACnB,SAAS,GAAG;EACV,IAAI,aAAa,YACf,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;EAEpE,MAAM,SAAS,KAAK,gBAAgB,iBAAiB,aAAa;CACpE;CAEA,MAAM,KAAK,QAAQ;CAYnB,IAAI,CAAC,MAVc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CACL;GACE,OAAO;GACP,OAAO;EACT,CACF;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAa,sBAA6C,aACxD,mBACE,6BACA;CACE,QAAQ;CACR,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAChC,aAAa,oDACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;AACR,GACA,OAAO,QAAQ;CACb,MAAM,QAAQ,IAAI,KAAK;CAEvB,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,OAAO;EAET,IAAI,CADiB,EAAE,MAAM,EAAE,UAAU,KACzB,EAAE,SAChB,MAAM,SAAS,KAAK,eAAe,iBAAiB,aAAa;EAGnE,iBAAiB,MAAM,YAAY;EACnC,iBAAiB;EACjB,YAAY;CACd,OAAO;EACL,MAAM,UAAU,MAAM,kBAAkB,GAAG;EAE3C,IAAI,CAAC,SACH,MAAM,SAAS,KAAK,eAAe,iBAAiB,yBAAyB;EAE/E,iBAAiB,QAAQ,KAAK;EAC9B,iBAAiB;EACjB,YAAY,QAAQ,KAAK;CAC3B;CAEA,MAAM,aAAa,mBAAmB,UAAU,UAAU;CAE1D,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAY,OAAO;EAAe,CAAC;CACtD,CAAC;CAED,IAAI,CAAC,MACH,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,IAAI,QAAQ,yBAAyB,CAAC,KAAK,WAAW;EACpD,MAAM,QAAQ,MAAM,wBAClB,IAAI,QAAQ,QACZ;GAAE,YAAY;GAAgB,MAAM;EAAe,GACnD,QAAQ,aAAa,IACvB;EACA,MAAM,MAAM,GAAG,IAAI,QAAQ,QAAQ,qBAAqB;EACxD,MAAM,mBAAmB,MAAM,uBAC7B,IAAI,QAAQ,QACZ,KAAK,IACL,QAAQ,oBACV;EACA,MAAM,iBAAiB,GAAG,IAAI,QAAQ,QAAQ,0BAA0B;EAaxE,IAAI,MAXe,QAAQ,sBACzB;GACE;GACA,OAAO;GACP;GACA;GACA;EACF,GACA,IAAI,OACN,GAGE,MAAM,IAAI,QAAQ,QAAQ,OAAa;GACrC,OAAO;GACP,OAAO,CAAC;IAAE,OAAO;IAAY,OAAO;GAAe,CAAC;GACpD,QAAQ,EAAE,oCAAoB,IAAI,KAAK,EAAE;EAC3C,CAAC;CAEL;CAEA,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,eAAe,EAAE,OAAO,EAC5B,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EACtD,aAAa,6CACf,CAAC,EACH,CAAC;AAED,MAAa,UAAiC,YAC5C,mBACE,gBACA;CACE,QAAQ;CACR,MAAM;CACN,KAAK,CAAC,iBAAiB;CACvB,UAAU,EACR,QAAQ,EACN,MAAM,CAAC,EAGT,EACF;AACF,GACA,OAAO,QAAQ;CACb,MAAM,SAAS,IAAI,QAAQ,QAAQ,KAAK;CAOxC,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;CAC5C,CAAC,GAGC,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;CAGH,MAAM,WAAW,iBACf,SACA,IAAI,KAAK,UACT,IAAI,QAAQ,MACd;CAEA,MAAM,IAAI,QAAQ,QAAQ,OAAa;EACrC,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAU,OAAO;EAAO,CAAC;EAC1C,QAAQ,EACN,UAAU,WAAW,KAAK,UAAU,QAAQ,IAAI,KAAA,EAClD;CACF,CAAC;CAED,OAAO,IAAI,KAAK,EACd,QAAQ,KACV,CAAC;AACH,CACF;AAEF,MAAM,kBAAkB,EAAE,OAAO;CAC/B,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EACtC,aAAa,6CACf,CAAC;CACD,aAAa,EACV,KAAK,CAAC,OAAO,CAAC,EACd,KAAK,EACJ,aAAa,6CACf,CAAC,EACA,SAAS;CACZ,gBAAgB,EACb,KAAK;EAAC;EAAY;EAAe;CAAW,CAAC,EAC7C,KAAK,EACJ,aACE,wGACJ,CAAC,EACA,SAAS;CACZ,OAAO,EAAE,OACN,OAAO,EACP,KAAK,EACJ,aAAa,+BACf,CAAC,EACA,SAAS;CACZ,QAAQ,EAAE,OACP,OAAO,EACP,KAAK,EACJ,aAAa,2BACf,CAAC,EACA,SAAS;CACZ,QAAQ,EACL,OAAO,EACP,KAAK,EACJ,aAAa,uBACf,CAAC,EACA,SAAS;CACZ,eAAe,EACZ,KAAK,CAAC,OAAO,MAAM,CAAC,EACpB,KAAK,EACJ,aAAa,2BACf,CAAC,EACA,SAAS;CACZ,aAAa,EACV,OAAO,EACP,KAAK,EACJ,aAAa,yBACf,CAAC,EACA,SAAS;CACZ,aAAa,EACV,OAAO,EACP,KAAK,EACJ,aAAa,yBACf,CAAC,EACA,GAAG,EAAE,OAAO,CAAC,EACb,GAAG,EAAE,QAAQ,CAAC,EACd,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,EACtB,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,EACtB,SAAS;CACZ,gBAAgB,EACb,KAAK,cAAc,EACnB,KAAK,EACJ,aAAa,qCACf,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAa,aAAoC,YAC/C,mBACE,oBACA;CACE,QAAQ;CACR,OAAO;CACP,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAG7D,MAAM,QAAiB,CAAC;CAExB,IAAI,IAAI,OAAO,aACb,MAAM,KAAK;EACT,OAAO,IAAI,MAAM,eAAe;EAChC,UAAU,IAAI,MAAM,kBAAkB;EACtC,OAAO,IAAI,MAAM;CACnB,CAAC;CAGH,IAAI,IAAI,OAAO,gBAAgB,KAAA,GAC7B,MAAM,KAAK;EACT,OAAO,IAAI,MAAM,eAAe;EAChC,UAAU,IAAI,MAAM,kBAAkB;EACtC,OAAO,IAAI,MAAM;CACnB,CAAC;CAGH,MAAM,QAAQ,IAAI,MAAM,SAAS;CACjC,MAAM,SAAS,IAAI,MAAM,UAAU;CAEnC,MAAM,CAAC,OAAO,SAAS,MAAM,QAAQ,IAAI,CACvC,IAAI,QAAQ,QAAQ,SAAe;EACjC,OAAO;EACP;EACA;EACA,GAAI,IAAI,MAAM,UAAU,EACtB,QAAQ;GACN,OAAO,IAAI,MAAM;GACjB,WAAW,IAAI,MAAM,iBAAiB;EACxC,EACF;EACA,OAAO,MAAM,SAAS,QAAQ,KAAA;CAChC,CAAC,GACD,IAAI,QAAQ,QAAQ,MAAM,EAAE,OAAO,OAAO,CAAC,CAC7C,CAAC;CAED,OAAO,IAAI,KAAK;EAAE;EAAO;EAAO;EAAO;CAAO,CAAC;AACjD,CACF;AAEF,MAAM,qBAAqB,EAAE,OAAO,EAClC,IAAI,EAAE,OAAO,EAAE,KAAK,EAClB,aAAa,qBACf,CAAC,EACH,CAAC;AAED,MAAa,WAAkC,YAC7C,mBACE,iBACA;CACE,QAAQ;CACR,OAAO;CACP,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAG7D,MAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAM,OAAO,IAAI,KAAK;EAAO,CAAC;CACjD,CAAC;CAED,IAAI,CAAC,MACH,MAAM,SAAS,KAAK,aAAa,iBAAiB,cAAc;CAGlE,OAAO;AACT,CACF;AAEF,MAAM,uBAAuB,EAAE,OAAO,EACpC,QAAQ,EAAE,OAAO,OAAO,EAAE,KAAK,EAC7B,aAAa,cACf,CAAC,EACH,CAAC;AAED,MAAa,cAAqC,YAChD,mBACE,oBACA;CACE,QAAQ;CACR,MAAM;CACN,KAAK,CAAC,iBAAiB;AACzB,GACA,OAAO,QAAQ;CACb,IAAI,CAAC,IAAI,QAAQ,UAAU,OAAO,GAChC,MAAM,SAAS,KAAK,aAAa,iBAAiB,qBAAqB;CAGzE,MAAM,eAAe,QAAQ,OAAO,SAAS,CAAC,OAAO;CAQrD,IAAI,EAPc,IAAI,QAAQ,QAAQ,KAA2B,QAAQ,IAEtE,MAAM,GAAG,EACT,KAAK,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OACc,EAAE,MAAM,MAAM,aAAa,SAAS,CAAC,CAElD,GACT,MAAM,SAAS,KAAK,aAAa,iBAAiB,SAAS;CAQ7D,IAAI,CAAC,MALc,IAAI,QAAQ,QAAQ,QAAc;EACnD,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAM,OAAO,IAAI,KAAK;EAAO,CAAC;CACjD,CAAC,GAGC,MAAM,SAAS,KAAK,aAAa,iBAAiB,cAAc;CAGlE,MAAM,IAAI,QAAQ,QAAQ,OAAO;EAC/B,OAAO;EACP,OAAO,CAAC;GAAE,OAAO;GAAM,OAAO,IAAI,KAAK;EAAO,CAAC;CACjD,CAAC;CAED,OAAO,IAAI,KAAK,EAAE,SAAS,KAAK,CAAC;AACnC,CACF;AAEF,eAAe,wBACb,QACA,SACA,WACA;CACA,OAAO,IAAI,QAAQ,OAAO,EACvB,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EACnC,YAAY,EACZ,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS,EAC3D,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAC1C;AAEA,eAAe,uBAAuB,QAAgB,QAAgB,WAAoB;CACxF,MAAM,MAAM,IAAI,QAAQ,EAAE,IAAI,OAAO,CAAC,EAAE,mBAAmB,EAAE,KAAK,QAAQ,CAAC,EAAE,YAAY;CACzF,IAAI,cAAc,KAAA,GAChB,IAAI,kBAAkB,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,SAAS;CAEjE,OAAO,IAAI,KAAK,IAAI,YAAY,EAAE,OAAO,MAAM,CAAC;AAClD;AAEA,SAAS,iBACP,SACA,UACA,QACA;CACA,IAAI,CAAC,YAAY,CAAC,QAAQ,UAAU,kBAClC,OAAO;CAET,MAAM,mBAAmB,QAAQ,SAAS,iBAAiB,aAAa,SAAS,QAAQ;CAEzF,IAAI,4BAA4B,SAC9B,MAAM,SAAS,KAAK,yBAAyB,iBAAiB,8BAA8B;CAG9F,IAAI,iBAAiB,QAAQ;EAC3B,OAAO,MAAM,oBAAoB,iBAAiB,MAAM;EACxD,MAAM,SAAS,KAAK,eAAe,iBAAiB,gBAAgB;CACtE;CAEA,OAAO,iBAAiB;AAC1B;;;ACtuBA,MAAaA,SAAO,EAClB,MAAM,EACJ,QAAQ;CACN,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,UAAU;EACV,OAAO;CACT;CACA,WAAW;EACT,MAAM;EACN,oCAAoB,IAAI,KAAK;EAC7B,gCAAgB,IAAI,KAAK;EACzB,UAAU;EACV,OAAO;CACT;CACA,OAAO;EACL,MAAM;EACN,UAAU;EACV,QAAQ;CACV;CACA,QAAQ;EACN,MAAM;EACN,UAAU;EACV,QAAQ;EACR,YAAY;GACV,OAAO;GACP,OAAO;EACT;CACF;CACA,WAAW;EACT,MAAM;EACN,cAAc;EACd,UAAU;EACV,OAAO;CACT;CACA,oBAAoB;EAClB,MAAM;EACN,UAAU;EACV,OAAO;CACT;CACA,UAAU;EACR,MAAM;EACN,UAAU;CACZ;AACF,EACF,EACF;AAEA,MAAa,aAAoC,YAAe;CAC9D,OAAO,YAAYA,QAAM,QAAQ,MAAM;AACzC;;;ACvCA,MAAa,QAA+B,UAAa,CAAC,MAAW;CACnE,MAAM,YAAY;EAChB,WAAW,UAAU,OAAO;EAC5B,QAAQ,OAAO,OAAO;EACtB,aAAa,YAAY,OAAO;EAChC,oBAAoB,mBAAmB,OAAO;EAC9C,QAAQ,OAAO,OAAO;EACtB,QAAQ,OAAO,OAAO;EACtB,GAAI,QAAQ,OAAO,UACf;GACE,WAAW,UAAU,OAAO;GAC5B,SAAS,QAAQ,OAAO;GACxB,YAAY,WAAW,OAAO;EAChC,IACA,CAAC;CACP;CAEA,OAAO;EACL,IAAI;EACJ,QAAQ,UAAU,OAAO;EACzB;EACS;EACT,WAAW,CACT;GACE,cAAc,SAAS,CAAC,mBAAmB,cAAc,EAAE,SAAS,IAAI;GACxE,QAAQ,QAAQ,WAAW,UAAU;GACrC,KAAK,QAAQ,WAAW,OAAO;EACjC,CACF;EACA,cAAc;CAChB;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth-lead",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Better Auth Lead plugin",
   "homepage": "https://github.com/marcjulian/better-auth-plugins#readme",
   "bugs": {
@@ -29,10 +29,10 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@types/node": "^25.3.5",
-    "bumpp": "^10.4.1",
+    "@types/node": "^25.6.2",
+    "bumpp": "^11.1.0",
     "tsdown": "^0.22.0",
-    "typescript": "^5.9.3",
+    "typescript": "^6.0.3",
     "vitest": "^4.1.7"
   },
   "peerDependencies": {