better-auth 0.2.2 → 0.2.3-beta.10

package/dist/access.js

@@ -1 +1 @@
-var d=Object.defineProperty;var S=(e,t,r)=>t in e?d(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var c=(e,t,r)=>S(e,typeof t!="symbol"?t+"":t,r);var a=class extends Error{constructor(r,s){super(r);c(this,"path");this.path=s}},m=class{constructor(t){this.s=t;c(this,"statements");this.statements=t}newRole(t){return new i(t)}},i=class e{constructor(t){c(this,"statements");this.statements=t}authorize(t,r){for(let[s,o]of Object.entries(t)){let n=this.statements[s];if(!n)return{success:!1,error:`You are not allowed to access resource: ${s}`};let l=r==="OR"?o.some(u=>n.includes(u)):o.every(u=>n.includes(u));return l?{success:l}:{success:!1,error:`unauthorized to access resource "${s}"`}}return{success:!1,error:"Not authorized"}}static fromString(t){let r=JSON.parse(t);if(typeof r!="object")throw new a("statements is not an object",".");for(let[s,o]of Object.entries(r)){if(typeof s!="string")throw new a("invalid resource identifier",s);if(!Array.isArray(o))throw new a("actions is not an array",s);for(let n=0;n<o.length;n++)if(typeof o[n]!="string")throw new a("action is not a string",`${s}[${n}]`)}return new e(r)}toString(){return JSON.stringify(this.statements)}};var f=e=>new m(e),x={organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]},p=f(x),g=p.newRole({organization:["update"],invitation:["create","cancel"],member:["create","update","delete"]}),y=p.newRole({organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]}),b=p.newRole({organization:[],member:[],invitation:[]}),A={admin:g,owner:y,member:b};var O=e=>i.fromString(e!=null?e:"");export{m as AccessControl,a as ParsingError,i as Role,g as adminAc,f as createAccessControl,p as defaultAc,A as defaultRoles,x as defaultStatements,b as memberAc,y as ownerAc,O as permissionFromString};
+var a=class extends Error{path;constructor(e,n){super(e),this.path=n}},c=class{constructor(e){this.s=e;this.statements=e}statements;newRole(e){return new i(e)}},i=class s{statements;constructor(e){this.statements=e}authorize(e,n){for(let[t,o]of Object.entries(e)){let r=this.statements[t];if(!r)return{success:!1,error:`You are not allowed to access resource: ${t}`};let p=n==="OR"?o.some(m=>r.includes(m)):o.every(m=>r.includes(m));return p?{success:p}:{success:!1,error:`unauthorized to access resource "${t}"`}}return{success:!1,error:"Not authorized"}}static fromString(e){let n=JSON.parse(e);if(typeof n!="object")throw new a("statements is not an object",".");for(let[t,o]of Object.entries(n)){if(typeof t!="string")throw new a("invalid resource identifier",t);if(!Array.isArray(o))throw new a("actions is not an array",t);for(let r=0;r<o.length;r++)if(typeof o[r]!="string")throw new a("action is not a string",`${t}[${r}]`)}return new s(n)}toString(){return JSON.stringify(this.statements)}};var l=s=>new c(s),d={organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]},u=l(d),S=u.newRole({organization:["update"],invitation:["create","cancel"],member:["create","update","delete"]}),f=u.newRole({organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]}),x=u.newRole({organization:[],member:[],invitation:[]}),b={admin:S,owner:f,member:x};var T=s=>i.fromString(s??"");export{c as AccessControl,a as ParsingError,i as Role,S as adminAc,l as createAccessControl,u as defaultAc,b as defaultRoles,d as defaultStatements,x as memberAc,f as ownerAc,T as permissionFromString};

package/dist/adapters.d.ts

@@ -1,15 +1,27 @@
-import { A as Adapter, W as Where } from './adapter-D-m9-hQp.js';
-import './schema-D9o3OF80.js';
+import { f as Adapter, W as Where, F as FieldAttribute } from './index-gO-yM4kI.js';
+import { Kysely } from 'kysely';
+import './index-CE92ti2Z.js';
+import 'arctic';
 import 'zod';
+import './helper-C1ihmerM.js';
+import 'better-call';
 
-declare const prismaAdapter: (prisma: any) => Adapter;
+declare const prismaAdapter: ({ db: prisma, provider, }: {
+    db: any;
+    provider: "sqlite" | "cockroachdb" | "mysql" | "postgresql" | "sqlserver";
+}) => Adapter;
 
 interface DrizzleAdapterOptions {
-    schema: Record<string, any>;
+    schema?: Record<string, any>;
+    provider: "pg" | "mysql" | "sqlite";
 }
-declare const drizzleAdapter: (db: Record<string, any>, { schema }: DrizzleAdapterOptions) => Adapter;
+interface DB {
+    [key: string]: any;
+}
+declare const drizzleAdapter: (db: DB, options: DrizzleAdapterOptions) => Adapter;
 
 declare const mongodbAdapter: (mongo: any) => {
+    id: string;
     create<T, R = T>(data: {
         model: string;
         data: T;
@@ -35,4 +47,18 @@ declare const mongodbAdapter: (mongo: any) => {
     }): Promise<any>;
 };
 
-export { type DrizzleAdapterOptions, drizzleAdapter, mongodbAdapter, prismaAdapter };
+interface KyselyAdapterConfig {
+    /**
+     * Transform dates and booleans for sqlite.
+     */
+    transform?: {
+        schema: {
+            [table: string]: Record<string, FieldAttribute>;
+        };
+        boolean: boolean;
+        date: boolean;
+    };
+}
+declare const kyselyAdapter: (db: Kysely<any>, config?: KyselyAdapterConfig) => Adapter;
+
+export { type DrizzleAdapterOptions, type KyselyAdapterConfig, drizzleAdapter, kyselyAdapter, mongodbAdapter, prismaAdapter };

package/dist/adapters.js

@@ -1 +1,22 @@
-var D=Object.defineProperty,R=Object.defineProperties;var x=Object.getOwnPropertyDescriptors;var m=Object.getOwnPropertySymbols;var O=Object.prototype.hasOwnProperty,M=Object.prototype.propertyIsEnumerable;var C=(r,o,c)=>o in r?D(r,o,{enumerable:!0,configurable:!0,writable:!0,value:c}):r[o]=c,u=(r,o)=>{for(var c in o||(o={}))O.call(o,c)&&C(r,c,o[c]);if(m)for(var c of m(o))M.call(o,c)&&C(r,c,o[c]);return r},f=(r,o)=>R(r,x(o));var P=(r,o)=>{var c={};for(var t in r)O.call(r,t)&&o.indexOf(t)<0&&(c[t]=r[t]);if(r!=null&&m)for(var t of m(r))o.indexOf(t)<0&&M.call(r,t)&&(c[t]=r[t]);return c};var l=(r,o,c)=>new Promise((t,s)=>{var n=i=>{try{a(c.next(i))}catch(d){s(d)}},e=i=>{try{a(c.throw(i))}catch(d){s(d)}},a=i=>i.done?t(i.value):Promise.resolve(i.value).then(n,e);a((c=c.apply(r,o)).next())});function h(r){if(!r)return{};if(r.length===1){let n=r[0];return n?{[n.field]:n.value}:void 0}let o=r.filter(n=>n.connector==="AND"||!n.connector),c=r.filter(n=>n.connector==="OR"),t=o.map(n=>({[n.field]:n.operator==="eq"||!n.operator?n.value:{[n.operator]:n.value}})),s=c.map(n=>({[n.field]:{[n.operator||"eq"]:n.value}}));return{AND:t.length?t:void 0,OR:s.length?s:void 0}}var q=r=>{let o=r;return{create(t){return l(this,null,function*(){let{model:s,data:n,select:e}=t;return yield o[s].create(u({data:n},e!=null&&e.length?{select:e.reduce((a,i)=>f(u({},a),{[i]:!0}),{})}:{}))})},findOne(t){return l(this,null,function*(){let{model:s,where:n,select:e}=t,a=h(n);return yield o[s].findFirst(u({where:a},e!=null&&e.length?{select:e.reduce((i,d)=>f(u({},i),{[d]:!0}),{})}:{}))})},findMany(t){return l(this,null,function*(){let{model:s,where:n}=t,e=h(n);return yield o[s].findMany({where:e})})},update(t){return l(this,null,function*(){let{model:s,where:n,update:e}=t,a=h(n);return yield o[s].update({where:a,data:e})})},delete(t){return l(this,null,function*(){let{model:s,where:n}=t,e=h(n);return yield o[s].delete({where:e})})}}};import{and as z,eq as v,or as N}from"drizzle-orm";function p(r,o){let c=Object.keys(o).find(t=>{let s=o[t].name;return s===s});if(!c)throw new Error("Model not found");return o[c]}function w(r,o){if(!r)return[];if(r.length===1){let a=r[0];return a?[v(o[a.field],a.value)]:[]}let c=r.filter(a=>a.connector==="AND"||!a.connector),t=r.filter(a=>a.connector==="OR"),s=z(...c.map(a=>v(o[a.field],a.value))),n=N(...t.map(a=>v(o[a.field],a.value))),e=[];return c.length&&e.push(s),t.length&&e.push(n),e}var G=(r,{schema:o})=>({create(t){return l(this,null,function*(){let{model:s,data:n}=t,e=p(s,o);return(yield r.insert(e).values(n).returning())[0]})},findOne(t){return l(this,null,function*(){let{model:s,where:n,select:e}=t,a=p(s,o),i=w(n,a),d=null;return e!=null&&e.length?d=yield r.select(...e.map(y=>({[y]:a[y]}))).from(a).where(...i):d=yield r.select().from(a).where(...i),d.length?d[0]:null})},findMany(t){return l(this,null,function*(){let{model:s,where:n}=t,e=p(s,o),a=n?w(n,e):[];return yield r.select().from(e).findMany(...a)})},update(t){return l(this,null,function*(){let{model:s,where:n,update:e}=t,a=p(s,o),i=w(n,a);return(yield r.update(a).set(e).where(...i).returning())[0]})},delete(t){return l(this,null,function*(){let{model:s,where:n}=t,e=p(s,o),a=w(n,e);return(yield r.delete(e).where(...a))[0]})}});function g(r){if(!r)return{};if(r.length===1){let e=r[0];return e?{[e.field]:e.value}:void 0}let o=r.filter(e=>e.connector==="AND"||!e.connector),c=r.filter(e=>e.connector==="OR"),t=o.map(e=>({[e.field]:e.operator==="eq"||!e.operator?e.value:{[e.field]:e.value}})),s=c.map(e=>({[e.field]:e.value})),n={};return t.length&&(n=f(u({},n),{$and:t})),s.length&&(n=f(u({},n),{$or:s})),n}function A(r){let t=r,{_id:o}=t;return P(t,["_id"])}function W(r){return r.reduce((c,t)=>(c[t]=1,c),{})}var Q=r=>{let o=r;return{create(t){return l(this,null,function*(){let{model:s,data:n}=t,a=(yield o.collection(s).insertOne(u({},n))).insertedId,i=u({id:a},n);return A(i)})},findOne(t){return l(this,null,function*(){let{model:s,where:n,select:e}=t,a=g(n),i={};e&&(i=W(e));let y=(yield o.collection(s).find(u({},a),{projection:i}).toArray())[0];return y?A(y):null})},findMany(t){return l(this,null,function*(){let{model:s,where:n}=t,e=g(n),a=yield o.collection(s).findMany(e);return A(a)})},update(t){return l(this,null,function*(){let{model:s,where:n,update:e}=t,a=g(n),i=yield o.collection(s).findOneAndUpdate(a,{$set:e},{returnDocument:"after"});return A(i)})},delete(t){return l(this,null,function*(){let{model:s,where:n}=t,e=g(n);return yield o.collection(s).findOneAndDelete(e)})}}};export{G as drizzleAdapter,Q as mongodbAdapter,q as prismaAdapter};
+import{existsSync as K}from"fs";import E from"path";var C=e=>{let o=e.plugins?.reduce((c,l)=>{let d=l.schema;if(!d)return c;for(let[u,p]of Object.entries(d))c[u]={fields:{...c[u]?.fields,...p.fields},tableName:u};return c},{}),a=e.rateLimit?.storage==="database",r={rateLimit:{tableName:e.rateLimit?.tableName||"rateLimit",fields:{key:{type:"string"},count:{type:"number"},lastRequest:{type:"number"}}}},{user:s,session:t,account:n,...i}=o||{};return{user:{tableName:e.user?.modelName||"user",fields:{name:{type:"string",required:!0},email:{type:"string",unique:!0,required:!0},emailVerified:{type:"boolean",defaultValue:()=>!1,required:!0},image:{type:"string",required:!1},createdAt:{type:"date",defaultValue:()=>new Date,required:!0},updatedAt:{type:"date",defaultValue:()=>new Date,required:!0},...s?.fields},order:0},session:{tableName:e.session?.modelName||"session",fields:{expiresAt:{type:"date",required:!0},ipAddress:{type:"string",required:!1},userAgent:{type:"string",required:!1},userId:{type:"string",references:{model:"user",field:"id",onDelete:"cascade"},required:!0},...t?.fields},order:1},account:{tableName:e.account?.modelName||"account",fields:{accountId:{type:"string",required:!0},providerId:{type:"string",required:!0},userId:{type:"string",references:{model:"user",field:"id",onDelete:"cascade"},required:!0},accessToken:{type:"string",required:!1},refreshToken:{type:"string",required:!1},idToken:{type:"string",required:!1},expiresAt:{type:"date",required:!1},password:{type:"string",required:!1},...n?.fields},order:2},...i,...a?r:{}}};import W from"fs/promises";import{produceSchema as H}from"@mrleebo/prisma-ast";var x=class extends Error{constructor(o,a,r){super(o),this.name="BetterAuthError",this.message=o,this.cause=a}};import{TimeSpan as he}from"oslo";import{alphabet as ke,generateRandomString as Ce}from"oslo/crypto";import{createConsola as V}from"consola";var k=V({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),G=e=>({log:(...o)=>{!e?.disabled&&k.log("",...o)},error:(...o)=>{!e?.disabled&&k.error("",...o)},warn:(...o)=>{!e?.disabled&&k.warn("",...o)},info:(...o)=>{!e?.disabled&&k.info("",...o)},debug:(...o)=>{!e?.disabled&&k.debug("",...o)},box:(...o)=>{!e?.disabled&&k.box("",...o)},success:(...o)=>{!e?.disabled&&k.success("",...o)},break:(...o)=>{!e?.disabled&&console.log(`
+`)}}),N=G();function D(e){return e.charAt(0).toUpperCase()+e.slice(1)}import{generateState as De}from"oslo/oauth2";import{z as Pe}from"zod";function O(e){if(!e)return{};if(e.length===1){let t=e[0];return t?{[t.field]:t.value}:void 0}let o=e.filter(t=>t.connector==="AND"||!t.connector),a=e.filter(t=>t.connector==="OR"),r=o.map(t=>({[t.field]:t.operator==="eq"||!t.operator?t.value:{[t.operator]:t.value}})),s=a.map(t=>({[t.field]:{[t.operator||"eq"]:t.value}}));return{AND:r.length?r:void 0,OR:s.length?s:void 0}}var nt=({db:e,provider:o})=>{let a=e;return{id:"prisma",async create(r){let{model:s,data:t,select:n}=r;return await a[s].create({data:t,...n?.length?{select:n.reduce((i,c)=>({...i,[c]:!0}),{})}:{}})},async findOne(r){let{model:s,where:t,select:n}=r,i=O(t);return await a[s].findFirst({where:i,...n?.length?{select:n.reduce((c,l)=>({...c,[l]:!0}),{})}:{}})},async findMany(r){let{model:s,where:t}=r,n=O(t);return await a[s].findMany({where:n})},async update(r){let{model:s,where:t,update:n}=r,i=O(t);return await a[s].update({where:i,data:n})},async delete(r){let{model:s,where:t}=r,n=O(t);return await a[s].delete({where:n})},async createSchema(r,s){let t=C(r),n=s||"./prisma/schema.prisma",i=K(E.join(process.cwd(),n)),c="";return i?c=await W.readFile(E.join(process.cwd(),n),"utf-8"):c=X(o),{code:H(c,d=>{for(let p in t){let b=function(y,h){if(y==="string")return h?"String?":"String";if(y==="number")return h?"Int?":"Int";if(y==="boolean")return h?"Boolean?":"Boolean";if(y==="date")return h?"DateTime?":"DateTime"};var u=b;let g=t[p].fields,m=t[p].tableName,f=d.findByType("model",{name:m});!f&&d.model(m).field("id","String").attribute("id");for(let y in g){let h=g[y];if(f){let A=d.findByType("field",{name:y,within:f.properties});if(console.log(y,"exists"),A)continue}d.model(m).field(y,b(h.type,!h.required)),h.unique&&d.model(m).blockAttribute(`unique([${y}])`),h.references&&d.model(m).field(D(h.references.model),h.references.model).attribute(`relation(fields: [${y}], references: [${h.references.field}], onDelete: Cascade)`)}}}),fileName:n}}}},X=e=>`generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "${e}"
+  url      = ${e==="sqlite"?'"file:./dev.db"':'env("DATABASE_URL")'}
+}`;import{and as Q,eq as B,or as J}from"drizzle-orm";import*as P from"prettier";import{existsSync as Y}from"fs";import Z from"fs/promises";function T(e,o){let a=Object.keys(o).find(r=>{let s=o[r].name;return s===s});if(!a)throw new Error("Model not found");return o[a]}function q(e,o){if(!e)return[];if(e.length===1){let i=e[0];return i?[B(o[i.field],i.value)]:[]}let a=e.filter(i=>i.connector==="AND"||!i.connector),r=e.filter(i=>i.connector==="OR"),s=Q(...a.map(i=>B(o[i.field],i.value))),t=J(...r.map(i=>B(o[i.field],i.value))),n=[];return a.length&&n.push(s),r.length&&n.push(t),n}var ut=(e,o)=>{let a=o?.schema||e._.schema;if(!a)throw new x("Drizzle adapter failed to initialize. Schema not found. Please provide a schema object in the adapter options object.");let r=o?.provider;return{id:"drizzle",async create(s){let{model:t,data:n}=s,i=T(t,a);return(await e.insert(i).values(n).returning())[0]},async findOne(s){let{model:t,where:n,select:i}=s,c=T(t,a),l=q(n,c),d=null;return i?.length?d=await e.select(...i.map(u=>({[u]:c[u]}))).from(c).where(...l):d=await e.select().from(c).where(...l),d.length?d[0]:null},async findMany(s){let{model:t,where:n}=s,i=T(t,a),c=n?q(n,i):[];return await e.select().from(i).findMany(...c)},async update(s){let{model:t,where:n,update:i}=s,c=T(t,a),l=q(n,c);return(await e.update(c).set(i).where(...l).returning())[0]},async delete(s){let{model:t,where:n}=s,i=T(t,a),c=q(n,i);return(await e.delete(i).where(...c))[0]},async createSchema(s,t){let n=C(s),i=t||"./schema.ts",c=r!=="sqlite"?"timestamp, boolean":"",l=r==="mysql"?"int":"integer",d="",u=Y(i);if(u){let m=await Z.readFile(i,"utf-8");m.includes("import")?d=m:d=`import { ${r}Table, text, ${l}, ${c} } from "drizzle-orm/${r}-core";
+				`}else d=`import { ${r}Table, text, ${l}, ${c} } from "drizzle-orm/${r}-core";
+			`;for(let m in n){let y=function(A,w){if(w==="string")return`text('${A}')`;if(w==="number")return`${l}('${A}')`;if(w==="boolean")return r==="sqlite"?`integer('${A}', {
+								mode: "boolean"
+							})`:`boolean('${A}')`;if(w==="date")return r==="sqlite"?`integer('${A}', {
+								mode: "timestamp"
+							})`:`timestamp('${A}')`};var g=y;let b=n[m].tableName,f=n[m].fields,h=`export const ${m} = ${r}Table("${b}", {
+					id: text("id").primaryKey(),
+					${Object.keys(f).map(A=>{let w=f[A];return`${A}: ${y(A,w.type)}${w.required?".notNull()":""}${w.unique?".unique()":""}${w.references?`.references(()=> ${w.references.model}.${w.references.field})`:""}`}).join()}
+				});`;d+=`
+${h}
+`}return{code:await P.format(d,{semi:!0,parser:"typescript",tabWidth:4}),fileName:i,append:u}}}};function $(e){if(!e)return{};if(e.length===1){let n=e[0];return n?{[n.field]:n.value}:void 0}let o=e.filter(n=>n.connector==="AND"||!n.connector),a=e.filter(n=>n.connector==="OR"),r=o.map(n=>({[n.field]:n.operator==="eq"||!n.operator?n.value:{[n.field]:n.value}})),s=a.map(n=>({[n.field]:n.value})),t={};return r.length&&(t={...t,$and:r}),s.length&&(t={...t,$or:s}),t}function S(e){let{_id:o,...a}=e;return a}function ee(e){return e.reduce((a,r)=>(a[r]=1,a),{})}var pt=e=>{let o=e;return{id:"mongodb",async create(a){let{model:r,data:s}=a,i={id:(await o.collection(r).insertOne({...s})).insertedId,...s};return S(i)},async findOne(a){let{model:r,where:s,select:t}=a,n=$(s),i={};t&&(i=ee(t));let l=(await o.collection(r).find({...n},{projection:i}).toArray())[0];return l?S(l):null},async findMany(a){let{model:r,where:s}=a,t=$(s),n=await o.collection(r).findMany(t);return S(n)},async update(a){let{model:r,where:s,update:t}=a,n=$(s),i=await o.collection(r).findOneAndUpdate(n,{$set:t},{returnDocument:"after"});return S(i)},async delete(a){let{model:r,where:s}=a,t=$(s);return await o.collection(r).findOneAndDelete(t)}}};import"kysely";function te(e){return e.plugins?.flatMap(a=>Object.keys(a.schema||{}).map(r=>{let t=(a.schema||{})[r];if(!t?.disableMigration)return{tableName:r,fields:t?.fields}}).filter(r=>r!==void 0))||[]}function _(e){let o=C(e),a=te(e);return[o.user,o.session,o.account,...a].reduce((s,t)=>(s[t.tableName]={fields:{...s[t.tableName]?.fields,...t.fields}},s),{})}import{Kysely as re}from"kysely";import{MysqlDialect as M,PostgresDialect as L,SqliteDialect as F}from"kysely";var ne=async e=>{if(!e.database)return;if("createDriver"in e.database)return e.database;let o;if("provider"in e.database){let a=e.database.provider,r=e.database?.url?.trim();if(a==="postgres"){let t=(await import("pg").catch(n=>{throw new x("Please install `pg` to use postgres database")})).Pool;o=new L({pool:new t({connectionString:r})})}if(a==="mysql")try{let{createPool:s}=await import("mysql2/promise").catch(i=>{throw new x("Please install `mysql2` to use mysql database")}),t=new URL(r),n=s({host:t.hostname,user:t.username,password:t.password,database:t.pathname.split("/")[1],port:Number(t.port)});o=new M({pool:n})}catch(s){throw s instanceof TypeError?new x("Invalid database URL"):s}if(a==="sqlite")try{let s=await import("better-sqlite3"),t=s.default||s;if(!t)throw new x("Failed to import better-sqlite3. Make sure `better-sqlite3` is properly installed.");let n=new t(r);o=new F({database:n})}catch(s){throw console.error(s),new x("Failed to initialize SQLite. Make sure `better-sqlite3` is properly installed.")}}return o},I=async e=>{let o=await ne(e);return o&&new re({dialect:o})},U=e=>{if("provider"in e.database)return e.database.provider;if("dialect"in e.database){if(e.database.dialect instanceof L)return"postgres";if(e.database.dialect instanceof M)return"mysql";if(e.database.dialect instanceof F)return"sqlite"}return"sqlite"};var oe={string:["character varying","text"],number:["int4","integer","bigint","smallint","numeric","real","double precision"],boolean:["bool","boolean"],date:["timestamp","date"]},se={string:["varchar","text"],number:["integer","int","bigint","smallint","decimal","float","double"],boolean:["boolean"],date:["date","datetime"]},ae={string:["TEXT"],number:["INTEGER","REAL"],boolean:["INTEGER","BOOLEAN"],date:["DATE","INTEGER"]},ie={postgres:oe,mysql:se,sqlite:ae};function ce(e,o,a){return ie[a][o].map(n=>n.toLowerCase()).includes(e.toLowerCase())}async function j(e){let o=_(e),a=U(e),r=await I(e);r||(N.error("Invalid database configuration."),process.exit(1));let s=await r.introspection.getTables(),t=[],n=[];for(let[u,p]of Object.entries(o)){let g=s.find(b=>b.name===u);if(!g){let b=t.findIndex(h=>h.table===u),f={table:u,fields:p.fields,order:p.order||1/0},y=t.findIndex(h=>(h.order||1/0)>f.order);y===-1?b===-1?t.push(f):t[b].fields={...t[b].fields,...p.fields}:t.splice(y,0,f);continue}let m={};for(let[b,f]of Object.entries(p.fields)){let y=g.columns.find(h=>h.name===b);if(!y){m[b]=f;continue}ce(y.dataType,f.type,a)||N.warn(`Field ${b} in table ${u} has a different type in the database. Expected ${f.type} but got ${y.dataType}.`)}Object.keys(m).length>0&&n.push({table:u,fields:m,order:p.order||1/0})}let i=[];function c(u){let p={string:"text",boolean:"boolean",number:"integer",date:"date"};return a==="mysql"&&u==="string"?"varchar(255)":p[u]}if(n.length)for(let u of n)for(let[p,g]of Object.entries(u.fields)){let m=c(g.type),b=r.schema.alterTable(u.table).addColumn(p,m,f=>(f=g.required!==!1?f.notNull():f,g.references&&(f=f.references(`${g.references.model}.${g.references.field}`)),f));i.push(b)}if(t.length)for(let u of t){let p=r.schema.createTable(u.table).addColumn("id",c("string"),g=>g.primaryKey());for(let[g,m]of Object.entries(u.fields)){let b=c(m.type);p=p.addColumn(g,b,f=>(f=m.required!==!1?f.notNull():f,m.references&&(f=f.references(`${m.references.model}.${m.references.field}`)),m.unique&&(f=f.unique()),f))}i.push(p)}async function l(){for(let u of i)await u.execute()}async function d(){return i.map(p=>p.compile().sql).join(`;
+
+`)}return{toBeCreated:t,toBeAdded:n,runMigrations:l,compileMigrations:d}}function v(e){if(!e)return{and:null,or:null};let o=e?.filter(r=>r.connector==="AND"||!r.connector).reduce((r,s)=>({...r,[s.field]:s.value}),{}),a=e?.filter(r=>r.connector==="OR").reduce((r,s)=>({...r,[s.field]:s.value}),{});return{and:Object.keys(o).length?o:null,or:Object.keys(a).length?a:null}}function R(e,o,a){for(let r in e)e[r]===0&&o[r]?.type==="boolean"&&a?.boolean&&(e[r]=!1),e[r]===1&&o[r]?.type==="boolean"&&a?.boolean&&(e[r]=!0),o[r]?.type==="date"&&(e[r]instanceof Date||(e[r]=new Date(e[r])));return e}function z(e,o){for(let a in e)typeof e[a]=="boolean"&&o?.boolean&&(e[a]=e[a]?1:0),e[a]instanceof Date&&(e[a]=e[a].toISOString());return e}var St=(e,o)=>({id:"kysely",async create(a){let{model:r,data:s,select:t}=a;o?.transform&&(s=z(s,o.transform));let n=await e.insertInto(r).values(s).returningAll().executeTakeFirst();if(o?.transform){let i=o.transform.schema[r];n=i?R(s,i,o.transform):n}return t?.length&&(n=n?t.reduce((c,l)=>n?.[l]?{...c,[l]:n[l]}:c,{}):null),n},async findOne(a){let{model:r,where:s,select:t}=a,{and:n,or:i}=v(s),c=e.selectFrom(r).selectAll();i&&(c=c.where(d=>d.or(i))),n&&(c=c.where(d=>d.and(n)));let l=await c.executeTakeFirst();if(t?.length&&(l=l?t.reduce((u,p)=>l?.[p]?{...u,[p]:l[p]}:u,{}):null),o?.transform){let d=o.transform.schema[r];return l=l&&d?R(l,d,o.transform):l,l||null}return l||null},async findMany(a){let{model:r,where:s}=a,t=e.selectFrom(r),{and:n,or:i}=v(s);n&&(t=t.where(l=>l.and(n))),i&&(t=t.where(l=>l.or(i)));let c=await t.selectAll().execute();if(o?.transform){let l=o.transform.schema[r];return l?c.map(d=>R(d,l,o.transform)):c}return c},async update(a){let{model:r,where:s,update:t}=a,{and:n,or:i}=v(s);o?.transform&&(t=z(t,o.transform));let c=e.updateTable(r).set(t);n&&(c=c.where(d=>d.and(n))),i&&(c=c.where(d=>d.or(i)));let l=await c.returningAll().executeTakeFirst()||null;if(o?.transform){let d=o.transform.schema[r];return d?R(l,d,o.transform):l}return l},async delete(a){let{model:r,where:s}=a,{and:t,or:n}=v(s),i=e.deleteFrom(r);t&&(i=i.where(c=>c.and(t))),n&&(i=i.where(c=>c.or(n))),await i.execute()},async createSchema(a){let{compileMigrations:r}=await j(a);return console.log(r),{code:await r(),fileName:`./better-auth_migrations/${new Date().toISOString()}.sql`}}});export{ut as drizzleAdapter,St as kyselyAdapter,pt as mongodbAdapter,nt as prismaAdapter};

package/dist/api.d.ts

@@ -1,9 +1,7 @@
-export { A as AuthEndpoint, b as AuthMiddleware, x as callbackOAuth, U as changePassword, a as createAuthEndpoint, c as createAuthMiddleware, O as createEmailVerificationToken, _ as csrfMiddleware, X as error, L as forgetPassword, M as forgetPasswordCallback, W as getCSRFToken, t as getEndpoints, y as getSession, z as getSessionFromCtx, D as listSessions, Y as ok, o as optionsMiddleware, N as resetPassword, E as revokeSession, J as revokeSessions, u as router, Q as sendVerificationEmail, C as sessionMiddleware, V as setPassword, w as signInEmail, v as signInOAuth, K as signOut, Z as signUpEmail, T as updateUser, S as verifyEmail } from './index-D_ohe9r9.js';
+export { A as AuthEndpoint, b as AuthMiddleware, y as callbackOAuth, X as changePassword, a as createAuthEndpoint, c as createAuthMiddleware, Q as createEmailVerificationToken, a1 as csrfMiddleware, _ as error, M as forgetPassword, N as forgetPasswordCallback, Z as getCSRFToken, u as getEndpoints, z as getSession, C as getSessionFromCtx, E as listSessions, $ as ok, o as optionsMiddleware, O as resetPassword, J as revokeSession, K as revokeSessions, v as router, T as sendVerificationEmail, D as sessionMiddleware, Y as setPassword, x as signInEmail, w as signInOAuth, L as signOut, a0 as signUpEmail, V as updateUser, U as verifyEmail } from './index-gO-yM4kI.js';
 import 'zod';
 import './helper-C1ihmerM.js';
 import 'better-call';
 import 'kysely';
-import './schema-D9o3OF80.js';
-import './social.js';
+import './index-CE92ti2Z.js';
 import 'arctic';
-import './adapter-D-m9-hQp.js';

package/dist/api.js

@@ -1,5 +1,5 @@
-var Je=Object.defineProperty,Ze=Object.defineProperties;var Ke=Object.getOwnPropertyDescriptors;var te=Object.getOwnPropertySymbols;var Qe=Object.prototype.hasOwnProperty,Xe=Object.prototype.propertyIsEnumerable;var re=(e,t,n)=>t in e?Je(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,g=(e,t)=>{for(var n in t||(t={}))Qe.call(t,n)&&re(e,n,t[n]);if(te)for(var n of te(t))Xe.call(t,n)&&re(e,n,t[n]);return e},A=(e,t)=>Ze(e,Ke(t));var a=(e,t,n)=>new Promise((o,r)=>{var s=c=>{try{d(n.next(c))}catch(u){r(u)}},i=c=>{try{d(n.throw(c))}catch(u){r(u)}},d=c=>c.done?o(c.value):Promise.resolve(c.value).then(s,i);d((n=n.apply(e,t)).next())});import{APIError as Ft,createRouter as Gt}from"better-call";import{APIError as se}from"better-call";import{z as ie}from"zod";import{xchacha20poly1305 as Qt}from"@noble/ciphers/chacha";import{bytesToHex as Yt,hexToBytes as er,utf8ToBytes as tr}from"@noble/ciphers/utils";import{managedNonce as or}from"@noble/ciphers/webcrypto";import{sha256 as sr}from"@noble/hashes/sha256";function M(e,t){return a(this,null,function*(){let n=new TextEncoder,o={name:"HMAC",hash:"SHA-256"},r=yield crypto.subtle.importKey("raw",n.encode(e),o,!1,["sign","verify"]),s=yield crypto.subtle.sign(o.name,r,n.encode(t));return btoa(String.fromCharCode(...new Uint8Array(s)))})}import{createEndpointCreator as Ye,createMiddleware as oe,createMiddlewareCreator as et}from"better-call";var ne=oe(()=>a(void 0,null,function*(){return{}})),H=et({use:[ne,oe(()=>a(void 0,null,function*(){return{}}))]}),f=Ye({use:[ne]});var ae=H({body:ie.object({csrfToken:ie.string().optional()}).optional()},e=>a(void 0,null,function*(){var d,c,u,l;if(((d=e.request)==null?void 0:d.method)!=="POST"||(c=e.context.options.advanced)!=null&&c.disableCSRFCheck)return;let t=new URL(e.request.url);if(t.origin===new URL(e.context.baseURL).origin||(u=e.context.options.trustedOrigins)!=null&&u.includes(t.origin))return;let n=(l=e.body)==null?void 0:l.csrfToken,o=yield e.getSignedCookie(e.context.authCookies.csrfToken.name,e.context.secret),[r,s]=(o==null?void 0:o.split("!"))||[null,null];if(!n||!o||!r||!s||o!==n)throw e.setCookie(e.context.authCookies.csrfToken.name,"",{maxAge:0}),new se("UNAUTHORIZED",{message:"Invalid CSRF Token"});let i=yield M(e.context.secret,r);if(s!==i)throw e.setCookie(e.context.authCookies.csrfToken.name,"",{maxAge:0}),new se("UNAUTHORIZED",{message:"Invalid CSRF Token"})}));import{APIError as I}from"better-call";import{generateCodeVerifier as Tt}from"oslo/oauth2";import{z as P}from"zod";import"arctic";import{parseJWT as nt}from"oslo/jwt";import"@better-fetch/fetch";var D=class extends Error{constructor(t,n,o){super(t),this.name="BetterAuthError",this.message=t,this.cause=n}};import{OAuth2Tokens as rt}from"arctic";function tt(e){try{return new URL(e).pathname!=="/"}catch(t){throw new D(`Invalid base URL: ${e}. Please provide a valid base URL.`)}}function G(e,t="/api/auth"){return tt(e)?e:(t=t.startsWith("/")?t:`/${t}`,`${e}${t}`)}function de(e,t){if(e)return G(e,t);let n=(process==null?void 0:process.env)||{},o=n.BETTER_AUTH_URL||n.NEXT_PUBLIC_BETTER_AUTH_URL||n.PUBLIC_BETTER_AUTH_URL||n.NUXT_PUBLIC_BETTER_AUTH_URL||n.NUXT_PUBLIC_AUTH_URL||(n.BASE_URL!=="/"?n.BASE_URL:void 0);if(o)return G(o,t);if(typeof window!="undefined")return G(window.location.origin,t)}import{betterFetch as ot}from"@better-fetch/fetch";function w(e,t){return t||`${de()}/callback/${e}`}function k(s){return a(this,arguments,function*({code:e,codeVerifier:t,redirectURI:n,options:o,tokenEndpoint:r}){let i=new URLSearchParams;i.set("grant_type","authorization_code"),i.set("code",e),t&&i.set("code_verifier",t),i.set("redirect_uri",n),i.set("client_id",o.clientId),i.set("client_secret",o.clientSecret);let{data:d,error:c}=yield ot(r,{method:"POST",body:i,headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json","user-agent":"better-auth"}});if(c)throw c;return new rt(d)})}var ce=e=>{let t="https://appleid.apple.com/auth/token";return{id:"apple",name:"Apple",createAuthorizationURL({state:o,scopes:r,redirectURI:s}){let i=r||["email","name","openid"];return new URL(`https://appleid.apple.com/auth/authorize?client_id=${e.clientId}&response_type=code&redirect_uri=${s||e.redirectURI}&scope=${i.join(" ")}&state=${o}`)},validateAuthorizationCode:(o,r,s)=>a(void 0,null,function*(){return k({code:o,codeVerifier:r,redirectURI:s||w("apple",e.redirectURI),options:e,tokenEndpoint:t})}),getUserInfo(o){return a(this,null,function*(){var s;let r=(s=nt(o.idToken()))==null?void 0:s.payload;return r?{user:{id:r.sub,name:r.name,email:r.email,emailVerified:r.email_verified==="true"},data:r}:null})}}};import{betterFetch as st}from"@better-fetch/fetch";import{Discord as it}from"arctic";var le=e=>{let t=new it(e.clientId,e.clientSecret,w("discord",e.redirectURI));return{id:"discord",name:"Discord",createAuthorizationURL({state:o,scopes:r}){let s=r||["email"];return t.createAuthorizationURL(o,s)},validateAuthorizationCode:(o,r,s)=>a(void 0,null,function*(){return k({code:o,codeVerifier:r,redirectURI:s||w("discord",e.redirectURI),options:e,tokenEndpoint:"https://discord.com/api/oauth2/token"})}),getUserInfo(o){return a(this,null,function*(){let{data:r,error:s}=yield st("https://discord.com/api/users/@me",{auth:{type:"Bearer",token:o.accessToken()}});return s?null:{user:{id:r.id,name:r.display_name||r.username||"",email:r.email,emailVerified:r.verified},data:r}})}}};import{betterFetch as at}from"@better-fetch/fetch";import{Facebook as dt}from"arctic";var ue=e=>{let t=new dt(e.clientId,e.clientSecret,w("facebook",e.redirectURI));return{id:"facebook",name:"Facebook",createAuthorizationURL({state:o,scopes:r}){let s=r||["email","public_profile"];return t.createAuthorizationURL(o,s)},validateAuthorizationCode:(o,r,s)=>a(void 0,null,function*(){return k({code:o,codeVerifier:r,redirectURI:s||w("facebook",e.redirectURI),options:e,tokenEndpoint:"https://graph.facebook.com/v16.0/oauth/access_token"})}),getUserInfo(o){return a(this,null,function*(){let{data:r,error:s}=yield at("https://graph.facebook.com/me",{auth:{type:"Bearer",token:o.accessToken()}});return s?null:{user:{id:r.id,name:r.name,email:r.email,emailVerified:r.email_verified},data:r}})}}};import{betterFetch as pe}from"@better-fetch/fetch";import{GitHub as ct}from"arctic";var me=({clientId:e,clientSecret:t,redirectURI:n})=>{let o=new ct(e,t,w("github",n));return{id:"github",name:"Github",createAuthorizationURL({state:s,scopes:i}){let d=i||["user:email"];return o.createAuthorizationURL(s,d)},validateAuthorizationCode:s=>a(void 0,null,function*(){return yield o.validateAuthorizationCode(s)}),getUserInfo(s){return a(this,null,function*(){var u,l,p,m;let{data:i,error:d}=yield pe("https://api.github.com/user",{auth:{type:"Bearer",token:s.accessToken()}});if(d)return null;let c=!1;if(!i.email){let{data:y,error:U}=yield pe("https://api.github.com/user/emails",{auth:{type:"Bearer",token:s.accessToken()}});U||(i.email=(l=(u=y.find(T=>T.primary))!=null?u:y[0])==null?void 0:l.email,c=(m=(p=y.find(T=>T.email===i.email))==null?void 0:p.verified)!=null?m:!1)}return{user:{id:i.id,name:i.name,email:i.email,image:i.avatar_url,emailVerified:c,createdAt:new Date,updatedAt:new Date},data:i}})}}};import{Google as pt}from"arctic";import{parseJWT as mt}from"oslo/jwt";import{createConsola as lt}from"consola";var $=lt({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),ut=e=>({log:(...t)=>{!(e!=null&&e.disabled)&&$.log("",...t)},error:(...t)=>{!(e!=null&&e.disabled)&&$.error("",...t)},warn:(...t)=>{!(e!=null&&e.disabled)&&$.warn("",...t)},info:(...t)=>{!(e!=null&&e.disabled)&&$.info("",...t)},debug:(...t)=>{!(e!=null&&e.disabled)&&$.debug("",...t)},box:(...t)=>{!(e!=null&&e.disabled)&&$.box("",...t)},success:(...t)=>{!(e!=null&&e.disabled)&&$.success("",...t)},break:(...t)=>{!(e!=null&&e.disabled)&&console.log(`
-`)}}),_=ut();var fe=e=>{let t=new pt(e.clientId,e.clientSecret,w("google",e.redirectURI));return{id:"google",name:"Google",createAuthorizationURL({state:o,scopes:r,codeVerifier:s,redirectURI:i}){if(!e.clientId||!e.clientSecret)throw _.error("Client Id and Client Secret is required for Google. Make sure to provide them in the options."),new D("CLIENT_ID_AND_SECRET_REQUIRED");if(!s)throw new D("codeVerifier is required for Google");let d=r||["email","profile"];return t.createAuthorizationURL(o,s,d)},validateAuthorizationCode:(o,r,s)=>a(void 0,null,function*(){return k({code:o,codeVerifier:r,redirectURI:s||w("google",e.redirectURI),options:e,tokenEndpoint:"https://oauth2.googleapis.com/token"})}),getUserInfo(o){return a(this,null,function*(){var s;if(!o.idToken)return null;let r=(s=mt(o.idToken()))==null?void 0:s.payload;return{user:{id:r.sub,name:r.name,email:r.email,image:r.picture,emailVerified:r.email_verified},data:r}})}}};import{betterFetch as ft}from"@better-fetch/fetch";import{Spotify as gt}from"arctic";var ge=e=>{let t=new gt(e.clientId,e.clientSecret,w("spotify",e.redirectURI));return{id:"spotify",name:"Spotify",createAuthorizationURL({state:o,scopes:r}){let s=r||["user-read-email"];return t.createAuthorizationURL(o,s)},validateAuthorizationCode:(o,r,s)=>a(void 0,null,function*(){return k({code:o,codeVerifier:r,redirectURI:s||w("spotify",e.redirectURI),options:e,tokenEndpoint:"https://accounts.spotify.com/api/token"})}),getUserInfo(o){return a(this,null,function*(){var i;let{data:r,error:s}=yield ft("https://api.spotify.com/v1/me",{method:"GET",headers:{Authorization:`Bearer ${o.accessToken()}`}});return s?null:{user:{id:r.id,name:r.display_name,email:r.email,image:(i=r.images[0])==null?void 0:i.url,emailVerified:!1},data:r}})}}};import{betterFetch as ht}from"@better-fetch/fetch";import{Twitch as yt}from"arctic";var he=e=>{let t=new yt(e.clientId,e.clientSecret,w("twitch",e.redirectURI));return{id:"twitch",name:"Twitch",createAuthorizationURL({state:o,scopes:r}){let s=r||["activity:write","read"];return t.createAuthorizationURL(o,s)},validateAuthorizationCode:(o,r,s)=>a(void 0,null,function*(){return k({code:o,codeVerifier:r,redirectURI:s||w("twitch",e.redirectURI),options:e,tokenEndpoint:"https://id.twitch.tv/oauth2/token"})}),getUserInfo(o){return a(this,null,function*(){let{data:r,error:s}=yield ht("https://api.twitch.tv/helix/users",{method:"GET",headers:{Authorization:`Bearer ${o.accessToken()}`}});return s?null:{user:{id:r.sub,name:r.preferred_username,email:r.email,image:r.picture,emailVerified:!1},data:r}})}}};import{betterFetch as wt}from"@better-fetch/fetch";import{Twitter as bt}from"arctic";var ye=e=>{let t=new bt(e.clientId,e.clientSecret,w("twitter",e.redirectURI));return{id:"twitter",name:"Twitter",createAuthorizationURL(o){let r=o.scopes||["account_info.read"];return t.createAuthorizationURL(o.state,o.codeVerifier,r)},validateAuthorizationCode:(o,r,s)=>a(void 0,null,function*(){return k({code:o,codeVerifier:r,redirectURI:s||w("twitch",e.redirectURI),options:e,tokenEndpoint:"https://id.twitch.tv/oauth2/token"})}),getUserInfo(o){return a(this,null,function*(){let{data:r,error:s}=yield wt("https://api.x.com/2/users/me?user.fields=profile_image_url",{method:"GET",headers:{Authorization:`Bearer ${o.accessToken()}`}});return s||!r.data.email?null:{user:{id:r.data.id,name:r.data.name,email:r.data.email,image:r.data.profile_image_url,emailVerified:r.data.verified||!1},data:r}})}}};import"arctic";var At={apple:ce,discord:le,facebook:ue,github:me,google:fe,spotify:ge,twitch:he,twitter:ye},we=Object.keys(At);import{generateState as kt}from"oslo/oauth2";import{z as q}from"zod";function be(e,t,n){let o=kt();return{state:JSON.stringify({code:o,callbackURL:e,currentURL:t,dontRememberMe:n}),code:o}}function W(e){return q.object({code:q.string(),callbackURL:q.string().optional(),currentURL:q.string().optional(),dontRememberMe:q.boolean().optional()}).safeParse(JSON.parse(e))}import{APIError as Rt}from"better-call";var Ae=(e,t=!1)=>{let n=new Date;return new Date(n.getTime()+(t?e*1e3:e))};import{TimeSpan as Jo}from"oslo";function S(e,t,n,o){return a(this,null,function*(){let r=e.context.authCookies.sessionToken.options;r.maxAge=n?void 0:r.maxAge,yield e.setSignedCookie(e.context.authCookies.sessionToken.name,t,e.context.secret,r),n&&(yield e.setSignedCookie(e.context.authCookies.dontRememberToken.name,"true",e.context.secret,e.context.authCookies.dontRememberToken.options))})}function V(e){e.setCookie(e.context.authCookies.sessionToken.name,"",{maxAge:0}),e.setCookie(e.context.authCookies.dontRememberToken.name,"",{maxAge:0})}import{z as ke}from"zod";function N(e){let t="127.0.0.1";if(process.env.NODE_ENV==="test")return t;let n=["x-client-ip","x-forwarded-for","cf-connecting-ip","fastly-client-ip","x-real-ip","x-cluster-client-ip","x-forwarded","forwarded-for","forwarded"];for(let o of n){let r=e.headers.get(o);if(typeof r=="string"){let s=r.split(",")[0].trim();if(s)return s}}return null}var J=new Map;function Ut(e,t){if(!e.request)return"";let{method:n,url:o,headers:r}=e.request,s=e.request.headers.get("User-Agent")||"",i=N(e.request)||"",d=JSON.stringify(r);return`${n}:${o}:${d}:${s}:${i}:${t}`}var Z=()=>f("/session",{method:"GET",requireHeaders:!0},e=>a(void 0,null,function*(){try{let t=yield e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);if(!t)return e.json(null,{status:401});let n=Ut(e,t),o=J.get(n);if(o){if(o.expiresAt>Date.now())return e.json(o.data);J.delete(n)}let r=yield e.context.internalAdapter.findSession(t);if(!r||r.session.expiresAt<new Date)return V(e),r&&(yield e.context.internalAdapter.deleteSession(r.session.id)),e.json(null,{status:401});if(yield e.getSignedCookie(e.context.authCookies.dontRememberToken.name,e.context.secret))return e.json(r);let i=e.context.sessionConfig.expiresIn,d=e.context.sessionConfig.updateAge;if(r.session.expiresAt.valueOf()-i*1e3+d*1e3<=Date.now()){let l=yield e.context.internalAdapter.updateSession(r.session.id,{expiresAt:Ae(e.context.sessionConfig.expiresIn,!0)});if(!l)return V(e),e.json(null,{status:401});let p=(l.expiresAt.valueOf()-Date.now())/1e3;return yield S(e,l.id,!1,{maxAge:p}),e.json({session:l,user:r.user})}return J.set(n,{data:r,expiresAt:Date.now()+5e3}),e.json(r)}catch(t){return e.context.logger.error(t),e.json(null,{status:500})}})),K=e=>a(void 0,null,function*(){return yield Z()(A(g({},e),{_flag:void 0}))}),B=H(e=>a(void 0,null,function*(){let t=yield K(e);if(!(t!=null&&t.session))throw new Rt("UNAUTHORIZED");return{session:t}})),Re=()=>f("/user/list-sessions",{method:"GET",use:[B],requireHeaders:!0},e=>a(void 0,null,function*(){let n=(yield e.context.adapter.findMany({model:e.context.tables.session.tableName,where:[{field:"userId",value:e.context.session.user.id}]})).filter(o=>o.expiresAt>new Date);return e.json(n)})),Ue=f("/user/revoke-session",{method:"POST",body:ke.object({id:ke.string()}),use:[B],requireHeaders:!0},e=>a(void 0,null,function*(){let t=e.body.id,n=yield e.context.internalAdapter.findSession(t);if(!n)return e.json(null,{status:400});if(n.session.userId!==e.context.session.user.id)return e.json(null,{status:403});try{yield e.context.internalAdapter.deleteSession(t)}catch(o){return e.context.logger.error(o),e.json(null,{status:500})}return e.json({status:!0})})),Te=f("/user/revoke-sessions",{method:"POST",use:[B],requireHeaders:!0},e=>a(void 0,null,function*(){try{yield e.context.internalAdapter.deleteSessions(e.context.session.user.id)}catch(t){return e.context.logger.error(t),e.json(null,{status:500})}return e.json({status:!0})}));var Pe=f("/sign-in/social",{method:"POST",requireHeaders:!0,query:P.object({currentURL:P.string().optional()}).optional(),body:P.object({callbackURL:P.string().optional(),provider:P.enum(we),dontRememberMe:P.boolean().default(!1).optional()})},e=>a(void 0,null,function*(){var i,d,c,u;let t=e.context.socialProviders.find(l=>l.id===e.body.provider);if(!t)throw e.context.logger.error("Provider not found. Make sure to add the provider to your auth config",{provider:e.body.provider}),new I("NOT_FOUND",{message:"Provider not found"});let n=e.context.authCookies,o=(i=e.query)!=null&&i.currentURL?new URL((d=e.query)==null?void 0:d.currentURL):null,r=(c=e.body.callbackURL)!=null&&c.startsWith("http")?e.body.callbackURL:`${o==null?void 0:o.origin}${e.body.callbackURL||""}`,s=be(r||(o==null?void 0:o.origin)||e.context.baseURL,(u=e.query)==null?void 0:u.currentURL);try{yield e.setSignedCookie(n.state.name,s.code,e.context.secret,n.state.options);let l=Tt();yield e.setSignedCookie(n.pkCodeVerifier.name,l,e.context.secret,n.pkCodeVerifier.options);let p=t.createAuthorizationURL({state:s.state,codeVerifier:l});return p.searchParams.set("redirect_uri",`${e.context.baseURL}/callback/${e.body.provider}`),{url:p.toString(),state:s.state,codeVerifier:l,redirect:!0}}catch(l){throw new I("INTERNAL_SERVER_ERROR")}})),ve=f("/sign-in/email",{method:"POST",body:P.object({email:P.string().email(),password:P.string(),callbackURL:P.string().optional(),dontRememberMe:P.boolean().default(!1).optional()})},e=>a(void 0,null,function*(){var l,p;if(!((p=(l=e.context.options)==null?void 0:l.emailAndPassword)!=null&&p.enabled))throw e.context.logger.error("Email and password is not enabled. Make sure to enable it in the options on you `auth.ts` file. Check `https://better-auth.com/docs/authentication/email-password` for more!"),new I("BAD_REQUEST",{message:"Email and password is not enabled"});let t=yield K(e);t&&(yield e.context.internalAdapter.deleteSession(t.session.id));let{email:n,password:o}=e.body;if(!P.string().email().safeParse(n).success)throw new I("BAD_REQUEST",{message:"Invalid email"});let s=yield e.context.internalAdapter.findUserByEmail(n);if(!s)throw yield e.context.password.hash(o),e.context.logger.error("User not found",{email:n}),new I("UNAUTHORIZED",{message:"Invalid email or password"});let i=s.accounts.find(m=>m.providerId==="credential");if(!i)throw e.context.logger.error("Credential account not found",{email:n}),new I("UNAUTHORIZED",{message:"Invalid email or password"});let d=i==null?void 0:i.password;if(!d)throw e.context.logger.error("Password not found",{email:n}),new I("UNAUTHORIZED",{message:"Unexpected error"});if(!(yield e.context.password.verify(d,o)))throw e.context.logger.error("Invalid password"),new I("UNAUTHORIZED",{message:"Invalid email or password"});let u=yield e.context.internalAdapter.createSession(s.user.id,e.headers,e.body.dontRememberMe);if(!u)throw e.context.logger.error("Failed to create session"),new I("INTERNAL_SERVER_ERROR");return yield S(e,u.id,e.body.dontRememberMe),e.json({user:s.user,session:u,redirect:!!e.body.callbackURL,url:e.body.callbackURL})}));import{APIError as St}from"better-call";import{z as F}from"zod";import{z as h}from"zod";var wn=h.object({id:h.string(),providerId:h.string(),accountId:h.string(),userId:h.string(),accessToken:h.string().nullable().optional(),refreshToken:h.string().nullable().optional(),idToken:h.string().nullable().optional(),expiresAt:h.date().nullable().optional(),password:h.string().optional().nullable()}),Se=h.object({id:h.string(),email:h.string().transform(e=>e.toLowerCase()),emailVerified:h.boolean().default(!1),name:h.string(),image:h.string().optional(),createdAt:h.date().default(new Date),updatedAt:h.date().default(new Date)}),bn=h.object({id:h.string(),userId:h.string(),expiresAt:h.date(),ipAddress:h.string().optional(),userAgent:h.string().optional()});import{alphabet as Pt,generateRandomString as vt}from"oslo/crypto";var xe=()=>vt(36,Pt("a-z","0-9"));var C={isAction:!1};function Q(e){let t=e.accessToken(),n=e.hasRefreshToken()?e.refreshToken():void 0,o;try{o=e.accessTokenExpiresAt()}catch(r){}return{accessToken:t,refreshToken:n,expiresAt:o}}var _e=f("/callback/:id",{method:"GET",query:F.object({state:F.string(),code:F.string().optional(),error:F.string().optional()}),metadata:C},e=>a(void 0,null,function*(){var U,T,O;if(e.query.error||!e.query.code){let R=((U=W(e.query.state).data)==null?void 0:U.callbackURL)||`${e.context.baseURL}/error`;throw e.context.logger.error(e.query.error,e.params.id),e.redirect(`${R}?error=${e.query.error||"oAuth_code_missing"}`)}let t=e.context.socialProviders.find(b=>b.id===e.params.id);if(!t)throw e.context.logger.error("Oauth provider with id",e.params.id,"not found"),e.redirect(`${e.context.baseURL}/error?error=oauth_provider_not_found`);let n=yield e.getSignedCookie(e.context.authCookies.pkCodeVerifier.name,e.context.secret),o;try{o=yield t.validateAuthorizationCode(e.query.code,n,`${e.context.baseURL}/callback/${t.id}`)}catch(b){throw e.context.logger.error(b),e.redirect(`${e.context.baseURL}/error?error=oauth_code_verification_failed`)}let r=yield t.getUserInfo(o).then(b=>b==null?void 0:b.user),s=xe(),i=Se.safeParse(A(g({},r),{id:s})),d=W(e.query.state);if(!d.success)throw e.context.logger.error("Unable to parse state"),e.redirect(`${e.context.baseURL}/error?error=invalid_state_parameter`);let{callbackURL:c,currentURL:u,dontRememberMe:l}=d.data;if(!r||i.success===!1)throw e.redirect(`${e.context.baseURL}/error?error=oauth_validation_failed`);if(!c)throw e.redirect(`${e.context.baseURL}/error?error=oauth_callback_url_not_found`);let p=yield e.context.internalAdapter.findUserByEmail(r.email),m=p==null?void 0:p.user.id;if(p){let b=p.accounts.find(j=>j.providerId===t.id),R=(O=(T=e.context.options.account)==null?void 0:T.accountLinking)==null?void 0:O.trustedProviders,z=R?R.includes(t.id):!0;if(!b&&(!r.emailVerified||!z)){let j;try{j=new URL(u||c),j.searchParams.set("error","account_not_linked")}catch(Jt){throw e.redirect(`${e.context.baseURL}/error?error=account_not_linked`)}throw e.redirect(j.toString())}if(!b)try{yield e.context.internalAdapter.linkAccount(g({providerId:t.id,accountId:r.id,id:`${t.id}:${r.id}`,userId:p.user.id},Q(o)))}catch(j){throw console.log(j),e.redirect(`${e.context.baseURL}/error?error=failed_linking_account`)}}else try{yield e.context.internalAdapter.createOAuthUser(i.data,A(g({},Q(o)),{id:`${t.id}:${r.id}`,providerId:t.id,accountId:r.id,userId:s}))}catch(b){let R=new URL(u||c);throw R.searchParams.set("error","unable_to_create_user"),e.setHeader("Location",R.toString()),e.redirect(R.toString())}if(!m&&!s)throw new St("INTERNAL_SERVER_ERROR",{message:"Unable to create user"});let y=yield e.context.internalAdapter.createSession(m||s,e.request,l);if(!y){let b=new URL(u||c);throw b.searchParams.set("error","unable_to_create_session"),e.redirect(b.toString())}try{yield S(e,y.id,l)}catch(b){e.context.logger.error("Unable to set session cookie",b);let R=new URL(u||c);throw R.searchParams.set("error","unable_to_create_session"),e.redirect(R.toString())}throw e.redirect(c)}));import{z as X}from"zod";var Ie=f("/sign-out",{method:"POST",body:X.optional(X.object({callbackURL:X.string().optional()}))},e=>a(void 0,null,function*(){var n,o;let t=yield e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);return t?(yield e.context.internalAdapter.deleteSession(t),V(e),e.json(null,{body:{redirect:!!((n=e.body)!=null&&n.callbackURL),url:(o=e.body)==null?void 0:o.callbackURL}})):e.json(null)}));import{TimeSpan as xt}from"oslo";import{createJWT as _t,parseJWT as It}from"oslo/jwt";import{validateJWT as Ee}from"oslo/jwt";import{z as v}from"zod";var Le=f("/forget-password",{method:"POST",body:v.object({email:v.string().email(),redirectTo:v.string()})},e=>a(void 0,null,function*(){var s;if(!((s=e.context.options.emailAndPassword)!=null&&s.sendResetPassword))return e.context.logger.error("Reset password isn't enabled.Please pass an emailAndPassword.sendResetPasswordToken function to your auth config!"),e.json(null,{status:400,statusText:"RESET_PASSWORD_EMAIL_NOT_SENT",body:{message:"Reset password isn't enabled"}});let{email:t}=e.body,n=yield e.context.internalAdapter.findUserByEmail(t);if(!n)return e.json({status:!1},{body:{status:!0}});let o=yield _t("HS256",Buffer.from(e.context.secret),{email:n.user.email,redirectTo:e.body.redirectTo},{expiresIn:new xt(1,"h"),issuer:"better-auth",subject:"forget-password",audiences:[n.user.email],includeIssuedTimestamp:!0}),r=`${e.context.baseURL}/reset-password/${o}`;return yield e.context.options.emailAndPassword.sendResetPassword(r,n.user),e.json({status:!0})})),Oe=f("/reset-password/:token",{method:"GET"},e=>a(void 0,null,function*(){var s;let{token:t}=e.params,n,o=v.object({email:v.string(),redirectTo:v.string()});try{if(n=yield Ee("HS256",Buffer.from(e.context.secret),t),!n.expiresAt||n.expiresAt<new Date)throw Error("Token expired")}catch(i){let d=It(t),c=o.safeParse(d==null?void 0:d.payload);throw c.success?e.redirect(`${(s=c.data)==null?void 0:s.redirectTo}?error=invalid_token`):e.redirect(`${e.context.baseURL}/error?error=invalid_token`)}let{redirectTo:r}=o.parse(n.payload);throw e.redirect(`${r}?token=${t}`)})),Ce=f("/reset-password",{method:"POST",query:v.object({currentURL:v.string()}).optional(),body:v.object({newPassword:v.string(),callbackURL:v.string().optional()})},e=>a(void 0,null,function*(){var o,r,s;let t=(o=e.query)==null?void 0:o.currentURL.split("?token=")[1];if(!t)return e.json({error:"Invalid token",data:null},{status:400,statusText:"INVALID_TOKEN",body:{message:"Invalid token"}});let{newPassword:n}=e.body;try{let i=yield Ee("HS256",Buffer.from(e.context.secret),t),d=v.string().email().parse(i.payload.email),c=yield e.context.internalAdapter.findUserByEmail(d);if(!c)return e.json({error:"User not found",data:null},{status:400,body:{message:"failed to reset password"}});if(n.length<(((r=e.context.options.emailAndPassword)==null?void 0:r.minPasswordLength)||8)||n.length>(((s=e.context.options.emailAndPassword)==null?void 0:s.maxPasswordLength)||32))return e.json({data:null,error:"password is too short or too long"},{status:400,statusText:"INVALID_PASSWORD_LENGTH",body:{message:"password is too short or too long"}});let u=yield e.context.password.hash(n);return(yield e.context.internalAdapter.updatePassword(c.user.id,u))?e.json({error:null,data:{status:!0,url:e.body.callbackURL,redirect:!!e.body.callbackURL}},{body:{status:!0,url:e.body.callbackURL,redirect:!!e.body.callbackURL}}):e.json(null,{status:400,statusText:"USER_NOT_FOUND",body:{message:"User doesn't have a credential account"}})}catch(i){return console.log(i),e.json({error:"Invalid token",data:null},{status:400,statusText:"INVALID_TOKEN",body:{message:"Invalid token"}})}}));import{TimeSpan as Et}from"oslo";import{createJWT as Lt,validateJWT as Ot}from"oslo/jwt";import{z as x}from"zod";function Y(e,t){return a(this,null,function*(){return yield Lt("HS256",Buffer.from(e),{email:t.toLowerCase()},{expiresIn:new Et(1,"h"),issuer:"better-auth",subject:"verify-email",audiences:[t],includeIssuedTimestamp:!0})})}var je=f("/send-verification-email",{method:"POST",query:x.object({currentURL:x.string().optional()}).optional(),body:x.object({email:x.string().email(),callbackURL:x.string().optional()})},e=>a(void 0,null,function*(){var r,s;if(!((r=e.context.options.emailAndPassword)!=null&&r.sendVerificationEmail))return e.context.logger.error("Verification email isn't enabled. Pass `sendVerificationEmail` in `emailAndPassword` options to enable it."),e.json(null,{status:400,statusText:"VERIFICATION_EMAIL_NOT_SENT",body:{message:"Verification email isn't enabled"}});let{email:t}=e.body,n=yield Y(e.context.secret,t),o=`${e.context.baseURL}/verify-email?token=${n}&callbackURL=${e.body.callbackURL||((s=e.query)==null?void 0:s.currentURL)||"/"}`;return yield e.context.options.emailAndPassword.sendVerificationEmail(t,o,n),e.json({status:!0})})),De=f("/verify-email",{method:"GET",query:x.object({token:x.string(),callbackURL:x.string().optional()})},e=>a(void 0,null,function*(){let{token:t}=e.query,n;try{n=yield Ot("HS256",Buffer.from(e.context.secret),t)}catch(d){return e.context.logger.error("Failed to verify email",d),e.json(null,{status:400,statusText:"INVALID_TOKEN",body:{message:"Invalid token"}})}let r=x.object({email:x.string().email()}).parse(n.payload),s=yield e.context.internalAdapter.findUserByEmail(r.email);if(!s)return e.json(null,{status:400,statusText:"USER_NOT_FOUND",body:{message:"User not found"}});if(!s.accounts.find(d=>d.providerId==="credential"))throw e.redirect;if(yield e.context.internalAdapter.updateUserByEmail(r.email,{emailVerified:!0}),e.query.callbackURL)throw console.log("Redirecting to",e.query.callbackURL),e.redirect("/");return e.json({status:!0})}));import{z as E}from"zod";import{alphabet as Ct,generateRandomString as jt}from"oslo/crypto";import"better-call";var $e=f("/user/update",{method:"POST",body:E.object({name:E.string().optional(),image:E.string().optional()}),use:[B]},e=>a(void 0,null,function*(){let{name:t,image:n}=e.body,o=e.context.session;if(!n&&!t)return e.json(o.user);let r=yield e.context.internalAdapter.updateUserByEmail(o.user.email,{name:t,image:n});return e.json(r)})),Be=f("/user/change-password",{method:"POST",body:E.object({newPassword:E.string(),currentPassword:E.string(),revokeOtherSessions:E.boolean().optional()}),use:[B]},e=>a(void 0,null,function*(){let{newPassword:t,currentPassword:n,revokeOtherSessions:o}=e.body,r=e.context.session,s=e.context.password.config.minPasswordLength;if(t.length<s)return e.context.logger.error("Password is too short"),e.json(null,{status:400,body:{message:"Password is too short"}});let i=e.context.password.config.maxPasswordLength;if(t.length>i)return e.context.logger.error("Password is too long"),e.json(null,{status:400,body:{message:"Password is too long"}});let c=(yield e.context.internalAdapter.findAccounts(r.user.id)).find(p=>p.providerId==="credential"&&p.password);if(!c||!c.password)return e.json(null,{status:400,body:{message:"User does not have a password"}});let u=yield e.context.password.hash(t);if(!(yield e.context.password.verify(c.password,n)))return e.json(null,{status:400,body:{message:"Invalid password"}});if(yield e.context.internalAdapter.updateAccount(c.id,{password:u}),o){yield e.context.internalAdapter.deleteSessions(r.user.id);let p=yield e.context.internalAdapter.createSession(r.user.id,e.headers);if(!p)return e.json(null,{status:500,body:{message:"Failed to create session"}});yield S(e,p.id)}return e.json(r.user)})),ze=f("/user/set-password",{method:"POST",body:E.object({newPassword:E.string()}),use:[B]},e=>a(void 0,null,function*(){let{newPassword:t}=e.body,n=e.context.session,o=e.context.password.config.minPasswordLength;if(t.length<o)return e.context.logger.error("Password is too short"),e.json(null,{status:400,body:{message:"Password is too short"}});let r=e.context.password.config.maxPasswordLength;if(t.length>r)return e.context.logger.error("Password is too long"),e.json(null,{status:400,body:{message:"Password is too long"}});let i=(yield e.context.internalAdapter.findAccounts(n.user.id)).find(c=>c.providerId==="credential"&&c.password),d=yield e.context.password.hash(t);return i?e.json(null,{status:400,body:{message:"User already has a password"}}):(yield e.context.internalAdapter.linkAccount({id:jt(32,Ct("a-z","0-9","A-Z")),userId:n.user.id,providerId:"credential",accountId:n.user.id,password:d}),e.json(n.user))}));import{alphabet as Dt,generateRandomString as $t}from"oslo/crypto";var qe=f("/csrf",{method:"GET",metadata:C},e=>a(void 0,null,function*(){let t=yield e.getSignedCookie(e.context.authCookies.csrfToken.name,e.context.secret);if(t)return{csrfToken:t};let n=$t(32,Dt("a-z","0-9","A-Z")),o=yield M(e.context.secret,n),r=`${n}!${o}`;return yield e.setSignedCookie(e.context.authCookies.csrfToken.name,r,e.context.secret,e.context.authCookies.csrfToken.options),{csrfToken:n}}));var Bt=(e="Unknown")=>`<!DOCTYPE html>
+import{APIError as Et,createRouter as Ot}from"better-call";import{APIError as Q}from"better-call";import{z as X}from"zod";import{xchacha20poly1305 as $t}from"@noble/ciphers/chacha";import{bytesToHex as zt,hexToBytes as qt,utf8ToBytes as Vt}from"@noble/ciphers/utils";import{managedNonce as Mt}from"@noble/ciphers/webcrypto";import{sha256 as Ft}from"@noble/hashes/sha256";async function j(e,t){let o=new TextEncoder,r={name:"HMAC",hash:"SHA-256"},n=await crypto.subtle.importKey("raw",o.encode(e),r,!1,["sign","verify"]),s=await crypto.subtle.sign(r.name,n,o.encode(t));return btoa(String.fromCharCode(...new Uint8Array(s)))}import{createEndpointCreator as qe,createMiddleware as Z,createMiddlewareCreator as Ve}from"better-call";var K=Z(async()=>({})),D=Ve({use:[K,Z(async()=>({}))]}),l=qe({use:[K]});var Y=D({body:X.object({csrfToken:X.string().optional()}).optional()},async e=>{if(e.request?.method!=="POST"||e.context.options.advanced?.disableCSRFCheck)return;let t=new URL(e.request.url);if(t.origin===new URL(e.context.baseURL).origin||e.context.options.trustedOrigins?.includes(t.origin))return;let o=e.body?.csrfToken,r=await e.getSignedCookie(e.context.authCookies.csrfToken.name,e.context.secret),[n,s]=r?.split("!")||[null,null];if(!o||!r||!n||!s||r!==o)throw e.setCookie(e.context.authCookies.csrfToken.name,"",{maxAge:0}),new Q("UNAUTHORIZED",{message:"Invalid CSRF Token"});let i=await j(e.context.secret,n);if(s!==i)throw e.setCookie(e.context.authCookies.csrfToken.name,"",{maxAge:0}),new Q("UNAUTHORIZED",{message:"Invalid CSRF Token"})});import{APIError as v}from"better-call";import{generateCodeVerifier as ut}from"oslo/oauth2";import{z as A}from"zod";import"arctic";import{parseJWT as Fe}from"oslo/jwt";import"@better-fetch/fetch";var I=class extends Error{constructor(t,o,r){super(t),this.name="BetterAuthError",this.message=t,this.cause=o}};import{OAuth2Tokens as Me}from"arctic";function Ne(e){try{return new URL(e).pathname!=="/"}catch{throw new I(`Invalid base URL: ${e}. Please provide a valid base URL.`)}}function q(e,t="/api/auth"){return Ne(e)?e:(t=t.startsWith("/")?t:`/${t}`,`${e}${t}`)}function ee(e,t){if(e)return q(e,t);let o=process?.env||{},r=o.BETTER_AUTH_URL||o.NEXT_PUBLIC_BETTER_AUTH_URL||o.PUBLIC_BETTER_AUTH_URL||o.NUXT_PUBLIC_BETTER_AUTH_URL||o.NUXT_PUBLIC_AUTH_URL||(o.BASE_URL!=="/"?o.BASE_URL:void 0);if(r)return q(r,t);if(typeof window<"u")return q(window.location.origin,t)}import{betterFetch as He}from"@better-fetch/fetch";function f(e,t){return t||`${ee()}/callback/${e}`}async function y({code:e,codeVerifier:t,redirectURI:o,options:r,tokenEndpoint:n}){let s=new URLSearchParams;s.set("grant_type","authorization_code"),s.set("code",e),t&&s.set("code_verifier",t),s.set("redirect_uri",o),s.set("client_id",r.clientId),s.set("client_secret",r.clientSecret);let{data:i,error:a}=await He(n,{method:"POST",body:s,headers:{"content-type":"application/x-www-form-urlencoded",accept:"application/json","user-agent":"better-auth"}});if(a)throw a;return new Me(i)}var te=e=>{let t="https://appleid.apple.com/auth/token";return{id:"apple",name:"Apple",createAuthorizationURL({state:o,scopes:r,redirectURI:n}){let s=r||["email","name","openid"];return new URL(`https://appleid.apple.com/auth/authorize?client_id=${e.clientId}&response_type=code&redirect_uri=${n||e.redirectURI}&scope=${s.join(" ")}&state=${o}`)},validateAuthorizationCode:async(o,r,n)=>y({code:o,codeVerifier:r,redirectURI:n||f("apple",e.redirectURI),options:e,tokenEndpoint:t}),async getUserInfo(o){let r=Fe(o.idToken())?.payload;return r?{user:{id:r.sub,name:r.name,email:r.email,emailVerified:r.email_verified==="true"},data:r}:null}}};import{betterFetch as Ge}from"@better-fetch/fetch";import{Discord as We}from"arctic";var re=e=>{let t=new We(e.clientId,e.clientSecret,f("discord",e.redirectURI));return{id:"discord",name:"Discord",createAuthorizationURL({state:o,scopes:r}){let n=r||["email"];return t.createAuthorizationURL(o,n)},validateAuthorizationCode:async(o,r,n)=>y({code:o,codeVerifier:r,redirectURI:n||f("discord",e.redirectURI),options:e,tokenEndpoint:"https://discord.com/api/oauth2/token"}),async getUserInfo(o){let{data:r,error:n}=await Ge("https://discord.com/api/users/@me",{auth:{type:"Bearer",token:o.accessToken()}});return n?null:{user:{id:r.id,name:r.display_name||r.username||"",email:r.email,emailVerified:r.verified},data:r}}}};import{betterFetch as Je}from"@better-fetch/fetch";import{Facebook as Ze}from"arctic";var oe=e=>{let t=new Ze(e.clientId,e.clientSecret,f("facebook",e.redirectURI));return{id:"facebook",name:"Facebook",createAuthorizationURL({state:o,scopes:r}){let n=r||["email","public_profile"];return t.createAuthorizationURL(o,n)},validateAuthorizationCode:async(o,r,n)=>y({code:o,codeVerifier:r,redirectURI:n||f("facebook",e.redirectURI),options:e,tokenEndpoint:"https://graph.facebook.com/v16.0/oauth/access_token"}),async getUserInfo(o){let{data:r,error:n}=await Je("https://graph.facebook.com/me",{auth:{type:"Bearer",token:o.accessToken()}});return n?null:{user:{id:r.id,name:r.name,email:r.email,emailVerified:r.email_verified},data:r}}}};import{betterFetch as ne}from"@better-fetch/fetch";import{GitHub as Ke}from"arctic";var se=({clientId:e,clientSecret:t,redirectURI:o})=>{let r=new Ke(e,t,f("github",o));return{id:"github",name:"Github",createAuthorizationURL({state:n,scopes:s}){let i=s||["user:email"];return r.createAuthorizationURL(n,i)},validateAuthorizationCode:async n=>await r.validateAuthorizationCode(n),async getUserInfo(n){let{data:s,error:i}=await ne("https://api.github.com/user",{auth:{type:"Bearer",token:n.accessToken()}});if(i)return null;let a=!1;if(!s.email){let{data:d,error:u}=await ne("https://api.github.com/user/emails",{auth:{type:"Bearer",token:n.accessToken()}});u||(s.email=(d.find(c=>c.primary)??d[0])?.email,a=d.find(c=>c.email===s.email)?.verified??!1)}return{user:{id:s.id,name:s.name,email:s.email,image:s.avatar_url,emailVerified:a,createdAt:new Date,updatedAt:new Date},data:s}}}};import{Google as Ye}from"arctic";import{parseJWT as et}from"oslo/jwt";import{createConsola as Qe}from"consola";var L=Qe({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),Xe=e=>({log:(...t)=>{!e?.disabled&&L.log("",...t)},error:(...t)=>{!e?.disabled&&L.error("",...t)},warn:(...t)=>{!e?.disabled&&L.warn("",...t)},info:(...t)=>{!e?.disabled&&L.info("",...t)},debug:(...t)=>{!e?.disabled&&L.debug("",...t)},box:(...t)=>{!e?.disabled&&L.box("",...t)},success:(...t)=>{!e?.disabled&&L.success("",...t)},break:(...t)=>{!e?.disabled&&console.log(`
+`)}}),P=Xe();var ie=e=>{let t=new Ye(e.clientId,e.clientSecret,f("google",e.redirectURI));return{id:"google",name:"Google",createAuthorizationURL({state:o,scopes:r,codeVerifier:n,redirectURI:s}){if(!e.clientId||!e.clientSecret)throw P.error("Client Id and Client Secret is required for Google. Make sure to provide them in the options."),new I("CLIENT_ID_AND_SECRET_REQUIRED");if(!n)throw new I("codeVerifier is required for Google");let i=r||["email","profile"];return t.createAuthorizationURL(o,n,i)},validateAuthorizationCode:async(o,r,n)=>y({code:o,codeVerifier:r,redirectURI:n||f("google",e.redirectURI),options:e,tokenEndpoint:"https://oauth2.googleapis.com/token"}),async getUserInfo(o){if(!o.idToken)return null;let r=et(o.idToken())?.payload;return{user:{id:r.sub,name:r.name,email:r.email,image:r.picture,emailVerified:r.email_verified},data:r}}}};import{betterFetch as tt}from"@better-fetch/fetch";import{Spotify as rt}from"arctic";var ae=e=>{let t=new rt(e.clientId,e.clientSecret,f("spotify",e.redirectURI));return{id:"spotify",name:"Spotify",createAuthorizationURL({state:o,scopes:r}){let n=r||["user-read-email"];return t.createAuthorizationURL(o,n)},validateAuthorizationCode:async(o,r,n)=>y({code:o,codeVerifier:r,redirectURI:n||f("spotify",e.redirectURI),options:e,tokenEndpoint:"https://accounts.spotify.com/api/token"}),async getUserInfo(o){let{data:r,error:n}=await tt("https://api.spotify.com/v1/me",{method:"GET",headers:{Authorization:`Bearer ${o.accessToken()}`}});return n?null:{user:{id:r.id,name:r.display_name,email:r.email,image:r.images[0]?.url,emailVerified:!1},data:r}}}};import{betterFetch as ot}from"@better-fetch/fetch";import{Twitch as nt}from"arctic";var de=e=>{let t=new nt(e.clientId,e.clientSecret,f("twitch",e.redirectURI));return{id:"twitch",name:"Twitch",createAuthorizationURL({state:o,scopes:r}){let n=r||["activity:write","read"];return t.createAuthorizationURL(o,n)},validateAuthorizationCode:async(o,r,n)=>y({code:o,codeVerifier:r,redirectURI:n||f("twitch",e.redirectURI),options:e,tokenEndpoint:"https://id.twitch.tv/oauth2/token"}),async getUserInfo(o){let{data:r,error:n}=await ot("https://api.twitch.tv/helix/users",{method:"GET",headers:{Authorization:`Bearer ${o.accessToken()}`}});return n?null:{user:{id:r.sub,name:r.preferred_username,email:r.email,image:r.picture,emailVerified:!1},data:r}}}};import{betterFetch as st}from"@better-fetch/fetch";import{Twitter as it}from"arctic";var ce=e=>{let t=new it(e.clientId,e.clientSecret,f("twitter",e.redirectURI));return{id:"twitter",name:"Twitter",createAuthorizationURL(o){let r=o.scopes||["account_info.read"];return t.createAuthorizationURL(o.state,o.codeVerifier,r)},validateAuthorizationCode:async(o,r,n)=>y({code:o,codeVerifier:r,redirectURI:n||f("twitch",e.redirectURI),options:e,tokenEndpoint:"https://id.twitch.tv/oauth2/token"}),async getUserInfo(o){let{data:r,error:n}=await st("https://api.x.com/2/users/me?user.fields=profile_image_url",{method:"GET",headers:{Authorization:`Bearer ${o.accessToken()}`}});return n||!r.data.email?null:{user:{id:r.data.id,name:r.data.name,email:r.data.email,image:r.data.profile_image_url,emailVerified:r.data.verified||!1},data:r}}}};import"arctic";var at={apple:te,discord:re,facebook:oe,github:se,google:ie,spotify:ae,twitch:de,twitter:ce},le=Object.keys(at);import{generateState as dt}from"oslo/oauth2";import{z as O}from"zod";function ue(e,t,o){let r=dt();return{state:JSON.stringify({code:r,callbackURL:e,currentURL:t,dontRememberMe:o}),code:r}}function V(e){return O.object({code:O.string(),callbackURL:O.string().optional(),currentURL:O.string().optional(),dontRememberMe:O.boolean().optional()}).safeParse(JSON.parse(e))}import{APIError as ct}from"better-call";var pe=(e,t=!1)=>{let o=new Date;return new Date(o.getTime()+(t?e*1e3:e))};import{TimeSpan as Ro}from"oslo";async function U(e,t,o,r){let n=e.context.authCookies.sessionToken.options;n.maxAge=o?void 0:n.maxAge,await e.setSignedCookie(e.context.authCookies.sessionToken.name,t,e.context.secret,n),o&&await e.setSignedCookie(e.context.authCookies.dontRememberToken.name,"true",e.context.secret,e.context.authCookies.dontRememberToken.options)}function C(e){e.setCookie(e.context.authCookies.sessionToken.name,"",{maxAge:0}),e.setCookie(e.context.authCookies.dontRememberToken.name,"",{maxAge:0})}import{z as me}from"zod";function $(e){let t="127.0.0.1";if(process.env.NODE_ENV==="test")return t;let o=["x-client-ip","x-forwarded-for","cf-connecting-ip","fastly-client-ip","x-real-ip","x-cluster-client-ip","x-forwarded","forwarded-for","forwarded"];for(let r of o){let n=e.headers.get(r);if(typeof n=="string"){let s=n.split(",")[0].trim();if(s)return s}}return null}var N=new Map;function lt(e,t){if(!e.request)return"";let{method:o,url:r,headers:n}=e.request,s=e.request.headers.get("User-Agent")||"",i=$(e.request)||"",a=JSON.stringify(n);return`${o}:${r}:${a}:${s}:${i}:${t}`}var M=()=>l("/session",{method:"GET",requireHeaders:!0},async e=>{try{let t=await e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);if(!t)return e.json(null,{status:401});let o=lt(e,t),r=N.get(o);if(r){if(r.expiresAt>Date.now())return e.json(r.data);N.delete(o)}let n=await e.context.internalAdapter.findSession(t);if(!n||n.session.expiresAt<new Date)return C(e),n&&await e.context.internalAdapter.deleteSession(n.session.id),e.json(null,{status:401});if(await e.getSignedCookie(e.context.authCookies.dontRememberToken.name,e.context.secret))return e.json(n);let i=e.context.sessionConfig.expiresIn,a=e.context.sessionConfig.updateAge;if(n.session.expiresAt.valueOf()-i*1e3+a*1e3<=Date.now()){let c=await e.context.internalAdapter.updateSession(n.session.id,{expiresAt:pe(e.context.sessionConfig.expiresIn,!0)});if(!c)return C(e),e.json(null,{status:401});let m=(c.expiresAt.valueOf()-Date.now())/1e3;return await U(e,c.id,!1,{maxAge:m}),e.json({session:c,user:n.user})}return N.set(o,{data:n,expiresAt:Date.now()+5e3}),e.json(n)}catch(t){return e.context.logger.error(t),e.json(null,{status:500})}}),H=async e=>await M()({...e,_flag:void 0}),E=D(async e=>{let t=await H(e);if(!t?.session)throw new ct("UNAUTHORIZED");return{session:t}}),fe=()=>l("/user/list-sessions",{method:"GET",use:[E],requireHeaders:!0},async e=>{let o=(await e.context.adapter.findMany({model:e.context.tables.session.tableName,where:[{field:"userId",value:e.context.session.user.id}]})).filter(r=>r.expiresAt>new Date);return e.json(o)}),ge=l("/user/revoke-session",{method:"POST",body:me.object({id:me.string()}),use:[E],requireHeaders:!0},async e=>{let t=e.body.id,o=await e.context.internalAdapter.findSession(t);if(!o)return e.json(null,{status:400});if(o.session.userId!==e.context.session.user.id)return e.json(null,{status:403});try{await e.context.internalAdapter.deleteSession(t)}catch(r){return e.context.logger.error(r),e.json(null,{status:500})}return e.json({status:!0})}),he=l("/user/revoke-sessions",{method:"POST",use:[E],requireHeaders:!0},async e=>{try{await e.context.internalAdapter.deleteSessions(e.context.session.user.id)}catch(t){return e.context.logger.error(t),e.json(null,{status:500})}return e.json({status:!0})});var ye=l("/sign-in/social",{method:"POST",requireHeaders:!0,query:A.object({currentURL:A.string().optional()}).optional(),body:A.object({callbackURL:A.string().optional(),provider:A.enum(le),dontRememberMe:A.boolean().default(!1).optional()})},async e=>{let t=e.context.socialProviders.find(i=>i.id===e.body.provider);if(!t)throw e.context.logger.error("Provider not found. Make sure to add the provider to your auth config",{provider:e.body.provider}),new v("NOT_FOUND",{message:"Provider not found"});let o=e.context.authCookies,r=e.query?.currentURL?new URL(e.query?.currentURL):null,n=e.body.callbackURL?.startsWith("http")?e.body.callbackURL:`${r?.origin}${e.body.callbackURL||""}`,s=ue(n||r?.origin||e.context.baseURL,e.query?.currentURL);try{await e.setSignedCookie(o.state.name,s.code,e.context.secret,o.state.options);let i=ut();await e.setSignedCookie(o.pkCodeVerifier.name,i,e.context.secret,o.pkCodeVerifier.options);let a=t.createAuthorizationURL({state:s.state,codeVerifier:i});return a.searchParams.set("redirect_uri",`${e.context.baseURL}/callback/${e.body.provider}`),{url:a.toString(),state:s.state,codeVerifier:i,redirect:!0}}catch{throw new v("INTERNAL_SERVER_ERROR")}}),we=l("/sign-in/email",{method:"POST",body:A.object({email:A.string().email(),password:A.string(),callbackURL:A.string().optional(),dontRememberMe:A.boolean().default(!1).optional()})},async e=>{if(!e.context.options?.emailAndPassword?.enabled)throw e.context.logger.error("Email and password is not enabled. Make sure to enable it in the options on you `auth.ts` file. Check `https://better-auth.com/docs/authentication/email-password` for more!"),new v("BAD_REQUEST",{message:"Email and password is not enabled"});let t=await H(e);t&&await e.context.internalAdapter.deleteSession(t.session.id);let{email:o,password:r}=e.body;if(!A.string().email().safeParse(o).success)throw new v("BAD_REQUEST",{message:"Invalid email"});let s=await e.context.internalAdapter.findUserByEmail(o);if(!s)throw await e.context.password.hash(r),e.context.logger.error("User not found",{email:o}),new v("UNAUTHORIZED",{message:"Invalid email or password"});let i=s.accounts.find(c=>c.providerId==="credential");if(!i)throw e.context.logger.error("Credential account not found",{email:o}),new v("UNAUTHORIZED",{message:"Invalid email or password"});let a=i?.password;if(!a)throw e.context.logger.error("Password not found",{email:o}),new v("UNAUTHORIZED",{message:"Unexpected error"});if(!await e.context.password.verify(a,r))throw e.context.logger.error("Invalid password"),new v("UNAUTHORIZED",{message:"Invalid email or password"});let u=await e.context.internalAdapter.createSession(s.user.id,e.headers,e.body.dontRememberMe);if(!u)throw e.context.logger.error("Failed to create session"),new v("INTERNAL_SERVER_ERROR");return await U(e,u.id,e.body.dontRememberMe),e.json({user:s.user,session:u,redirect:!!e.body.callbackURL,url:e.body.callbackURL})});import{APIError as ft}from"better-call";import{z as B}from"zod";import{z as p}from"zod";var No=p.object({id:p.string(),providerId:p.string(),accountId:p.string(),userId:p.string(),accessToken:p.string().nullable().optional(),refreshToken:p.string().nullable().optional(),idToken:p.string().nullable().optional(),expiresAt:p.date().nullable().optional(),password:p.string().optional().nullable()}),be=p.object({id:p.string(),email:p.string().transform(e=>e.toLowerCase()),emailVerified:p.boolean().default(!1),name:p.string(),image:p.string().optional(),createdAt:p.date().default(new Date),updatedAt:p.date().default(new Date)}),Mo=p.object({id:p.string(),userId:p.string(),expiresAt:p.date(),ipAddress:p.string().optional(),userAgent:p.string().optional()});import{alphabet as pt,generateRandomString as mt}from"oslo/crypto";var Ae=()=>mt(36,pt("a-z","0-9"));var _={isAction:!1};function F(e){let t=e.accessToken(),o=e.hasRefreshToken()?e.refreshToken():void 0,r;try{r=e.accessTokenExpiresAt()}catch{}return{accessToken:t,refreshToken:o,expiresAt:r}}var ke=l("/callback/:id",{method:"GET",query:B.object({state:B.string(),code:B.string().optional(),error:B.string().optional()}),metadata:_},async e=>{if(e.query.error||!e.query.code){let b=V(e.query.state).data?.callbackURL||`${e.context.baseURL}/error`;throw e.context.logger.error(e.query.error,e.params.id),e.redirect(`${b}?error=${e.query.error||"oAuth_code_missing"}`)}let t=e.context.socialProviders.find(h=>h.id===e.params.id);if(!t)throw e.context.logger.error("Oauth provider with id",e.params.id,"not found"),e.redirect(`${e.context.baseURL}/error?error=oauth_provider_not_found`);let o=await e.getSignedCookie(e.context.authCookies.pkCodeVerifier.name,e.context.secret),r;try{r=await t.validateAuthorizationCode(e.query.code,o,`${e.context.baseURL}/callback/${t.id}`)}catch(h){throw e.context.logger.error(h),e.redirect(`${e.context.baseURL}/error?error=oauth_code_verification_failed`)}let n=await t.getUserInfo(r).then(h=>h?.user),s=Ae(),i=be.safeParse({...n,id:s}),a=V(e.query.state);if(!a.success)throw e.context.logger.error("Unable to parse state"),e.redirect(`${e.context.baseURL}/error?error=invalid_state_parameter`);let{callbackURL:d,currentURL:u,dontRememberMe:c}=a.data;if(!n||i.success===!1)throw e.redirect(`${e.context.baseURL}/error?error=oauth_validation_failed`);if(!d)throw e.redirect(`${e.context.baseURL}/error?error=oauth_callback_url_not_found`);let m=await e.context.internalAdapter.findUserByEmail(n.email),g=m?.user.id;if(m){let h=m.accounts.find(R=>R.providerId===t.id),b=e.context.options.account?.accountLinking?.trustedProviders,z=b?b.includes(t.id):!0;if(!h&&(!n.emailVerified||!z)){let R;try{R=new URL(u||d),R.searchParams.set("error","account_not_linked")}catch{throw e.redirect(`${e.context.baseURL}/error?error=account_not_linked`)}throw e.redirect(R.toString())}if(!h)try{await e.context.internalAdapter.linkAccount({providerId:t.id,accountId:n.id,id:`${t.id}:${n.id}`,userId:m.user.id,...F(r)})}catch(R){throw console.log(R),e.redirect(`${e.context.baseURL}/error?error=failed_linking_account`)}}else try{await e.context.internalAdapter.createOAuthUser(i.data,{...F(r),id:`${t.id}:${n.id}`,providerId:t.id,accountId:n.id,userId:s})}catch{let b=new URL(u||d);throw b.searchParams.set("error","unable_to_create_user"),e.setHeader("Location",b.toString()),e.redirect(b.toString())}if(!g&&!s)throw new ft("INTERNAL_SERVER_ERROR",{message:"Unable to create user"});let w=await e.context.internalAdapter.createSession(g||s,e.request,c);if(!w){let h=new URL(u||d);throw h.searchParams.set("error","unable_to_create_session"),e.redirect(h.toString())}try{await U(e,w.id,c)}catch(h){e.context.logger.error("Unable to set session cookie",h);let b=new URL(u||d);throw b.searchParams.set("error","unable_to_create_session"),e.redirect(b.toString())}throw e.redirect(d)});import{z as G}from"zod";var Re=l("/sign-out",{method:"POST",body:G.optional(G.object({callbackURL:G.string().optional()}))},async e=>{let t=await e.getSignedCookie(e.context.authCookies.sessionToken.name,e.context.secret);return t?(await e.context.internalAdapter.deleteSession(t),C(e),e.json(null,{body:{redirect:!!e.body?.callbackURL,url:e.body?.callbackURL}})):e.json(null)});import{TimeSpan as gt}from"oslo";import{createJWT as ht,parseJWT as yt}from"oslo/jwt";import{validateJWT as Ue}from"oslo/jwt";import{z as k}from"zod";var Te=l("/forget-password",{method:"POST",body:k.object({email:k.string().email(),redirectTo:k.string()})},async e=>{if(!e.context.options.emailAndPassword?.sendResetPassword)return e.context.logger.error("Reset password isn't enabled.Please pass an emailAndPassword.sendResetPasswordToken function to your auth config!"),e.json(null,{status:400,statusText:"RESET_PASSWORD_EMAIL_NOT_SENT",body:{message:"Reset password isn't enabled"}});let{email:t}=e.body,o=await e.context.internalAdapter.findUserByEmail(t);if(!o)return e.json({status:!1},{body:{status:!0}});let r=await ht("HS256",Buffer.from(e.context.secret),{email:o.user.email,redirectTo:e.body.redirectTo},{expiresIn:new gt(1,"h"),issuer:"better-auth",subject:"forget-password",audiences:[o.user.email],includeIssuedTimestamp:!0}),n=`${e.context.baseURL}/reset-password/${r}`;return await e.context.options.emailAndPassword.sendResetPassword(n,o.user),e.json({status:!0})}),Pe=l("/reset-password/:token",{method:"GET"},async e=>{let{token:t}=e.params,o,r=k.object({email:k.string(),redirectTo:k.string()});try{if(o=await Ue("HS256",Buffer.from(e.context.secret),t),!o.expiresAt||o.expiresAt<new Date)throw Error("Token expired")}catch{let i=yt(t),a=r.safeParse(i?.payload);throw a.success?e.redirect(`${a.data?.redirectTo}?error=invalid_token`):e.redirect(`${e.context.baseURL}/error?error=invalid_token`)}let{redirectTo:n}=r.parse(o.payload);throw e.redirect(`${n}?token=${t}`)}),ve=l("/reset-password",{method:"POST",query:k.object({currentURL:k.string()}).optional(),body:k.object({newPassword:k.string(),callbackURL:k.string().optional()})},async e=>{let t=e.query?.currentURL.split("?token=")[1];if(!t)return e.json({error:"Invalid token",data:null},{status:400,statusText:"INVALID_TOKEN",body:{message:"Invalid token"}});let{newPassword:o}=e.body;try{let r=await Ue("HS256",Buffer.from(e.context.secret),t),n=k.string().email().parse(r.payload.email),s=await e.context.internalAdapter.findUserByEmail(n);if(!s)return e.json({error:"User not found",data:null},{status:400,body:{message:"failed to reset password"}});if(o.length<(e.context.options.emailAndPassword?.minPasswordLength||8)||o.length>(e.context.options.emailAndPassword?.maxPasswordLength||32))return e.json({data:null,error:"password is too short or too long"},{status:400,statusText:"INVALID_PASSWORD_LENGTH",body:{message:"password is too short or too long"}});let i=await e.context.password.hash(o);return await e.context.internalAdapter.updatePassword(s.user.id,i)?e.json({error:null,data:{status:!0,url:e.body.callbackURL,redirect:!!e.body.callbackURL}},{body:{status:!0,url:e.body.callbackURL,redirect:!!e.body.callbackURL}}):e.json(null,{status:400,statusText:"USER_NOT_FOUND",body:{message:"User doesn't have a credential account"}})}catch(r){return console.log(r),e.json({error:"Invalid token",data:null},{status:400,statusText:"INVALID_TOKEN",body:{message:"Invalid token"}})}});import{TimeSpan as wt}from"oslo";import{createJWT as bt,validateJWT as At}from"oslo/jwt";import{z as T}from"zod";async function W(e,t){return await bt("HS256",Buffer.from(e),{email:t.toLowerCase()},{expiresIn:new wt(1,"h"),issuer:"better-auth",subject:"verify-email",audiences:[t],includeIssuedTimestamp:!0})}var xe=l("/send-verification-email",{method:"POST",query:T.object({currentURL:T.string().optional()}).optional(),body:T.object({email:T.string().email(),callbackURL:T.string().optional()})},async e=>{if(!e.context.options.emailAndPassword?.sendVerificationEmail)return e.context.logger.error("Verification email isn't enabled. Pass `sendVerificationEmail` in `emailAndPassword` options to enable it."),e.json(null,{status:400,statusText:"VERIFICATION_EMAIL_NOT_SENT",body:{message:"Verification email isn't enabled"}});let{email:t}=e.body,o=await W(e.context.secret,t),r=`${e.context.baseURL}/verify-email?token=${o}&callbackURL=${e.body.callbackURL||e.query?.currentURL||"/"}`;return await e.context.options.emailAndPassword.sendVerificationEmail(t,r,o),e.json({status:!0})}),Se=l("/verify-email",{method:"GET",query:T.object({token:T.string(),callbackURL:T.string().optional()})},async e=>{let{token:t}=e.query,o;try{o=await At("HS256",Buffer.from(e.context.secret),t)}catch(a){return e.context.logger.error("Failed to verify email",a),e.json(null,{status:400,statusText:"INVALID_TOKEN",body:{message:"Invalid token"}})}let n=T.object({email:T.string().email()}).parse(o.payload),s=await e.context.internalAdapter.findUserByEmail(n.email);if(!s)return e.json(null,{status:400,statusText:"USER_NOT_FOUND",body:{message:"User not found"}});if(!s.accounts.find(a=>a.providerId==="credential"))throw e.redirect;if(await e.context.internalAdapter.updateUserByEmail(n.email,{emailVerified:!0}),e.query.callbackURL)throw console.log("Redirecting to",e.query.callbackURL),e.redirect("/");return e.json({status:!0})});import{z as x}from"zod";import{alphabet as kt,generateRandomString as Rt}from"oslo/crypto";import"better-call";var _e=l("/user/update",{method:"POST",body:x.object({name:x.string().optional(),image:x.string().optional()}),use:[E]},async e=>{let{name:t,image:o}=e.body,r=e.context.session;if(!o&&!t)return e.json(r.user);let n=await e.context.internalAdapter.updateUserByEmail(r.user.email,{name:t,image:o});return e.json(n)}),Ie=l("/user/change-password",{method:"POST",body:x.object({newPassword:x.string(),currentPassword:x.string(),revokeOtherSessions:x.boolean().optional()}),use:[E]},async e=>{let{newPassword:t,currentPassword:o,revokeOtherSessions:r}=e.body,n=e.context.session,s=e.context.password.config.minPasswordLength;if(t.length<s)return e.context.logger.error("Password is too short"),e.json(null,{status:400,body:{message:"Password is too short"}});let i=e.context.password.config.maxPasswordLength;if(t.length>i)return e.context.logger.error("Password is too long"),e.json(null,{status:400,body:{message:"Password is too long"}});let d=(await e.context.internalAdapter.findAccounts(n.user.id)).find(m=>m.providerId==="credential"&&m.password);if(!d||!d.password)return e.json(null,{status:400,body:{message:"User does not have a password"}});let u=await e.context.password.hash(t);if(!await e.context.password.verify(d.password,o))return e.json(null,{status:400,body:{message:"Invalid password"}});if(await e.context.internalAdapter.updateAccount(d.id,{password:u}),r){await e.context.internalAdapter.deleteSessions(n.user.id);let m=await e.context.internalAdapter.createSession(n.user.id,e.headers);if(!m)return e.json(null,{status:500,body:{message:"Failed to create session"}});await U(e,m.id)}return e.json(n.user)}),Le=l("/user/set-password",{method:"POST",body:x.object({newPassword:x.string()}),use:[E]},async e=>{let{newPassword:t}=e.body,o=e.context.session,r=e.context.password.config.minPasswordLength;if(t.length<r)return e.context.logger.error("Password is too short"),e.json(null,{status:400,body:{message:"Password is too short"}});let n=e.context.password.config.maxPasswordLength;if(t.length>n)return e.context.logger.error("Password is too long"),e.json(null,{status:400,body:{message:"Password is too long"}});let i=(await e.context.internalAdapter.findAccounts(o.user.id)).find(d=>d.providerId==="credential"&&d.password),a=await e.context.password.hash(t);return i?e.json(null,{status:400,body:{message:"User already has a password"}}):(await e.context.internalAdapter.linkAccount({id:Rt(32,kt("a-z","0-9","A-Z")),userId:o.user.id,providerId:"credential",accountId:o.user.id,password:a}),e.json(o.user))});import{alphabet as Ut,generateRandomString as Tt}from"oslo/crypto";var Ee=l("/csrf",{method:"GET",metadata:_},async e=>{let t=await e.getSignedCookie(e.context.authCookies.csrfToken.name,e.context.secret);if(t)return{csrfToken:t};let o=Tt(32,Ut("a-z","0-9","A-Z")),r=await j(e.context.secret,o),n=`${o}!${r}`;return await e.setSignedCookie(e.context.authCookies.csrfToken.name,n,e.context.secret,e.context.authCookies.csrfToken.options),{csrfToken:o}});var Pt=(e="Unknown")=>`<!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8">
@@ -79,4 +79,4 @@ var Je=Object.defineProperty,Ze=Object.defineProperties;var Ke=Object.getOwnProp
         <div class="error-code">Error Code: <span id="errorCode">${e}</span></div>
     </div>
 </body>
-</html>`,Ve=f("/error",{method:"GET",metadata:C},e=>a(void 0,null,function*(){var n;let t=new URL(((n=e.request)==null?void 0:n.url)||"").searchParams.get("error")||"Unknown";return new Response(Bt(t),{headers:{"Content-Type":"text/html"}})}));var Me=f("/ok",{method:"GET",metadata:C},e=>a(void 0,null,function*(){return e.json({ok:!0})}));import{alphabet as He,generateRandomString as Ne}from"oslo/crypto";import{z as L}from"zod";var Fe=f("/sign-up/email",{method:"POST",query:L.object({currentURL:L.string().optional()}).optional(),body:L.object({name:L.string(),email:L.string(),password:L.string(),image:L.string().optional(),callbackURL:L.string().optional()})},e=>a(void 0,null,function*(){var m,y,U,T;if(!((m=e.context.options.emailAndPassword)!=null&&m.enabled))return e.json(null,{status:400,body:{message:"Email and password is not enabled"}});let{name:t,email:n,password:o,image:r}=e.body;if(!L.string().email().safeParse(n).success)return e.json(null,{status:400,body:{message:"Invalid email address"}});let i=e.context.password.config.minPasswordLength;if(o.length<i)return e.context.logger.error("Password is too short"),e.json(null,{status:400,body:{message:"Password is too short"}});let d=e.context.password.config.maxPasswordLength;if(o.length>d)return e.context.logger.error("Password is too long"),e.json(null,{status:400,body:{message:"Password is too long"}});let c=yield e.context.internalAdapter.findUserByEmail(n),u=yield e.context.password.hash(o);if(c!=null&&c.user)return e.json(null,{status:400,body:{message:"User already exists"}});let l=yield e.context.internalAdapter.createUser({id:Ne(32,He("a-z","0-9","A-Z")),email:n.toLowerCase(),name:t,image:r,emailVerified:!1,createdAt:new Date,updatedAt:new Date});if(!l)return e.json(null,{status:400,body:{message:"Could not create user"}});yield e.context.internalAdapter.linkAccount({id:Ne(32,He("a-z","0-9","A-Z")),userId:l.id,providerId:"credential",accountId:l.id,password:u});let p=yield e.context.internalAdapter.createSession(l.id,e.request);if(!p)return e.json(null,{status:400,body:{message:"Could not create session"}});if(yield S(e,p.id),e.context.options.emailAndPassword.sendEmailVerificationOnSignUp){let O=yield Y(e.context.secret,l.email),b=`${e.context.baseURL}/verify-email?token=${O}&callbackURL=${e.body.callbackURL||((y=e.query)==null?void 0:y.currentURL)||"/"}`;yield(T=(U=e.context.options.emailAndPassword).sendVerificationEmail)==null?void 0:T.call(U,l.email,b,O)}return e.json({user:l,session:p},{body:e.body.callbackURL?{url:e.body.callbackURL,redirect:!0}:{user:l,session:p}})}));import ee from"chalk";function zt(e,t,n){let o=Date.now(),r=t*1e3;return o-n.lastRequest<r&&n.count>=e}function qt(e){return new Response(JSON.stringify({message:"Too many requests. Please try again later."}),{status:429,statusText:"Too Many Requests",headers:{"X-Retry-After":e.toString()}})}function Vt(e,t){let n=Date.now(),o=t*1e3;return Math.ceil((e+o-n)/1e3)}function Mt(e,t){let n=t!=null?t:"rateLimit",o=e.adapter;return{get:r=>a(this,null,function*(){return yield o.findOne({model:n,where:[{field:"key",value:r}]})}),set:(r,s,i)=>a(this,null,function*(){try{i?yield o.update({model:t!=null?t:"rateLimit",where:[{field:"key",value:r}],update:{count:s.count,lastRequest:s.lastRequest}}):yield o.create({model:t!=null?t:"rateLimit",data:{key:r,count:s.count,lastRequest:s.lastRequest}})}catch(d){_.error("Error setting rate limit",d)}})}}var Ge=new Map;function Ht(e){if(e.rateLimit.customStorage)return e.rateLimit.customStorage;if(e.rateLimit.storage==="memory"){let n;return{get(o){return a(this,null,function*(){return Ge.get(o)})},set(o,r,s){return a(this,null,function*(){Ge.set(o,r)})}}}return Mt(e,e.rateLimit.tableName)}function We(e,t){return a(this,null,function*(){if(!t.rateLimit.enabled)return;let n=t.baseURL,o=e.url.replace(n,""),r=t.rateLimit.window,s=t.rateLimit.max,i=N(e)+o,c=Nt().find(m=>m.pathMatcher(o));c&&(r=c.window,s=c.max);for(let m of t.options.plugins||[])if(m.rateLimit){let y=m.rateLimit.find(U=>U.pathMatcher(o));if(y){r=y.window,s=y.max;break}}if(t.rateLimit.customRules){let m=t.rateLimit.customRules[o];m&&(r=m.window,s=m.max)}let u=Ht(t),l=yield u.get(i),p=Date.now();if(!l)yield u.set(i,{key:i,count:1,lastRequest:p});else{let m=p-l.lastRequest;if(zt(s,r,l)){let y=Vt(l.lastRequest,r);return qt(y)}else m>r*1e3?yield u.set(i,A(g({},l),{count:1,lastRequest:p})):yield u.set(i,A(g({},l),{count:l.count+1,lastRequest:p}))}})}function Nt(){return[{pathMatcher(t){return t.startsWith("/sign-in")||t.startsWith("/sign-up")},window:10,max:7}]}function Wt(e,t){var d,c;let n=(d=e.options.plugins)==null?void 0:d.reduce((u,l)=>g(g({},u),l.endpoints),{}),o=((c=e.options.plugins)==null?void 0:c.map(u=>{var l;return(l=u.middlewares)==null?void 0:l.map(p=>{let m=y=>a(this,null,function*(){return p.middleware(A(g({},y),{context:g(g({},e),y.context)}))});return m.path=p.path,m.options=p.middleware.options,m.headers=p.middleware.headers,{path:p.path,middleware:m}})}).filter(u=>u!==void 0).flat())||[],r={signInOAuth:Pe,callbackOAuth:_e,getCSRFToken:qe,getSession:Z(),signOut:Ie,signUpEmail:Fe,signInEmail:ve,forgetPassword:Le,resetPassword:Ce,verifyEmail:De,sendVerificationEmail:je,changePassword:Be,setPassword:ze,updateUser:$e,forgetPasswordCallback:Oe,listSessions:Re(),revokeSession:Ue,revokeSessions:Te},s=A(g(g({},r),n),{ok:Me,error:Ve}),i={};for(let[u,l]of Object.entries(s))i[u]=p=>a(this,null,function*(){var U;let y=yield l(A(g({},p),{context:g(g({},e),p.context)}));for(let T of e.options.plugins||[])if((U=T.hooks)!=null&&U.after){for(let O of T.hooks.after)if(O.matcher(p)){let R=Object.assign(p,{context:A(g({},e),{returned:y})}),z=yield O.handler(R);z&&"response"in z&&(y=z.response)}}return y}),i[u].path=l.path,i[u].method=l.method,i[u].options=l.options,i[u].headers=l.headers;return{api:i,middlewares:o}}var Ii=(e,t)=>{let{api:n,middlewares:o}=Wt(e,t),r=new URL(e.baseURL).pathname;return Gt(n,{extraContext:e,basePath:r,routerMiddleware:[{path:"/**",middleware:ae},...o],onRequest(i){return a(this,null,function*(){for(let d of e.options.plugins||[])if(d.onRequest){let c=yield d.onRequest(i,e);if(c)return c}return We(i,e)})},onResponse(i){return a(this,null,function*(){for(let d of e.options.plugins||[])if(d.onResponse){let c=yield d.onResponse(i,e);if(c)return c.response}return i})},onError(i){var c,u,l,p;let d=(c=t.logger)!=null&&c.verboseLogging?_:void 0;if(((u=t.logger)==null?void 0:u.disabled)!==!0)if(i instanceof Ft)d==null||d.warn(i);else if(typeof i=="object"&&i!==null&&"message"in i){let m=i.message;if(!m||typeof m!="string"){d==null||d.error(i);return}m.includes("no such table")?(l=_)==null||l.error(`Please run ${ee.green("npx better-auth migrate")} to create the tables. There are missing tables in your SQLite database.`):m.includes("relation")&&m.includes("does not exist")?_.error(`Please run ${ee.green("npx better-auth migrate")} to create the tables. There are missing tables in your PostgreSQL database.`):m.includes("Table")&&m.includes("doesn't exist")?(p=_)==null||p.error(`Please run ${ee.green("npx better-auth migrate")} to create the tables. There are missing tables in your MySQL database.`):d==null||d.error(i)}else d==null||d.error(i)}})};export{_e as callbackOAuth,Be as changePassword,f as createAuthEndpoint,H as createAuthMiddleware,Y as createEmailVerificationToken,ae as csrfMiddleware,Ve as error,Le as forgetPassword,Oe as forgetPasswordCallback,qe as getCSRFToken,Wt as getEndpoints,Z as getSession,K as getSessionFromCtx,Re as listSessions,Me as ok,ne as optionsMiddleware,Ce as resetPassword,Ue as revokeSession,Te as revokeSessions,Ii as router,je as sendVerificationEmail,B as sessionMiddleware,ze as setPassword,ve as signInEmail,Pe as signInOAuth,Ie as signOut,Fe as signUpEmail,$e as updateUser,De as verifyEmail};
+</html>`,Oe=l("/error",{method:"GET",metadata:_},async e=>{let t=new URL(e.request?.url||"").searchParams.get("error")||"Unknown";return new Response(Pt(t),{headers:{"Content-Type":"text/html"}})});var Ce=l("/ok",{method:"GET",metadata:_},async e=>e.json({ok:!0}));import{alphabet as je,generateRandomString as De}from"oslo/crypto";import{z as S}from"zod";var $e=l("/sign-up/email",{method:"POST",query:S.object({currentURL:S.string().optional()}).optional(),body:S.object({name:S.string(),email:S.string(),password:S.string(),image:S.string().optional(),callbackURL:S.string().optional()})},async e=>{if(!e.context.options.emailAndPassword?.enabled)return e.json(null,{status:400,body:{message:"Email and password is not enabled"}});let{name:t,email:o,password:r,image:n}=e.body;if(!S.string().email().safeParse(o).success)return e.json(null,{status:400,body:{message:"Invalid email address"}});let i=e.context.password.config.minPasswordLength;if(r.length<i)return e.context.logger.error("Password is too short"),e.json(null,{status:400,body:{message:"Password is too short"}});let a=e.context.password.config.maxPasswordLength;if(r.length>a)return e.context.logger.error("Password is too long"),e.json(null,{status:400,body:{message:"Password is too long"}});let d=await e.context.internalAdapter.findUserByEmail(o),u=await e.context.password.hash(r);if(d?.user)return e.json(null,{status:400,body:{message:"User already exists"}});let c=await e.context.internalAdapter.createUser({id:De(32,je("a-z","0-9","A-Z")),email:o.toLowerCase(),name:t,image:n,emailVerified:!1,createdAt:new Date,updatedAt:new Date});if(!c)return e.json(null,{status:400,body:{message:"Could not create user"}});await e.context.internalAdapter.linkAccount({id:De(32,je("a-z","0-9","A-Z")),userId:c.id,providerId:"credential",accountId:c.id,password:u});let m=await e.context.internalAdapter.createSession(c.id,e.request);if(!m)return e.json(null,{status:400,body:{message:"Could not create session"}});if(await U(e,m.id),e.context.options.emailAndPassword.sendEmailVerificationOnSignUp){let g=await W(e.context.secret,c.email),w=`${e.context.baseURL}/verify-email?token=${g}&callbackURL=${e.body.callbackURL||e.query?.currentURL||"/"}`;await e.context.options.emailAndPassword.sendVerificationEmail?.(c.email,w,g)}return e.json({user:c,session:m},{body:e.body.callbackURL?{url:e.body.callbackURL,redirect:!0}:{user:c,session:m}})});import J from"chalk";function vt(e,t,o){let r=Date.now(),n=t*1e3;return r-o.lastRequest<n&&o.count>=e}function xt(e){return new Response(JSON.stringify({message:"Too many requests. Please try again later."}),{status:429,statusText:"Too Many Requests",headers:{"X-Retry-After":e.toString()}})}function St(e,t){let o=Date.now(),r=t*1e3;return Math.ceil((e+r-o)/1e3)}function _t(e,t){let o=t??"rateLimit",r=e.adapter;return{get:async n=>await r.findOne({model:o,where:[{field:"key",value:n}]}),set:async(n,s,i)=>{try{i?await r.update({model:t??"rateLimit",where:[{field:"key",value:n}],update:{count:s.count,lastRequest:s.lastRequest}}):await r.create({model:t??"rateLimit",data:{key:n,count:s.count,lastRequest:s.lastRequest}})}catch(a){P.error("Error setting rate limit",a)}}}}var Be=new Map;function It(e){return e.rateLimit.customStorage?e.rateLimit.customStorage:e.rateLimit.storage==="memory"?{async get(o){return Be.get(o)},async set(o,r,n){Be.set(o,r)}}:_t(e,e.rateLimit.tableName)}async function ze(e,t){if(!t.rateLimit.enabled)return;let o=t.baseURL,r=e.url.replace(o,""),n=t.rateLimit.window,s=t.rateLimit.max,i=$(e)+r,d=Lt().find(g=>g.pathMatcher(r));d&&(n=d.window,s=d.max);for(let g of t.options.plugins||[])if(g.rateLimit){let w=g.rateLimit.find(h=>h.pathMatcher(r));if(w){n=w.window,s=w.max;break}}if(t.rateLimit.customRules){let g=t.rateLimit.customRules[r];g&&(n=g.window,s=g.max)}let u=It(t),c=await u.get(i),m=Date.now();if(!c)await u.set(i,{key:i,count:1,lastRequest:m});else{let g=m-c.lastRequest;if(vt(s,n,c)){let w=St(c.lastRequest,n);return xt(w)}else g>n*1e3?await u.set(i,{...c,count:1,lastRequest:m}):await u.set(i,{...c,count:c.count+1,lastRequest:m})}}function Lt(){return[{pathMatcher(t){return t.startsWith("/sign-in")||t.startsWith("/sign-up")},window:10,max:7}]}function Ct(e,t){let o=t.plugins?.reduce((a,d)=>({...a,...d.endpoints}),{}),r=t.plugins?.map(a=>a.middlewares?.map(d=>{let u=async c=>d.middleware({...c,context:{...e,...c.context}});return u.path=d.path,u.options=d.middleware.options,u.headers=d.middleware.headers,{path:d.path,middleware:u}})).filter(a=>a!==void 0).flat()||[],s={...{signInOAuth:ye,callbackOAuth:ke,getCSRFToken:Ee,getSession:M(),signOut:Re,signUpEmail:$e,signInEmail:we,forgetPassword:Te,resetPassword:ve,verifyEmail:Se,sendVerificationEmail:xe,changePassword:Ie,setPassword:Le,updateUser:_e,forgetPasswordCallback:Pe,listSessions:fe(),revokeSession:ge,revokeSessions:he},...o,ok:Ce,error:Oe},i={};for(let[a,d]of Object.entries(s))i[a]=async u=>{let c=await e,g=await d({...u,context:{...c,...u.context}});for(let w of t.plugins||[])if(w.hooks?.after){for(let h of w.hooks.after)if(h.matcher(u)){let z=Object.assign(u,{context:{...e,returned:g}}),R=await h.handler(z);R&&"response"in R&&(g=R.response)}}return g},i[a].path=d.path,i[a].method=d.method,i[a].options=d.options,i[a].headers=d.headers;return{api:i,middlewares:r}}var Ns=(e,t)=>{let{api:o,middlewares:r}=Ct(e,t),n=new URL(e.baseURL).pathname;return Ot(o,{extraContext:e,basePath:n,routerMiddleware:[{path:"/**",middleware:Y},...r],async onRequest(s){for(let i of e.options.plugins||[])if(i.onRequest){let a=await i.onRequest(s,e);if(a)return a}return ze(s,e)},async onResponse(s){for(let i of e.options.plugins||[])if(i.onResponse){let a=await i.onResponse(s,e);if(a)return a.response}return s},onError(s){let i=t.logger?.verboseLogging?P:void 0;if(t.logger?.disabled!==!0)if(s instanceof Et)i?.warn(s);else if(typeof s=="object"&&s!==null&&"message"in s){let a=s.message;if(!a||typeof a!="string"){i?.error(s);return}a.includes("no such table")?P?.error(`Please run ${J.green("npx better-auth migrate")} to create the tables. There are missing tables in your SQLite database.`):a.includes("relation")&&a.includes("does not exist")?P.error(`Please run ${J.green("npx better-auth migrate")} to create the tables. There are missing tables in your PostgreSQL database.`):a.includes("Table")&&a.includes("doesn't exist")?P?.error(`Please run ${J.green("npx better-auth migrate")} to create the tables. There are missing tables in your MySQL database.`):i?.error(s)}else i?.error(s)}})};export{ke as callbackOAuth,Ie as changePassword,l as createAuthEndpoint,D as createAuthMiddleware,W as createEmailVerificationToken,Y as csrfMiddleware,Oe as error,Te as forgetPassword,Pe as forgetPasswordCallback,Ee as getCSRFToken,Ct as getEndpoints,M as getSession,H as getSessionFromCtx,fe as listSessions,Ce as ok,K as optionsMiddleware,ve as resetPassword,ge as revokeSession,he as revokeSessions,Ns as router,xe as sendVerificationEmail,E as sessionMiddleware,Le as setPassword,we as signInEmail,ye as signInOAuth,Re as signOut,$e as signUpEmail,_e as updateUser,Se as verifyEmail};

package/dist/cli.js

@@ -1,3 +1,5 @@
 #!/usr/bin/env node
-var X=Object.defineProperty;var O=Object.getOwnPropertySymbols;var R=Object.prototype.hasOwnProperty,I=Object.prototype.propertyIsEnumerable;var D=(e,t,r)=>t in e?X(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r,h=(e,t)=>{for(var r in t||(t={}))R.call(t,r)&&D(e,r,t[r]);if(O)for(var r of O(t))I.call(t,r)&&D(e,r,t[r]);return e};var M=(e,t)=>{var r={};for(var n in e)R.call(e,n)&&t.indexOf(n)<0&&(r[n]=e[n]);if(e!=null&&O)for(var n of O(e))t.indexOf(n)<0&&I.call(e,n)&&(r[n]=e[n]);return r};var g=(e,t,r)=>new Promise((n,o)=>{var s=l=>{try{u(r.next(l))}catch(f){o(f)}},a=l=>{try{u(r.throw(l))}catch(f){o(f)}},u=l=>l.done?n(l.value):Promise.resolve(l.value).then(s,a);u((r=r.apply(e,t)).next())});import{Command as be}from"commander";import"dotenv/config";import{Command as ue}from"commander";import{loadConfig as j}from"c12";import{createConsola as z}from"consola";var T=z({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),H=e=>({log:(...t)=>{!(e!=null&&e.disabled)&&T.log("",...t)},error:(...t)=>{!(e!=null&&e.disabled)&&T.error("",...t)},warn:(...t)=>{!(e!=null&&e.disabled)&&T.warn("",...t)},info:(...t)=>{!(e!=null&&e.disabled)&&T.info("",...t)},debug:(...t)=>{!(e!=null&&e.disabled)&&T.debug("",...t)},box:(...t)=>{!(e!=null&&e.disabled)&&T.box("",...t)},success:(...t)=>{!(e!=null&&e.disabled)&&T.success("",...t)},break:(...t)=>{!(e!=null&&e.disabled)&&console.log(`
-`)}}),c=H();import J from"path";import Q from"@babel/preset-typescript";import Y from"@babel/preset-react";var w=["auth.ts","auth.tsx"];w=[...w,...w.map(e=>`lib/${e}`),...w.map(e=>`utils/${e}`)];w=[...w,...w.map(e=>`src/${e}`)];var S={transformOptions:{babel:{presets:[[Q,{isTSX:!0,allExtensions:!0}],[Y,{runtime:"automatic"}]]}},extensions:[".ts",".tsx",".js",".jsx"]};function E(r){return g(this,arguments,function*({cwd:e,configPath:t}){var n,o,s,a;try{let u=null;if(t){let{config:l}=yield j({configFile:J.join(e,t),dotenv:!0,jitiOptions:S});!l.auth&&!l.default&&(c.error("[#better-auth]: Couldn't read your auth config. Make sure to default export your auth instance or to export as a variable named auth."),process.exit(1)),u=((n=l.auth)==null?void 0:n.options)||((o=l.default)==null?void 0:o.options)||null}if(!u)for(let l of w)try{let{config:f}=yield j({configFile:l,jitiOptions:S});if(Object.keys(f).length>0){u=((s=f.auth)==null?void 0:s.options)||((a=f.default)==null?void 0:a.options)||null,u||(c.error("[#better-auth]: Couldn't read your auth config."),c.break(),c.info("[#better-auth]: Make sure to default export your auth instance or to export as a variable named auth."),process.exit(1));break}}catch(f){c.error(f),process.exit(1)}return u}catch(u){c.error("Error while reading your auth config.",u),process.exit(1)}})}import{z as C}from"zod";import{existsSync as ce}from"fs";import fe from"path";import Z from"better-sqlite3";import{Kysely as _}from"kysely";import{MysqlDialect as L,PostgresDialect as $,SqliteDialect as v}from"kysely";import{createPool as ee}from"mysql2";import te from"pg";var B=class extends Error{constructor(t,r,n){super(t),this.name="BetterAuthError",this.message=t,this.cause=r}};var{Pool:re}=te;var ae=e=>{var r,n;if(!e.database)return;if("createDriver"in e.database)return e.database;let t;if("provider"in e.database){let o=e.database.provider,s=(n=(r=e.database)==null?void 0:r.url)==null?void 0:n.trim();if(o==="postgres"&&(t=new $({pool:new re({connectionString:s})})),o==="mysql")try{let a=new URL(s),u=ee({host:a.hostname,user:a.username,password:a.password,database:a.pathname.split("/")[1],port:Number(a.port)});t=new L({pool:u})}catch(a){if(a instanceof TypeError)throw new B("Invalid database URL")}if(o==="sqlite"){let a=new Z(s);t=new v({database:a})}}return t},q=e=>{let t=ae(e);return t&&new _({dialect:t})},K=e=>{if("provider"in e.database)return e.database.provider;if("dialect"in e.database){if(e.database.dialect instanceof $)return"postgres";if(e.database.dialect instanceof L)return"mysql";if(e.database.dialect instanceof v)return"sqlite"}return"sqlite"};import me from"ora";import F from"chalk";import pe from"prompts";import"kysely";var P=e=>{var l,f,d,b,y,p;let t=(l=e.plugins)==null?void 0:l.reduce((i,A)=>{var k;let x=A.schema;if(!x)return i;for(let[N,U]of Object.entries(x))i[N]={fields:h(h({},(k=i[N])==null?void 0:k.fields),U.fields),tableName:N};return i},{}),r=((f=e.rateLimit)==null?void 0:f.storage)==="database",n={rateLimit:{tableName:((d=e.rateLimit)==null?void 0:d.tableName)||"rateLimit",fields:{key:{type:"string"},count:{type:"number"},lastRequest:{type:"number"}}}},m=t||{},{user:o,session:s,account:a}=m,u=M(m,["user","session","account"]);return h(h({user:{tableName:((b=e.user)==null?void 0:b.modelName)||"user",fields:h({name:{type:"string"},email:{type:"string"},emailVerified:{type:"boolean",defaultValue:()=>!1},image:{type:"string",required:!1},createdAt:{type:"date",defaultValue:()=>new Date},updatedAt:{type:"date",defaultValue:()=>new Date}},o==null?void 0:o.fields),order:0},session:{tableName:((y=e.session)==null?void 0:y.modelName)||"session",fields:h({expiresAt:{type:"date"},ipAddress:{type:"string",required:!1},userAgent:{type:"string",required:!1},userId:{type:"string",references:{model:"user",field:"id",onDelete:"cascade"}}},s==null?void 0:s.fields),order:1},account:{tableName:((p=e.account)==null?void 0:p.modelName)||"account",fields:h({accountId:{type:"string"},providerId:{type:"string"},userId:{type:"string",references:{model:"user",field:"id",onDelete:"cascade"}},accessToken:{type:"string",required:!1},refreshToken:{type:"string",required:!1},idToken:{type:"string",required:!1},expiresAt:{type:"date",required:!1},password:{type:"string",required:!1}},a==null?void 0:a.fields),order:2}},u),r?n:{})};function se(e){var r;return((r=e.plugins)==null?void 0:r.flatMap(n=>Object.keys(n.schema||{}).map(o=>{let a=(n.schema||{})[o];if(!(a!=null&&a.disableMigration))return{tableName:o,fields:a==null?void 0:a.fields}}).filter(o=>o!==void 0)))||[]}function V(e){let t=P(e),r=se(e);return[t.user,t.session,t.account,...r].reduce((o,s)=>{var a;return o[s.tableName]={fields:h(h({},(a=o[s.tableName])==null?void 0:a.fields),s.fields)},o},{})}var ne={string:["character varying","text"],number:["int4","integer","bigint","smallint","numeric","real","double precision"],boolean:["bool","boolean"],date:["timestamp","date"]},ie={string:["varchar","text"],number:["integer","int","bigint","smallint","decimal","float","double"],boolean:["boolean"],date:["date","datetime"]},oe={string:["TEXT"],number:["INTEGER","REAL"],boolean:["INTEGER","BOOLEAN"],date:["DATE","INTEGER"]},le={postgres:ne,mysql:ie,sqlite:oe};function de(e,t,r){return le[r][t].map(a=>a.toLowerCase()).includes(e.toLowerCase())}function G(e){return g(this,null,function*(){let t=V(e),r=K(e),n=q(e);n||(c.error("Invalid database configuration."),process.exit(1));let o=yield n.introspection.getTables(),s=[],a=[];for(let[d,m]of Object.entries(t)){let b=o.find(p=>p.name===d);if(!b){let p=s.findIndex(x=>x.table===d),i={table:d,fields:m.fields,order:m.order||1/0},A=s.findIndex(x=>(x.order||1/0)>i.order);A===-1?p===-1?s.push(i):s[p].fields=h(h({},s[p].fields),m.fields):s.splice(A,0,i);continue}let y={};for(let[p,i]of Object.entries(m.fields)){let A=b.columns.find(x=>x.name===p);if(!A){y[p]=i;continue}de(A.dataType,i.type,r)||c.warn(`Field ${p} in table ${d} has a different type in the database. Expected ${i.type} but got ${A.dataType}.`)}Object.keys(y).length>0&&a.push({table:d,fields:y,order:m.order||1/0})}let u=[];function l(d){let m={string:"text",boolean:"boolean",number:"integer",date:"date"};return r==="mysql"&&d==="string"?"varchar(255)":m[d]}if(a.length)for(let d of a)for(let[m,b]of Object.entries(d.fields)){let y=l(b.type),p=n.schema.alterTable(d.table).addColumn(m,y,i=>(i=b.required!==!1?i.notNull():i,b.references&&(i=i.references(`${b.references.model}.${b.references.field}`)),i));u.push(p)}if(s.length)for(let d of s){let m=n.schema.createTable(d.table).addColumn("id",l("string"),b=>b.primaryKey());for(let[b,y]of Object.entries(d.fields)){let p=l(y.type);m=m.addColumn(b,p,i=>(i=y.required!==!1?i.notNull():i,y.references&&(i=i.references(`${y.references.model}.${y.references.field}`)),y.unique&&(i=i.unique()),i))}u.push(m)}function f(){return g(this,null,function*(){for(let d of u)yield d.execute()})}return{toBeCreated:s,toBeAdded:a,runMigrations:f}})}var W=new ue("migrate").option("-c, --cwd <cwd>","the working directory. defaults to the current directory.",process.cwd()).option("--config <config>","the path to the configuration file. defaults to the first configuration file found.").option("--y","").action(e=>g(void 0,null,function*(){let t=C.object({cwd:C.string(),config:C.string().optional()}).parse(e),r=fe.resolve(t.cwd);ce(r)||(c.error(`The directory "${r}" does not exist.`),process.exit(1));let n=yield E({cwd:r,configPath:t.config});if(!n){c.error("No configuration file found. Add a `auth.ts` file to your project or pass the path to the configuration file using the `--config` flag.");return}q(n)||(c.error("Invalid database configuration."),process.exit(1));let s=me("preparing migration...").start(),{toBeAdded:a,toBeCreated:u,runMigrations:l}=yield G(n);!a.length&&!u.length&&(s.stop(),c.success("\u{1F680} No migrations needed."),process.exit(0)),s.stop(),c.info("\u{1F511} The migration will affect the following:");for(let d of[...u,...a])c.info("->",F.magenta(Object.keys(d.fields).join(", ")),F.white("fields on"),F.yellow(`${d.table}`),F.white("table."));let{migrate:f}=yield pe({type:"confirm",name:"migrate",message:"Are you sure you want to run these migrations?",initial:!1});f||(c.info("Migration cancelled."),process.exit(0)),s==null||s.start("migrating..."),yield l(),s.stop(),c.success("\u{1F680} migration was completed successfully!"),process.exit(0)}));function ye(){return g(this,null,function*(){let e=new be().name("better-auth");e.addCommand(W),e.parse()})}ye();
+import{Command as ye}from"commander";import"dotenv/config";import{Command as le}from"commander";import{loadConfig as I}from"c12";import{createConsola as _}from"consola";var A=_({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),H=e=>({log:(...t)=>{!e?.disabled&&A.log("",...t)},error:(...t)=>{!e?.disabled&&A.error("",...t)},warn:(...t)=>{!e?.disabled&&A.warn("",...t)},info:(...t)=>{!e?.disabled&&A.info("",...t)},debug:(...t)=>{!e?.disabled&&A.debug("",...t)},box:(...t)=>{!e?.disabled&&A.box("",...t)},success:(...t)=>{!e?.disabled&&A.success("",...t)},break:(...t)=>{!e?.disabled&&console.log(`
+`)}}),c=H();import J from"path";import Y from"@babel/preset-typescript";import Z from"@babel/preset-react";var w=["auth.ts","auth.tsx"];w=[...w,...w.map(e=>`lib/${e}`),...w.map(e=>`utils/${e}`)];w=[...w,...w.map(e=>`src/${e}`)];var E={transformOptions:{babel:{presets:[[Y,{isTSX:!0,allExtensions:!0}],[Z,{runtime:"automatic"}]]}},extensions:[".ts",".tsx",".js",".jsx"]};async function B({cwd:e,configPath:t}){try{let a=null;if(t){let{config:r}=await I({configFile:J.join(e,t),dotenv:!0,jitiOptions:E});!r.auth&&!r.default&&(c.error("[#better-auth]: Couldn't read your auth config. Make sure to default export your auth instance or to export as a variable named auth."),process.exit(1)),a=r.auth?.options||r.default?.options||null}if(!a)for(let r of w)try{let{config:i}=await I({configFile:r,jitiOptions:E});if(Object.keys(i).length>0){a=i.auth?.options||i.default?.options||null,a||(c.error("[#better-auth]: Couldn't read your auth config."),c.break(),c.info("[#better-auth]: Make sure to default export your auth instance or to export as a variable named auth."),process.exit(1));break}}catch(i){c.error(i),process.exit(1)}return a}catch(a){c.error("Error while reading your auth config.",a),process.exit(1)}}import{z as M}from"zod";import{existsSync as de}from"fs";import ce from"path";import{Kysely as ee}from"kysely";import{MysqlDialect as $,PostgresDialect as L,SqliteDialect as v}from"kysely";var b=class extends Error{constructor(t,a,r){super(t),this.name="BetterAuthError",this.message=t,this.cause=a}};var te=async e=>{if(!e.database)return;if("createDriver"in e.database)return e.database;let t;if("provider"in e.database){let a=e.database.provider,r=e.database?.url?.trim();if(a==="postgres"){let o=(await import("pg").catch(s=>{throw new b("Please install `pg` to use postgres database")})).Pool;t=new L({pool:new o({connectionString:r})})}if(a==="mysql")try{let{createPool:i}=await import("mysql2/promise").catch(n=>{throw new b("Please install `mysql2` to use mysql database")}),o=new URL(r),s=i({host:o.hostname,user:o.username,password:o.password,database:o.pathname.split("/")[1],port:Number(o.port)});t=new $({pool:s})}catch(i){throw i instanceof TypeError?new b("Invalid database URL"):i}if(a==="sqlite")try{let i=await import("better-sqlite3"),o=i.default||i;if(!o)throw new b("Failed to import better-sqlite3. Make sure `better-sqlite3` is properly installed.");let s=new o(r);t=new v({database:s})}catch(i){throw console.error(i),new b("Failed to initialize SQLite. Make sure `better-sqlite3` is properly installed.")}}return t},T=async e=>{let t=await te(e);return t&&new ee({dialect:t})},F=e=>{if("provider"in e.database)return e.database.provider;if("dialect"in e.database){if(e.database.dialect instanceof L)return"postgres";if(e.database.dialect instanceof $)return"mysql";if(e.database.dialect instanceof v)return"sqlite"}return"sqlite"};import ue from"ora";import N from"chalk";import fe from"prompts";import"kysely";var k=e=>{let t=e.plugins?.reduce((l,d)=>{let f=d.schema;if(!f)return l;for(let[u,m]of Object.entries(f))l[u]={fields:{...l[u]?.fields,...m.fields},tableName:u};return l},{}),a=e.rateLimit?.storage==="database",r={rateLimit:{tableName:e.rateLimit?.tableName||"rateLimit",fields:{key:{type:"string"},count:{type:"number"},lastRequest:{type:"number"}}}},{user:i,session:o,account:s,...n}=t||{};return{user:{tableName:e.user?.modelName||"user",fields:{name:{type:"string",required:!0},email:{type:"string",unique:!0,required:!0},emailVerified:{type:"boolean",defaultValue:()=>!1,required:!0},image:{type:"string",required:!1},createdAt:{type:"date",defaultValue:()=>new Date,required:!0},updatedAt:{type:"date",defaultValue:()=>new Date,required:!0},...i?.fields},order:0},session:{tableName:e.session?.modelName||"session",fields:{expiresAt:{type:"date",required:!0},ipAddress:{type:"string",required:!1},userAgent:{type:"string",required:!1},userId:{type:"string",references:{model:"user",field:"id",onDelete:"cascade"},required:!0},...o?.fields},order:1},account:{tableName:e.account?.modelName||"account",fields:{accountId:{type:"string",required:!0},providerId:{type:"string",required:!0},userId:{type:"string",references:{model:"user",field:"id",onDelete:"cascade"},required:!0},accessToken:{type:"string",required:!1},refreshToken:{type:"string",required:!1},idToken:{type:"string",required:!1},expiresAt:{type:"date",required:!1},password:{type:"string",required:!1},...s?.fields},order:2},...n,...a?r:{}}};function re(e){return e.plugins?.flatMap(a=>Object.keys(a.schema||{}).map(r=>{let o=(a.schema||{})[r];if(!o?.disableMigration)return{tableName:r,fields:o?.fields}}).filter(r=>r!==void 0))||[]}function P(e){let t=k(e),a=re(e);return[t.user,t.session,t.account,...a].reduce((i,o)=>(i[o.tableName]={fields:{...i[o.tableName]?.fields,...o.fields}},i),{})}var ae={string:["character varying","text"],number:["int4","integer","bigint","smallint","numeric","real","double precision"],boolean:["bool","boolean"],date:["timestamp","date"]},oe={string:["varchar","text"],number:["integer","int","bigint","smallint","decimal","float","double"],boolean:["boolean"],date:["date","datetime"]},ie={string:["TEXT"],number:["INTEGER","REAL"],boolean:["INTEGER","BOOLEAN"],date:["DATE","INTEGER"]},se={postgres:ae,mysql:oe,sqlite:ie};function ne(e,t,a){return se[a][t].map(s=>s.toLowerCase()).includes(e.toLowerCase())}async function D(e){let t=P(e),a=F(e),r=await T(e);r||(c.error("Invalid database configuration."),process.exit(1));let i=await r.introspection.getTables(),o=[],s=[];for(let[u,m]of Object.entries(t)){let h=i.find(y=>y.name===u);if(!h){let y=o.findIndex(O=>O.table===u),p={table:u,fields:m.fields,order:m.order||1/0},q=o.findIndex(O=>(O.order||1/0)>p.order);q===-1?y===-1?o.push(p):o[y].fields={...o[y].fields,...m.fields}:o.splice(q,0,p);continue}let g={};for(let[y,p]of Object.entries(m.fields)){let q=h.columns.find(O=>O.name===y);if(!q){g[y]=p;continue}ne(q.dataType,p.type,a)||c.warn(`Field ${y} in table ${u} has a different type in the database. Expected ${p.type} but got ${q.dataType}.`)}Object.keys(g).length>0&&s.push({table:u,fields:g,order:m.order||1/0})}let n=[];function l(u){let m={string:"text",boolean:"boolean",number:"integer",date:"date"};return a==="mysql"&&u==="string"?"varchar(255)":m[u]}if(s.length)for(let u of s)for(let[m,h]of Object.entries(u.fields)){let g=l(h.type),y=r.schema.alterTable(u.table).addColumn(m,g,p=>(p=h.required!==!1?p.notNull():p,h.references&&(p=p.references(`${h.references.model}.${h.references.field}`)),p));n.push(y)}if(o.length)for(let u of o){let m=r.schema.createTable(u.table).addColumn("id",l("string"),h=>h.primaryKey());for(let[h,g]of Object.entries(u.fields)){let y=l(g.type);m=m.addColumn(h,y,p=>(p=g.required!==!1?p.notNull():p,g.references&&(p=p.references(`${g.references.model}.${g.references.field}`)),g.unique&&(p=p.unique()),p))}n.push(m)}async function d(){for(let u of n)await u.execute()}async function f(){return n.map(m=>m.compile().sql).join(`;
+
+`)}return{toBeCreated:o,toBeAdded:s,runMigrations:d,compileMigrations:f}}var K=new le("migrate").option("-c, --cwd <cwd>","the working directory. defaults to the current directory.",process.cwd()).option("--config <config>","the path to the configuration file. defaults to the first configuration file found.").option("--y","").action(async e=>{let t=M.object({cwd:M.string(),config:M.string().optional()}).parse(e),a=ce.resolve(t.cwd);de(a)||(c.error(`The directory "${a}" does not exist.`),process.exit(1));let r=await B({cwd:a,configPath:t.config});if(!r){c.error("No configuration file found. Add a `auth.ts` file to your project or pass the path to the configuration file using the `--config` flag.");return}await T(r)||(c.error("Invalid database configuration."),process.exit(1));let o=ue("preparing migration...").start(),{toBeAdded:s,toBeCreated:n,runMigrations:l}=await D(r);!s.length&&!n.length&&(o.stop(),c.success("\u{1F680} No migrations needed."),process.exit(0)),o.stop(),c.info("\u{1F511} The migration will affect the following:");for(let f of[...n,...s])c.info("->",N.magenta(Object.keys(f.fields).join(", ")),N.white("fields on"),N.yellow(`${f.table}`),N.white("table."));let{migrate:d}=await fe({type:"confirm",name:"migrate",message:"Are you sure you want to run these migrations?",initial:!1});d||(c.info("Migration cancelled."),process.exit(0)),o?.start("migrating..."),await l(),o.stop(),c.success("\u{1F680} migration was completed successfully!"),process.exit(0)});import{Command as pe}from"commander";import{z as j}from"zod";import{existsSync as W}from"fs";import x from"path";import me from"ora";import U from"prompts";function C(e){if(!e)return{and:null,or:null};let t=e?.filter(r=>r.connector==="AND"||!r.connector).reduce((r,i)=>({...r,[i.field]:i.value}),{}),a=e?.filter(r=>r.connector==="OR").reduce((r,i)=>({...r,[i.field]:i.value}),{});return{and:Object.keys(t).length?t:null,or:Object.keys(a).length?a:null}}function S(e,t,a){for(let r in e)e[r]===0&&t[r]?.type==="boolean"&&a?.boolean&&(e[r]=!1),e[r]===1&&t[r]?.type==="boolean"&&a?.boolean&&(e[r]=!0),t[r]?.type==="date"&&(e[r]instanceof Date||(e[r]=new Date(e[r])));return e}function z(e,t){for(let a in e)typeof e[a]=="boolean"&&t?.boolean&&(e[a]=e[a]?1:0),e[a]instanceof Date&&(e[a]=e[a].toISOString());return e}var V=(e,t)=>({id:"kysely",async create(a){let{model:r,data:i,select:o}=a;t?.transform&&(i=z(i,t.transform));let s=await e.insertInto(r).values(i).returningAll().executeTakeFirst();if(t?.transform){let n=t.transform.schema[r];s=n?S(i,n,t.transform):s}return o?.length&&(s=s?o.reduce((l,d)=>s?.[d]?{...l,[d]:s[d]}:l,{}):null),s},async findOne(a){let{model:r,where:i,select:o}=a,{and:s,or:n}=C(i),l=e.selectFrom(r).selectAll();n&&(l=l.where(f=>f.or(n))),s&&(l=l.where(f=>f.and(s)));let d=await l.executeTakeFirst();if(o?.length&&(d=d?o.reduce((u,m)=>d?.[m]?{...u,[m]:d[m]}:u,{}):null),t?.transform){let f=t.transform.schema[r];return d=d&&f?S(d,f,t.transform):d,d||null}return d||null},async findMany(a){let{model:r,where:i}=a,o=e.selectFrom(r),{and:s,or:n}=C(i);s&&(o=o.where(d=>d.and(s))),n&&(o=o.where(d=>d.or(n)));let l=await o.selectAll().execute();if(t?.transform){let d=t.transform.schema[r];return d?l.map(f=>S(f,d,t.transform)):l}return l},async update(a){let{model:r,where:i,update:o}=a,{and:s,or:n}=C(i);t?.transform&&(o=z(o,t.transform));let l=e.updateTable(r).set(o);s&&(l=l.where(f=>f.and(s))),n&&(l=l.where(f=>f.or(n)));let d=await l.returningAll().executeTakeFirst()||null;if(t?.transform){let f=t.transform.schema[r];return f?S(d,f,t.transform):d}return d},async delete(a){let{model:r,where:i}=a,{and:o,or:s}=C(i),n=e.deleteFrom(r);o&&(n=n.where(l=>l.and(o))),s&&(n=n.where(l=>l.or(s))),await n.execute()},async createSchema(a){let{compileMigrations:r}=await D(a);return console.log(r),{code:await r(),fileName:`./better-auth_migrations/${new Date().toISOString()}.sql`}}});async function G(e){if(!e.database)throw new b("Database configuration is required");if("create"in e.database)return e.database;let t=await T(e);if(!t)throw new b("Failed to initialize database adapter");let a=k(e),r={};for(let i of Object.values(a))r[i.tableName]=i.fields;return V(t,{transform:{schema:r,date:!0,boolean:F(e)==="sqlite"}})}import R from"fs/promises";import X from"chalk";var Q=new pe("generate").option("-c, --cwd <cwd>","the working directory. defaults to the current directory.",process.cwd()).option("--config <config>","the path to the configuration file. defaults to the first configuration file found.").option("--out <output>","the file to output to the generated schema").option("--y","").action(async e=>{let t=j.object({cwd:j.string(),config:j.string().optional(),out:j.string().optional()}).parse(e),a=x.resolve(t.cwd);W(a)||(c.error(`The directory "${a}" does not exist.`),process.exit(1));let r=await B({cwd:a,configPath:t.config});if(!r){c.error("No configuration file found. Add a `auth.ts` file to your project or pass the path to the configuration file using the `--config` flag.");return}let i=await G(r);i.createSchema||(c.error("The adapter does not support schema generation."),process.exit(1));let o=me("preparing schema...").start(),{code:s,fileName:n,append:l}=await i.createSchema(r,t.out);if(o.stop(),l){let{append:u}=await U({type:"confirm",name:"append",message:`The file ${n} already exists. Do you want to ${X.yellow("append")} the schema to the file?`});u?(await R.appendFile(x.join(a,n),s),c.success("\u{1F680} schema was appended successfully!"),process.exit(0)):(c.error("Schema generation aborted."),process.exit(1))}let{confirm:d}=await U({type:"confirm",name:"confirm",message:`Do you want to generate the schema to ${X.yellow(n)}?`});d||(c.error("Schema generation aborted."),process.exit(1)),W(x.dirname(x.join(a,n)))||await R.mkdir(x.dirname(x.join(a,n)),{recursive:!0}),await R.writeFile(t.out||x.join(a,n),s),c.success("\u{1F680} schema was generated successfully!"),process.exit(0)});async function he(){let e=new ye().name("better-auth");e.addCommand(K).addCommand(Q),e.parse()}he();

package/dist/client/plugins.d.ts

@@ -2,17 +2,15 @@ import * as nanostores from 'nanostores';
 import { A as AccessControl, S as StatementsPrimitive, R as Role } from '../statement-CU-fdHXK.js';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { BetterFetchOption } from '@better-fetch/fetch';
-import { o as organization, d as Organization, M as Member, I as Invitation, u as username, m as magicLink } from '../index-DsEvbKjm.js';
-export { g as getPasskeyActions, c as passkeyClient, a as twoFactorClient } from '../index-DsEvbKjm.js';
+import { o as organization, d as Organization, M as Member, I as Invitation, u as username, m as magicLink } from '../index-CmzUOocy.js';
+export { g as getPasskeyActions, c as passkeyClient, a as twoFactorClient } from '../index-CmzUOocy.js';
 import { P as Prettify } from '../helper-C1ihmerM.js';
-import '../schema-D9o3OF80.js';
+import '../index-CE92ti2Z.js';
+import 'arctic';
 import 'zod';
 import 'better-call';
-import '../index-D_ohe9r9.js';
+import '../index-gO-yM4kI.js';
 import 'kysely';
-import '../social.js';
-import 'arctic';
-import '../adapter-D-m9-hQp.js';
 import '@simplewebauthn/types';
 
 interface OrganizationClientOptions {

package/dist/client/plugins.js

@@ -1,2 +1,2 @@
-var w=Object.defineProperty,x=Object.defineProperties;var k=Object.getOwnPropertyDescriptors;var T=Object.getOwnPropertySymbols;var C=Object.prototype.hasOwnProperty,B=Object.prototype.propertyIsEnumerable;var A=(e,t,s)=>t in e?w(e,t,{enumerable:!0,configurable:!0,writable:!0,value:s}):e[t]=s,l=(e,t)=>{for(var s in t||(t={}))C.call(t,s)&&A(e,s,t[s]);if(T)for(var s of T(t))B.call(t,s)&&A(e,s,t[s]);return e},d=(e,t)=>x(e,k(t));var h=(e,t,s)=>A(e,typeof t!="symbol"?t+"":t,s);var u=(e,t,s)=>new Promise((a,r)=>{var i=c=>{try{n(s.next(c))}catch(f){r(f)}},o=c=>{try{n(s.throw(c))}catch(f){r(f)}},n=c=>c.done?a(c.value):Promise.resolve(c.value).then(i,o);n((s=s.apply(e,t)).next())});import{atom as O}from"nanostores";var y=class extends Error{constructor(s,a){super(s);h(this,"path");this.path=a}},P=class{constructor(t){this.s=t;h(this,"statements");this.statements=t}newRole(t){return new S(t)}},S=class e{constructor(t){h(this,"statements");this.statements=t}authorize(t,s){for(let[a,r]of Object.entries(t)){let i=this.statements[a];if(!i)return{success:!1,error:`You are not allowed to access resource: ${a}`};let o=s==="OR"?r.some(n=>i.includes(n)):r.every(n=>i.includes(n));return o?{success:o}:{success:!1,error:`unauthorized to access resource "${a}"`}}return{success:!1,error:"Not authorized"}}static fromString(t){let s=JSON.parse(t);if(typeof s!="object")throw new y("statements is not an object",".");for(let[a,r]of Object.entries(s)){if(typeof a!="string")throw new y("invalid resource identifier",a);if(!Array.isArray(r))throw new y("actions is not an array",a);for(let i=0;i<r.length;i++)if(typeof r[i]!="string")throw new y("action is not a string",`${a}[${i}]`)}return new e(s)}toString(){return JSON.stringify(this.statements)}};var F=e=>new P(e),U={organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]},b=F(U),K=b.newRole({organization:["update"],invitation:["create","cancel"],member:["create","update","delete"]}),H=b.newRole({organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]}),J=b.newRole({organization:[],member:[],invitation:[]});import{createFetch as pe}from"@better-fetch/fetch";import"nanostores";import{betterFetch as oe}from"@better-fetch/fetch";import{atom as ve}from"nanostores";import"@better-fetch/fetch";import{atom as E,onMount as I}from"nanostores";var p=(e,t,s,a)=>{let r=E({data:null,error:null,isPending:!1}),i=()=>{let n=typeof a=="function"?a({data:r.get().data,error:r.get().error,isPending:r.get().isPending}):a;return s(t,d(l({},n),{onSuccess:f=>u(void 0,null,function*(){var m;r.set({data:f.data,error:null,isPending:!1}),yield(m=n==null?void 0:n.onSuccess)==null?void 0:m.call(n,f)}),onError(f){return u(this,null,function*(){var m;r.set({error:f.error,data:null,isPending:!1}),yield(m=n==null?void 0:n.onError)==null?void 0:m.call(n,f)})},onRequest(f){return u(this,null,function*(){var R;let m=r.get();r.set({isPending:!0,data:m.data,error:m.error}),yield(R=n==null?void 0:n.onRequest)==null?void 0:R.call(n,f)})}}))};e=Array.isArray(e)?e:[e];let o=!1;for(let n of e)n.subscribe(()=>{o?i():I(r,()=>(i(),o=!0,()=>{r.off(),n.off()}))});return r};var Ze=e=>{let t=O(void 0),s=O(!1),a=O(!1);return{id:"organization",$InferServerPlugin:{},getActions:r=>({$Infer:{ActiveOrganization:{},Organization:{},Invitation:{},Member:{}},organization:{setActive(i){t.set(i)},hasPermission:i=>u(void 0,null,function*(){return yield r("/organization/has-permission",l({method:"POST",body:{permission:i.permission}},i.fetchOptions))})}}),getAtoms:r=>{let i=p(s,"/organization/list",r,{method:"GET"}),o=p([t,a],"/organization/activate",r,()=>({method:"POST",credentials:"include",body:{orgId:t.get()}}));return{_listOrg:s,_activeOrgSignal:a,activeOrganization:o,listOrganizations:i}},atomListeners:[{matcher(r){return r==="/organization/create"||r==="/organization/delete"},signal:"_listOrg"},{matcher(r){return r.startsWith("/organization")},signal:"_activeOrgSignal"}]}};var rt=()=>({id:"username",$InferServerPlugin:{}});import{WebAuthnError as z,startAuthentication as $,startRegistration as M}from"@simplewebauthn/browser";import{createConsola as L}from"consola";var g=L({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),_=e=>({log:(...t)=>{!(e!=null&&e.disabled)&&g.log("",...t)},error:(...t)=>{!(e!=null&&e.disabled)&&g.error("",...t)},warn:(...t)=>{!(e!=null&&e.disabled)&&g.warn("",...t)},info:(...t)=>{!(e!=null&&e.disabled)&&g.info("",...t)},debug:(...t)=>{!(e!=null&&e.disabled)&&g.debug("",...t)},box:(...t)=>{!(e!=null&&e.disabled)&&g.box("",...t)},success:(...t)=>{!(e!=null&&e.disabled)&&g.success("",...t)},break:(...t)=>{!(e!=null&&e.disabled)&&console.log(`
-`)}}),it=_();import{atom as N}from"nanostores";var q=(e,{_listPasskeys:t})=>({signIn:{passkey:(r,i)=>u(void 0,null,function*(){let o=yield e("/passkey/generate-authenticate-options",{method:"POST",body:{email:r==null?void 0:r.email,callbackURL:r==null?void 0:r.callbackURL}});if(!o.data)return o;try{let n=yield $(o.data,(r==null?void 0:r.autoFill)||!1),c=yield e("/passkey/verify-authentication",l(l({body:{response:n}},r==null?void 0:r.fetchOptions),i));if(!c.data)return c}catch(n){console.log(n)}})},passkey:{addPasskey:(r,i)=>u(void 0,null,function*(){let o=yield e("/passkey/generate-register-options",{method:"GET"});if(!o.data)return o;try{let n=yield M(o.data),c=yield e("/passkey/verify-registration",d(l(l({},r==null?void 0:r.fetchOptions),i),{body:{response:n,name:r==null?void 0:r.name}}));if(!c.data)return c;t.set(Math.random())}catch(n){return n instanceof z?n.code==="ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED"?{data:null,error:{message:"previously registered",status:400,statusText:"BAD_REQUEST"}}:n.code==="ERROR_CEREMONY_ABORTED"?{data:null,error:{message:"registration cancelled",status:400,statusText:"BAD_REQUEST"}}:{data:null,error:{message:n.message,status:400,statusText:"BAD_REQUEST"}}:{data:null,error:{message:n instanceof Error?n.message:"unknown error",status:500,statusText:"INTERNAL_SERVER_ERROR"}}}})},$Infer:{}}),mt=()=>{let e=N();return{id:"passkey",$InferServerPlugin:{},getActions:t=>q(t,{_listPasskeys:e}),getAtoms(t){return{listPasskeys:p(e,"/passkey/list-user-passkeys",t,{method:"GET",credentials:"include"}),_listPasskeys:e}},pathMethods:{"/passkey/register":"POST","/passkey/authenticate":"POST"},atomListeners:[{matcher(t){return t==="/passkey/verify-registration"||t==="/passkey/delete-passkey"},signal:"_listPasskeys"}]}};var yt=(e={redirect:!0,twoFactorPage:"/"})=>({id:"two-factor",$InferServerPlugin:{},atomListeners:[{matcher:s=>s==="/two-factor/enable"||s==="/two-factor/send-otp"||s==="/two-factor/disable",signal:"_sessionSignal"}],pathMethods:{"/two-factor/disable":"POST","/two-factor/enable":"POST","/two-factor/send-otp":"POST"},fetchPlugins:[{id:"two-factor",name:"two-factor",hooks:{onSuccess(s){return u(this,null,function*(){var a;(a=s.data)!=null&&a.twoFactorRedirect&&(e.redirect||e.twoFactorPage)&&typeof window!="undefined"&&(window.location.href=e.twoFactorPage)})}}}]});var Pt=()=>({id:"magic-link",$InferServerPlugin:{}});export{q as getPasskeyActions,Pt as magicLinkClient,Ze as organizationClient,mt as passkeyClient,yt as twoFactorClient,rt as usernameClient};
+import{atom as g}from"nanostores";var u=class extends Error{path;constructor(e,a){super(e),this.path=a}},m=class{constructor(e){this.s=e;this.statements=e}statements;newRole(e){return new f(e)}},f=class r{statements;constructor(e){this.statements=e}authorize(e,a){for(let[i,t]of Object.entries(e)){let s=this.statements[i];if(!s)return{success:!1,error:`You are not allowed to access resource: ${i}`};let o=a==="OR"?t.some(n=>s.includes(n)):t.every(n=>s.includes(n));return o?{success:o}:{success:!1,error:`unauthorized to access resource "${i}"`}}return{success:!1,error:"Not authorized"}}static fromString(e){let a=JSON.parse(e);if(typeof a!="object")throw new u("statements is not an object",".");for(let[i,t]of Object.entries(a)){if(typeof i!="string")throw new u("invalid resource identifier",i);if(!Array.isArray(t))throw new u("actions is not an array",i);for(let s=0;s<t.length;s++)if(typeof t[s]!="string")throw new u("action is not a string",`${i}[${s}]`)}return new r(a)}toString(){return JSON.stringify(this.statements)}};var h=r=>new m(r),P={organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]},d=h(P),U=d.newRole({organization:["update"],invitation:["create","cancel"],member:["create","update","delete"]}),v=d.newRole({organization:["update","delete"],member:["create","update","delete"],invitation:["create","cancel"]}),E=d.newRole({organization:[],member:[],invitation:[]});import{createFetch as ee}from"@better-fetch/fetch";import"nanostores";import{betterFetch as K}from"@better-fetch/fetch";import{atom as me}from"nanostores";import"@better-fetch/fetch";import{atom as A,onMount as O}from"nanostores";var p=(r,e,a,i)=>{let t=A({data:null,error:null,isPending:!1}),s=()=>{let n=typeof i=="function"?i({data:t.get().data,error:t.get().error,isPending:t.get().isPending}):i;return a(e,{...n,onSuccess:async c=>{t.set({data:c.data,error:null,isPending:!1}),await n?.onSuccess?.(c)},async onError(c){t.set({error:c.error,data:null,isPending:!1}),await n?.onError?.(c)},async onRequest(c){let y=t.get();t.set({isPending:!0,data:y.data,error:y.error}),await n?.onRequest?.(c)}})};r=Array.isArray(r)?r:[r];let o=!1;for(let n of r)n.subscribe(()=>{o?s():O(t,()=>(s(),o=!0,()=>{t.off(),n.off()}))});return t};var ve=r=>{let e=g(void 0),a=g(!1),i=g(!1);return{id:"organization",$InferServerPlugin:{},getActions:t=>({$Infer:{ActiveOrganization:{},Organization:{},Invitation:{},Member:{}},organization:{setActive(s){e.set(s)},hasPermission:async s=>await t("/organization/has-permission",{method:"POST",body:{permission:s.permission},...s.fetchOptions})}}),getAtoms:t=>{let s=p(a,"/organization/list",t,{method:"GET"}),o=p([e,i],"/organization/activate",t,()=>({method:"POST",credentials:"include",body:{orgId:e.get()}}));return{_listOrg:a,_activeOrgSignal:i,activeOrganization:o,listOrganizations:s}},atomListeners:[{matcher(t){return t==="/organization/create"||t==="/organization/delete"},signal:"_listOrg"},{matcher(t){return t.startsWith("/organization")},signal:"_activeOrgSignal"}]}};var Ie=()=>({id:"username",$InferServerPlugin:{}});import{WebAuthnError as T,startAuthentication as w,startRegistration as x}from"@simplewebauthn/browser";import{createConsola as b}from"consola";var l=b({formatOptions:{date:!1,colors:!0,compact:!0},defaults:{tag:"Better Auth"}}),R=r=>({log:(...e)=>{!r?.disabled&&l.log("",...e)},error:(...e)=>{!r?.disabled&&l.error("",...e)},warn:(...e)=>{!r?.disabled&&l.warn("",...e)},info:(...e)=>{!r?.disabled&&l.info("",...e)},debug:(...e)=>{!r?.disabled&&l.debug("",...e)},box:(...e)=>{!r?.disabled&&l.box("",...e)},success:(...e)=>{!r?.disabled&&l.success("",...e)},break:(...e)=>{!r?.disabled&&console.log(`
+`)}}),ze=R();import{atom as k}from"nanostores";var C=(r,{_listPasskeys:e})=>({signIn:{passkey:async(t,s)=>{let o=await r("/passkey/generate-authenticate-options",{method:"POST",body:{email:t?.email,callbackURL:t?.callbackURL}});if(!o.data)return o;try{let n=await w(o.data,t?.autoFill||!1),c=await r("/passkey/verify-authentication",{body:{response:n},...t?.fetchOptions,...s});if(!c.data)return c}catch(n){console.log(n)}}},passkey:{addPasskey:async(t,s)=>{let o=await r("/passkey/generate-register-options",{method:"GET"});if(!o.data)return o;try{let n=await x(o.data),c=await r("/passkey/verify-registration",{...t?.fetchOptions,...s,body:{response:n,name:t?.name}});if(!c.data)return c;e.set(Math.random())}catch(n){return n instanceof T?n.code==="ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED"?{data:null,error:{message:"previously registered",status:400,statusText:"BAD_REQUEST"}}:n.code==="ERROR_CEREMONY_ABORTED"?{data:null,error:{message:"registration cancelled",status:400,statusText:"BAD_REQUEST"}}:{data:null,error:{message:n.message,status:400,statusText:"BAD_REQUEST"}}:{data:null,error:{message:n instanceof Error?n.message:"unknown error",status:500,statusText:"INTERNAL_SERVER_ERROR"}}}}},$Infer:{}}),De=()=>{let r=k();return{id:"passkey",$InferServerPlugin:{},getActions:e=>C(e,{_listPasskeys:r}),getAtoms(e){return{listPasskeys:p(r,"/passkey/list-user-passkeys",e,{method:"GET",credentials:"include"}),_listPasskeys:r}},pathMethods:{"/passkey/register":"POST","/passkey/authenticate":"POST"},atomListeners:[{matcher(e){return e==="/passkey/verify-registration"||e==="/passkey/delete-passkey"},signal:"_listPasskeys"}]}};var Ke=(r={redirect:!0,twoFactorPage:"/"})=>({id:"two-factor",$InferServerPlugin:{},atomListeners:[{matcher:e=>e==="/two-factor/enable"||e==="/two-factor/send-otp"||e==="/two-factor/disable",signal:"_sessionSignal"}],pathMethods:{"/two-factor/disable":"POST","/two-factor/enable":"POST","/two-factor/send-otp":"POST"},fetchPlugins:[{id:"two-factor",name:"two-factor",hooks:{async onSuccess(e){e.data?.twoFactorRedirect&&(r.redirect||r.twoFactorPage)&&typeof window<"u"&&(window.location.href=r.twoFactorPage)}}}]});var Je=()=>({id:"magic-link",$InferServerPlugin:{}});export{C as getPasskeyActions,Je as magicLinkClient,ve as organizationClient,De as passkeyClient,Ke as twoFactorClient,Ie as usernameClient};