coss 0.3.0 → 0.5.0

package/dist/better-auth.js

@@ -0,0 +1,269 @@
+import { c as CossSendError, l as lazyClient, o as sha256Hex, r as escapeHtml } from "./mime-C8bhhjvD.js";
+//#region src/better-auth.ts
+/**
+* `coss/better-auth`: Better Auth's email callbacks, sent through coss.com.
+*
+* ```ts
+* import { betterAuth } from "better-auth";
+* import { cossEmail } from "coss/better-auth";
+*
+* const email = cossEmail({ from: "Acme <auth@acme.com>", appName: "Acme" });
+*
+* export const auth = betterAuth({
+*   emailVerification: { sendVerificationEmail: email.sendVerificationEmail },
+*   emailAndPassword: { enabled: true, sendResetPassword: email.sendResetPassword },
+* });
+* ```
+*
+* The types here describe only what the callbacks read, so the SDK has no dependency on Better
+* Auth; `test/integration-types.ts` checks them against Better Auth's own.
+*/
+/**
+* Better Auth email callbacks that send through coss.com. Each throws `CossSendError` when coss.com
+* refuses the email.
+*
+* Auth emails go out with `category: "account"` and open and click tracking off: click tracking
+* would route the secret links through coss.com's redirect.
+*/
+function cossEmail(options) {
+	const client = lazyClient("better-auth", options);
+	const templates = {
+		...DEFAULT_TEMPLATES,
+		...options.templates
+	};
+	const appName = options.appName?.trim() || void 0;
+	async function send(params, sendOptions) {
+		const result = await client().email.send({
+			category: options.category ?? "account",
+			tracking: {
+				opens: false,
+				clicks: false
+			},
+			...params,
+			from: params.from ?? options.from
+		}, sendOptions);
+		if (result.error) throw new CossSendError(result.error);
+		return result.data;
+	}
+	/**
+	* Sends one auth email. A link's token makes a stable idempotency key, so the same callback
+	* run twice sends once; the token itself is hashed, never sent as the key.
+	*/
+	async function sendAuthEmail(to, content, token) {
+		const idempotencyKey = token ? `better-auth_${await sha256Hex(token)}` : void 0;
+		await send({
+			to,
+			...content
+		}, { idempotencyKey });
+	}
+	return {
+		sendVerificationEmail: (data) => sendAuthEmail(data.user.email, templates.verifyEmail({
+			...data,
+			appName
+		}), data.token),
+		sendResetPassword: (data) => sendAuthEmail(data.user.email, templates.resetPassword({
+			...data,
+			appName
+		}), data.token),
+		sendChangeEmailConfirmation: (data) => sendAuthEmail(data.user.email, templates.changeEmailConfirmation({
+			...data,
+			appName
+		}), data.token),
+		sendDeleteAccountVerification: (data) => sendAuthEmail(data.user.email, templates.deleteAccount({
+			...data,
+			appName
+		}), data.token),
+		sendMagicLink: (data) => sendAuthEmail(data.email, templates.magicLink({
+			...data,
+			appName
+		}), data.token),
+		sendVerificationOTP: (data) => sendAuthEmail(data.email, templates.verificationOtp({
+			...data,
+			appName
+		})),
+		sendInvitationEmail: async (data) => {
+			if (!options.invitationUrl) throw new Error("coss/better-auth: sendInvitationEmail needs the `invitationUrl` option (Better Auth passes no URL for invitations).");
+			const url = options.invitationUrl(data);
+			await sendAuthEmail(data.email, templates.invitation({
+				...data,
+				url,
+				appName
+			}));
+		},
+		send
+	};
+}
+/** A plain, unbranded email: a heading, a paragraph, a button, and a closing line. */
+function layout(parts) {
+	const action = parts.action ? `<p style="margin:24px 0"><a href="${escapeHtml(parts.action.url)}" style="display:inline-block;padding:10px 18px;border-radius:6px;background:#111;color:#fff;text-decoration:none;font-weight:600">${escapeHtml(parts.action.label)}</a></p>
+<p style="color:#666;font-size:13px">Or paste this link into your browser:<br><a href="${escapeHtml(parts.action.url)}" style="color:#666;word-break:break-all">${escapeHtml(parts.action.url)}</a></p>` : "";
+	const code = parts.code ? `<p style="margin:24px 0;font-size:28px;letter-spacing:6px;font-weight:600;font-family:ui-monospace,Menlo,monospace">${escapeHtml(parts.code)}</p>` : "";
+	return `<!doctype html>
+<html><body style="margin:0;padding:24px;background:#fff;color:#111;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Helvetica,Arial,sans-serif;font-size:15px;line-height:1.5">
+<div style="max-width:480px;margin:0 auto">
+<h1 style="font-size:20px;margin:0 0 16px">${escapeHtml(parts.heading)}</h1>
+<p>${escapeHtml(parts.intro)}</p>
+${action}${code}
+<p style="color:#666;font-size:13px">${escapeHtml(parts.outro)}</p>
+</div>
+</body></html>`;
+}
+function text(lines) {
+	return `${lines.filter((line) => line !== void 0).join("\n\n")}\n`;
+}
+const IGNORE = "If you didn't ask for this, you can ignore this email.";
+function on(appName) {
+	return appName ? ` on ${appName}` : "";
+}
+const OTP_SUBJECTS = {
+	"sign-in": "Your sign-in code",
+	"email-verification": "Your verification code",
+	"forget-password": "Your password reset code",
+	"change-email": "Your code to change your email address"
+};
+/** The default templates: plain, unbranded, with a text version of each. */
+const DEFAULT_TEMPLATES = {
+	verifyEmail: ({ url, appName }) => {
+		const intro = `Confirm this is your email address to finish setting up your account${on(appName)}.`;
+		return {
+			subject: "Verify your email address",
+			html: layout({
+				heading: "Verify your email address",
+				intro,
+				action: {
+					label: "Verify email",
+					url
+				},
+				outro: IGNORE
+			}),
+			text: text([
+				intro,
+				url,
+				IGNORE
+			])
+		};
+	},
+	resetPassword: ({ url, appName }) => {
+		const intro = `Someone asked to reset the password of your account${on(appName)}. Choose a new one with this link.`;
+		return {
+			subject: "Reset your password",
+			html: layout({
+				heading: "Reset your password",
+				intro,
+				action: {
+					label: "Reset password",
+					url
+				},
+				outro: `${IGNORE} Your password won't change.`
+			}),
+			text: text([
+				intro,
+				url,
+				`${IGNORE} Your password won't change.`
+			])
+		};
+	},
+	changeEmailConfirmation: ({ newEmail, url, appName }) => {
+		const intro = `Someone asked to change the email address of your account${on(appName)} to ${newEmail}. Confirm the change with this link.`;
+		return {
+			subject: "Confirm your new email address",
+			html: layout({
+				heading: "Confirm your new email address",
+				intro,
+				action: {
+					label: "Confirm change",
+					url
+				},
+				outro: IGNORE
+			}),
+			text: text([
+				intro,
+				url,
+				IGNORE
+			])
+		};
+	},
+	deleteAccount: ({ url, appName }) => {
+		const intro = `Someone asked to delete your account${on(appName)}. This can't be undone. Confirm with this link.`;
+		return {
+			subject: "Confirm account deletion",
+			html: layout({
+				heading: "Confirm account deletion",
+				intro,
+				action: {
+					label: "Delete my account",
+					url
+				},
+				outro: `${IGNORE} Your account stays as it is.`
+			}),
+			text: text([
+				intro,
+				url,
+				`${IGNORE} Your account stays as it is.`
+			])
+		};
+	},
+	magicLink: ({ url, appName }) => {
+		const heading = appName ? `Sign in to ${appName}` : "Sign in";
+		const intro = "Use this link to sign in. It works once and expires soon.";
+		return {
+			subject: heading,
+			html: layout({
+				heading,
+				intro,
+				action: {
+					label: "Sign in",
+					url
+				},
+				outro: IGNORE
+			}),
+			text: text([
+				intro,
+				url,
+				IGNORE
+			])
+		};
+	},
+	verificationOtp: ({ otp, type, appName }) => {
+		const subject = OTP_SUBJECTS[type] ?? "Your verification code";
+		const intro = `Enter this code${on(appName)}. It expires in a few minutes.`;
+		return {
+			subject,
+			html: layout({
+				heading: subject,
+				intro,
+				code: otp,
+				outro: IGNORE
+			}),
+			text: text([
+				intro,
+				otp,
+				IGNORE
+			])
+		};
+	},
+	invitation: ({ organization, inviter, url, appName }) => {
+		const who = inviter.user.name?.trim() || inviter.user.email;
+		const subject = `Join ${organization.name}${on(appName)}`;
+		const intro = `${who} invited you to join ${organization.name}${on(appName)}.`;
+		return {
+			subject,
+			html: layout({
+				heading: subject,
+				intro,
+				action: {
+					label: "Accept invitation",
+					url
+				},
+				outro: "If you weren't expecting this invitation, you can ignore this email."
+			}),
+			text: text([
+				intro,
+				url,
+				"If you weren't expecting this invitation, you can ignore this email."
+			])
+		};
+	}
+};
+//#endregion
+export { CossSendError, DEFAULT_TEMPLATES, cossEmail };