create-z3 0.0.40 → 0.0.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-z3",
-  "version": "0.0.40",
+  "version": "0.0.41",
   "type": "module",
   "description": "CLI for scaffolding Z3 Stack applications (TanStack/Next.js + Convex + Better Auth)",
   "bin": {

package/templates/nextjs/convex/auth/adapter/index.ts

@@ -189,15 +189,26 @@ export const convexAdapter = <DataModel extends GenericDataModel>(
         if (data && fieldAttributes.type === "date") {
           return new Date(data).getTime();
         }
-        // Handle array fields - Better Auth serializes them as JSON strings
+        // Handle array fields - Better Auth may send single values or arrays
         if ((fieldAttributes.type as string)?.endsWith("[]")) {
+          // If already an array, return as-is
+          if (Array.isArray(data)) {
+            return data
+          }
+          // If it's a string that looks like JSON array, parse it
           if (typeof data === "string") {
             try {
-              return JSON.parse(data);
+              const parsed = JSON.parse(data)
+              return Array.isArray(parsed) ? parsed : [data]
             } catch {
-              return data;
+              // If parsing fails, wrap the string in an array
+              return [data]
             }
           }
+          // For any other value type, wrap in array
+          if (data !== null && data !== undefined) {
+            return [data]
+          }
         }
         return data;
       },

package/templates/nextjs/convex/schema.ts

@@ -6,6 +6,9 @@ import { TABLE_SLUG_ACCOUNTS, TABLE_SLUG_JWKS, TABLE_SLUG_SESSIONS, TABLE_SLUG_U
 export default defineSchema({
   // Better Auth component tables (type definitions only - actual tables are in component)
   [TABLE_SLUG_USERS]: defineTable({
+    banExpires: v.optional(v.number()), // admin plugin
+    banned: v.optional(v.boolean()), // admin plugin
+    banReason: v.optional(v.string()), // admin plugin
     displayUsername: v.optional(v.union(v.null(), v.string())),
     name: v.string(),
     username: v.optional(v.union(v.null(), v.string())),
@@ -16,7 +19,7 @@ export default defineSchema({
     isAnonymous: v.optional(v.union(v.null(), v.boolean())),
     phoneNumber: v.optional(v.union(v.null(), v.string())),
     phoneNumberVerified: v.optional(v.union(v.null(), v.boolean())),
-    role: v.array(v.string()),
+    role: v.array(v.string()), // admin plugin
     twoFactorEnabled: v.optional(v.union(v.null(), v.boolean())),
     updatedAt: v.number(),
     userId: v.optional(v.union(v.null(), v.string()))
@@ -43,6 +46,7 @@ export default defineSchema({
   [TABLE_SLUG_SESSIONS]: defineTable({
     createdAt: v.number(),
     expiresAt: v.number(),
+    impersonatedBy: v.optional(v.id(TABLE_SLUG_USERS)), // admin plugin
     ipAddress: v.optional(v.string()),
     token: v.string(),
     updatedAt: v.number(),

package/templates/tanstack-start/convex/auth/adapter/index.ts

@@ -185,15 +185,26 @@ export const convexAdapter = <DataModel extends GenericDataModel>(
         if (data && fieldAttributes.type === "date") {
           return new Date(data).getTime();
         }
-        // Handle array fields - Better Auth serializes them as JSON strings
-        if (fieldAttributes.type && fieldAttributes.type.endsWith("[]")) {
+        // Handle array fields - Better Auth may send single values or arrays
+        if ((fieldAttributes.type as string)?.endsWith("[]")) {
+          // If already an array, return as-is
+          if (Array.isArray(data)) {
+            return data
+          }
+          // If it's a string that looks like JSON array, parse it
           if (typeof data === "string") {
             try {
-              return JSON.parse(data);
+              const parsed = JSON.parse(data)
+              return Array.isArray(parsed) ? parsed : [data]
             } catch {
-              return data;
+              // If parsing fails, wrap the string in an array
+              return [data]
             }
           }
+          // For any other value type, wrap in array
+          if (data !== null && data !== undefined) {
+            return [data]
+          }
         }
         return data;
       },

package/templates/tanstack-start/convex/auth/plugins/index.ts

@@ -1,6 +1,11 @@
-import { apiKey } from "better-auth/plugins"
+import { admin, apiKey } from "better-auth/plugins"
+import { USER_ROLES } from "~/db/constants"
 
 const plugins = [
+  admin({
+    adminRoles: [USER_ROLES.admin],
+    defaultRole: USER_ROLES.user
+  }),
   apiKey(),
 ]
 

package/templates/tanstack-start/convex/schema.ts

@@ -16,10 +16,13 @@ export default defineSchema({
     isAnonymous: v.optional(v.union(v.null(), v.boolean())),
     phoneNumber: v.optional(v.union(v.null(), v.string())),
     phoneNumberVerified: v.optional(v.union(v.null(), v.boolean())),
-    role: v.array(v.string()),
     twoFactorEnabled: v.optional(v.union(v.null(), v.boolean())),
     updatedAt: v.number(),
-    userId: v.optional(v.union(v.null(), v.string()))
+    userId: v.optional(v.union(v.null(), v.string())),
+    banExpires: v.optional(v.number()), // admin plugin
+    banned: v.optional(v.boolean()), // admin plugin
+    banReason: v.optional(v.string()), // admin plugin
+    role: v.array(v.string()), // admin plugin
   })
     .index("by_email", ["email"]),
 
@@ -48,6 +51,7 @@ export default defineSchema({
     updatedAt: v.number(),
     userAgent: v.optional(v.string()),
     userId: v.id(TABLE_SLUG_USERS),
+    impersonatedBy: v.optional(v.id(TABLE_SLUG_USERS)), // admin plugin
   })
     .index("by_token", ["token"]),
 

package/templates/tanstack-start/src/lib/auth/client.ts

@@ -1,11 +1,12 @@
 import { createAuthClient } from "better-auth/react"
-import { apiKeyClient } from "better-auth/client/plugins"
+import { adminClient, apiKeyClient } from "better-auth/client/plugins"
 import { env } from '~/env';
 
 export const authClient = createAuthClient({
   basePath: "/api/auth",
   baseURL: env.VITE_SITE_URL, // Point to TanStack Start, which proxies to Convex
   plugins: [
+    adminClient(),
     apiKeyClient()
   ]
 })