everything-dev 2.0.0-rc.1 → 2.0.0-rc.5

package/dist/ui/api.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"api.mjs","names":[],"sources":["../../src/ui/api.ts"],"sourcesContent":["import { createORPCClient, onError } from \"@orpc/client\";\nimport { RPCLink } from \"@orpc/client/fetch\";\nimport type { ContractRouterClient, RouterContract } from \"@orpc/contract\";\nimport { createTanstackQueryUtils } from \"@orpc/tanstack-query\";\nimport { useRouter } from \"@tanstack/react-router\";\n\nexport type { RouterContract };\n\n/**\n * Localized copy for the API connection-failure toast — the app's authored\n * override seam (ADR 0023). Called at error time, so the implementation may\n * resolve the active locale itself.\n */\nexport type ApiConnectionErrorCopy = () => { title: string; description: string };\n\n/** typed client for the app's default router contract (router-context default) */\nexport type ApiClient<T extends RouterContract = RouterContract> = ContractRouterClient<T>;\n\nexport interface ClientServiceConfig {\n  hostUrl: string;\n  rpcBase: `/${string}`;\n  connectionError?: ApiConnectionErrorCopy;\n}\n\ntype ClientRouterContext = {\n  apiClient?: unknown;\n  pluginClients?: Record<string, unknown>;\n};\n\nexport type { ClientRouterContext };\n\nfunction createRpcLink(config: ClientServiceConfig, url: `/${string}`, headers?: Headers) {\n  return new RPCLink({\n    origin: config.hostUrl,\n    url,\n    interceptors: [\n      onError((error: unknown) => {\n        if (typeof window === \"undefined\") {\n          return;\n        }\n\n        if (error && typeof error === \"object\" && \"message\" in error) {\n          const message = String(error.message).toLowerCase();\n          if (\n            message.includes(\"fetch\") ||\n            message.includes(\"network\") ||\n            message.includes(\"failed to fetch\")\n          ) {\n            void import(\"sonner\")\n              .then(({ toast }) => {\n                const message = config.connectionError?.() ?? {\n                  title: \"Unable to connect to API\",\n                  description: \"The API is currently unavailable. Please try again later.\",\n                };\n                toast.error(message.title, {\n                  id: \"api-connection-error\",\n                  description: message.description,\n                });\n              })\n              .catch(() => {});\n          }\n        }\n      }),\n    ],\n    fetch(fetchUrl: RequestInfo | URL, options?: RequestInit) {\n      return fetchWithRateLimitRetry(fetchUrl, {\n        ...options,\n        credentials: \"include\",\n        headers: headers\n          ? { ...Object.fromEntries(headers), ...(options?.headers as Record<string, string>) }\n          : options?.headers,\n      });\n    },\n  });\n}\n\nconst RATE_LIMIT_MAX_RETRIES = 3;\nconst RATE_LIMIT_RETRY_CAP_MS = 2_000;\n\n/**\n * A 429 from the host's edge limiter is transient saturation, not an\n * application failure — retry within the server's `Retry-After` (capped) so\n * queries and the session check self-heal instead of surfacing errors.\n */\nasync function fetchWithRateLimitRetry(\n  fetchUrl: RequestInfo | URL,\n  options?: RequestInit,\n): Promise<Response> {\n  let response = await fetch(fetchUrl, options);\n  for (let attempt = 1; attempt <= RATE_LIMIT_MAX_RETRIES && response.status === 429; attempt++) {\n    const retryAfterSeconds = Number(response.headers.get(\"retry-after\"));\n    const delay =\n      Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0\n        ? Math.min(retryAfterSeconds * 1000, RATE_LIMIT_RETRY_CAP_MS)\n        : 100 * attempt;\n    await new Promise((resolve) => setTimeout(resolve, delay));\n    response = await fetch(fetchUrl, options);\n  }\n  return response;\n}\n\nfunction buildClient<T extends RouterContract>(\n  config: ClientServiceConfig,\n  url: `/${string}`,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (!config.hostUrl) {\n    throw new Error(\"Missing runtime host URL\");\n  }\n  return createORPCClient(createRpcLink(config, url, headers)) as ContractRouterClient<T>;\n}\n\nconst browserClients = new Map<string, unknown>();\n\nfunction memoizedClient<T extends RouterContract>(\n  config: ClientServiceConfig,\n  url: `/${string}`,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (typeof window !== \"undefined\" && !headers) {\n    const key = `${config.hostUrl}${url}`;\n    const memoized = browserClients.get(key);\n    if (memoized) {\n      return memoized as ContractRouterClient<T>;\n    }\n    const client = buildClient<T>(config, url, headers);\n    browserClients.set(key, client);\n    return client;\n  }\n\n  return buildClient<T>(config, url, headers);\n}\n\nexport function createApiClient<T extends RouterContract = RouterContract>(\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return memoizedClient<T>(config, config.rpcBase, headers);\n}\n\nexport function createPluginApiClient<T extends RouterContract = RouterContract>(\n  pluginKey: string,\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return memoizedClient<T>(config, `${config.rpcBase}/${pluginKey}`, headers);\n}\n\nexport function createServiceClients<\n  C extends Record<string, RouterContract>,\n  K extends keyof C & string = keyof C & string,\n>(\n  config: ClientServiceConfig,\n  keys: readonly K[],\n  headers?: Headers,\n): Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K> {\n  const clients: Record<string, unknown> = {};\n  for (const key of keys) {\n    if (key === \"api\") {\n      clients[key] = createApiClient<C[typeof key]>(config, headers);\n    } else {\n      clients[key] = createPluginApiClient<C[typeof key]>(key, config, headers);\n    }\n  }\n  return clients as Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K>;\n}\n\nfunction useClientContext(): ClientRouterContext {\n  return useRouter().options.context as ClientRouterContext;\n}\n\nexport function useApiClient<T extends RouterContract = RouterContract>(): ContractRouterClient<T> {\n  return useClientContext().apiClient as ContractRouterClient<T>;\n}\n\nexport function useOrpc<T extends RouterContract = RouterContract>() {\n  return createTanstackQueryUtils(useApiClient<T>());\n}\n\nexport function usePluginClients<C extends Record<string, unknown> = Record<string, unknown>>(): C {\n  return (useClientContext().pluginClients ?? {}) as C;\n}\n"],"mappings":";;;;;;AA+BA,SAAS,cAAc,QAA6B,KAAmB,SAAmB;CACxF,OAAO,IAAI,QAAQ;EACjB,QAAQ,OAAO;EACf;EACA,cAAc,CACZ,SAAS,UAAmB;GAC1B,IAAI,OAAO,WAAW,aACpB;GAGF,IAAI,SAAS,OAAO,UAAU,YAAY,aAAa,OAAO;IAC5D,MAAM,UAAU,OAAO,MAAM,OAAO,CAAC,CAAC,YAAY;IAClD,IACE,QAAQ,SAAS,OAAO,KACxB,QAAQ,SAAS,SAAS,KAC1B,QAAQ,SAAS,iBAAiB,GAElC,AAAK,OAAO,SAAS,CAClB,MAAM,EAAE,YAAY;KACnB,MAAM,UAAU,OAAO,kBAAkB,KAAK;MAC5C,OAAO;MACP,aAAa;KACf;KACA,MAAM,MAAM,QAAQ,OAAO;MACzB,IAAI;MACJ,aAAa,QAAQ;KACvB,CAAC;IACH,CAAC,CAAC,CACD,YAAY,CAAC,CAAC;GAErB;EACF,CAAC,CACH;EACA,MAAM,UAA6B,SAAuB;GACxD,OAAO,wBAAwB,UAAU;IACvC,GAAG;IACH,aAAa;IACb,SAAS,UACL;KAAE,GAAG,OAAO,YAAY,OAAO;KAAG,GAAI,SAAS;IAAmC,IAClF,SAAS;GACf,CAAC;EACH;CACF,CAAC;AACH;AAEA,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;;;;;;AAOhC,eAAe,wBACb,UACA,SACmB;CACnB,IAAI,WAAW,MAAM,MAAM,UAAU,OAAO;CAC5C,KAAK,IAAI,UAAU,GAAG,WAAW,0BAA0B,SAAS,WAAW,KAAK,WAAW;EAC7F,MAAM,oBAAoB,OAAO,SAAS,QAAQ,IAAI,aAAa,CAAC;EACpE,MAAM,QACJ,OAAO,SAAS,iBAAiB,KAAK,oBAAoB,IACtD,KAAK,IAAI,oBAAoB,KAAM,uBAAuB,IAC1D,MAAM;EACZ,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,KAAK,CAAC;EACzD,WAAW,MAAM,MAAM,UAAU,OAAO;CAC1C;CACA,OAAO;AACT;AAEA,SAAS,YACP,QACA,KACA,SACyB;CACzB,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,0BAA0B;CAE5C,OAAO,iBAAiB,cAAc,QAAQ,KAAK,OAAO,CAAC;AAC7D;AAEA,MAAM,iCAAiB,IAAI,IAAqB;AAEhD,SAAS,eACP,QACA,KACA,SACyB;CACzB,IAAI,OAAO,WAAW,eAAe,CAAC,SAAS;EAC7C,MAAM,MAAM,GAAG,OAAO,UAAU;EAChC,MAAM,WAAW,eAAe,IAAI,GAAG;EACvC,IAAI,UACF,OAAO;EAET,MAAM,SAAS,YAAe,QAAQ,KAAK,OAAO;EAClD,eAAe,IAAI,KAAK,MAAM;EAC9B,OAAO;CACT;CAEA,OAAO,YAAe,QAAQ,KAAK,OAAO;AAC5C;AAEA,SAAgB,gBACd,QACA,SACyB;CACzB,OAAO,eAAkB,QAAQ,OAAO,SAAS,OAAO;AAC1D;AAEA,SAAgB,sBACd,WACA,QACA,SACyB;CACzB,OAAO,eAAkB,QAAQ,GAAG,OAAO,QAAQ,GAAG,aAAa,OAAO;AAC5E;AAEA,SAAgB,qBAId,QACA,MACA,SACyD;CACzD,MAAM,UAAmC,CAAC;CAC1C,KAAK,MAAM,OAAO,MAChB,IAAI,QAAQ,OACV,QAAQ,OAAO,gBAA+B,QAAQ,OAAO;MAE7D,QAAQ,OAAO,sBAAqC,KAAK,QAAQ,OAAO;CAG5E,OAAO;AACT;AAEA,SAAS,mBAAwC;CAC/C,OAAO,UAAU,CAAC,CAAC,QAAQ;AAC7B;AAEA,SAAgB,eAAmF;CACjG,OAAO,iBAAiB,CAAC,CAAC;AAC5B;AAEA,SAAgB,UAAqD;CACnE,OAAO,yBAAyB,aAAgB,CAAC;AACnD;AAEA,SAAgB,mBAAmF;CACjG,OAAQ,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;AAC/C"}
+{"version":3,"file":"api.mjs","names":[],"sources":["../../src/ui/api.ts"],"sourcesContent":["import type { ContractRouterClient, RouterContract } from \"@orpc/contract\";\nimport { createTanstackQueryUtils } from \"@orpc/tanstack-query\";\nimport { useRouter } from \"@tanstack/react-router\";\nimport { createRpcClient, type RpcConnectionErrorCopy } from \"every-plugin/client\";\n\nexport type { RouterContract };\n\n/**\n * Localized copy for the API connection-failure toast — the app's authored\n * override seam (ADR 0023). Called at error time, so the implementation may\n * resolve the active locale itself.\n */\nexport type ApiConnectionErrorCopy = RpcConnectionErrorCopy;\n\n/** typed client for the app's default router contract (router-context default) */\nexport type ApiClient<T extends RouterContract = RouterContract> = ContractRouterClient<T>;\n\nexport interface ClientServiceConfig {\n  hostUrl: string;\n  rpcBase: `/${string}`;\n  connectionError?: ApiConnectionErrorCopy;\n}\n\ntype ClientRouterContext = {\n  apiClient?: unknown;\n  pluginClients?: Record<string, unknown>;\n};\n\nexport type { ClientRouterContext };\n\nexport function createApiClient<T extends RouterContract = RouterContract>(\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return createRpcClient<T>(\n    {\n      hostUrl: config.hostUrl,\n      path: config.rpcBase,\n      connectionError: config.connectionError,\n    },\n    headers,\n  );\n}\n\nexport function createPluginApiClient<T extends RouterContract = RouterContract>(\n  pluginKey: string,\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return createRpcClient<T>(\n    {\n      hostUrl: config.hostUrl,\n      path: `${config.rpcBase}/${pluginKey}`,\n      connectionError: config.connectionError,\n    },\n    headers,\n  );\n}\n\nexport function createServiceClients<\n  C extends Record<string, RouterContract>,\n  K extends keyof C & string = keyof C & string,\n>(\n  config: ClientServiceConfig,\n  keys: readonly K[],\n  headers?: Headers,\n): Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K> {\n  const clients: Record<string, unknown> = {};\n  for (const key of keys) {\n    if (key === \"api\") {\n      clients[key] = createApiClient<C[typeof key]>(config, headers);\n    } else {\n      clients[key] = createPluginApiClient<C[typeof key]>(key, config, headers);\n    }\n  }\n  return clients as Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K>;\n}\n\nfunction useClientContext(): ClientRouterContext {\n  return useRouter().options.context as ClientRouterContext;\n}\n\nexport function useApiClient<T extends RouterContract = RouterContract>(): ContractRouterClient<T> {\n  return useClientContext().apiClient as ContractRouterClient<T>;\n}\n\nexport function useOrpc<T extends RouterContract = RouterContract>() {\n  return createTanstackQueryUtils(useApiClient<T>());\n}\n\nexport function usePluginClients<C extends Record<string, unknown> = Record<string, unknown>>(): C {\n  return (useClientContext().pluginClients ?? {}) as C;\n}\n"],"mappings":";;;;;AA8BA,SAAgB,gBACd,QACA,SACyB;CACzB,OAAO,gBACL;EACE,SAAS,OAAO;EAChB,MAAM,OAAO;EACb,iBAAiB,OAAO;CAC1B,GACA,OACF;AACF;AAEA,SAAgB,sBACd,WACA,QACA,SACyB;CACzB,OAAO,gBACL;EACE,SAAS,OAAO;EAChB,MAAM,GAAG,OAAO,QAAQ,GAAG;EAC3B,iBAAiB,OAAO;CAC1B,GACA,OACF;AACF;AAEA,SAAgB,qBAId,QACA,MACA,SACyD;CACzD,MAAM,UAAmC,CAAC;CAC1C,KAAK,MAAM,OAAO,MAChB,IAAI,QAAQ,OACV,QAAQ,OAAO,gBAA+B,QAAQ,OAAO;MAE7D,QAAQ,OAAO,sBAAqC,KAAK,QAAQ,OAAO;CAG5E,OAAO;AACT;AAEA,SAAS,mBAAwC;CAC/C,OAAO,UAAU,CAAC,CAAC,QAAQ;AAC7B;AAEA,SAAgB,eAAmF;CACjG,OAAO,iBAAiB,CAAC,CAAC;AAC5B;AAEA,SAAgB,UAAqD;CACnE,OAAO,yBAAyB,aAAgB,CAAC;AACnD;AAEA,SAAgB,mBAAmF;CACjG,OAAQ,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;AAC/C"}

package/dist/ui/auth-guards.d.cts

@@ -22,11 +22,87 @@ interface AuthGuardArgs {
 }
 declare function requireSession({ context, location }: AuthGuardArgs): Promise<{
   auth: AuthContext;
-  session: any;
+  session: {
+    user: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      email: string;
+      emailVerified: boolean;
+      name: string;
+      image?: string | null | undefined;
+    } & {} & {
+      locale?: string | null | undefined;
+    } & {
+      banned: boolean | null | undefined;
+    } & {
+      banExpires?: Date | null | undefined;
+      banReason?: string | null | undefined;
+      role?: string | null | undefined;
+    } & {
+      isAnonymous: boolean | null | undefined;
+    } & {} & {} & {
+      phoneNumber?: string | null | undefined;
+      phoneNumberVerified?: boolean | null | undefined;
+    }>;
+    session: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      userId: string;
+      expiresAt: Date;
+      token: string;
+      ipAddress?: string | null | undefined;
+      userAgent?: string | null | undefined;
+    } & {} & {} & {} & {
+      impersonatedBy?: string | null | undefined;
+    } & {} & {
+      activeOrganizationId?: string | null | undefined;
+      activeTeamId?: string | null | undefined;
+    }>;
+  };
 }>;
 declare function requireAdmin(args: AuthGuardArgs): Promise<{
   auth: AuthContext;
-  session: any;
+  session: {
+    user: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      email: string;
+      emailVerified: boolean;
+      name: string;
+      image?: string | null | undefined;
+    } & {} & {
+      locale?: string | null | undefined;
+    } & {
+      banned: boolean | null | undefined;
+    } & {
+      banExpires?: Date | null | undefined;
+      banReason?: string | null | undefined;
+      role?: string | null | undefined;
+    } & {
+      isAnonymous: boolean | null | undefined;
+    } & {} & {} & {
+      phoneNumber?: string | null | undefined;
+      phoneNumberVerified?: boolean | null | undefined;
+    }>;
+    session: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      userId: string;
+      expiresAt: Date;
+      token: string;
+      ipAddress?: string | null | undefined;
+      userAgent?: string | null | undefined;
+    } & {} & {} & {} & {
+      impersonatedBy?: string | null | undefined;
+    } & {} & {
+      activeOrganizationId?: string | null | undefined;
+      activeTeamId?: string | null | undefined;
+    }>;
+  };
 }>;
 /**
  * Clears private and public query data on sign-out while leaving an explicit

package/dist/ui/auth-guards.d.mts

@@ -22,11 +22,87 @@ interface AuthGuardArgs {
 }
 declare function requireSession({ context, location }: AuthGuardArgs): Promise<{
   auth: AuthContext;
-  session: any;
+  session: {
+    user: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      email: string;
+      emailVerified: boolean;
+      name: string;
+      image?: string | null | undefined;
+    } & {} & {
+      locale?: string | null | undefined;
+    } & {
+      banned: boolean | null | undefined;
+    } & {
+      banExpires?: Date | null | undefined;
+      banReason?: string | null | undefined;
+      role?: string | null | undefined;
+    } & {
+      isAnonymous: boolean | null | undefined;
+    } & {} & {} & {
+      phoneNumber?: string | null | undefined;
+      phoneNumberVerified?: boolean | null | undefined;
+    }>;
+    session: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      userId: string;
+      expiresAt: Date;
+      token: string;
+      ipAddress?: string | null | undefined;
+      userAgent?: string | null | undefined;
+    } & {} & {} & {} & {
+      impersonatedBy?: string | null | undefined;
+    } & {} & {
+      activeOrganizationId?: string | null | undefined;
+      activeTeamId?: string | null | undefined;
+    }>;
+  };
 }>;
 declare function requireAdmin(args: AuthGuardArgs): Promise<{
   auth: AuthContext;
-  session: any;
+  session: {
+    user: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      email: string;
+      emailVerified: boolean;
+      name: string;
+      image?: string | null | undefined;
+    } & {} & {
+      locale?: string | null | undefined;
+    } & {
+      banned: boolean | null | undefined;
+    } & {
+      banExpires?: Date | null | undefined;
+      banReason?: string | null | undefined;
+      role?: string | null | undefined;
+    } & {
+      isAnonymous: boolean | null | undefined;
+    } & {} & {} & {
+      phoneNumber?: string | null | undefined;
+      phoneNumberVerified?: boolean | null | undefined;
+    }>;
+    session: import("better-auth").StripEmptyObjects<{
+      id: string;
+      createdAt: Date;
+      updatedAt: Date;
+      userId: string;
+      expiresAt: Date;
+      token: string;
+      ipAddress?: string | null | undefined;
+      userAgent?: string | null | undefined;
+    } & {} & {} & {} & {
+      impersonatedBy?: string | null | undefined;
+    } & {} & {
+      activeOrganizationId?: string | null | undefined;
+      activeTeamId?: string | null | undefined;
+    }>;
+  };
 }>;
 /**
  * Clears private and public query data on sign-out while leaving an explicit

package/dist/ui/auth.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth.cjs","names":["getRuntimeConfig","DEFAULT_DEVICE_LINK_CLIENT_ID","createBetterAuthClient","inferAdditionalFields","siwnClient","adminClient","anonymousClient","phoneNumberClient","passkeyClient","organizationClient","apiKeyClient","deviceAuthorizationClient","useRouter","useQuery"],"sources":["../../src/ui/auth.ts"],"sourcesContent":["import { apiKeyClient } from \"@better-auth/api-key/client\";\nimport { passkeyClient } from \"@better-auth/passkey/client\";\nimport { type QueryClient, useQuery } from \"@tanstack/react-query\";\nimport { useRouter } from \"@tanstack/react-router\";\nimport {\n  adminClient,\n  anonymousClient,\n  deviceAuthorizationClient,\n  inferAdditionalFields,\n  organizationClient,\n  phoneNumberClient,\n} from \"better-auth/client/plugins\";\nimport { createAuthClient as createBetterAuthClient } from \"better-auth/react\";\nimport type { PasskeyWalletLink, RelayedTransactionT } from \"better-near-auth\";\nimport { DEFAULT_DEVICE_LINK_CLIENT_ID, siwnClient } from \"better-near-auth/client\";\nimport type { ClientRuntimeConfig } from \"../types\";\nimport { getRuntimeConfig } from \"./runtime\";\n\ntype RuntimeAuthVariables = {\n  siwn: {\n    recipient?: string;\n    recipients?: {\n      mainnet?: string;\n      testnet?: string;\n    };\n  };\n  deviceLink?: {\n    clientId?: string;\n  };\n};\n\nexport type CreateAuthClientOptions = {\n  runtimeConfig?: Partial<ClientRuntimeConfig>;\n  headers?: HeadersInit;\n  cspNonce?: string;\n};\n\ntype SiwnClientConfig = Parameters<typeof siwnClient>[0] & {\n  cspNonce?: string;\n};\n\nfunction hasAuthVariables(auth: ClientRuntimeConfig[\"auth\"] | undefined): auth is NonNullable<\n  ClientRuntimeConfig[\"auth\"]\n> & {\n  variables: RuntimeAuthVariables;\n} {\n  return !!auth && typeof auth === \"object\" && typeof auth.variables === \"object\";\n}\n\nfunction readRuntimeConfig(config?: Partial<ClientRuntimeConfig>) {\n  if (config) return config;\n  if (typeof window === \"undefined\") return undefined;\n  try {\n    return getRuntimeConfig();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction getAuthVariables(config?: Partial<ClientRuntimeConfig>): RuntimeAuthVariables {\n  const runtimeConfig = readRuntimeConfig(config);\n  if (!runtimeConfig || !hasAuthVariables(runtimeConfig.auth)) {\n    throw new Error(\"Missing auth runtime configuration\");\n  }\n  return runtimeConfig.auth.variables;\n}\n\nfunction getSiwnClientConfig(options: CreateAuthClientOptions): SiwnClientConfig {\n  const runtimeConfig = readRuntimeConfig(options.runtimeConfig);\n  const variables = getAuthVariables(options.runtimeConfig);\n  const siwn = variables.siwn;\n\n  const mainnetRecipient = siwn.recipients?.mainnet ?? siwn.recipient;\n  if (!mainnetRecipient) {\n    throw new Error(\"Missing auth SIWN recipient\");\n  }\n\n  const networkId =\n    runtimeConfig?.networkId ?? (mainnetRecipient.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\");\n  const testnetRecipient = siwn.recipients?.testnet;\n\n  if (testnetRecipient) {\n    return {\n      recipients: { mainnet: mainnetRecipient, testnet: testnetRecipient },\n      networkId,\n      cspNonce: options.cspNonce,\n    };\n  }\n\n  return { recipient: mainnetRecipient, networkId, cspNonce: options.cspNonce };\n}\n\nfunction getHostUrl(config?: Partial<ClientRuntimeConfig>) {\n  const runtimeConfig = readRuntimeConfig(config);\n  if (runtimeConfig?.hostUrl) return runtimeConfig.hostUrl;\n  if (typeof window !== \"undefined\") return window.location.origin;\n  return \"\";\n}\n\nexport function getDeviceLinkClientId(config?: Partial<ClientRuntimeConfig>): string {\n  const runtimeConfig = readRuntimeConfig(config);\n  const variables = runtimeConfig?.auth?.variables as RuntimeAuthVariables | undefined;\n  return variables?.deviceLink?.clientId ?? DEFAULT_DEVICE_LINK_CLIENT_ID;\n}\n\nexport function createAuthClient(options: CreateAuthClientOptions = {}) {\n  const nearAuthConfig = getSiwnClientConfig(options);\n\n  return createBetterAuthClient({\n    baseURL: getHostUrl(options.runtimeConfig),\n    fetchOptions: {\n      credentials: \"include\",\n      ...(options.headers ? { headers: options.headers } : {}),\n    },\n    plugins: [\n      inferAdditionalFields({\n        user: {\n          locale: { type: \"string\", required: false, input: true },\n        },\n      }),\n      siwnClient(nearAuthConfig),\n      adminClient(),\n      anonymousClient(),\n      phoneNumberClient(),\n      passkeyClient(),\n      organizationClient({ teams: { enabled: true } }),\n      apiKeyClient(),\n      deviceAuthorizationClient(),\n    ],\n  });\n}\n\nexport type { AuthContext } from \"./auth-guards\";\nexport {\n  clearAuthenticatedQueries,\n  requireAdmin,\n  requireSession,\n} from \"./auth-guards\";\nexport { pluginHref, pluginPath, pluginSearch } from \"./plugin-path\";\n\nexport type AuthClient = ReturnType<typeof createAuthClient>;\ntype OrganizationListResult = Awaited<ReturnType<AuthClient[\"organization\"][\"list\"]>>;\ntype PasskeyListResult = Awaited<ReturnType<AuthClient[\"passkey\"][\"listUserPasskeys\"]>>;\n\nexport type SessionData = AuthClient[\"$Infer\"][\"Session\"];\nexport type Organization = NonNullable<OrganizationListResult[\"data\"]>[number];\nexport type Passkey = NonNullable<PasskeyListResult[\"data\"]>[number];\n\nexport function useAuthClient(): AuthClient {\n  return useRouter().options.context.authClient as AuthClient;\n}\n\nexport const sessionQueryKey = [\"session\"] as const;\n\nexport function sessionQueryOptions(authClient: AuthClient) {\n  return {\n    queryKey: sessionQueryKey,\n    queryFn: async () => {\n      const { data: session, error } = await authClient.getSession({\n        query: { disableCookieCache: true },\n      });\n      if (error) throw new Error(error.message || \"Unable to load your session\");\n      return session ?? null;\n    },\n    staleTime: 60 * 1000,\n    gcTime: 10 * 60 * 1000,\n  };\n}\n\nexport async function refreshSessionCache(\n  authClient: AuthClient,\n  queryClient: QueryClient,\n): Promise<SessionData | null> {\n  return queryClient.fetchQuery({ ...sessionQueryOptions(authClient), staleTime: 0 });\n}\n\n/**\n * Resolves the session for the root route: the query cache wins (it is kept\n * authoritative by the single sessionQueryOptions read path), and a populated\n * router-context session — the host's SSR resolution — seeds an empty cache so\n * the dehydrated state carries it to the client.\n */\nexport function resolveSessionFromCache<T>(\n  queryClient: QueryClient | undefined,\n  contextSession: T | null | undefined,\n): T | null | undefined {\n  if (!queryClient) return contextSession;\n\n  const cachedSession = queryClient.getQueryData<T | null>(sessionQueryKey);\n  if (cachedSession !== undefined) return cachedSession;\n\n  if (contextSession !== undefined) {\n    queryClient.setQueryData(sessionQueryKey, contextSession);\n  }\n  return contextSession;\n}\n\nexport function useRelayHistory(session: SessionData | null | undefined, authClient: AuthClient) {\n  return useQuery({\n    queryKey: [\"relay-history\"],\n    queryFn: async (): Promise<RelayedTransactionT[]> => {\n      const res = await authClient.near.relayHistory();\n      return res?.data?.transactions ?? [];\n    },\n    enabled: !!session,\n    refetchInterval: 2000,\n  });\n}\n\nexport type PasskeyWalletStatus = PasskeyWalletLink;\n\nexport type PasskeyCeremonyError = Error & { code?: string };\n\nconst UNSUPPORTED_AUTHENTICATOR_CODES = new Set([\n  \"PASSKEY_UNSUPPORTED_AUTHENTICATOR\",\n  \"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG\",\n  \"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT\",\n  \"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT\",\n]);\n\nexport function isUnsupportedAuthenticatorError(error: unknown): boolean {\n  if (!(error instanceof Error) || !(\"code\" in error)) return false;\n  return typeof error.code === \"string\" && UNSUPPORTED_AUTHENTICATOR_CODES.has(error.code);\n}\n\nfunction toPasskeyError(\n  error: { code?: string; message?: string } | null | undefined,\n  fallback: string,\n): PasskeyCeremonyError {\n  return Object.assign(new Error(error?.message || fallback), { code: error?.code });\n}\n\nexport async function isPasskeyAutofillAvailable(): Promise<boolean> {\n  if (typeof window === \"undefined\" || !window.PublicKeyCredential) return false;\n  try {\n    return (await window.PublicKeyCredential.isConditionalMediationAvailable?.()) === true;\n  } catch {\n    return false;\n  }\n}\n\nexport async function createAccountWithPasskey(\n  authClient: AuthClient,\n  options?: {\n    onSuccess?: (result: { passkeyWallet?: PasskeyWalletStatus }) => void;\n    onError?: (error: PasskeyCeremonyError) => void;\n  },\n): Promise<void> {\n  try {\n    const { data, error } = await authClient.passkey.addPasskey();\n    if (error || !data) {\n      options?.onError?.(toPasskeyError(error, \"Could not create your account\"));\n      return;\n    }\n    const { passkeyWallet } = data as { passkeyWallet?: PasskeyWalletStatus };\n    options?.onSuccess?.({ passkeyWallet });\n  } catch (error) {\n    options?.onError?.(\n      toPasskeyError(error instanceof Error ? error : null, \"Could not create your account\"),\n    );\n  }\n}\n\nexport async function signInWithPasskey(\n  authClient: AuthClient,\n  options?: {\n    autoFill?: boolean;\n    onSuccess?: () => void;\n    onError?: (error: PasskeyCeremonyError) => void;\n  },\n): Promise<void> {\n  try {\n    const { data, error } = await authClient.signIn.passkey({ autoFill: options?.autoFill });\n    if (error || !data) {\n      options?.onError?.(toPasskeyError(error, \"Passkey sign-in failed\"));\n      return;\n    }\n    options?.onSuccess?.();\n  } catch (error) {\n    options?.onError?.(\n      toPasskeyError(error instanceof Error ? error : null, \"Passkey sign-in failed\"),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAyCA,SAAS,iBAAiB,MAIxB;CACA,OAAO,CAAC,CAAC,QAAQ,OAAO,SAAS,YAAY,OAAO,KAAK,cAAc;AACzE;AAEA,SAAS,kBAAkB,QAAuC;CAChE,IAAI,QAAQ,OAAO;CACnB,IAAI,OAAO,WAAW,aAAa,OAAO;CAC1C,IAAI;EACF,OAAOA,oCAAiB;CAC1B,QAAQ;EACN;CACF;AACF;AAEA,SAAS,iBAAiB,QAA6D;CACrF,MAAM,gBAAgB,kBAAkB,MAAM;CAC9C,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,cAAc,IAAI,GACxD,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO,cAAc,KAAK;AAC5B;AAEA,SAAS,oBAAoB,SAAoD;CAC/E,MAAM,gBAAgB,kBAAkB,QAAQ,aAAa;CAE7D,MAAM,OADY,iBAAiB,QAAQ,aACtB,CAAC,CAAC;CAEvB,MAAM,mBAAmB,KAAK,YAAY,WAAW,KAAK;CAC1D,IAAI,CAAC,kBACH,MAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,YACJ,eAAe,cAAc,iBAAiB,SAAS,UAAU,IAAI,YAAY;CACnF,MAAM,mBAAmB,KAAK,YAAY;CAE1C,IAAI,kBACF,OAAO;EACL,YAAY;GAAE,SAAS;GAAkB,SAAS;EAAiB;EACnE;EACA,UAAU,QAAQ;CACpB;CAGF,OAAO;EAAE,WAAW;EAAkB;EAAW,UAAU,QAAQ;CAAS;AAC9E;AAEA,SAAS,WAAW,QAAuC;CACzD,MAAM,gBAAgB,kBAAkB,MAAM;CAC9C,IAAI,eAAe,SAAS,OAAO,cAAc;CACjD,IAAI,OAAO,WAAW,aAAa,OAAO,OAAO,SAAS;CAC1D,OAAO;AACT;AAEA,SAAgB,sBAAsB,QAA+C;CAGnF,QAFsB,kBAAkB,MACV,CAAC,EAAE,MAAM,UACvB,EAAE,YAAY,YAAYC;AAC5C;AAEA,SAAgB,iBAAiB,UAAmC,CAAC,GAAG;CACtE,MAAM,iBAAiB,oBAAoB,OAAO;CAElD,WAAOC,oCAAuB;EAC5B,SAAS,WAAW,QAAQ,aAAa;EACzC,cAAc;GACZ,aAAa;GACb,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACxD;EACA,SAAS;OACPC,kDAAsB,EACpB,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,UAAU;IAAO,OAAO;GAAK,EACzD,EACF,CAAC;OACDC,oCAAW,cAAc;OACzBC,wCAAY;OACZC,4CAAgB;OAChBC,8CAAkB;OAClBC,2CAAc;OACdC,+CAAmB,EAAE,OAAO,EAAE,SAAS,KAAK,EAAE,CAAC;OAC/CC,0CAAa;OACbC,sDAA0B;EAC5B;CACF,CAAC;AACH;AAkBA,SAAgB,gBAA4B;CAC1C,WAAOC,kCAAU,CAAC,CAAC,QAAQ,QAAQ;AACrC;AAEA,MAAa,kBAAkB,CAAC,SAAS;AAEzC,SAAgB,oBAAoB,YAAwB;CAC1D,OAAO;EACL,UAAU;EACV,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,SAAS,UAAU,MAAM,WAAW,WAAW,EAC3D,OAAO,EAAE,oBAAoB,KAAK,EACpC,CAAC;GACD,IAAI,OAAO,MAAM,IAAI,MAAM,MAAM,WAAW,6BAA6B;GACzE,OAAO,WAAW;EACpB;EACA,WAAW;EACX,QAAQ;CACV;AACF;AAEA,eAAsB,oBACpB,YACA,aAC6B;CAC7B,OAAO,YAAY,WAAW;EAAE,GAAG,oBAAoB,UAAU;EAAG,WAAW;CAAE,CAAC;AACpF;;;;;;;AAQA,SAAgB,wBACd,aACA,gBACsB;CACtB,IAAI,CAAC,aAAa,OAAO;CAEzB,MAAM,gBAAgB,YAAY,aAAuB,eAAe;CACxE,IAAI,kBAAkB,QAAW,OAAO;CAExC,IAAI,mBAAmB,QACrB,YAAY,aAAa,iBAAiB,cAAc;CAE1D,OAAO;AACT;AAEA,SAAgB,gBAAgB,SAAyC,YAAwB;CAC/F,WAAOC,gCAAS;EACd,UAAU,CAAC,eAAe;EAC1B,SAAS,YAA4C;GAEnD,QAAO,MADW,WAAW,KAAK,aAAa,EACrC,EAAE,MAAM,gBAAgB,CAAC;EACrC;EACA,SAAS,CAAC,CAAC;EACX,iBAAiB;CACnB,CAAC;AACH;AAMA,MAAM,kDAAkC,IAAI,IAAI;CAC9C;CACA;CACA;CACA;AACF,CAAC;AAED,SAAgB,gCAAgC,OAAyB;CACvE,IAAI,EAAE,iBAAiB,UAAU,EAAE,UAAU,QAAQ,OAAO;CAC5D,OAAO,OAAO,MAAM,SAAS,YAAY,gCAAgC,IAAI,MAAM,IAAI;AACzF;AAEA,SAAS,eACP,OACA,UACsB;CACtB,OAAO,OAAO,OAAO,IAAI,MAAM,OAAO,WAAW,QAAQ,GAAG,EAAE,MAAM,OAAO,KAAK,CAAC;AACnF;AAEA,eAAsB,6BAA+C;CACnE,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,qBAAqB,OAAO;CACzE,IAAI;EACF,OAAQ,MAAM,OAAO,oBAAoB,kCAAkC,MAAO;CACpF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAsB,yBACpB,YACA,SAIe;CACf,IAAI;EACF,MAAM,EAAE,MAAM,UAAU,MAAM,WAAW,QAAQ,WAAW;EAC5D,IAAI,SAAS,CAAC,MAAM;GAClB,SAAS,UAAU,eAAe,OAAO,+BAA+B,CAAC;GACzE;EACF;EACA,MAAM,EAAE,kBAAkB;EAC1B,SAAS,YAAY,EAAE,cAAc,CAAC;CACxC,SAAS,OAAO;EACd,SAAS,UACP,eAAe,iBAAiB,QAAQ,QAAQ,MAAM,+BAA+B,CACvF;CACF;AACF;AAEA,eAAsB,kBACpB,YACA,SAKe;CACf,IAAI;EACF,MAAM,EAAE,MAAM,UAAU,MAAM,WAAW,OAAO,QAAQ,EAAE,UAAU,SAAS,SAAS,CAAC;EACvF,IAAI,SAAS,CAAC,MAAM;GAClB,SAAS,UAAU,eAAe,OAAO,wBAAwB,CAAC;GAClE;EACF;EACA,SAAS,YAAY;CACvB,SAAS,OAAO;EACd,SAAS,UACP,eAAe,iBAAiB,QAAQ,QAAQ,MAAM,wBAAwB,CAChF;CACF;AACF"}
+{"version":3,"file":"auth.cjs","names":["getRuntimeConfig","DEFAULT_DEVICE_LINK_CLIENT_ID","createBetterAuthClient","inferAdditionalFields","siwnClient","adminClient","anonymousClient","phoneNumberClient","passkeyClient","organizationClient","apiKeyClient","deviceAuthorizationClient","useRouter","useQuery"],"sources":["../../src/ui/auth.ts"],"sourcesContent":["import { apiKeyClient } from \"@better-auth/api-key/client\";\nimport { passkeyClient } from \"@better-auth/passkey/client\";\nimport { type QueryClient, useQuery } from \"@tanstack/react-query\";\nimport { useRouter } from \"@tanstack/react-router\";\nimport {\n  adminClient,\n  anonymousClient,\n  deviceAuthorizationClient,\n  inferAdditionalFields,\n  organizationClient,\n  phoneNumberClient,\n} from \"better-auth/client/plugins\";\nimport { createAuthClient as createBetterAuthClient } from \"better-auth/react\";\nimport type { PasskeyWalletLink, RelayedTransactionT } from \"better-near-auth\";\nimport { DEFAULT_DEVICE_LINK_CLIENT_ID, siwnClient } from \"better-near-auth/client\";\nimport type { ClientRuntimeConfig } from \"../types\";\nimport { getRuntimeConfig } from \"./runtime\";\n\ntype RuntimeAuthVariables = {\n  siwn: {\n    recipient?: string;\n    recipients?: {\n      mainnet?: string;\n      testnet?: string;\n    };\n  };\n  deviceLink?: {\n    clientId?: string;\n  };\n};\n\nexport type CreateAuthClientOptions = {\n  runtimeConfig?: Partial<ClientRuntimeConfig>;\n  headers?: HeadersInit;\n  cspNonce?: string;\n};\n\ntype SiwnClientConfig = Parameters<typeof siwnClient>[0] & {\n  cspNonce?: string;\n};\n\nfunction hasAuthVariables(auth: ClientRuntimeConfig[\"auth\"] | undefined): auth is NonNullable<\n  ClientRuntimeConfig[\"auth\"]\n> & {\n  variables: RuntimeAuthVariables;\n} {\n  return !!auth && typeof auth === \"object\" && typeof auth.variables === \"object\";\n}\n\nfunction readRuntimeConfig(config?: Partial<ClientRuntimeConfig>) {\n  if (config) return config;\n  if (typeof window === \"undefined\") return undefined;\n  try {\n    return getRuntimeConfig();\n  } catch {\n    return undefined;\n  }\n}\n\nfunction getAuthVariables(config?: Partial<ClientRuntimeConfig>): RuntimeAuthVariables {\n  const runtimeConfig = readRuntimeConfig(config);\n  if (!runtimeConfig || !hasAuthVariables(runtimeConfig.auth)) {\n    throw new Error(\"Missing auth runtime configuration\");\n  }\n  return runtimeConfig.auth.variables;\n}\n\nfunction getSiwnClientConfig(options: CreateAuthClientOptions): SiwnClientConfig {\n  const runtimeConfig = readRuntimeConfig(options.runtimeConfig);\n  const variables = getAuthVariables(options.runtimeConfig);\n  const siwn = variables.siwn;\n\n  const mainnetRecipient = siwn.recipients?.mainnet ?? siwn.recipient;\n  if (!mainnetRecipient) {\n    throw new Error(\"Missing auth SIWN recipient\");\n  }\n\n  const networkId =\n    runtimeConfig?.networkId ?? (mainnetRecipient.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\");\n  const testnetRecipient = siwn.recipients?.testnet;\n\n  if (testnetRecipient) {\n    return {\n      recipients: { mainnet: mainnetRecipient, testnet: testnetRecipient },\n      networkId,\n      cspNonce: options.cspNonce,\n    };\n  }\n\n  return { recipient: mainnetRecipient, networkId, cspNonce: options.cspNonce };\n}\n\nfunction getHostUrl(config?: Partial<ClientRuntimeConfig>) {\n  const runtimeConfig = readRuntimeConfig(config);\n  if (runtimeConfig?.hostUrl) return runtimeConfig.hostUrl;\n  if (typeof window !== \"undefined\") return window.location.origin;\n  return \"\";\n}\n\nexport function getDeviceLinkClientId(config?: Partial<ClientRuntimeConfig>): string {\n  const runtimeConfig = readRuntimeConfig(config);\n  const variables = runtimeConfig?.auth?.variables as RuntimeAuthVariables | undefined;\n  return variables?.deviceLink?.clientId ?? DEFAULT_DEVICE_LINK_CLIENT_ID;\n}\n\nexport function createAuthClient(options: CreateAuthClientOptions = {}) {\n  const nearAuthConfig = getSiwnClientConfig(options);\n\n  return createBetterAuthClient({\n    baseURL: getHostUrl(options.runtimeConfig),\n    fetchOptions: {\n      credentials: \"include\",\n      ...(options.headers ? { headers: options.headers } : {}),\n    },\n    plugins: [\n      inferAdditionalFields({\n        user: {\n          locale: { type: \"string\", required: false, input: true },\n        },\n      }),\n      siwnClient(nearAuthConfig),\n      adminClient(),\n      anonymousClient(),\n      phoneNumberClient(),\n      passkeyClient(),\n      organizationClient({ teams: { enabled: true } }),\n      apiKeyClient(),\n      deviceAuthorizationClient(),\n    ],\n  });\n}\n\nexport type { AuthContext } from \"./auth-guards\";\nexport {\n  clearAuthenticatedQueries,\n  requireAdmin,\n  requireSession,\n} from \"./auth-guards\";\nexport { pluginHref, pluginPath, pluginSearch } from \"./plugin-path\";\n\nexport type AuthClient = ReturnType<typeof createAuthClient>;\n\nexport type SessionData = AuthClient[\"$Infer\"][\"Session\"];\n\n/**\n * Explicit shapes for the organization/passkey records — better-auth's client\n * inference collapses to `any` for these plugin endpoints, which would leak\n * `any` into every consumer union.\n */\nexport interface Organization {\n  id: string;\n  name: string;\n  slug?: string | null;\n  logo?: string | null;\n  createdAt?: Date | string | null;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface Passkey {\n  id: string;\n  name?: string | null;\n  createdAt?: Date | string | null;\n  lastUsedAt?: Date | string | null;\n}\n\nexport function useAuthClient(): AuthClient {\n  return useRouter().options.context.authClient as AuthClient;\n}\n\nexport const sessionQueryKey = [\"session\"] as const;\n\nexport function sessionQueryOptions(authClient: AuthClient) {\n  return {\n    queryKey: sessionQueryKey,\n    queryFn: async () => {\n      const { data: session, error } = await authClient.getSession({\n        query: { disableCookieCache: true },\n      });\n      if (error) throw new Error(error.message || \"Unable to load your session\");\n      return session ?? null;\n    },\n    staleTime: 60 * 1000,\n    gcTime: 10 * 60 * 1000,\n  };\n}\n\nexport async function refreshSessionCache(\n  authClient: AuthClient,\n  queryClient: QueryClient,\n): Promise<SessionData | null> {\n  return queryClient.fetchQuery({ ...sessionQueryOptions(authClient), staleTime: 0 });\n}\n\n/**\n * Resolves the session for the root route: the query cache wins (it is kept\n * authoritative by the single sessionQueryOptions read path), and a populated\n * router-context session — the host's SSR resolution — seeds an empty cache so\n * the dehydrated state carries it to the client.\n */\nexport function resolveSessionFromCache<T>(\n  queryClient: QueryClient | undefined,\n  contextSession: T | null | undefined,\n): T | null | undefined {\n  if (!queryClient) return contextSession;\n\n  const cachedSession = queryClient.getQueryData<T | null>(sessionQueryKey);\n  if (cachedSession !== undefined) return cachedSession;\n\n  if (contextSession !== undefined) {\n    queryClient.setQueryData(sessionQueryKey, contextSession);\n  }\n  return contextSession;\n}\n\nexport function useRelayHistory(session: SessionData | null | undefined, authClient: AuthClient) {\n  return useQuery({\n    queryKey: [\"relay-history\"],\n    queryFn: async (): Promise<RelayedTransactionT[]> => {\n      const res = await authClient.near.relayHistory();\n      return res?.data?.transactions ?? [];\n    },\n    enabled: !!session,\n    refetchInterval: 2000,\n  });\n}\n\nexport type PasskeyWalletStatus = PasskeyWalletLink;\n\nexport type PasskeyCeremonyError = Error & { code?: string };\n\nconst UNSUPPORTED_AUTHENTICATOR_CODES = new Set([\n  \"PASSKEY_UNSUPPORTED_AUTHENTICATOR\",\n  \"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG\",\n  \"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT\",\n  \"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT\",\n]);\n\nexport function isUnsupportedAuthenticatorError(error: unknown): boolean {\n  if (!(error instanceof Error) || !(\"code\" in error)) return false;\n  return typeof error.code === \"string\" && UNSUPPORTED_AUTHENTICATOR_CODES.has(error.code);\n}\n\nfunction toPasskeyError(\n  error: { code?: string; message?: string } | null | undefined,\n  fallback: string,\n): PasskeyCeremonyError {\n  return Object.assign(new Error(error?.message || fallback), { code: error?.code });\n}\n\nexport async function isPasskeyAutofillAvailable(): Promise<boolean> {\n  if (typeof window === \"undefined\" || !window.PublicKeyCredential) return false;\n  try {\n    return (await window.PublicKeyCredential.isConditionalMediationAvailable?.()) === true;\n  } catch {\n    return false;\n  }\n}\n\nexport async function createAccountWithPasskey(\n  authClient: AuthClient,\n  options?: {\n    onSuccess?: (result: { passkeyWallet?: PasskeyWalletStatus }) => void;\n    onError?: (error: PasskeyCeremonyError) => void;\n  },\n): Promise<void> {\n  try {\n    const { data, error } = await authClient.passkey.addPasskey();\n    if (error || !data) {\n      options?.onError?.(toPasskeyError(error, \"Could not create your account\"));\n      return;\n    }\n    const { passkeyWallet } = data as { passkeyWallet?: PasskeyWalletStatus };\n    options?.onSuccess?.({ passkeyWallet });\n  } catch (error) {\n    options?.onError?.(\n      toPasskeyError(error instanceof Error ? error : null, \"Could not create your account\"),\n    );\n  }\n}\n\nexport async function signInWithPasskey(\n  authClient: AuthClient,\n  options?: {\n    autoFill?: boolean;\n    onSuccess?: () => void;\n    onError?: (error: PasskeyCeremonyError) => void;\n  },\n): Promise<void> {\n  try {\n    const { data, error } = await authClient.signIn.passkey({ autoFill: options?.autoFill });\n    if (error || !data) {\n      options?.onError?.(toPasskeyError(error, \"Passkey sign-in failed\"));\n      return;\n    }\n    options?.onSuccess?.();\n  } catch (error) {\n    options?.onError?.(\n      toPasskeyError(error instanceof Error ? error : null, \"Passkey sign-in failed\"),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAyCA,SAAS,iBAAiB,MAIxB;CACA,OAAO,CAAC,CAAC,QAAQ,OAAO,SAAS,YAAY,OAAO,KAAK,cAAc;AACzE;AAEA,SAAS,kBAAkB,QAAuC;CAChE,IAAI,QAAQ,OAAO;CACnB,IAAI,OAAO,WAAW,aAAa,OAAO;CAC1C,IAAI;EACF,OAAOA,oCAAiB;CAC1B,QAAQ;EACN;CACF;AACF;AAEA,SAAS,iBAAiB,QAA6D;CACrF,MAAM,gBAAgB,kBAAkB,MAAM;CAC9C,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,cAAc,IAAI,GACxD,MAAM,IAAI,MAAM,oCAAoC;CAEtD,OAAO,cAAc,KAAK;AAC5B;AAEA,SAAS,oBAAoB,SAAoD;CAC/E,MAAM,gBAAgB,kBAAkB,QAAQ,aAAa;CAE7D,MAAM,OADY,iBAAiB,QAAQ,aACtB,CAAC,CAAC;CAEvB,MAAM,mBAAmB,KAAK,YAAY,WAAW,KAAK;CAC1D,IAAI,CAAC,kBACH,MAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,YACJ,eAAe,cAAc,iBAAiB,SAAS,UAAU,IAAI,YAAY;CACnF,MAAM,mBAAmB,KAAK,YAAY;CAE1C,IAAI,kBACF,OAAO;EACL,YAAY;GAAE,SAAS;GAAkB,SAAS;EAAiB;EACnE;EACA,UAAU,QAAQ;CACpB;CAGF,OAAO;EAAE,WAAW;EAAkB;EAAW,UAAU,QAAQ;CAAS;AAC9E;AAEA,SAAS,WAAW,QAAuC;CACzD,MAAM,gBAAgB,kBAAkB,MAAM;CAC9C,IAAI,eAAe,SAAS,OAAO,cAAc;CACjD,IAAI,OAAO,WAAW,aAAa,OAAO,OAAO,SAAS;CAC1D,OAAO;AACT;AAEA,SAAgB,sBAAsB,QAA+C;CAGnF,QAFsB,kBAAkB,MACV,CAAC,EAAE,MAAM,UACvB,EAAE,YAAY,YAAYC;AAC5C;AAEA,SAAgB,iBAAiB,UAAmC,CAAC,GAAG;CACtE,MAAM,iBAAiB,oBAAoB,OAAO;CAElD,WAAOC,oCAAuB;EAC5B,SAAS,WAAW,QAAQ,aAAa;EACzC,cAAc;GACZ,aAAa;GACb,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;EACxD;EACA,SAAS;OACPC,kDAAsB,EACpB,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,UAAU;IAAO,OAAO;GAAK,EACzD,EACF,CAAC;OACDC,oCAAW,cAAc;OACzBC,wCAAY;OACZC,4CAAgB;OAChBC,8CAAkB;OAClBC,2CAAc;OACdC,+CAAmB,EAAE,OAAO,EAAE,SAAS,KAAK,EAAE,CAAC;OAC/CC,0CAAa;OACbC,sDAA0B;EAC5B;CACF,CAAC;AACH;AAmCA,SAAgB,gBAA4B;CAC1C,WAAOC,kCAAU,CAAC,CAAC,QAAQ,QAAQ;AACrC;AAEA,MAAa,kBAAkB,CAAC,SAAS;AAEzC,SAAgB,oBAAoB,YAAwB;CAC1D,OAAO;EACL,UAAU;EACV,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,SAAS,UAAU,MAAM,WAAW,WAAW,EAC3D,OAAO,EAAE,oBAAoB,KAAK,EACpC,CAAC;GACD,IAAI,OAAO,MAAM,IAAI,MAAM,MAAM,WAAW,6BAA6B;GACzE,OAAO,WAAW;EACpB;EACA,WAAW;EACX,QAAQ;CACV;AACF;AAEA,eAAsB,oBACpB,YACA,aAC6B;CAC7B,OAAO,YAAY,WAAW;EAAE,GAAG,oBAAoB,UAAU;EAAG,WAAW;CAAE,CAAC;AACpF;;;;;;;AAQA,SAAgB,wBACd,aACA,gBACsB;CACtB,IAAI,CAAC,aAAa,OAAO;CAEzB,MAAM,gBAAgB,YAAY,aAAuB,eAAe;CACxE,IAAI,kBAAkB,QAAW,OAAO;CAExC,IAAI,mBAAmB,QACrB,YAAY,aAAa,iBAAiB,cAAc;CAE1D,OAAO;AACT;AAEA,SAAgB,gBAAgB,SAAyC,YAAwB;CAC/F,WAAOC,gCAAS;EACd,UAAU,CAAC,eAAe;EAC1B,SAAS,YAA4C;GAEnD,QAAO,MADW,WAAW,KAAK,aAAa,EACrC,EAAE,MAAM,gBAAgB,CAAC;EACrC;EACA,SAAS,CAAC,CAAC;EACX,iBAAiB;CACnB,CAAC;AACH;AAMA,MAAM,kDAAkC,IAAI,IAAI;CAC9C;CACA;CACA;CACA;AACF,CAAC;AAED,SAAgB,gCAAgC,OAAyB;CACvE,IAAI,EAAE,iBAAiB,UAAU,EAAE,UAAU,QAAQ,OAAO;CAC5D,OAAO,OAAO,MAAM,SAAS,YAAY,gCAAgC,IAAI,MAAM,IAAI;AACzF;AAEA,SAAS,eACP,OACA,UACsB;CACtB,OAAO,OAAO,OAAO,IAAI,MAAM,OAAO,WAAW,QAAQ,GAAG,EAAE,MAAM,OAAO,KAAK,CAAC;AACnF;AAEA,eAAsB,6BAA+C;CACnE,IAAI,OAAO,WAAW,eAAe,CAAC,OAAO,qBAAqB,OAAO;CACzE,IAAI;EACF,OAAQ,MAAM,OAAO,oBAAoB,kCAAkC,MAAO;CACpF,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAsB,yBACpB,YACA,SAIe;CACf,IAAI;EACF,MAAM,EAAE,MAAM,UAAU,MAAM,WAAW,QAAQ,WAAW;EAC5D,IAAI,SAAS,CAAC,MAAM;GAClB,SAAS,UAAU,eAAe,OAAO,+BAA+B,CAAC;GACzE;EACF;EACA,MAAM,EAAE,kBAAkB;EAC1B,SAAS,YAAY,EAAE,cAAc,CAAC;CACxC,SAAS,OAAO;EACd,SAAS,UACP,eAAe,iBAAiB,QAAQ,QAAQ,MAAM,+BAA+B,CACvF;CACF;AACF;AAEA,eAAsB,kBACpB,YACA,SAKe;CACf,IAAI;EACF,MAAM,EAAE,MAAM,UAAU,MAAM,WAAW,OAAO,QAAQ,EAAE,UAAU,SAAS,SAAS,CAAC;EACvF,IAAI,SAAS,CAAC,MAAM;GAClB,SAAS,UAAU,eAAe,OAAO,wBAAwB,CAAC;GAClE;EACF;EACA,SAAS,YAAY;CACvB,SAAS,OAAO;EACd,SAAS,UACP,eAAe,iBAAiB,QAAQ,QAAQ,MAAM,wBAAwB,CAChF;CACF;AACF"}