jazz-tools 0.18.0 → 0.18.1

package/dist/better-auth/auth/react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/react.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,iBAAiB,EAIvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,KAAK,iBAAiB,EAAiB,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,KAAK,UAAU,GAAG,UAAU,CAC1B,OAAO,gBAAgB,CAAC;IACtB,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC;CAChD,CAAC,CACH,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;6BA+E8jc,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAk7yW,CAAC;+BAAyD,CAAC;gCAA0D,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;qBAA9K,CAAC;2BAAyD,CAAC;4BAA0D,CAAC;yBAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAjmzW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;qBAAs6qe,CAAC;2BAAyD,CAAC;4BAA0D,CAAC;sBAAoD,CAAC;;;;;;;;;;;;;;;;;;;;iBAA3K,CAAC;uBAAyD,CAAC;wBAA0D,CAAC;kBAAoD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAllre,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAAsp+f,CAAC;iBAAmC,CAAC;iBAA0C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAvu+f,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAAx9a,CAAC;mBAA+C,CAAC;eAAqC,CAAC;;;;;iBAAyW,CAAC;iBAAuC,CAAC;;YAA2D,CAAC;gBAA2C,CAAC;gBAA+C,CAAC;gBAA+C,CAAC;sBAA4C,CAAC;cAA4C,CAAC;cAAkD,CAAC;eAAmC,CAAC;mBAA4G,CAAC;yBAA6B,CAAC;;eAAiD,CAAC;;;aAAqH,CAAC;YAAmC,CAAC;;;;;;;;;;;;YAA+iB,CAAC;aAAoB,CAAC;cAAqB,CAAC;cAAqB,CAAC;;aAAsG,CAAC;oBAAoE,CAAC;cAAoC,CAAC;mBAAqG,CAAC;yBAA6E,CAAC;;;uBAA0F,CAAC;+GAA6K,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;UA/Et/F,CAAC;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,gBAAgB,GACjB,EAAE,iBAAiB,CAAC;IACnB,gBAAgB,EAAE,UAAU,CAAC;CAC9B,CAAC,6BAmBD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,+BAA+B,GAC1C,CAAC,SACG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GACjD,gBAAgB,SAEb;IAAE,gBAAgB,EAAE,UAAU,CAAA;CAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,4CAS/D,CAAC"}

package/dist/better-auth/auth/react.js

@@ -0,0 +1,40 @@
+"use client";
+
+// src/better-auth/auth/react.tsx
+import {
+  JazzReactProvider,
+  useAuthSecretStorage,
+  useJazzContext
+} from "jazz-tools/react";
+import { useEffect } from "react";
+import { createContext } from "react";
+import { jsx } from "react/jsx-runtime";
+var AuthContext = createContext(null);
+function AuthProvider({
+  children,
+  betterAuthClient
+}) {
+  const context = useJazzContext();
+  const authSecretStorage = useAuthSecretStorage();
+  if (betterAuthClient.jazz === void 0) {
+    throw new Error(
+      "Better Auth client has been initialized without the jazzPluginClient"
+    );
+  }
+  useEffect(() => {
+    betterAuthClient.jazz.setJazzContext(context);
+    betterAuthClient.jazz.setAuthSecretStorage(authSecretStorage);
+    return betterAuthClient.useSession.subscribe(() => {
+    });
+  }, [betterAuthClient, context, authSecretStorage]);
+  return children;
+}
+var JazzReactProviderWithBetterAuth = (props) => {
+  return /* @__PURE__ */ jsx(JazzReactProvider, { ...props, children: /* @__PURE__ */ jsx(AuthProvider, { betterAuthClient: props.betterAuthClient, children: props.children }) });
+};
+export {
+  AuthContext,
+  AuthProvider,
+  JazzReactProviderWithBetterAuth
+};
+//# sourceMappingURL=react.js.map

package/dist/better-auth/auth/react.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/better-auth/auth/react.tsx"],"sourcesContent":["\"use client\";\n\nimport type { ClientOptions } from \"better-auth\";\nimport { createAuthClient } from \"better-auth/client\";\nimport type {\n  Account,\n  AccountClass,\n  AnyAccountSchema,\n  CoValueFromRaw,\n} from \"jazz-tools\";\nimport {\n  type JazzProviderProps,\n  JazzReactProvider,\n  useAuthSecretStorage,\n  useJazzContext,\n} from \"jazz-tools/react\";\nimport { useEffect } from \"react\";\nimport { type PropsWithChildren, createContext } from \"react\";\nimport { jazzPluginClient } from \"./client.js\";\n\ntype AuthClient = ReturnType<\n  typeof createAuthClient<{\n    plugins: [ReturnType<typeof jazzPluginClient>];\n  }>\n>;\n\nexport const AuthContext = createContext<AuthClient | null>(null);\n\n/**\n * @param props.children - The children to render.\n * @param props.betterAuthClient - The BetterAuth client with the Jazz plugin.\n *\n * @example\n * ```ts\n * const betterAuthClient = createAuthClient({\n *   plugins: [\n *     jazzPluginClient(),\n *   ],\n * });\n *\n * <AuthProvider betterAuthClient={betterAuthClient}>\n *   <App />\n * </AuthProvider>\n * ```\n */\nexport function AuthProvider({\n  children,\n  betterAuthClient,\n}: PropsWithChildren<{\n  betterAuthClient: AuthClient;\n}>) {\n  const context = useJazzContext();\n  const authSecretStorage = useAuthSecretStorage();\n\n  if (betterAuthClient.jazz === undefined) {\n    throw new Error(\n      \"Better Auth client has been initialized without the jazzPluginClient\",\n    );\n  }\n\n  useEffect(() => {\n    betterAuthClient.jazz.setJazzContext(context);\n    betterAuthClient.jazz.setAuthSecretStorage(authSecretStorage);\n\n    // We need to subscribe to the session to let the plugin keep sync Jazz's and BetterAuth's session\n    return betterAuthClient.useSession.subscribe(() => {});\n  }, [betterAuthClient, context, authSecretStorage]);\n\n  return children;\n}\n\n/**\n * @param props - The props for the JazzReactProvider.\n * @param props.betterAuth - The options for the BetterAuth client.\n * @returns The JazzReactProvider with the BetterAuth plugin.\n *\n * @example\n * ```ts\n * <JazzReactProviderWithBetterAuth\n *  betterAuth={{\n *    baseURL: \"http://localhost:3000\",\n *  }}\n *  sync={{\n *    peer: \"ws://localhost:4200\",\n *  }}\n * >\n *   <App />\n * </JazzReactProviderWithBetterAuth>\n * ```\n */\nexport const JazzReactProviderWithBetterAuth = <\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n>(\n  props: { betterAuthClient: AuthClient } & JazzProviderProps<S>,\n) => {\n  return (\n    <JazzReactProvider {...props}>\n      <AuthProvider betterAuthClient={props.betterAuthClient}>\n        {props.children}\n      </AuthProvider>\n    </JazzReactProvider>\n  );\n};\n"],"mappings":";;;AAUA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAC1B,SAAiC,qBAAqB;AAkFhD;AAzEC,IAAM,cAAc,cAAiC,IAAI;AAmBzD,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AACF,GAEI;AACF,QAAM,UAAU,eAAe;AAC/B,QAAM,oBAAoB,qBAAqB;AAE/C,MAAI,iBAAiB,SAAS,QAAW;AACvC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,YAAU,MAAM;AACd,qBAAiB,KAAK,eAAe,OAAO;AAC5C,qBAAiB,KAAK,qBAAqB,iBAAiB;AAG5D,WAAO,iBAAiB,WAAW,UAAU,MAAM;AAAA,IAAC,CAAC;AAAA,EACvD,GAAG,CAAC,kBAAkB,SAAS,iBAAiB,CAAC;AAEjD,SAAO;AACT;AAqBO,IAAM,kCAAkC,CAK7C,UACG;AACH,SACE,oBAAC,qBAAmB,GAAG,OACrB,8BAAC,gBAAa,kBAAkB,MAAM,kBACnC,gBAAM,UACT,GACF;AAEJ;","names":[]}

package/dist/better-auth/auth/server.d.ts

@@ -0,0 +1,14 @@
+import { BetterAuthPlugin } from "better-auth/plugins";
+/**
+ * @returns The BetterAuth server plugin.
+ *
+ * @example
+ * ```ts
+ * const auth = betterAuth({
+ *   plugins: [jazzPlugin()],
+ *   // ... other BetterAuth options
+ * });
+ * ```
+ */
+export declare const jazzPlugin: () => BetterAuthPlugin;
+//# sourceMappingURL=server.d.ts.map

package/dist/better-auth/auth/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AAG7E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,QAAO,gBAwL7B,CAAC"}

package/dist/better-auth/auth/server.js

@@ -0,0 +1,198 @@
+// src/better-auth/auth/server.ts
+import { APIError } from "better-auth/api";
+import { symmetricDecrypt, symmetricEncrypt } from "better-auth/crypto";
+import { createAuthMiddleware } from "better-auth/plugins";
+var jazzPlugin = () => {
+  return {
+    id: "jazz-plugin",
+    schema: {
+      user: {
+        fields: {
+          accountID: {
+            type: "string",
+            required: false,
+            input: false
+          },
+          encryptedCredentials: {
+            type: "string",
+            required: false,
+            input: false,
+            returned: false
+          }
+        }
+      }
+    },
+    init() {
+      return {
+        options: {
+          databaseHooks: {
+            user: {
+              create: {
+                before: async (user, context) => {
+                  if (!contextContainsJazzAuth(context)) {
+                    throw new APIError(422, {
+                      message: "JazzAuth is required"
+                    });
+                  }
+                  return {
+                    data: {
+                      accountID: context?.jazzAuth?.accountID,
+                      encryptedCredentials: context?.jazzAuth?.encryptedCredentials
+                    }
+                  };
+                }
+              }
+            },
+            verification: {
+              create: {
+                before: async (verification, context) => {
+                  if (contextContainsJazzAuth(context)) {
+                    const parsed = JSON.parse(verification.value);
+                    const newValue = JSON.stringify({
+                      ...parsed,
+                      jazzAuth: context.jazzAuth
+                    });
+                    return {
+                      data: {
+                        value: newValue
+                      }
+                    };
+                  }
+                }
+              }
+            }
+          }
+        }
+      };
+    },
+    hooks: {
+      before: [
+        /**
+         * If the client sends a x-jazz-auth header,
+         * we encrypt the credentials and inject them into the context.
+         */
+        {
+          matcher: (context) => {
+            return !!context.headers?.get("x-jazz-auth");
+          },
+          handler: createAuthMiddleware(async (ctx) => {
+            const jazzAuth = JSON.parse(ctx.headers?.get("x-jazz-auth"));
+            const credentials = {
+              accountID: jazzAuth.accountID,
+              secretSeed: jazzAuth.secretSeed,
+              accountSecret: jazzAuth.accountSecret,
+              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.
+              provider: "better-auth"
+            };
+            const encryptedCredentials = await symmetricEncrypt({
+              key: ctx.context.secret,
+              data: JSON.stringify(credentials)
+            });
+            return {
+              context: {
+                ...ctx,
+                jazzAuth: {
+                  accountID: jazzAuth.accountID,
+                  encryptedCredentials
+                }
+              }
+            };
+          })
+        },
+        /**
+         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.
+         * 1. Catch the state
+         * 2. Find the verification value
+         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.
+         */
+        {
+          matcher: (context) => {
+            return context.path.startsWith("/callback");
+          },
+          handler: createAuthMiddleware(async (ctx) => {
+            const state = ctx.query?.state || ctx.body?.state;
+            const data = await ctx.context.adapter.findOne({
+              model: ctx.context.tables.verification.modelName,
+              where: [
+                {
+                  field: "identifier",
+                  operator: "eq",
+                  value: state
+                }
+              ],
+              select: ["value"]
+            });
+            if (!data) {
+              throw new APIError(404, {
+                message: "Verification not found"
+              });
+            }
+            const parsed = JSON.parse(data.value);
+            if (parsed && "jazzAuth" in parsed) {
+              ctx.context.jazzAuth = parsed.jazzAuth;
+            } else {
+              throw new APIError(404, {
+                message: "JazzAuth not found in verification value"
+              });
+            }
+          })
+        }
+      ],
+      after: [
+        /**
+         * This middleware is used to extract the jazzAuth from the user and return it in the response.
+         * It is used in the following endpoints that return the user:
+         * - /sign-up/email
+         * - /sign-in/email
+         * - /get-session
+         */
+        {
+          matcher: (context) => {
+            return context.path.startsWith("/sign-up") || context.path.startsWith("/sign-in") || context.path.startsWith("/get-session");
+          },
+          handler: createAuthMiddleware({}, async (ctx) => {
+            const returned = ctx.context.returned;
+            if (!returned?.user?.id) {
+              return;
+            }
+            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);
+            return ctx.json({
+              ...returned,
+              jazzAuth
+            });
+          })
+        }
+      ]
+    }
+  };
+};
+function contextContainsJazzAuth(ctx) {
+  return !!ctx && typeof ctx === "object" && "jazzAuth" in ctx;
+}
+async function extractJazzAuth(userId, ctx) {
+  const user = await ctx.context.adapter.findOne({
+    model: ctx.context.tables.user.modelName,
+    where: [
+      {
+        field: "id",
+        operator: "eq",
+        value: userId
+      }
+    ],
+    select: ["accountID", "encryptedCredentials"]
+  });
+  if (!user) {
+    return;
+  }
+  const jazzAuth = JSON.parse(
+    await symmetricDecrypt({
+      key: ctx.context.secret,
+      data: user.encryptedCredentials
+    })
+  );
+  return jazzAuth;
+}
+export {
+  jazzPlugin
+};
+//# sourceMappingURL=server.js.map

package/dist/better-auth/auth/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/better-auth/auth/server.ts"],"sourcesContent":["import { AuthContext, MiddlewareContext, MiddlewareOptions } from \"better-auth\";\nimport { APIError } from \"better-auth/api\";\nimport { symmetricDecrypt, symmetricEncrypt } from \"better-auth/crypto\";\nimport { BetterAuthPlugin, createAuthMiddleware } from \"better-auth/plugins\";\nimport type { Account, AuthCredentials, ID } from \"jazz-tools\";\n\n/**\n * @returns The BetterAuth server plugin.\n *\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPlugin()],\n *   // ... other BetterAuth options\n * });\n * ```\n */\nexport const jazzPlugin = (): BetterAuthPlugin => {\n  return {\n    id: \"jazz-plugin\",\n    schema: {\n      user: {\n        fields: {\n          accountID: {\n            type: \"string\",\n            required: false,\n            input: false,\n          },\n          encryptedCredentials: {\n            type: \"string\",\n            required: false,\n            input: false,\n            returned: false,\n          },\n        },\n      },\n    },\n\n    init() {\n      return {\n        options: {\n          databaseHooks: {\n            user: {\n              create: {\n                before: async (user, context) => {\n                  // If the user is created without a jazzAuth, it will throw an error.\n                  if (!contextContainsJazzAuth(context)) {\n                    throw new APIError(422, {\n                      message: \"JazzAuth is required\",\n                    });\n                  }\n                  // Decorate the user with the jazz's credentials.\n                  return {\n                    data: {\n                      accountID: context?.jazzAuth?.accountID,\n                      encryptedCredentials:\n                        context?.jazzAuth?.encryptedCredentials,\n                    },\n                  };\n                },\n              },\n            },\n            verification: {\n              create: {\n                before: async (verification, context) => {\n                  // If a jazzAuth is provided, save it for later usage.\n                  if (contextContainsJazzAuth(context)) {\n                    const parsed = JSON.parse(verification.value);\n                    const newValue = JSON.stringify({\n                      ...parsed,\n                      jazzAuth: context.jazzAuth,\n                    });\n\n                    return {\n                      data: {\n                        value: newValue,\n                      },\n                    };\n                  }\n                },\n              },\n            },\n          },\n        },\n      };\n    },\n\n    hooks: {\n      before: [\n        /**\n         * If the client sends a x-jazz-auth header,\n         * we encrypt the credentials and inject them into the context.\n         */\n        {\n          matcher: (context) => {\n            return !!context.headers?.get(\"x-jazz-auth\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const jazzAuth = JSON.parse(ctx.headers?.get(\"x-jazz-auth\")!);\n\n            const credentials: AuthCredentials = {\n              accountID: jazzAuth.accountID as ID<Account>,\n              secretSeed: jazzAuth.secretSeed,\n              accountSecret: jazzAuth.accountSecret as any,\n              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.\n              provider: \"better-auth\",\n            };\n\n            const encryptedCredentials = await symmetricEncrypt({\n              key: ctx.context.secret,\n              data: JSON.stringify(credentials),\n            });\n\n            return {\n              context: {\n                ...ctx,\n                jazzAuth: {\n                  accountID: jazzAuth.accountID,\n                  encryptedCredentials: encryptedCredentials,\n                },\n              },\n            };\n          }),\n        },\n\n        /**\n         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.\n         * 1. Catch the state\n         * 2. Find the verification value\n         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/callback\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const state = ctx.query?.state || ctx.body?.state;\n\n            const data = await ctx.context.adapter.findOne<{ value: string }>({\n              model: ctx.context.tables.verification!.modelName,\n              where: [\n                {\n                  field: \"identifier\",\n                  operator: \"eq\",\n                  value: state,\n                },\n              ],\n              select: [\"value\"],\n            });\n\n            // if not found, the social plugin will throw later anyway\n            if (!data) {\n              throw new APIError(404, {\n                message: \"Verification not found\",\n              });\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              ctx.context.jazzAuth = parsed.jazzAuth;\n            } else {\n              throw new APIError(404, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n      ],\n      after: [\n        /**\n         * This middleware is used to extract the jazzAuth from the user and return it in the response.\n         * It is used in the following endpoints that return the user:\n         * - /sign-up/email\n         * - /sign-in/email\n         * - /get-session\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/sign-up\") ||\n              context.path.startsWith(\"/sign-in\") ||\n              context.path.startsWith(\"/get-session\")\n            );\n          },\n          handler: createAuthMiddleware({}, async (ctx) => {\n            const returned = ctx.context.returned as any;\n            if (!returned?.user?.id) {\n              return;\n            }\n            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);\n\n            return ctx.json({\n              ...returned,\n              jazzAuth: jazzAuth,\n            });\n          }),\n        },\n      ],\n    },\n  };\n};\n\nfunction contextContainsJazzAuth(ctx: unknown): ctx is {\n  jazzAuth: {\n    accountID: string;\n    encryptedCredentials: string;\n  };\n} {\n  return !!ctx && typeof ctx === \"object\" && \"jazzAuth\" in ctx;\n}\n\nasync function extractJazzAuth(\n  userId: string,\n  ctx: MiddlewareContext<\n    MiddlewareOptions,\n    AuthContext & {\n      returned?: unknown;\n      responseHeaders?: Headers;\n    }\n  >,\n) {\n  const user = await ctx.context.adapter.findOne<{\n    accountID: string;\n    encryptedCredentials: string;\n  }>({\n    model: ctx.context.tables.user!.modelName,\n    where: [\n      {\n        field: \"id\",\n        operator: \"eq\",\n        value: userId,\n      },\n    ],\n    select: [\"accountID\", \"encryptedCredentials\"],\n  });\n\n  if (!user) {\n    return;\n  }\n\n  const jazzAuth = JSON.parse(\n    await symmetricDecrypt({\n      key: ctx.context.secret,\n      data: user.encryptedCredentials,\n    }),\n  );\n\n  return jazzAuth;\n}\n"],"mappings":";AACA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,wBAAwB;AACnD,SAA2B,4BAA4B;AAchD,IAAM,aAAa,MAAwB;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN,MAAM;AAAA,QACJ,QAAQ;AAAA,UACN,WAAW;AAAA,YACT,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,UACT;AAAA,UACA,sBAAsB;AAAA,YACpB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AACL,aAAO;AAAA,QACL,SAAS;AAAA,UACP,eAAe;AAAA,YACb,MAAM;AAAA,cACJ,QAAQ;AAAA,gBACN,QAAQ,OAAO,MAAM,YAAY;AAE/B,sBAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,0BAAM,IAAI,SAAS,KAAK;AAAA,sBACtB,SAAS;AAAA,oBACX,CAAC;AAAA,kBACH;AAEA,yBAAO;AAAA,oBACL,MAAM;AAAA,sBACJ,WAAW,SAAS,UAAU;AAAA,sBAC9B,sBACE,SAAS,UAAU;AAAA,oBACvB;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,gBACN,QAAQ,OAAO,cAAc,YAAY;AAEvC,sBAAI,wBAAwB,OAAO,GAAG;AACpC,0BAAM,SAAS,KAAK,MAAM,aAAa,KAAK;AAC5C,0BAAM,WAAW,KAAK,UAAU;AAAA,sBAC9B,GAAG;AAAA,sBACH,UAAU,QAAQ;AAAA,oBACpB,CAAC;AAED,2BAAO;AAAA,sBACL,MAAM;AAAA,wBACJ,OAAO;AAAA,sBACT;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAKN;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,CAAC,CAAC,QAAQ,SAAS,IAAI,aAAa;AAAA,UAC7C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI,aAAa,CAAE;AAE5D,kBAAM,cAA+B;AAAA,cACnC,WAAW,SAAS;AAAA,cACpB,YAAY,SAAS;AAAA,cACrB,eAAe,SAAS;AAAA;AAAA,cAExB,UAAU;AAAA,YACZ;AAEA,kBAAM,uBAAuB,MAAM,iBAAiB;AAAA,cAClD,KAAK,IAAI,QAAQ;AAAA,cACjB,MAAM,KAAK,UAAU,WAAW;AAAA,YAClC,CAAC;AAED,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,GAAG;AAAA,gBACH,UAAU;AAAA,kBACR,WAAW,SAAS;AAAA,kBACpB;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,WAAW;AAAA,UAC5C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,kBAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAA2B;AAAA,cAChE,OAAO,IAAI,QAAQ,OAAO,aAAc;AAAA,cACxC,OAAO;AAAA,gBACL;AAAA,kBACE,OAAO;AAAA,kBACP,UAAU;AAAA,kBACV,OAAO;AAAA,gBACT;AAAA,cACF;AAAA,cACA,QAAQ,CAAC,OAAO;AAAA,YAClB,CAAC;AAGD,gBAAI,CAAC,MAAM;AACT,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,kBAAI,QAAQ,WAAW,OAAO;AAAA,YAChC,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQL;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,cAAc;AAAA,UAE1C;AAAA,UACA,SAAS,qBAAqB,CAAC,GAAG,OAAO,QAAQ;AAC/C,kBAAM,WAAW,IAAI,QAAQ;AAC7B,gBAAI,CAAC,UAAU,MAAM,IAAI;AACvB;AAAA,YACF;AACA,kBAAM,WAAW,MAAM,gBAAgB,SAAS,KAAK,IAAI,GAAG;AAE5D,mBAAO,IAAI,KAAK;AAAA,cACd,GAAG;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAK/B;AACA,SAAO,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,cAAc;AAC3D;AAEA,eAAe,gBACb,QACA,KAOA;AACA,QAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAGpC;AAAA,IACD,OAAO,IAAI,QAAQ,OAAO,KAAM;AAAA,IAChC,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,UAAU;AAAA,QACV,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ,CAAC,aAAa,sBAAsB;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,MAAM,iBAAiB;AAAA,MACrB,KAAK,IAAI,QAAQ;AAAA,MACjB,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}

package/dist/better-auth/auth/tests/client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=client.test.d.ts.map

package/dist/better-auth/auth/tests/client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.test.d.ts","sourceRoot":"","sources":["../../../../src/better-auth/auth/tests/client.test.ts"],"names":[],"mappings":""}

package/dist/better-auth/auth/tests/server.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=server.test.d.ts.map

package/dist/better-auth/auth/tests/server.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.test.d.ts","sourceRoot":"","sources":["../../../../src/better-auth/auth/tests/server.test.ts"],"names":[],"mappings":""}

package/dist/{chunk-HJ3GTGY7.js → chunk-IERUTUXB.js}

@@ -476,6 +476,19 @@ var CoMapJazzApi = class extends CoValueJazzApi {
   get owner() {
     return getCoValueOwner(this.coMap);
   }
+  /**
+   * Check if a key is defined in the CoMap.
+   *
+   * This check does not load the referenced value or validate permissions.
+   *
+   * @param key The key to check
+   * @returns True if the key is defined, false otherwise
+   * @category Content
+   */
+  has(key) {
+    const entry = this.raw.getRaw(key);
+    return entry?.change !== void 0 && entry.change.op !== "del";
+  }
   /**
    * Set a value on the CoMap
    *
@@ -2299,6 +2312,10 @@ var AccountJazzApi = class extends CoValueJazzApi {
       this.raw.set(key, refId, "trusting");
     }
   }
+  has(key) {
+    const entry = this.raw.getRaw(key);
+    return entry?.change !== void 0 && entry.change.op !== "del";
+  }
   /**
    * Get the descriptor for a given key
    * @internal
@@ -5714,4 +5731,4 @@ export {
   JazzContextManager
 };
 /* istanbul ignore file -- @preserve */
-//# sourceMappingURL=chunk-HJ3GTGY7.js.map
+//# sourceMappingURL=chunk-IERUTUXB.js.map