jazz-tools 0.18.5 → 0.18.6

package/dist/better-auth/auth/react.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/react.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EACV,OAAO,EACP,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,iBAAiB,EAIvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,KAAK,iBAAiB,EAAiB,MAAM,OAAO,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,KAAK,UAAU,GAAG,UAAU,CAC1B,OAAO,gBAAgB,CAAC;IACtB,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC;CAChD,CAAC,CACH,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;6BA+E8jc,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAk7yW,CAAC;+BAAyD,CAAC;gCAA0D,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;qBAA9K,CAAC;2BAAyD,CAAC;4BAA0D,CAAC;yBAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAjmzW,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;qBAAs6qe,CAAC;2BAAyD,CAAC;4BAA0D,CAAC;sBAAoD,CAAC;;;;;;;;;;;;;;;;;;;;iBAA3K,CAAC;uBAAyD,CAAC;wBAA0D,CAAC;kBAAoD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAllre,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAAsp+f,CAAC;iBAAmC,CAAC;iBAA0C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAvu+f,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAAx9a,CAAC;mBAA+C,CAAC;eAAqC,CAAC;;;;;iBAAyW,CAAC;iBAAuC,CAAC;;YAA2D,CAAC;gBAA2C,CAAC;gBAA+C,CAAC;gBAA+C,CAAC;sBAA4C,CAAC;cAA4C,CAAC;cAAkD,CAAC;eAAmC,CAAC;mBAA4G,CAAC;yBAA6B,CAAC;;eAAiD,CAAC;;;aAAqH,CAAC;YAAmC,CAAC;;;;;;;;;;;;YAA+iB,CAAC;aAAoB,CAAC;cAAqB,CAAC;cAAqB,CAAC;;aAAsG,CAAC;oBAAoE,CAAC;cAAoC,CAAC;mBAAqG,CAAC;yBAA6E,CAAC;;;uBAA0F,CAAC;+GAA6K,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA/Et/F,CAAC;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,gBAAgB,GACjB,EAAE,iBAAiB,CAAC;IACnB,gBAAgB,EAAE,UAAU,CAAC;CAC9B,CAAC,6BAmBD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,+BAA+B,GAC1C,CAAC,SACG,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GACjD,gBAAgB,SAEb;IAAE,gBAAgB,EAAE,UAAU,CAAA;CAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,4CAS/D,CAAC"}
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/react.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,KAAK,UAAU,GAAG,UAAU,CAC1B,OAAO,gBAAgB,CAAC;IACtB,OAAO,EAAE,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC;CAChD,CAAC,CACH,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,gBAAgB,GACjB,EAAE,iBAAiB,CAAC;IACnB,gBAAgB,EAAE,UAAU,CAAC;CAC9B,CAAC,6BAmBD"}

package/dist/better-auth/auth/react.js

@@ -1,15 +1,8 @@
 "use client";
 
 // src/better-auth/auth/react.tsx
-import {
-  JazzReactProvider,
-  useAuthSecretStorage,
-  useJazzContext
-} from "jazz-tools/react";
+import { useAuthSecretStorage, useJazzContext } from "jazz-tools/react-core";
 import { useEffect } from "react";
-import { createContext } from "react";
-import { jsx } from "react/jsx-runtime";
-var AuthContext = createContext(null);
 function AuthProvider({
   children,
   betterAuthClient
@@ -29,12 +22,7 @@ function AuthProvider({
   }, [betterAuthClient, context, authSecretStorage]);
   return children;
 }
-var JazzReactProviderWithBetterAuth = (props) => {
-  return /* @__PURE__ */ jsx(JazzReactProvider, { ...props, children: /* @__PURE__ */ jsx(AuthProvider, { betterAuthClient: props.betterAuthClient, children: props.children }) });
-};
 export {
-  AuthContext,
-  AuthProvider,
-  JazzReactProviderWithBetterAuth
+  AuthProvider
 };
 //# sourceMappingURL=react.js.map

package/dist/better-auth/auth/react.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/better-auth/auth/react.tsx"],"sourcesContent":["\"use client\";\n\nimport type { ClientOptions } from \"better-auth\";\nimport { createAuthClient } from \"better-auth/client\";\nimport type {\n  Account,\n  AccountClass,\n  AnyAccountSchema,\n  CoValueFromRaw,\n} from \"jazz-tools\";\nimport {\n  type JazzProviderProps,\n  JazzReactProvider,\n  useAuthSecretStorage,\n  useJazzContext,\n} from \"jazz-tools/react\";\nimport { useEffect } from \"react\";\nimport { type PropsWithChildren, createContext } from \"react\";\nimport { jazzPluginClient } from \"./client.js\";\n\ntype AuthClient = ReturnType<\n  typeof createAuthClient<{\n    plugins: [ReturnType<typeof jazzPluginClient>];\n  }>\n>;\n\nexport const AuthContext = createContext<AuthClient | null>(null);\n\n/**\n * @param props.children - The children to render.\n * @param props.betterAuthClient - The BetterAuth client with the Jazz plugin.\n *\n * @example\n * ```ts\n * const betterAuthClient = createAuthClient({\n *   plugins: [\n *     jazzPluginClient(),\n *   ],\n * });\n *\n * <AuthProvider betterAuthClient={betterAuthClient}>\n *   <App />\n * </AuthProvider>\n * ```\n */\nexport function AuthProvider({\n  children,\n  betterAuthClient,\n}: PropsWithChildren<{\n  betterAuthClient: AuthClient;\n}>) {\n  const context = useJazzContext();\n  const authSecretStorage = useAuthSecretStorage();\n\n  if (betterAuthClient.jazz === undefined) {\n    throw new Error(\n      \"Better Auth client has been initialized without the jazzPluginClient\",\n    );\n  }\n\n  useEffect(() => {\n    betterAuthClient.jazz.setJazzContext(context);\n    betterAuthClient.jazz.setAuthSecretStorage(authSecretStorage);\n\n    // We need to subscribe to the session to let the plugin keep sync Jazz's and BetterAuth's session\n    return betterAuthClient.useSession.subscribe(() => {});\n  }, [betterAuthClient, context, authSecretStorage]);\n\n  return children;\n}\n\n/**\n * @param props - The props for the JazzReactProvider.\n * @param props.betterAuth - The options for the BetterAuth client.\n * @returns The JazzReactProvider with the BetterAuth plugin.\n *\n * @example\n * ```ts\n * <JazzReactProviderWithBetterAuth\n *  betterAuth={{\n *    baseURL: \"http://localhost:3000\",\n *  }}\n *  sync={{\n *    peer: \"ws://localhost:4200\",\n *  }}\n * >\n *   <App />\n * </JazzReactProviderWithBetterAuth>\n * ```\n */\nexport const JazzReactProviderWithBetterAuth = <\n  S extends\n    | (AccountClass<Account> & CoValueFromRaw<Account>)\n    | AnyAccountSchema,\n>(\n  props: { betterAuthClient: AuthClient } & JazzProviderProps<S>,\n) => {\n  return (\n    <JazzReactProvider {...props}>\n      <AuthProvider betterAuthClient={props.betterAuthClient}>\n        {props.children}\n      </AuthProvider>\n    </JazzReactProvider>\n  );\n};\n"],"mappings":";;;AAUA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAC1B,SAAiC,qBAAqB;AAkFhD;AAzEC,IAAM,cAAc,cAAiC,IAAI;AAmBzD,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AACF,GAEI;AACF,QAAM,UAAU,eAAe;AAC/B,QAAM,oBAAoB,qBAAqB;AAE/C,MAAI,iBAAiB,SAAS,QAAW;AACvC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,YAAU,MAAM;AACd,qBAAiB,KAAK,eAAe,OAAO;AAC5C,qBAAiB,KAAK,qBAAqB,iBAAiB;AAG5D,WAAO,iBAAiB,WAAW,UAAU,MAAM;AAAA,IAAC,CAAC;AAAA,EACvD,GAAG,CAAC,kBAAkB,SAAS,iBAAiB,CAAC;AAEjD,SAAO;AACT;AAqBO,IAAM,kCAAkC,CAK7C,UACG;AACH,SACE,oBAAC,qBAAmB,GAAG,OACrB,8BAAC,gBAAa,kBAAkB,MAAM,kBACnC,gBAAM,UACT,GACF;AAEJ;","names":[]}
+{"version":3,"sources":["../../../src/better-auth/auth/react.tsx"],"sourcesContent":["\"use client\";\n\nimport { createAuthClient } from \"better-auth/client\";\nimport { useAuthSecretStorage, useJazzContext } from \"jazz-tools/react-core\";\nimport { useEffect } from \"react\";\nimport { type PropsWithChildren } from \"react\";\nimport { jazzPluginClient } from \"./client.js\";\n\ntype AuthClient = ReturnType<\n  typeof createAuthClient<{\n    plugins: [ReturnType<typeof jazzPluginClient>];\n  }>\n>;\n\n/**\n * @param props.children - The children to render.\n * @param props.betterAuthClient - The BetterAuth client with the Jazz plugin.\n *\n * @example\n * ```ts\n * const betterAuthClient = createAuthClient({\n *   plugins: [\n *     jazzPluginClient(),\n *   ],\n * });\n *\n * <AuthProvider betterAuthClient={betterAuthClient}>\n *   <App />\n * </AuthProvider>\n * ```\n */\nexport function AuthProvider({\n  children,\n  betterAuthClient,\n}: PropsWithChildren<{\n  betterAuthClient: AuthClient;\n}>) {\n  const context = useJazzContext();\n  const authSecretStorage = useAuthSecretStorage();\n\n  if (betterAuthClient.jazz === undefined) {\n    throw new Error(\n      \"Better Auth client has been initialized without the jazzPluginClient\",\n    );\n  }\n\n  useEffect(() => {\n    betterAuthClient.jazz.setJazzContext(context);\n    betterAuthClient.jazz.setAuthSecretStorage(authSecretStorage);\n\n    // We need to subscribe to the session to let the plugin keep sync Jazz's and BetterAuth's session\n    return betterAuthClient.useSession.subscribe(() => {});\n  }, [betterAuthClient, context, authSecretStorage]);\n\n  return children;\n}\n"],"mappings":";;;AAGA,SAAS,sBAAsB,sBAAsB;AACrD,SAAS,iBAAiB;AA2BnB,SAAS,aAAa;AAAA,EAC3B;AAAA,EACA;AACF,GAEI;AACF,QAAM,UAAU,eAAe;AAC/B,QAAM,oBAAoB,qBAAqB;AAE/C,MAAI,iBAAiB,SAAS,QAAW;AACvC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,YAAU,MAAM;AACd,qBAAiB,KAAK,eAAe,OAAO;AAC5C,qBAAiB,KAAK,qBAAqB,iBAAiB;AAG5D,WAAO,iBAAiB,WAAW,UAAU,MAAM;AAAA,IAAC,CAAC;AAAA,EACvD,GAAG,CAAC,kBAAkB,SAAS,iBAAiB,CAAC;AAEjD,SAAO;AACT;","names":[]}

package/dist/better-auth/auth/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AAM7E,KAAK,UAAU,GAAG,gBAAgB,GAAG;IACnC,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;iBACd,CAAC;gBACF,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC;iBACjB,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,UAgM9B,CAAC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/better-auth/auth/server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAwB,MAAM,qBAAqB,CAAC;AAM7E,KAAK,UAAU,GAAG,gBAAgB,GAAG;IACnC,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,MAAM,EAAE;gBACN,SAAS,EAAE;oBACT,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;iBACd,CAAC;gBACF,oBAAoB,EAAE;oBACpB,IAAI,EAAE,QAAQ,CAAC;oBACf,QAAQ,EAAE,KAAK,CAAC;oBAChB,KAAK,EAAE,KAAK,CAAC;oBACb,QAAQ,EAAE,KAAK,CAAC;iBACjB,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,UAsQ9B,CAAC"}

package/dist/better-auth/auth/server.js

@@ -45,18 +45,15 @@ var jazzPlugin = () => {
             },
             verification: {
               create: {
-                before: async (verification, context) => {
-                  if (contextContainsJazzAuth(context)) {
-                    const parsed = JSON.parse(verification.value);
-                    const newValue = JSON.stringify({
-                      ...parsed,
-                      jazzAuth: context.jazzAuth
-                    });
-                    return {
-                      data: {
-                        value: newValue
+                after: async (verification, context) => {
+                  if (contextContainsJazzAuth(context) && verification.identifier.startsWith("sign-in-otp-")) {
+                    await context.context.internalAdapter.createVerificationValue(
+                      {
+                        value: JSON.stringify({ jazzAuth: context.jazzAuth }),
+                        identifier: `${verification.identifier}-jazz-auth`,
+                        expiresAt: verification.expiresAt
                       }
-                    };
+                    );
                   }
                 }
               }
@@ -100,6 +97,7 @@ var jazzPlugin = () => {
           })
         },
         /**
+         * For: Social / OAuth2 plugin
          * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.
          * 1. Catch the state
          * 2. Find the verification value
@@ -111,17 +109,10 @@ var jazzPlugin = () => {
           },
           handler: createAuthMiddleware(async (ctx) => {
             const state = ctx.query?.state || ctx.body?.state;
-            const data = await ctx.context.adapter.findOne({
-              model: ctx.context.tables.verification.modelName,
-              where: [
-                {
-                  field: "identifier",
-                  operator: "eq",
-                  value: state
-                }
-              ],
-              select: ["value"]
-            });
+            const identifier = `${state}-jazz-auth`;
+            const data = await ctx.context.internalAdapter.findVerificationValue(
+              identifier
+            );
             if (!data) {
               throw new APIError(404, {
                 message: "Verification not found"
@@ -141,6 +132,39 @@ var jazzPlugin = () => {
               });
             }
           })
+        },
+        /**
+         * For: Email OTP plugin
+         * When the user sends an OTP, we try to find the jazzAuth.
+         * If it isn't a sign-up, we expect to not find a verification value.
+         */
+        {
+          matcher: (context) => {
+            return context.path.startsWith("/sign-in/email-otp");
+          },
+          handler: createAuthMiddleware(async (ctx) => {
+            const email = ctx.body.email;
+            const identifier = `sign-in-otp-${email}-jazz-auth`;
+            const data = await ctx.context.internalAdapter.findVerificationValue(
+              identifier
+            );
+            if (!data || data.expiresAt < /* @__PURE__ */ new Date()) {
+              return;
+            }
+            const parsed = JSON.parse(data.value);
+            if (parsed && "jazzAuth" in parsed) {
+              return {
+                context: {
+                  ...ctx,
+                  jazzAuth: parsed.jazzAuth
+                }
+              };
+            } else {
+              throw new APIError(500, {
+                message: "JazzAuth not found in verification value"
+              });
+            }
+          })
         }
       ],
       after: [
@@ -166,6 +190,33 @@ var jazzPlugin = () => {
               jazzAuth
             });
           })
+        },
+        /**
+         * For: Social / OAuth2 plugin
+         * When the user sign-in via social, we create a verification value with the jazzAuth.
+         */
+        {
+          matcher: (context) => {
+            return context.path.startsWith("/sign-in/social");
+          },
+          handler: createAuthMiddleware(async (ctx) => {
+            if (!contextContainsJazzAuth(ctx)) {
+              throw new APIError(500, {
+                message: "JazzAuth not found in context"
+              });
+            }
+            const returned = ctx.context.returned;
+            const url = new URL(returned.url);
+            const state = url.searchParams.get("state");
+            const value = JSON.stringify({ jazzAuth: ctx.jazzAuth });
+            const expiresAt = /* @__PURE__ */ new Date();
+            expiresAt.setMinutes(expiresAt.getMinutes() + 10);
+            await ctx.context.internalAdapter.createVerificationValue({
+              value,
+              identifier: `${state}-jazz-auth`,
+              expiresAt
+            });
+          })
         }
       ]
     }

package/dist/better-auth/auth/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/better-auth/auth/server.ts"],"sourcesContent":["import { AuthContext, MiddlewareContext, MiddlewareOptions } from \"better-auth\";\nimport { APIError } from \"better-auth/api\";\nimport { symmetricDecrypt, symmetricEncrypt } from \"better-auth/crypto\";\nimport { BetterAuthPlugin, createAuthMiddleware } from \"better-auth/plugins\";\nimport type { Account, AuthCredentials, ID } from \"jazz-tools\";\n\n// Define a type to have user fields mapped in the better-auth instance\n// It should be automatic, but it needs an hard reference to BetterAuthPlugin type\n// in order to be exported as library.\ntype JazzPlugin = BetterAuthPlugin & {\n  schema: {\n    user: {\n      fields: {\n        accountID: {\n          type: \"string\";\n          required: false;\n          input: false;\n        };\n        encryptedCredentials: {\n          type: \"string\";\n          required: false;\n          input: false;\n          returned: false;\n        };\n      };\n    };\n  };\n};\n\n/**\n * @returns The BetterAuth server plugin.\n *\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPlugin()],\n *   // ... other BetterAuth options\n * });\n * ```\n */\nexport const jazzPlugin: () => JazzPlugin = () => {\n  return {\n    id: \"jazz-plugin\",\n    schema: {\n      user: {\n        fields: {\n          accountID: {\n            type: \"string\",\n            required: false,\n            input: false,\n          },\n          encryptedCredentials: {\n            type: \"string\",\n            required: false,\n            input: false,\n            returned: false,\n          },\n        },\n      },\n    },\n\n    init() {\n      return {\n        options: {\n          databaseHooks: {\n            user: {\n              create: {\n                before: async (user, context) => {\n                  // If the user is created without a jazzAuth, it will throw an error.\n                  if (!contextContainsJazzAuth(context)) {\n                    throw new APIError(422, {\n                      message: \"JazzAuth is required on user creation\",\n                    });\n                  }\n                  // Decorate the user with the jazz's credentials.\n                  return {\n                    data: {\n                      accountID: context.jazzAuth.accountID,\n                      encryptedCredentials:\n                        context.jazzAuth.encryptedCredentials,\n                    },\n                  };\n                },\n              },\n            },\n            verification: {\n              create: {\n                before: async (verification, context) => {\n                  // If a jazzAuth is provided, save it for later usage.\n                  if (contextContainsJazzAuth(context)) {\n                    const parsed = JSON.parse(verification.value);\n                    const newValue = JSON.stringify({\n                      ...parsed,\n                      jazzAuth: context.jazzAuth,\n                    });\n\n                    return {\n                      data: {\n                        value: newValue,\n                      },\n                    };\n                  }\n                },\n              },\n            },\n          },\n        },\n      };\n    },\n\n    hooks: {\n      before: [\n        /**\n         * If the client sends a x-jazz-auth header,\n         * we encrypt the credentials and inject them into the context.\n         */\n        {\n          matcher: (context) => {\n            return !!context.headers?.get(\"x-jazz-auth\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const jazzAuth = JSON.parse(ctx.headers?.get(\"x-jazz-auth\")!);\n\n            const credentials: AuthCredentials = {\n              accountID: jazzAuth.accountID as ID<Account>,\n              secretSeed: jazzAuth.secretSeed,\n              accountSecret: jazzAuth.accountSecret as any,\n              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.\n              provider: \"better-auth\",\n            };\n\n            const encryptedCredentials = await symmetricEncrypt({\n              key: ctx.context.secret,\n              data: JSON.stringify(credentials),\n            });\n\n            return {\n              context: {\n                ...ctx,\n                jazzAuth: {\n                  accountID: jazzAuth.accountID,\n                  encryptedCredentials: encryptedCredentials,\n                },\n              },\n            };\n          }),\n        },\n\n        /**\n         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.\n         * 1. Catch the state\n         * 2. Find the verification value\n         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/callback\") ||\n              context.path.startsWith(\"/oauth2/callback\")\n            );\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const state = ctx.query?.state || ctx.body?.state;\n\n            const data = await ctx.context.adapter.findOne<{ value: string }>({\n              model: ctx.context.tables.verification!.modelName,\n              where: [\n                {\n                  field: \"identifier\",\n                  operator: \"eq\",\n                  value: state,\n                },\n              ],\n              select: [\"value\"],\n            });\n\n            // if not found, the social plugin will throw later anyway\n            if (!data) {\n              throw new APIError(404, {\n                message: \"Verification not found\",\n              });\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(404, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n      ],\n      after: [\n        /**\n         * This middleware is used to extract the jazzAuth from the user and return it in the response.\n         * It is used in the following endpoints that return the user:\n         * - /sign-up/email\n         * - /sign-in/email\n         * - /get-session\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/sign-up\") ||\n              context.path.startsWith(\"/sign-in\") ||\n              context.path.startsWith(\"/get-session\")\n            );\n          },\n          handler: createAuthMiddleware({}, async (ctx) => {\n            const returned = ctx.context.returned as any;\n            if (!returned?.user?.id) {\n              return;\n            }\n            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);\n\n            return ctx.json({\n              ...returned,\n              jazzAuth: jazzAuth,\n            });\n          }),\n        },\n      ],\n    },\n  } satisfies JazzPlugin;\n};\n\nfunction contextContainsJazzAuth(ctx: unknown): ctx is {\n  jazzAuth: {\n    accountID: string;\n    encryptedCredentials: string;\n  };\n} {\n  return !!ctx && typeof ctx === \"object\" && \"jazzAuth\" in ctx;\n}\n\nasync function extractJazzAuth(\n  userId: string,\n  ctx: MiddlewareContext<\n    MiddlewareOptions,\n    AuthContext & {\n      returned?: unknown;\n      responseHeaders?: Headers;\n    }\n  >,\n) {\n  const user = await ctx.context.adapter.findOne<{\n    accountID: string;\n    encryptedCredentials: string;\n  }>({\n    model: ctx.context.tables.user!.modelName,\n    where: [\n      {\n        field: \"id\",\n        operator: \"eq\",\n        value: userId,\n      },\n    ],\n    select: [\"accountID\", \"encryptedCredentials\"],\n  });\n\n  if (!user) {\n    return;\n  }\n\n  const jazzAuth = JSON.parse(\n    await symmetricDecrypt({\n      key: ctx.context.secret,\n      data: user.encryptedCredentials,\n    }),\n  );\n\n  return jazzAuth;\n}\n"],"mappings":";AACA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,wBAAwB;AACnD,SAA2B,4BAA4B;AAqChD,IAAM,aAA+B,MAAM;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN,MAAM;AAAA,QACJ,QAAQ;AAAA,UACN,WAAW;AAAA,YACT,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,UACT;AAAA,UACA,sBAAsB;AAAA,YACpB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AACL,aAAO;AAAA,QACL,SAAS;AAAA,UACP,eAAe;AAAA,YACb,MAAM;AAAA,cACJ,QAAQ;AAAA,gBACN,QAAQ,OAAO,MAAM,YAAY;AAE/B,sBAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,0BAAM,IAAI,SAAS,KAAK;AAAA,sBACtB,SAAS;AAAA,oBACX,CAAC;AAAA,kBACH;AAEA,yBAAO;AAAA,oBACL,MAAM;AAAA,sBACJ,WAAW,QAAQ,SAAS;AAAA,sBAC5B,sBACE,QAAQ,SAAS;AAAA,oBACrB;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,gBACN,QAAQ,OAAO,cAAc,YAAY;AAEvC,sBAAI,wBAAwB,OAAO,GAAG;AACpC,0BAAM,SAAS,KAAK,MAAM,aAAa,KAAK;AAC5C,0BAAM,WAAW,KAAK,UAAU;AAAA,sBAC9B,GAAG;AAAA,sBACH,UAAU,QAAQ;AAAA,oBACpB,CAAC;AAED,2BAAO;AAAA,sBACL,MAAM;AAAA,wBACJ,OAAO;AAAA,sBACT;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAKN;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,CAAC,CAAC,QAAQ,SAAS,IAAI,aAAa;AAAA,UAC7C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI,aAAa,CAAE;AAE5D,kBAAM,cAA+B;AAAA,cACnC,WAAW,SAAS;AAAA,cACpB,YAAY,SAAS;AAAA,cACrB,eAAe,SAAS;AAAA;AAAA,cAExB,UAAU;AAAA,YACZ;AAEA,kBAAM,uBAAuB,MAAM,iBAAiB;AAAA,cAClD,KAAK,IAAI,QAAQ;AAAA,cACjB,MAAM,KAAK,UAAU,WAAW;AAAA,YAClC,CAAC;AAED,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,GAAG;AAAA,gBACH,UAAU;AAAA,kBACR,WAAW,SAAS;AAAA,kBACpB;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,WAAW,KACnC,QAAQ,KAAK,WAAW,kBAAkB;AAAA,UAE9C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,kBAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAA2B;AAAA,cAChE,OAAO,IAAI,QAAQ,OAAO,aAAc;AAAA,cACxC,OAAO;AAAA,gBACL;AAAA,kBACE,OAAO;AAAA,kBACP,UAAU;AAAA,kBACV,OAAO;AAAA,gBACT;AAAA,cACF;AAAA,cACA,QAAQ,CAAC,OAAO;AAAA,YAClB,CAAC;AAGD,gBAAI,CAAC,MAAM;AACT,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQL;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,cAAc;AAAA,UAE1C;AAAA,UACA,SAAS,qBAAqB,CAAC,GAAG,OAAO,QAAQ;AAC/C,kBAAM,WAAW,IAAI,QAAQ;AAC7B,gBAAI,CAAC,UAAU,MAAM,IAAI;AACvB;AAAA,YACF;AACA,kBAAM,WAAW,MAAM,gBAAgB,SAAS,KAAK,IAAI,GAAG;AAE5D,mBAAO,IAAI,KAAK;AAAA,cACd,GAAG;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAK/B;AACA,SAAO,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,cAAc;AAC3D;AAEA,eAAe,gBACb,QACA,KAOA;AACA,QAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAGpC;AAAA,IACD,OAAO,IAAI,QAAQ,OAAO,KAAM;AAAA,IAChC,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,UAAU;AAAA,QACV,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ,CAAC,aAAa,sBAAsB;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,MAAM,iBAAiB;AAAA,MACrB,KAAK,IAAI,QAAQ;AAAA,MACjB,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../src/better-auth/auth/server.ts"],"sourcesContent":["import { AuthContext, MiddlewareContext, MiddlewareOptions } from \"better-auth\";\nimport { APIError } from \"better-auth/api\";\nimport { symmetricDecrypt, symmetricEncrypt } from \"better-auth/crypto\";\nimport { BetterAuthPlugin, createAuthMiddleware } from \"better-auth/plugins\";\nimport type { Account, AuthCredentials, ID } from \"jazz-tools\";\n\n// Define a type to have user fields mapped in the better-auth instance\n// It should be automatic, but it needs an hard reference to BetterAuthPlugin type\n// in order to be exported as library.\ntype JazzPlugin = BetterAuthPlugin & {\n  schema: {\n    user: {\n      fields: {\n        accountID: {\n          type: \"string\";\n          required: false;\n          input: false;\n        };\n        encryptedCredentials: {\n          type: \"string\";\n          required: false;\n          input: false;\n          returned: false;\n        };\n      };\n    };\n  };\n};\n\n/**\n * @returns The BetterAuth server plugin.\n *\n * @example\n * ```ts\n * const auth = betterAuth({\n *   plugins: [jazzPlugin()],\n *   // ... other BetterAuth options\n * });\n * ```\n */\nexport const jazzPlugin: () => JazzPlugin = () => {\n  return {\n    id: \"jazz-plugin\",\n    schema: {\n      user: {\n        fields: {\n          accountID: {\n            type: \"string\",\n            required: false,\n            input: false,\n          },\n          encryptedCredentials: {\n            type: \"string\",\n            required: false,\n            input: false,\n            returned: false,\n          },\n        },\n      },\n    },\n\n    init() {\n      return {\n        options: {\n          databaseHooks: {\n            user: {\n              create: {\n                before: async (user, context) => {\n                  // If the user is created without a jazzAuth, it will throw an error.\n                  if (!contextContainsJazzAuth(context)) {\n                    throw new APIError(422, {\n                      message: \"JazzAuth is required on user creation\",\n                    });\n                  }\n                  // Decorate the user with the jazz's credentials.\n                  return {\n                    data: {\n                      accountID: context.jazzAuth.accountID,\n                      encryptedCredentials:\n                        context.jazzAuth.encryptedCredentials,\n                    },\n                  };\n                },\n              },\n            },\n            verification: {\n              create: {\n                after: async (verification, context) => {\n                  /**\n                   * For: Email OTP plugin\n                   * After a verification is created, if it is from the EmailOTP plugin,\n                   * create a new verification value with the jazzAuth with the same expiration.\n                   */\n                  if (\n                    contextContainsJazzAuth(context) &&\n                    verification.identifier.startsWith(\"sign-in-otp-\")\n                  ) {\n                    await context.context.internalAdapter.createVerificationValue(\n                      {\n                        value: JSON.stringify({ jazzAuth: context.jazzAuth }),\n                        identifier: `${verification.identifier}-jazz-auth`,\n                        expiresAt: verification.expiresAt,\n                      },\n                    );\n                  }\n                },\n              },\n            },\n          },\n        },\n      };\n    },\n\n    hooks: {\n      before: [\n        /**\n         * If the client sends a x-jazz-auth header,\n         * we encrypt the credentials and inject them into the context.\n         */\n        {\n          matcher: (context) => {\n            return !!context.headers?.get(\"x-jazz-auth\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const jazzAuth = JSON.parse(ctx.headers?.get(\"x-jazz-auth\")!);\n\n            const credentials: AuthCredentials = {\n              accountID: jazzAuth.accountID as ID<Account>,\n              secretSeed: jazzAuth.secretSeed,\n              accountSecret: jazzAuth.accountSecret as any,\n              // If the provider remains 'anonymous', Jazz will not consider us authenticated later.\n              provider: \"better-auth\",\n            };\n\n            const encryptedCredentials = await symmetricEncrypt({\n              key: ctx.context.secret,\n              data: JSON.stringify(credentials),\n            });\n\n            return {\n              context: {\n                ...ctx,\n                jazzAuth: {\n                  accountID: jazzAuth.accountID,\n                  encryptedCredentials: encryptedCredentials,\n                },\n              },\n            };\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * /callback is the endpoint that BetterAuth uses to authenticate the user coming from a social provider.\n         * 1. Catch the state\n         * 2. Find the verification value\n         * 3. If the verification value contains a jazzAuth, inject into the context to have it in case of registration.\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/callback\") ||\n              context.path.startsWith(\"/oauth2/callback\")\n            );\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const state = ctx.query?.state || ctx.body?.state;\n\n            const identifier = `${state}-jazz-auth`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, the social plugin will throw later anyway\n            if (!data) {\n              throw new APIError(404, {\n                message: \"Verification not found\",\n              });\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(404, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n        /**\n         * For: Email OTP plugin\n         * When the user sends an OTP, we try to find the jazzAuth.\n         * If it isn't a sign-up, we expect to not find a verification value.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/sign-in/email-otp\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            const email = ctx.body.email;\n            const identifier = `sign-in-otp-${email}-jazz-auth`;\n\n            const data =\n              await ctx.context.internalAdapter.findVerificationValue(\n                identifier,\n              );\n\n            // if not found, it isn't a sign-up\n            if (!data || data.expiresAt < new Date()) {\n              return;\n            }\n\n            const parsed = JSON.parse(data.value);\n\n            if (parsed && \"jazzAuth\" in parsed) {\n              return {\n                context: {\n                  ...ctx,\n                  jazzAuth: parsed.jazzAuth,\n                },\n              };\n            } else {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in verification value\",\n              });\n            }\n          }),\n        },\n      ],\n      after: [\n        /**\n         * This middleware is used to extract the jazzAuth from the user and return it in the response.\n         * It is used in the following endpoints that return the user:\n         * - /sign-up/email\n         * - /sign-in/email\n         * - /get-session\n         */\n        {\n          matcher: (context) => {\n            return (\n              context.path.startsWith(\"/sign-up\") ||\n              context.path.startsWith(\"/sign-in\") ||\n              context.path.startsWith(\"/get-session\")\n            );\n          },\n          handler: createAuthMiddleware({}, async (ctx) => {\n            const returned = ctx.context.returned as any;\n            if (!returned?.user?.id) {\n              return;\n            }\n            const jazzAuth = await extractJazzAuth(returned.user.id, ctx);\n\n            return ctx.json({\n              ...returned,\n              jazzAuth: jazzAuth,\n            });\n          }),\n        },\n\n        /**\n         * For: Social / OAuth2 plugin\n         * When the user sign-in via social, we create a verification value with the jazzAuth.\n         */\n        {\n          matcher: (context) => {\n            return context.path.startsWith(\"/sign-in/social\");\n          },\n          handler: createAuthMiddleware(async (ctx) => {\n            if (!contextContainsJazzAuth(ctx)) {\n              throw new APIError(500, {\n                message: \"JazzAuth not found in context\",\n              });\n            }\n\n            const returned = ctx.context.returned as { url: string };\n\n            const url = new URL(returned.url);\n            const state = url.searchParams.get(\"state\");\n\n            const value = JSON.stringify({ jazzAuth: ctx.jazzAuth });\n            const expiresAt = new Date();\n            expiresAt.setMinutes(expiresAt.getMinutes() + 10);\n\n            await ctx.context.internalAdapter.createVerificationValue({\n              value,\n              identifier: `${state}-jazz-auth`,\n              expiresAt,\n            });\n          }),\n        },\n      ],\n    },\n  } satisfies JazzPlugin;\n};\n\nfunction contextContainsJazzAuth(ctx: unknown): ctx is {\n  jazzAuth: {\n    accountID: string;\n    encryptedCredentials: string;\n  };\n} {\n  return !!ctx && typeof ctx === \"object\" && \"jazzAuth\" in ctx;\n}\n\nasync function extractJazzAuth(\n  userId: string,\n  ctx: MiddlewareContext<\n    MiddlewareOptions,\n    AuthContext & {\n      returned?: unknown;\n      responseHeaders?: Headers;\n    }\n  >,\n) {\n  const user = await ctx.context.adapter.findOne<{\n    accountID: string;\n    encryptedCredentials: string;\n  }>({\n    model: ctx.context.tables.user!.modelName,\n    where: [\n      {\n        field: \"id\",\n        operator: \"eq\",\n        value: userId,\n      },\n    ],\n    select: [\"accountID\", \"encryptedCredentials\"],\n  });\n\n  if (!user) {\n    return;\n  }\n\n  const jazzAuth = JSON.parse(\n    await symmetricDecrypt({\n      key: ctx.context.secret,\n      data: user.encryptedCredentials,\n    }),\n  );\n\n  return jazzAuth;\n}\n"],"mappings":";AACA,SAAS,gBAAgB;AACzB,SAAS,kBAAkB,wBAAwB;AACnD,SAA2B,4BAA4B;AAqChD,IAAM,aAA+B,MAAM;AAChD,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,QAAQ;AAAA,MACN,MAAM;AAAA,QACJ,QAAQ;AAAA,UACN,WAAW;AAAA,YACT,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,UACT;AAAA,UACA,sBAAsB;AAAA,YACpB,MAAM;AAAA,YACN,UAAU;AAAA,YACV,OAAO;AAAA,YACP,UAAU;AAAA,UACZ;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AACL,aAAO;AAAA,QACL,SAAS;AAAA,UACP,eAAe;AAAA,YACb,MAAM;AAAA,cACJ,QAAQ;AAAA,gBACN,QAAQ,OAAO,MAAM,YAAY;AAE/B,sBAAI,CAAC,wBAAwB,OAAO,GAAG;AACrC,0BAAM,IAAI,SAAS,KAAK;AAAA,sBACtB,SAAS;AAAA,oBACX,CAAC;AAAA,kBACH;AAEA,yBAAO;AAAA,oBACL,MAAM;AAAA,sBACJ,WAAW,QAAQ,SAAS;AAAA,sBAC5B,sBACE,QAAQ,SAAS;AAAA,oBACrB;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,YACA,cAAc;AAAA,cACZ,QAAQ;AAAA,gBACN,OAAO,OAAO,cAAc,YAAY;AAMtC,sBACE,wBAAwB,OAAO,KAC/B,aAAa,WAAW,WAAW,cAAc,GACjD;AACA,0BAAM,QAAQ,QAAQ,gBAAgB;AAAA,sBACpC;AAAA,wBACE,OAAO,KAAK,UAAU,EAAE,UAAU,QAAQ,SAAS,CAAC;AAAA,wBACpD,YAAY,GAAG,aAAa,UAAU;AAAA,wBACtC,WAAW,aAAa;AAAA,sBAC1B;AAAA,oBACF;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IAEA,OAAO;AAAA,MACL,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAKN;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,CAAC,CAAC,QAAQ,SAAS,IAAI,aAAa;AAAA,UAC7C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,WAAW,KAAK,MAAM,IAAI,SAAS,IAAI,aAAa,CAAE;AAE5D,kBAAM,cAA+B;AAAA,cACnC,WAAW,SAAS;AAAA,cACpB,YAAY,SAAS;AAAA,cACrB,eAAe,SAAS;AAAA;AAAA,cAExB,UAAU;AAAA,YACZ;AAEA,kBAAM,uBAAuB,MAAM,iBAAiB;AAAA,cAClD,KAAK,IAAI,QAAQ;AAAA,cACjB,MAAM,KAAK,UAAU,WAAW;AAAA,YAClC,CAAC;AAED,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,GAAG;AAAA,gBACH,UAAU;AAAA,kBACR,WAAW,SAAS;AAAA,kBACpB;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QASA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,WAAW,KACnC,QAAQ,KAAK,WAAW,kBAAkB;AAAA,UAE9C;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,kBAAM,aAAa,GAAG,KAAK;AAE3B,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,MAAM;AACT,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,oBAAoB;AAAA,UACrD;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,kBAAM,QAAQ,IAAI,KAAK;AACvB,kBAAM,aAAa,eAAe,KAAK;AAEvC,kBAAM,OACJ,MAAM,IAAI,QAAQ,gBAAgB;AAAA,cAChC;AAAA,YACF;AAGF,gBAAI,CAAC,QAAQ,KAAK,YAAY,oBAAI,KAAK,GAAG;AACxC;AAAA,YACF;AAEA,kBAAM,SAAS,KAAK,MAAM,KAAK,KAAK;AAEpC,gBAAI,UAAU,cAAc,QAAQ;AAClC,qBAAO;AAAA,gBACL,SAAS;AAAA,kBACP,GAAG;AAAA,kBACH,UAAU,OAAO;AAAA,gBACnB;AAAA,cACF;AAAA,YACF,OAAO;AACL,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAQL;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBACE,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,UAAU,KAClC,QAAQ,KAAK,WAAW,cAAc;AAAA,UAE1C;AAAA,UACA,SAAS,qBAAqB,CAAC,GAAG,OAAO,QAAQ;AAC/C,kBAAM,WAAW,IAAI,QAAQ;AAC7B,gBAAI,CAAC,UAAU,MAAM,IAAI;AACvB;AAAA,YACF;AACA,kBAAM,WAAW,MAAM,gBAAgB,SAAS,KAAK,IAAI,GAAG;AAE5D,mBAAO,IAAI,KAAK;AAAA,cACd,GAAG;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA;AAAA,UACE,SAAS,CAAC,YAAY;AACpB,mBAAO,QAAQ,KAAK,WAAW,iBAAiB;AAAA,UAClD;AAAA,UACA,SAAS,qBAAqB,OAAO,QAAQ;AAC3C,gBAAI,CAAC,wBAAwB,GAAG,GAAG;AACjC,oBAAM,IAAI,SAAS,KAAK;AAAA,gBACtB,SAAS;AAAA,cACX,CAAC;AAAA,YACH;AAEA,kBAAM,WAAW,IAAI,QAAQ;AAE7B,kBAAM,MAAM,IAAI,IAAI,SAAS,GAAG;AAChC,kBAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAE1C,kBAAM,QAAQ,KAAK,UAAU,EAAE,UAAU,IAAI,SAAS,CAAC;AACvD,kBAAM,YAAY,oBAAI,KAAK;AAC3B,sBAAU,WAAW,UAAU,WAAW,IAAI,EAAE;AAEhD,kBAAM,IAAI,QAAQ,gBAAgB,wBAAwB;AAAA,cACxD;AAAA,cACA,YAAY,GAAG,KAAK;AAAA,cACpB;AAAA,YACF,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,wBAAwB,KAK/B;AACA,SAAO,CAAC,CAAC,OAAO,OAAO,QAAQ,YAAY,cAAc;AAC3D;AAEA,eAAe,gBACb,QACA,KAOA;AACA,QAAM,OAAO,MAAM,IAAI,QAAQ,QAAQ,QAGpC;AAAA,IACD,OAAO,IAAI,QAAQ,OAAO,KAAM;AAAA,IAChC,OAAO;AAAA,MACL;AAAA,QACE,OAAO;AAAA,QACP,UAAU;AAAA,QACV,OAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA,QAAQ,CAAC,aAAa,sBAAsB;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,MAAM;AACT;AAAA,EACF;AAEA,QAAM,WAAW,KAAK;AAAA,IACpB,MAAM,iBAAiB;AAAA,MACrB,KAAK,IAAI,QAAQ;AAAA,MACjB,MAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}

package/dist/better-auth/auth/tests/react.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=react.test.d.ts.map

package/dist/better-auth/auth/tests/react.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.test.d.ts","sourceRoot":"","sources":["../../../../src/better-auth/auth/tests/react.test.tsx"],"names":[],"mappings":""}

package/dist/{chunk-3LE7N6TH.js → chunk-45VKEOXG.js}

@@ -2677,7 +2677,9 @@ var Profile = class extends CoMap {
 };
 
 // src/tools/coValues/inbox.ts
-import { RawAccount as RawAccount2 } from "cojson";
+import {
+  RawAccount as RawAccount2
+} from "cojson";
 
 // src/tools/lib/id.ts
 function isCoValueId(id) {
@@ -2704,6 +2706,20 @@ function createInboxRoot(account) {
     inviteLink
   };
 }
+var IncrementalFeed = class {
+  constructor(feed) {
+    this.feed = feed;
+    this.sessions = {};
+  }
+  getNewItems() {
+    const items = this.feed.getValidTransactions({
+      ignorePrivateTransactions: false,
+      from: this.sessions
+    });
+    this.sessions = this.feed.knownState().sessions;
+    return items;
+  }
+};
 async function createInboxMessage(payload, inboxOwner) {
   const group = payload.$jazz.raw.group;
   if (group instanceof RawAccount2) {
@@ -2720,108 +2736,133 @@ async function createInboxMessage(payload, inboxOwner) {
   await message.core.waitForSync();
   return message;
 }
+var MessageQueue = class {
+  constructor(concurrencyLimit = 10, processMessage, handleError) {
+    this.processMessage = processMessage;
+    this.handleError = handleError;
+    this.queue = [];
+    this.processing = /* @__PURE__ */ new Set();
+    this.activeCount = 0;
+    this.concurrencyLimit = concurrencyLimit;
+  }
+  enqueue(txKey, messageId) {
+    this.queue.push({ txKey, messageId });
+    this.processNext();
+  }
+  async processNext() {
+    if (this.activeCount >= this.concurrencyLimit || this.queue.length === 0) {
+      return;
+    }
+    const { txKey, messageId } = this.queue.shift();
+    if (this.processing.has(txKey)) {
+      this.processNext();
+      return;
+    }
+    this.processing.add(txKey);
+    this.activeCount++;
+    try {
+      await this.processMessage(txKey, messageId);
+    } catch (error) {
+      this.handleError(txKey, messageId, error);
+    } finally {
+      this.processing.delete(txKey);
+      this.activeCount--;
+      this.processNext();
+    }
+  }
+};
 var Inbox = class _Inbox {
   constructor(account, root, messages, processed, failed) {
-    this.processing = /* @__PURE__ */ new Set();
     this.account = account;
     this.root = root;
     this.messages = messages;
     this.processed = processed;
     this.failed = failed;
   }
-  subscribe(Schema4, callback, options = {}) {
+  subscribe(Schema4, callback, options) {
     const processed = /* @__PURE__ */ new Set();
-    const failed = /* @__PURE__ */ new Map();
     const node = this.account.$jazz.localNode;
-    this.processed.subscribe((stream) => {
-      for (const items of Object.values(stream.items)) {
-        for (const item of items) {
-          processed.add(item.value);
-        }
+    const concurrencyLimit = options?.concurrencyLimit ?? 10;
+    const processedFeed = new IncrementalFeed(this.processed.core);
+    this.processed.subscribe(() => {
+      for (const { changes } of processedFeed.getNewItems()) {
+        processed.add(changes[0]);
       }
     });
     const { account } = this;
-    const { retries = 3 } = options;
-    let failTimer = void 0;
-    const clearFailTimer = () => {
-      clearTimeout(failTimer);
-      failTimer = void 0;
+    const messagesFeed = new IncrementalFeed(this.messages.core);
+    const processMessage = async (txKey, messageId) => {
+      const message = await node.load(messageId);
+      if (message === "unavailable") {
+        throw new Error(`Inbox: message ${messageId} is unavailable`);
+      }
+      const value = await loadCoValue(
+        coValueClassFromCoValueClassOrSchema(Schema4),
+        message.get("payload"),
+        {
+          loadAs: account
+        }
+      );
+      if (!value) {
+        throw new Error(
+          `Inbox: Unable to load the payload of message ${messageId}`
+        );
+      }
+      const accountID = getAccountIDfromSessionID(
+        txKey.split("/")[0]
+      );
+      if (!accountID) {
+        throw new Error(`Inbox: Unknown account for message ${messageId}`);
+      }
+      const result = await callback(value, accountID);
+      const inboxMessage = node.expectCoValueLoaded(messageId).getCurrentContent();
+      if (result) {
+        inboxMessage.set("result", result.$jazz.id);
+      }
+      inboxMessage.set("processed", true);
+      this.processed.push(txKey);
+    };
+    const handleError = (txKey, messageId, error) => {
+      console.error(error);
+      const stringifiedError = String(error);
+      this.processed.push(txKey);
+      this.failed.push({ errors: [stringifiedError], value: messageId });
+      try {
+        const inboxMessage = node.expectCoValueLoaded(messageId).getCurrentContent();
+        inboxMessage.set("error", stringifiedError);
+        inboxMessage.set("processed", true);
+      } catch (error2) {
+      }
     };
-    const handleNewMessages = (stream) => {
-      clearFailTimer();
-      for (const [sessionID, items] of Object.entries(stream.items)) {
-        const accountID = getAccountIDfromSessionID(sessionID);
+    const messageQueue = new MessageQueue(
+      concurrencyLimit,
+      processMessage,
+      handleError
+    );
+    const handleNewMessages = () => {
+      for (const tx of messagesFeed.getNewItems()) {
+        const accountID = getAccountIDfromSessionID(tx.txID.sessionID);
         if (!accountID) {
-          console.warn("Received message from unknown account", sessionID);
+          console.warn(
+            "Received message from unknown account",
+            tx.txID.sessionID
+          );
           continue;
         }
-        for (const item of items) {
-          const txKey = `${sessionID}/${item.tx.txIndex}`;
-          if (!processed.has(txKey) && !this.processing.has(txKey)) {
-            this.processing.add(txKey);
-            const id = item.value;
-            node.load(id).then((message) => {
-              if (message === "unavailable") {
-                return Promise.reject(
-                  new Error("Unable to load inbox message " + id)
-                );
-              }
-              return loadCoValue(
-                coValueClassFromCoValueClassOrSchema(Schema4),
-                message.get("payload"),
-                {
-                  loadAs: account
-                }
-              );
-            }).then((value) => {
-              if (!value) {
-                return Promise.reject(
-                  new Error("Unable to load inbox message " + id)
-                );
-              }
-              return callback(value, accountID);
-            }).then((result) => {
-              const inboxMessage = node.expectCoValueLoaded(item.value).getCurrentContent();
-              if (result) {
-                inboxMessage.set("result", result.$jazz.id);
-              }
-              inboxMessage.set("processed", true);
-              this.processed.push(txKey);
-              this.processing.delete(txKey);
-            }).catch((error) => {
-              console.error("Error processing inbox message", error);
-              this.processing.delete(txKey);
-              const errors = failed.get(txKey) ?? [];
-              const stringifiedError = String(error);
-              errors.push(stringifiedError);
-              let inboxMessage;
-              try {
-                inboxMessage = node.expectCoValueLoaded(item.value).getCurrentContent();
-                inboxMessage.set("error", stringifiedError);
-              } catch (error2) {
-              }
-              if (errors.length > retries) {
-                inboxMessage?.set("processed", true);
-                this.processed.push(txKey);
-                this.failed.push({ errors, value: item.value });
-              } else {
-                failed.set(txKey, errors);
-                if (!failTimer) {
-                  failTimer = setTimeout(
-                    () => handleNewMessages(stream),
-                    100
-                  );
-                }
-              }
-            });
-          }
+        const id = tx.changes[0];
+        if (!isCoValueId(id)) {
+          continue;
+        }
+        const txKey = `${tx.txID.sessionID}/${tx.txID.txIndex}`;
+        if (processed.has(txKey)) {
+          continue;
         }
+        messageQueue.enqueue(txKey, id);
       }
     };
     const unsubscribe = this.messages.subscribe(handleNewMessages);
     return () => {
       unsubscribe();
-      clearFailTimer();
     };
   }
   static async load(account) {
@@ -2845,6 +2886,7 @@ var Inbox = class _Inbox {
     if (messages === "unavailable" || processed === "unavailable" || failed === "unavailable") {
       throw new Error("Inbox not found");
     }
+    await processed.core.waitForFullStreaming();
     return new _Inbox(account, root, messages, processed, failed);
   }
 };
@@ -5816,4 +5858,4 @@ export {
   JazzContextManager
 };
 /* istanbul ignore file -- @preserve */
-//# sourceMappingURL=chunk-3LE7N6TH.js.map
+//# sourceMappingURL=chunk-45VKEOXG.js.map