zitejs 0.9.75 → 0.9.77

package/dist/cjs/auth/index.d.ts

@@ -217,6 +217,13 @@ export declare const useSession: () => {
         message?: string | undefined;
     }, FetchOptions["throw"] extends true ? true : false>>;
 };
+export declare function loginWithRedirect(opts?: {
+    redirectUrl?: string;
+    initialView?: 'login' | 'signup';
+}): void;
+export declare function logout(opts?: {
+    returnTo?: string;
+}): void;
 export type User = {
     id: string;
     name: string;
@@ -228,3 +235,30 @@ export type User = {
     createdAt: Date;
     updatedAt: Date;
 };
+export interface ZiteAuthMethods {
+    emailPassword?: boolean;
+    magicLink?: boolean;
+    googleSignIn?: boolean;
+    sso?: boolean;
+}
+export interface ZiteAuthPageMessages {
+    signInTitle?: string;
+    signUpTitle?: string;
+    signInSubtitle?: string;
+    signUpSubtitle?: string;
+}
+export interface ZiteAuthPage {
+    showLogo?: boolean;
+    messages?: ZiteAuthPageMessages;
+}
+export interface ZiteAuthenticationConfig {
+    authenticationMethods?: ZiteAuthMethods;
+    signup?: 'disabled' | 'open' | 'domain-restricted';
+    domains?: string[];
+    authPage?: ZiteAuthPage;
+}
+export interface ZiteAppConfig {
+    id?: string;
+    accessMode?: string;
+    authentication?: ZiteAuthenticationConfig;
+}

package/dist/cjs/auth/index.js

@@ -1,8 +1,24 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.signUp = exports.signOut = exports.signIn = exports.useSession = void 0;
+exports.loginWithRedirect = loginWithRedirect;
+exports.logout = logout;
 const react_1 = require("better-auth/react");
 const authClient = (0, react_1.createAuthClient)({
     baseURL: '',
 });
 exports.useSession = authClient.useSession, exports.signIn = authClient.signIn, exports.signOut = authClient.signOut, exports.signUp = authClient.signUp;
+function loginWithRedirect(opts) {
+    const params = new URLSearchParams();
+    if (opts?.redirectUrl)
+        params.set('redirectUrl', opts.redirectUrl);
+    if (opts?.initialView)
+        params.set('view', opts.initialView);
+    const query = params.toString();
+    window.location.href = '/auth/login' + (query ? '?' + query : '');
+}
+function logout(opts) {
+    (0, exports.signOut)().then(() => {
+        window.location.href = opts?.returnTo || '/';
+    });
+}

package/dist/cjs/auth-server/index.d.ts

@@ -5,8 +5,16 @@ export interface ZiteAuthUser {
     firstName?: string;
     lastName?: string;
 }
+import type { ZiteAuthMethods } from '../auth/index.js';
+export type { ZiteAuthMethods };
+export interface ZiteAuthSettings {
+    methods?: ZiteAuthMethods;
+    signup?: 'disabled' | 'open' | 'domain-restricted';
+    domains?: string[];
+}
 export interface ZiteAuthConfig {
     flowPublicId?: string;
+    authSettings?: ZiteAuthSettings;
     onSignup?: (user: ZiteAuthUser) => Promise<void>;
     onLogin?: (user: ZiteAuthUser) => Promise<void>;
     beforeSignup?: (email: string) => Promise<boolean>;
@@ -26,9 +34,9 @@ export declare function ziteAuth(config?: ZiteAuthConfig): import("better-auth")
         max: number;
     };
     emailAndPassword: {
-        enabled: true;
+        enabled: boolean;
     };
-    plugins: [{
+    plugins: {
         id: "generic-oauth";
         version: string;
         init: (ctx: import("better-auth").AuthContext) => {
@@ -189,113 +197,7 @@ export declare function ziteAuth(config?: ZiteAuthConfig): import("better-auth")
             ISSUER_MISMATCH: import("better-auth").RawError<"ISSUER_MISMATCH">;
             ISSUER_MISSING: import("better-auth").RawError<"ISSUER_MISSING">;
         };
-    }, {
-        id: "magic-link";
-        version: string;
-        endpoints: {
-            signInMagicLink: import("better-auth").StrictEndpoint<"/sign-in/magic-link", {
-                method: "POST";
-                requireHeaders: true;
-                body: import("better-auth").ZodObject<{
-                    email: import("better-auth").ZodEmail;
-                    name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
-                }, import("zod/v4/core").$strip>;
-                metadata: {
-                    openapi: {
-                        operationId: string;
-                        description: string;
-                        responses: {
-                            200: {
-                                description: string;
-                                content: {
-                                    "application/json": {
-                                        schema: {
-                                            type: "object";
-                                            properties: {
-                                                status: {
-                                                    type: string;
-                                                };
-                                            };
-                                        };
-                                    };
-                                };
-                            };
-                        };
-                    };
-                };
-            }, {
-                status: boolean;
-            }>;
-            magicLinkVerify: import("better-auth").StrictEndpoint<"/magic-link/verify", {
-                method: "GET";
-                query: import("better-auth").ZodObject<{
-                    token: import("better-auth").ZodString;
-                    callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                }, import("zod/v4/core").$strip>;
-                use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>)[];
-                requireHeaders: true;
-                metadata: {
-                    openapi: {
-                        operationId: string;
-                        description: string;
-                        responses: {
-                            200: {
-                                description: string;
-                                content: {
-                                    "application/json": {
-                                        schema: {
-                                            type: "object";
-                                            properties: {
-                                                session: {
-                                                    $ref: string;
-                                                };
-                                                user: {
-                                                    $ref: string;
-                                                };
-                                            };
-                                        };
-                                    };
-                                };
-                            };
-                        };
-                    };
-                };
-            }, {
-                token: string;
-                user: {
-                    id: string;
-                    createdAt: Date;
-                    updatedAt: Date;
-                    email: string;
-                    emailVerified: boolean;
-                    name: string;
-                    image?: string | null | undefined;
-                };
-                session: {
-                    id: string;
-                    createdAt: Date;
-                    updatedAt: Date;
-                    userId: string;
-                    expiresAt: Date;
-                    token: string;
-                    ipAddress?: string | null | undefined;
-                    userAgent?: string | null | undefined;
-                };
-            }>;
-        };
-        rateLimit: {
-            pathMatcher(path: string): boolean;
-            window: number;
-            max: number;
-        }[];
-        options: import("better-auth/plugins").MagicLinkOptions;
-    }];
+    }[];
     user: {
         modelName: "zite_user";
         additionalFields: {
@@ -341,5 +243,19 @@ export declare function ziteAuth(config?: ZiteAuthConfig): import("better-auth")
                 } & Record<string, unknown>) => Promise<void>) | undefined;
             };
         };
+        session: {
+            create: {
+                after: ((session: {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    userId: string;
+                    expiresAt: Date;
+                    token: string;
+                    ipAddress?: string | null | undefined;
+                    userAgent?: string | null | undefined;
+                } & Record<string, unknown>) => Promise<void>) | undefined;
+            };
+        };
     };
 }>;

package/dist/cjs/auth-server/index.js

@@ -4,34 +4,62 @@ exports.ziteAuth = ziteAuth;
 const better_auth_1 = require("better-auth");
 const plugins_1 = require("better-auth/plugins");
 function ziteAuth(config = {}) {
-    const sendMagicLinkEmail = config.sendEmail
-        ? async ({ email, url }) => {
-            await config.sendEmail(email, 'Sign in to your app', `Click here to sign in: ${url}`);
+    const methods = config.authSettings?.methods ?? {};
+    const signup = config.authSettings?.signup ?? 'open';
+    const allowedDomains = config.authSettings?.domains ?? [];
+    const plugins = [
+        (0, plugins_1.genericOAuth)({
+            config: [
+                {
+                    providerId: 'zite',
+                    clientId: process.env.ZITE_OAUTH_CLIENT_ID,
+                    clientSecret: process.env.ZITE_OAUTH_CLIENT_SECRET,
+                    discoveryUrl: process.env.ZITE_AUTH_URL +
+                        '/.well-known/openid-configuration',
+                },
+                ...(methods.googleSignIn !== false
+                    ? [
+                        {
+                            providerId: 'google',
+                            clientId: process.env.ZITE_GOOGLE_PROXY_CLIENT_ID,
+                            clientSecret: process.env.ZITE_GOOGLE_PROXY_CLIENT_SECRET,
+                            authorizationUrl: process.env.ZITE_AUTH_URL + '/proxy/google/authorize',
+                            tokenUrl: process.env.ZITE_AUTH_URL + '/proxy/google/token',
+                        },
+                    ]
+                    : []),
+            ],
+        }),
+    ];
+    if (methods.magicLink !== false) {
+        const sendMagicLinkEmail = config.sendEmail
+            ? async ({ email, url }) => {
+                await config.sendEmail(email, 'Sign in to your app', `Click here to sign in: ${url}`);
+            }
+            : async ({ email, url }) => {
+                console.log(`[ziteAuth] Magic link for ${email}: ${url}`);
+            };
+        plugins.push((0, plugins_1.magicLink)({ sendMagicLink: sendMagicLinkEmail }));
+    }
+    const domainCheckHook = signup === 'domain-restricted' && allowedDomains.length > 0
+        ? async (email) => {
+            const domain = email.split('@')[1]?.toLowerCase();
+            if (!domain || !allowedDomains.some(d => d.toLowerCase() === domain)) {
+                return false;
+            }
+            return config.beforeSignup ? config.beforeSignup(email) : true;
         }
-        : async ({ email, url }) => {
-            console.log(`[ziteAuth] Magic link for ${email}: ${url}`);
-        };
+        : signup === 'disabled'
+            ? async (_email) => false
+            : config.beforeSignup;
     return (0, better_auth_1.betterAuth)({
         database: { url: process.env.DATABASE_URL },
         secret: process.env.ZITE_AUTH_SECRET || 'zite-local-dev-secret',
         baseURL: 'http://localhost',
         advanced: { disableCSRFCheck: true },
         rateLimit: { window: 60, max: 10 },
-        emailAndPassword: { enabled: true },
-        plugins: [
-            (0, plugins_1.genericOAuth)({
-                config: [
-                    {
-                        providerId: 'zite',
-                        clientId: process.env.ZITE_OAUTH_CLIENT_ID,
-                        clientSecret: process.env.ZITE_OAUTH_CLIENT_SECRET,
-                        discoveryUrl: process.env.ZITE_AUTH_URL +
-                            '/.well-known/openid-configuration',
-                    },
-                ],
-            }),
-            (0, plugins_1.magicLink)({ sendMagicLink: sendMagicLinkEmail }),
-        ],
+        emailAndPassword: { enabled: methods.emailPassword !== false },
+        plugins,
         user: {
             modelName: 'zite_user',
             additionalFields: {
@@ -45,9 +73,9 @@ function ziteAuth(config = {}) {
         databaseHooks: {
             user: {
                 create: {
-                    before: config.beforeSignup
+                    before: domainCheckHook
                         ? async (user) => {
-                            const allowed = await config.beforeSignup(user.email);
+                            const allowed = await domainCheckHook(user.email);
                             if (!allowed) {
                                 throw new Error('Signup not allowed for this email');
                             }
@@ -67,6 +95,19 @@ function ziteAuth(config = {}) {
                         : undefined,
                 },
             },
+            session: {
+                create: {
+                    after: config.onLogin
+                        ? async (session) => {
+                            await config.onLogin({
+                                id: session.userId,
+                                email: '',
+                                name: '',
+                            });
+                        }
+                        : undefined,
+                },
+            },
         },
     });
 }

package/dist/cjs/sync/lib.js

@@ -492,17 +492,12 @@ function generateUserTs(usersTableFields) {
 }
 function generateAuthWrapperTs() {
     return [
-        "// Auto-generated type-narrowing wrapper. Do not edit manually.",
+        "// Auto-generated auth re-exports. Do not edit manually.",
         "// The real auth logic lives in the zitejs npm package (zitejs/auth).",
+        "// Imports use zitejs/auth/base to avoid circular alias (zitejs/auth → this file).",
         "",
-        "import { useAuth as _useAuth } from 'zitejs/auth/base';",
-        "import type { User } from './user';",
-        "",
-        "export type { User };",
-        "",
-        "export function useAuth() {",
-        "  return _useAuth() as ReturnType<typeof _useAuth> & { user: User | undefined };",
-        "}",
+        "export { useSession, signIn, signOut, signUp, loginWithRedirect, logout } from 'zitejs/auth/base';",
+        "export type { User } from 'zitejs/auth/base';",
         "",
     ].join("\n");
 }

package/dist/esm/auth/index.d.ts

@@ -217,6 +217,13 @@ export declare const useSession: () => {
         message?: string | undefined;
     }, FetchOptions["throw"] extends true ? true : false>>;
 };
+export declare function loginWithRedirect(opts?: {
+    redirectUrl?: string;
+    initialView?: 'login' | 'signup';
+}): void;
+export declare function logout(opts?: {
+    returnTo?: string;
+}): void;
 export type User = {
     id: string;
     name: string;
@@ -228,3 +235,30 @@ export type User = {
     createdAt: Date;
     updatedAt: Date;
 };
+export interface ZiteAuthMethods {
+    emailPassword?: boolean;
+    magicLink?: boolean;
+    googleSignIn?: boolean;
+    sso?: boolean;
+}
+export interface ZiteAuthPageMessages {
+    signInTitle?: string;
+    signUpTitle?: string;
+    signInSubtitle?: string;
+    signUpSubtitle?: string;
+}
+export interface ZiteAuthPage {
+    showLogo?: boolean;
+    messages?: ZiteAuthPageMessages;
+}
+export interface ZiteAuthenticationConfig {
+    authenticationMethods?: ZiteAuthMethods;
+    signup?: 'disabled' | 'open' | 'domain-restricted';
+    domains?: string[];
+    authPage?: ZiteAuthPage;
+}
+export interface ZiteAppConfig {
+    id?: string;
+    accessMode?: string;
+    authentication?: ZiteAuthenticationConfig;
+}

package/dist/esm/auth/index.js

@@ -3,3 +3,17 @@ const authClient = createAuthClient({
     baseURL: '',
 });
 export const { useSession, signIn, signOut, signUp } = authClient;
+export function loginWithRedirect(opts) {
+    const params = new URLSearchParams();
+    if (opts?.redirectUrl)
+        params.set('redirectUrl', opts.redirectUrl);
+    if (opts?.initialView)
+        params.set('view', opts.initialView);
+    const query = params.toString();
+    window.location.href = '/auth/login' + (query ? '?' + query : '');
+}
+export function logout(opts) {
+    signOut().then(() => {
+        window.location.href = opts?.returnTo || '/';
+    });
+}

package/dist/esm/auth-server/index.d.ts

@@ -5,8 +5,16 @@ export interface ZiteAuthUser {
     firstName?: string;
     lastName?: string;
 }
+import type { ZiteAuthMethods } from '../auth/index.js';
+export type { ZiteAuthMethods };
+export interface ZiteAuthSettings {
+    methods?: ZiteAuthMethods;
+    signup?: 'disabled' | 'open' | 'domain-restricted';
+    domains?: string[];
+}
 export interface ZiteAuthConfig {
     flowPublicId?: string;
+    authSettings?: ZiteAuthSettings;
     onSignup?: (user: ZiteAuthUser) => Promise<void>;
     onLogin?: (user: ZiteAuthUser) => Promise<void>;
     beforeSignup?: (email: string) => Promise<boolean>;
@@ -26,9 +34,9 @@ export declare function ziteAuth(config?: ZiteAuthConfig): import("better-auth")
         max: number;
     };
     emailAndPassword: {
-        enabled: true;
+        enabled: boolean;
     };
-    plugins: [{
+    plugins: {
         id: "generic-oauth";
         version: string;
         init: (ctx: import("better-auth").AuthContext) => {
@@ -189,113 +197,7 @@ export declare function ziteAuth(config?: ZiteAuthConfig): import("better-auth")
             ISSUER_MISMATCH: import("better-auth").RawError<"ISSUER_MISMATCH">;
             ISSUER_MISSING: import("better-auth").RawError<"ISSUER_MISSING">;
         };
-    }, {
-        id: "magic-link";
-        version: string;
-        endpoints: {
-            signInMagicLink: import("better-auth").StrictEndpoint<"/sign-in/magic-link", {
-                method: "POST";
-                requireHeaders: true;
-                body: import("better-auth").ZodObject<{
-                    email: import("better-auth").ZodEmail;
-                    name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
-                }, import("zod/v4/core").$strip>;
-                metadata: {
-                    openapi: {
-                        operationId: string;
-                        description: string;
-                        responses: {
-                            200: {
-                                description: string;
-                                content: {
-                                    "application/json": {
-                                        schema: {
-                                            type: "object";
-                                            properties: {
-                                                status: {
-                                                    type: string;
-                                                };
-                                            };
-                                        };
-                                    };
-                                };
-                            };
-                        };
-                    };
-                };
-            }, {
-                status: boolean;
-            }>;
-            magicLinkVerify: import("better-auth").StrictEndpoint<"/magic-link/verify", {
-                method: "GET";
-                query: import("better-auth").ZodObject<{
-                    token: import("better-auth").ZodString;
-                    callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                    newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-                }, import("zod/v4/core").$strip>;
-                use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>)[];
-                requireHeaders: true;
-                metadata: {
-                    openapi: {
-                        operationId: string;
-                        description: string;
-                        responses: {
-                            200: {
-                                description: string;
-                                content: {
-                                    "application/json": {
-                                        schema: {
-                                            type: "object";
-                                            properties: {
-                                                session: {
-                                                    $ref: string;
-                                                };
-                                                user: {
-                                                    $ref: string;
-                                                };
-                                            };
-                                        };
-                                    };
-                                };
-                            };
-                        };
-                    };
-                };
-            }, {
-                token: string;
-                user: {
-                    id: string;
-                    createdAt: Date;
-                    updatedAt: Date;
-                    email: string;
-                    emailVerified: boolean;
-                    name: string;
-                    image?: string | null | undefined;
-                };
-                session: {
-                    id: string;
-                    createdAt: Date;
-                    updatedAt: Date;
-                    userId: string;
-                    expiresAt: Date;
-                    token: string;
-                    ipAddress?: string | null | undefined;
-                    userAgent?: string | null | undefined;
-                };
-            }>;
-        };
-        rateLimit: {
-            pathMatcher(path: string): boolean;
-            window: number;
-            max: number;
-        }[];
-        options: import("better-auth/plugins").MagicLinkOptions;
-    }];
+    }[];
     user: {
         modelName: "zite_user";
         additionalFields: {
@@ -341,5 +243,19 @@ export declare function ziteAuth(config?: ZiteAuthConfig): import("better-auth")
                 } & Record<string, unknown>) => Promise<void>) | undefined;
             };
         };
+        session: {
+            create: {
+                after: ((session: {
+                    id: string;
+                    createdAt: Date;
+                    updatedAt: Date;
+                    userId: string;
+                    expiresAt: Date;
+                    token: string;
+                    ipAddress?: string | null | undefined;
+                    userAgent?: string | null | undefined;
+                } & Record<string, unknown>) => Promise<void>) | undefined;
+            };
+        };
     };
 }>;

package/dist/esm/auth-server/index.js

@@ -1,34 +1,62 @@
 import { betterAuth } from 'better-auth';
 import { genericOAuth, magicLink } from 'better-auth/plugins';
 export function ziteAuth(config = {}) {
-    const sendMagicLinkEmail = config.sendEmail
-        ? async ({ email, url }) => {
-            await config.sendEmail(email, 'Sign in to your app', `Click here to sign in: ${url}`);
+    const methods = config.authSettings?.methods ?? {};
+    const signup = config.authSettings?.signup ?? 'open';
+    const allowedDomains = config.authSettings?.domains ?? [];
+    const plugins = [
+        genericOAuth({
+            config: [
+                {
+                    providerId: 'zite',
+                    clientId: process.env.ZITE_OAUTH_CLIENT_ID,
+                    clientSecret: process.env.ZITE_OAUTH_CLIENT_SECRET,
+                    discoveryUrl: process.env.ZITE_AUTH_URL +
+                        '/.well-known/openid-configuration',
+                },
+                ...(methods.googleSignIn !== false
+                    ? [
+                        {
+                            providerId: 'google',
+                            clientId: process.env.ZITE_GOOGLE_PROXY_CLIENT_ID,
+                            clientSecret: process.env.ZITE_GOOGLE_PROXY_CLIENT_SECRET,
+                            authorizationUrl: process.env.ZITE_AUTH_URL + '/proxy/google/authorize',
+                            tokenUrl: process.env.ZITE_AUTH_URL + '/proxy/google/token',
+                        },
+                    ]
+                    : []),
+            ],
+        }),
+    ];
+    if (methods.magicLink !== false) {
+        const sendMagicLinkEmail = config.sendEmail
+            ? async ({ email, url }) => {
+                await config.sendEmail(email, 'Sign in to your app', `Click here to sign in: ${url}`);
+            }
+            : async ({ email, url }) => {
+                console.log(`[ziteAuth] Magic link for ${email}: ${url}`);
+            };
+        plugins.push(magicLink({ sendMagicLink: sendMagicLinkEmail }));
+    }
+    const domainCheckHook = signup === 'domain-restricted' && allowedDomains.length > 0
+        ? async (email) => {
+            const domain = email.split('@')[1]?.toLowerCase();
+            if (!domain || !allowedDomains.some(d => d.toLowerCase() === domain)) {
+                return false;
+            }
+            return config.beforeSignup ? config.beforeSignup(email) : true;
         }
-        : async ({ email, url }) => {
-            console.log(`[ziteAuth] Magic link for ${email}: ${url}`);
-        };
+        : signup === 'disabled'
+            ? async (_email) => false
+            : config.beforeSignup;
     return betterAuth({
         database: { url: process.env.DATABASE_URL },
         secret: process.env.ZITE_AUTH_SECRET || 'zite-local-dev-secret',
         baseURL: 'http://localhost',
         advanced: { disableCSRFCheck: true },
         rateLimit: { window: 60, max: 10 },
-        emailAndPassword: { enabled: true },
-        plugins: [
-            genericOAuth({
-                config: [
-                    {
-                        providerId: 'zite',
-                        clientId: process.env.ZITE_OAUTH_CLIENT_ID,
-                        clientSecret: process.env.ZITE_OAUTH_CLIENT_SECRET,
-                        discoveryUrl: process.env.ZITE_AUTH_URL +
-                            '/.well-known/openid-configuration',
-                    },
-                ],
-            }),
-            magicLink({ sendMagicLink: sendMagicLinkEmail }),
-        ],
+        emailAndPassword: { enabled: methods.emailPassword !== false },
+        plugins,
         user: {
             modelName: 'zite_user',
             additionalFields: {
@@ -42,9 +70,9 @@ export function ziteAuth(config = {}) {
         databaseHooks: {
             user: {
                 create: {
-                    before: config.beforeSignup
+                    before: domainCheckHook
                         ? async (user) => {
-                            const allowed = await config.beforeSignup(user.email);
+                            const allowed = await domainCheckHook(user.email);
                             if (!allowed) {
                                 throw new Error('Signup not allowed for this email');
                             }
@@ -64,6 +92,19 @@ export function ziteAuth(config = {}) {
                         : undefined,
                 },
             },
+            session: {
+                create: {
+                    after: config.onLogin
+                        ? async (session) => {
+                            await config.onLogin({
+                                id: session.userId,
+                                email: '',
+                                name: '',
+                            });
+                        }
+                        : undefined,
+                },
+            },
         },
     });
 }

package/dist/esm/sync/lib.js

@@ -480,17 +480,12 @@ export function generateUserTs(usersTableFields) {
 }
 export function generateAuthWrapperTs() {
     return [
-        "// Auto-generated type-narrowing wrapper. Do not edit manually.",
+        "// Auto-generated auth re-exports. Do not edit manually.",
         "// The real auth logic lives in the zitejs npm package (zitejs/auth).",
+        "// Imports use zitejs/auth/base to avoid circular alias (zitejs/auth → this file).",
         "",
-        "import { useAuth as _useAuth } from 'zitejs/auth/base';",
-        "import type { User } from './user';",
-        "",
-        "export type { User };",
-        "",
-        "export function useAuth() {",
-        "  return _useAuth() as ReturnType<typeof _useAuth> & { user: User | undefined };",
-        "}",
+        "export { useSession, signIn, signOut, signUp, loginWithRedirect, logout } from 'zitejs/auth/base';",
+        "export type { User } from 'zitejs/auth/base';",
         "",
     ].join("\n");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zitejs",
-  "version": "0.9.75",
+  "version": "0.9.77",
   "description": "The Zite framework — build apps on Zite Database",
   "type": "module",
   "main": "./dist/cjs/index.js",