@better-auth/core 1.5.6 → 1.6.0-beta.0

package/dist/social-providers/tiktok.mjs

@@ -1,8 +1,6 @@
 import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
 import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
-import "../oauth2/index.mjs";
 import { betterFetch } from "@better-fetch/fetch";
-
 //#region src/social-providers/tiktok.ts
 const tiktok = (options) => {
 	const tokenEndpoint = "https://open.tiktokapis.com/v2/oauth/token/";
@@ -58,7 +56,5 @@ const tiktok = (options) => {
 		options
 	};
 };
-
 //#endregion
 export { tiktok };
-//# sourceMappingURL=tiktok.mjs.map

package/dist/social-providers/twitch.d.mts

@@ -76,5 +76,4 @@ declare const twitch: (options: TwitchOptions) => {
   options: TwitchOptions;
 };
 //#endregion
-export { TwitchOptions, TwitchProfile, twitch };
-//# sourceMappingURL=twitch.d.mts.map
+export { TwitchOptions, TwitchProfile, twitch };

package/dist/social-providers/twitch.mjs

@@ -1,11 +1,8 @@
 import { logger } from "../env/logger.mjs";
-import "../env/index.mjs";
 import { createAuthorizationURL } from "../oauth2/create-authorization-url.mjs";
 import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
 import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
-import "../oauth2/index.mjs";
 import { decodeJwt } from "jose";
-
 //#region src/social-providers/twitch.ts
 const twitch = (options) => {
 	const tokenEndpoint = "https://id.twitch.tv/oauth2/token";
@@ -74,7 +71,5 @@ const twitch = (options) => {
 		options
 	};
 };
-
 //#endregion
 export { twitch };
-//# sourceMappingURL=twitch.mjs.map

package/dist/social-providers/twitter.d.mts

@@ -123,5 +123,4 @@ declare const twitter: (options: TwitterOption) => {
   options: TwitterOption;
 };
 //#endregion
-export { TwitterOption, TwitterProfile, twitter };
-//# sourceMappingURL=twitter.d.mts.map
+export { TwitterOption, TwitterProfile, twitter };

package/dist/social-providers/twitter.mjs

@@ -1,9 +1,7 @@
 import { createAuthorizationURL } from "../oauth2/create-authorization-url.mjs";
 import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
 import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
-import "../oauth2/index.mjs";
 import { betterFetch } from "@better-fetch/fetch";
-
 //#region src/social-providers/twitter.ts
 const twitter = (options) => {
 	const tokenEndpoint = "https://api.x.com/2/oauth2/token";
@@ -83,7 +81,5 @@ const twitter = (options) => {
 		options
 	};
 };
-
 //#endregion
 export { twitter };
-//# sourceMappingURL=twitter.mjs.map

package/dist/social-providers/vercel.d.mts

@@ -59,5 +59,4 @@ declare const vercel: (options: VercelOptions) => {
   options: VercelOptions;
 };
 //#endregion
-export { VercelOptions, VercelProfile, vercel };
-//# sourceMappingURL=vercel.d.mts.map
+export { VercelOptions, VercelProfile, vercel };

package/dist/social-providers/vercel.mjs

@@ -1,9 +1,7 @@
 import { BetterAuthError } from "../error/index.mjs";
 import { createAuthorizationURL } from "../oauth2/create-authorization-url.mjs";
 import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
-import "../oauth2/index.mjs";
 import { betterFetch } from "@better-fetch/fetch";
-
 //#region src/social-providers/vercel.ts
 const vercel = (options) => {
 	return {
@@ -56,7 +54,5 @@ const vercel = (options) => {
 		options
 	};
 };
-
 //#endregion
 export { vercel };
-//# sourceMappingURL=vercel.mjs.map

package/dist/social-providers/vk.d.mts

@@ -67,5 +67,4 @@ declare const vk: (options: VkOption) => {
   options: VkOption;
 };
 //#endregion
-export { VkOption, VkProfile, vk };
-//# sourceMappingURL=vk.d.mts.map
+export { VkOption, VkProfile, vk };

package/dist/social-providers/vk.mjs

@@ -1,9 +1,7 @@
 import { createAuthorizationURL } from "../oauth2/create-authorization-url.mjs";
 import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
 import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
-import "../oauth2/index.mjs";
 import { betterFetch } from "@better-fetch/fetch";
-
 //#region src/social-providers/vk.ts
 const vk = (options) => {
 	const tokenEndpoint = "https://id.vk.com/oauth2/auth";
@@ -79,7 +77,5 @@ const vk = (options) => {
 		options
 	};
 };
-
 //#endregion
 export { vk };
-//# sourceMappingURL=vk.mjs.map

package/dist/social-providers/wechat.d.mts

@@ -110,5 +110,4 @@ declare const wechat: (options: WeChatOptions) => {
   options: WeChatOptions;
 };
 //#endregion
-export { WeChatOptions, WeChatProfile, wechat };
-//# sourceMappingURL=wechat.d.mts.map
+export { WeChatOptions, WeChatProfile, wechat };

package/dist/social-providers/wechat.mjs

@@ -1,5 +1,4 @@
 import { betterFetch } from "@better-fetch/fetch";
-
 //#region src/social-providers/wechat.ts
 const wechat = (options) => {
 	return {
@@ -78,7 +77,5 @@ const wechat = (options) => {
 		options
 	};
 };
-
 //#endregion
 export { wechat };
-//# sourceMappingURL=wechat.mjs.map

package/dist/social-providers/zoom.d.mts

@@ -160,5 +160,4 @@ declare const zoom: (userOptions: ZoomOptions) => {
   } | null>;
 };
 //#endregion
-export { AccountStatus, LoginType, PhoneNumber, PronounOption, ZoomOptions, ZoomProfile, zoom };
-//# sourceMappingURL=zoom.d.mts.map
+export { AccountStatus, LoginType, PhoneNumber, PronounOption, ZoomOptions, ZoomProfile, zoom };

package/dist/social-providers/zoom.mjs

@@ -1,9 +1,7 @@
 import { generateCodeChallenge } from "../oauth2/utils.mjs";
 import { refreshAccessToken } from "../oauth2/refresh-access-token.mjs";
 import { validateAuthorizationCode } from "../oauth2/validate-authorization-code.mjs";
-import "../oauth2/index.mjs";
 import { betterFetch } from "@better-fetch/fetch";
-
 //#region src/social-providers/zoom.ts
 const zoom = (userOptions) => {
 	const options = {
@@ -67,7 +65,5 @@ const zoom = (userOptions) => {
 		}
 	};
 };
-
 //#endregion
 export { zoom };
-//# sourceMappingURL=zoom.mjs.map

package/dist/types/context.d.mts

@@ -35,6 +35,7 @@ type InferPluginOptions<O extends BetterAuthOptions, ID extends BetterAuthPlugin
  *
  * const createMyPlugin = <Options extends MyPluginOptions>(options?: Options) => ({
  *   id: 'my-plugin',
+ *   version: '1.0.0',
  *   options,
  * } satisfies BetterAuthPlugin);
  *
@@ -49,9 +50,7 @@ type InferPluginOptions<O extends BetterAuthOptions, ID extends BetterAuthPlugin
  */
 interface BetterAuthPluginRegistry<AuthOptions, Options> {}
 type BetterAuthPluginRegistryIdentifier = keyof BetterAuthPluginRegistry<unknown, unknown>;
-type GenericEndpointContext<Options extends BetterAuthOptions = BetterAuthOptions> = EndpointContext<string, any> & {
-  context: AuthContext<Options>;
-};
+type GenericEndpointContext<Options extends BetterAuthOptions = BetterAuthOptions> = EndpointContext<string, any, any, any, any, any, any, AuthContext<Options>>;
 interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions> {
   createOAuthUser(user: Omit<User, "id" | "createdAt" | "updatedAt">, account: Omit<Account, "userId" | "id" | "createdAt" | "updatedAt"> & Partial<Account>): Promise<{
     user: User;
@@ -273,5 +272,4 @@ type AuthContext<Options extends BetterAuthOptions = BetterAuthOptions> = Plugin
   runInBackgroundOrAwait: (promise: Promise<unknown> | void) => Awaitable<unknown>;
 };
 //#endregion
-export { AuthContext, BetterAuthPluginRegistry, BetterAuthPluginRegistryIdentifier, GenericEndpointContext, InfoContext, InternalAdapter, PluginContext };
-//# sourceMappingURL=context.d.mts.map
+export { AuthContext, BetterAuthPluginRegistry, BetterAuthPluginRegistryIdentifier, GenericEndpointContext, InfoContext, InternalAdapter, PluginContext };

package/dist/types/cookie.d.mts

@@ -12,5 +12,4 @@ type BetterAuthCookies = {
   dontRememberToken: BetterAuthCookie;
 };
 //#endregion
-export { BetterAuthCookie, BetterAuthCookies };
-//# sourceMappingURL=cookie.d.mts.map
+export { BetterAuthCookie, BetterAuthCookies };

package/dist/types/helper.d.mts

@@ -7,5 +7,4 @@ type LiteralUnion<LiteralType, BaseType extends Primitive> = LiteralType | (Base
 type Prettify<T> = { [K in keyof T]: T[K] } & {};
 type UnionToIntersection<U> = (U extends any ? (k: U) => void : never) extends ((k: infer I) => void) ? I : never;
 //#endregion
-export { Awaitable, AwaitableFunction, LiteralString, LiteralUnion, Prettify, Primitive, UnionToIntersection };
-//# sourceMappingURL=helper.d.mts.map
+export { Awaitable, AwaitableFunction, LiteralString, LiteralUnion, Prettify, Primitive, UnionToIntersection };

package/dist/types/init-options.d.mts

@@ -165,7 +165,9 @@ type BetterAuthAdvancedOptions = {
     ipv6Subnet?: 128 | 64 | 48 | 32;
   } | undefined;
   /**
-   * Use secure cookies
+   * Force cookies to always use the `Secure` attribute. By default,
+   * cookies are secure in production environments. Set this to `true`
+   * to enforce secure cookies in all environments.
    *
    * @default false
    */
@@ -314,9 +316,11 @@ type BetterAuthAdvancedOptions = {
 };
 type BetterAuthOptions = {
   /**
-   * The name of the application
+   * The name of your application. Used as a display name in contexts
+   * where your app needs to be identified — for example, as the default
+   * issuer name in authenticator apps when users set up 2FA/TOTP.
    *
-   * process.env.APP_NAME
+   * Can also be set via the `APP_NAME` environment variable.
    *
    * @default "Better Auth"
    */
@@ -1010,7 +1014,12 @@ type BetterAuthOptions = {
     storeInDatabase?: boolean;
   }) | undefined;
   /**
-   * List of trusted origins.
+   * Additional trusted origins. By default, Better Auth trusts your
+   * app's {@link baseURL}. Use this option to allow additional origins
+   * (e.g. a separate frontend domain).
+   *
+   * Can be a static array, a function that returns origins dynamically,
+   * or use wildcard patterns (e.g. `"https://*.example.com"`).
    *
    * @param request - The request object.
    * It'll be undefined if no request was
@@ -1346,5 +1355,4 @@ type BetterAuthOptions = {
   };
 };
 //#endregion
-export { BaseURLConfig, BetterAuthAdvancedOptions, BetterAuthDBOptions, BetterAuthOptions, BetterAuthRateLimitOptions, BetterAuthRateLimitRule, BetterAuthRateLimitStorage, DynamicBaseURLConfig, GenerateIdFn, StoreIdentifierOption };
-//# sourceMappingURL=init-options.d.mts.map
+export { BaseURLConfig, BetterAuthAdvancedOptions, BetterAuthDBOptions, BetterAuthOptions, BetterAuthRateLimitOptions, BetterAuthRateLimitRule, BetterAuthRateLimitStorage, DynamicBaseURLConfig, GenerateIdFn, StoreIdentifierOption };

package/dist/types/plugin-client.d.mts

@@ -66,6 +66,7 @@ interface BetterAuthClientOptions {
 }
 interface BetterAuthClientPlugin {
   id: LiteralString;
+  version?: string | undefined;
   /**
    * only used for type inference. don't pass the
    * actual plugin
@@ -109,5 +110,4 @@ interface BetterAuthClientPlugin {
   }>;
 }
 //#endregion
-export { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientFetchOption, ClientStore };
-//# sourceMappingURL=plugin-client.d.mts.map
+export { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientFetchOption, ClientStore };

package/dist/types/plugin.d.mts

@@ -9,7 +9,10 @@ import { Migration } from "kysely";
 
 //#region src/types/plugin.d.ts
 type DeepPartial<T> = T extends Function ? T : T extends object ? { [K in keyof T]?: DeepPartial<T[K]> } : T;
-type HookEndpointContext = Partial<EndpointContext<string, any> & Omit<InputContext<string, any>, "method">> & {
+type HookEndpointContext = Partial<EndpointContext<string, any, any, any, any, any, any, AuthContext & {
+  returned?: unknown | undefined;
+  responseHeaders?: Headers | undefined;
+}> & Omit<InputContext<string, any, any, any, any, any>, "method">> & {
   path?: string;
   context: AuthContext & {
     returned?: unknown | undefined;
@@ -25,6 +28,7 @@ type BetterAuthPluginErrorCodePart = {
 };
 type BetterAuthPlugin = BetterAuthPluginErrorCodePart & {
   id: LiteralString;
+  version?: string | undefined;
   /**
    * The init function is called when the plugin is initialized.
    * You can return a new context or modify the existing context.
@@ -120,5 +124,4 @@ type BetterAuthPlugin = BetterAuthPluginErrorCodePart & {
   };
 };
 //#endregion
-export { BetterAuthPlugin, BetterAuthPluginErrorCodePart, HookEndpointContext };
-//# sourceMappingURL=plugin.d.mts.map
+export { BetterAuthPlugin, BetterAuthPluginErrorCodePart, HookEndpointContext };

package/dist/types/secret.d.mts

@@ -8,5 +8,4 @@ interface SecretConfig {
   legacySecret?: string;
 }
 //#endregion
-export { SecretConfig };
-//# sourceMappingURL=secret.d.mts.map
+export { SecretConfig };

package/dist/utils/db.d.mts

@@ -6,5 +6,4 @@ import { DBFieldAttribute } from "../db/type.mjs";
  */
 declare function filterOutputFields<T extends Record<string, unknown> | null>(data: T, additionalFields: Record<string, DBFieldAttribute> | undefined): T;
 //#endregion
-export { filterOutputFields };
-//# sourceMappingURL=db.d.mts.map
+export { filterOutputFields };

package/dist/utils/db.mjs

@@ -11,7 +11,5 @@ function filterOutputFields(data, additionalFields) {
 		[key]: value
 	}), {});
 }
-
 //#endregion
 export { filterOutputFields };
-//# sourceMappingURL=db.mjs.map

package/dist/utils/deprecate.d.mts

@@ -6,5 +6,4 @@ import { InternalLogger } from "../env/logger.mjs";
  */
 declare function deprecate<T extends (...args: any[]) => any>(fn: T, message: string, logger?: InternalLogger): T;
 //#endregion
-export { deprecate };
-//# sourceMappingURL=deprecate.d.mts.map
+export { deprecate };

package/dist/utils/deprecate.mjs

@@ -12,7 +12,5 @@ function deprecate(fn, message, logger) {
 		return fn.apply(this, args);
 	};
 }
-
 //#endregion
 export { deprecate };
-//# sourceMappingURL=deprecate.mjs.map

package/dist/utils/error-codes.d.mts

@@ -10,5 +10,4 @@ type RawError<K extends string = string> = {
 };
 declare function defineErrorCodes<const T extends Record<string, string>, R extends { [K in keyof T & string]: RawError<K> }>(codes: ValidateErrorCodes<T>): R;
 //#endregion
-export { RawError, defineErrorCodes };
-//# sourceMappingURL=error-codes.d.mts.map
+export { RawError, defineErrorCodes };

package/dist/utils/error-codes.mjs

@@ -6,7 +6,5 @@ function defineErrorCodes(codes) {
 		toString: () => key
 	}]));
 }
-
 //#endregion
 export { defineErrorCodes };
-//# sourceMappingURL=error-codes.mjs.map

package/dist/utils/fetch-metadata.d.mts

@@ -1,5 +1,4 @@
 //#region src/utils/fetch-metadata.d.ts
 declare function isBrowserFetchRequest(headers?: Headers | null): boolean;
 //#endregion
-export { isBrowserFetchRequest };
-//# sourceMappingURL=fetch-metadata.d.mts.map
+export { isBrowserFetchRequest };

package/dist/utils/fetch-metadata.mjs

@@ -2,7 +2,5 @@
 function isBrowserFetchRequest(headers) {
 	return headers?.get("sec-fetch-mode") === "cors";
 }
-
 //#endregion
 export { isBrowserFetchRequest };
-//# sourceMappingURL=fetch-metadata.mjs.map

package/dist/utils/id.d.mts

@@ -1,5 +1,4 @@
 //#region src/utils/id.d.ts
 declare const generateId: (size?: number) => string;
 //#endregion
-export { generateId };
-//# sourceMappingURL=id.d.mts.map
+export { generateId };

package/dist/utils/id.mjs

@@ -1,10 +1,7 @@
 import { createRandomStringGenerator } from "@better-auth/utils/random";
-
 //#region src/utils/id.ts
 const generateId = (size) => {
 	return createRandomStringGenerator("a-z", "A-Z", "0-9")(size || 32);
 };
-
 //#endregion
 export { generateId };
-//# sourceMappingURL=id.mjs.map

package/dist/utils/ip.d.mts

@@ -51,5 +51,4 @@ declare function normalizeIP(ip: string, options?: NormalizeIPOptions): string;
  */
 declare function createRateLimitKey(ip: string, path: string): string;
 //#endregion
-export { createRateLimitKey, isValidIP, normalizeIP };
-//# sourceMappingURL=ip.d.mts.map
+export { createRateLimitKey, isValidIP, normalizeIP };

package/dist/utils/ip.mjs

@@ -1,5 +1,4 @@
 import * as z from "zod";
-
 //#region src/utils/ip.ts
 /**
 * Checks if an IP is valid IPv4 or IPv6
@@ -113,7 +112,5 @@ function normalizeIP(ip, options = {}) {
 function createRateLimitKey(ip, path) {
 	return `${ip}|${path}`;
 }
-
 //#endregion
 export { createRateLimitKey, isValidIP, normalizeIP };
-//# sourceMappingURL=ip.mjs.map

package/dist/utils/json.d.mts

@@ -1,5 +1,4 @@
 //#region src/utils/json.d.ts
 declare function safeJSONParse<T>(data: unknown): T | null;
 //#endregion
-export { safeJSONParse };
-//# sourceMappingURL=json.d.mts.map
+export { safeJSONParse };

package/dist/utils/json.mjs

@@ -1,6 +1,4 @@
 import { logger } from "../env/logger.mjs";
-import "../env/index.mjs";
-
 //#region src/utils/json.ts
 const iso8601Regex = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/;
 function reviveDate(value) {
@@ -39,7 +37,5 @@ function safeJSONParse(data) {
 		return null;
 	}
 }
-
 //#endregion
 export { safeJSONParse };
-//# sourceMappingURL=json.mjs.map

package/dist/utils/string.d.mts

@@ -1,5 +1,4 @@
 //#region src/utils/string.d.ts
 declare function capitalizeFirstLetter(str: string): string;
 //#endregion
-export { capitalizeFirstLetter };
-//# sourceMappingURL=string.d.mts.map
+export { capitalizeFirstLetter };

package/dist/utils/string.mjs

@@ -2,7 +2,5 @@
 function capitalizeFirstLetter(str) {
 	return str.charAt(0).toUpperCase() + str.slice(1);
 }
-
 //#endregion
 export { capitalizeFirstLetter };
-//# sourceMappingURL=string.mjs.map

package/dist/utils/url.d.mts

@@ -17,5 +17,4 @@
  */
 declare function normalizePathname(requestUrl: string, basePath: string): string;
 //#endregion
-export { normalizePathname };
-//# sourceMappingURL=url.d.mts.map
+export { normalizePathname };

package/dist/utils/url.mjs

@@ -27,7 +27,5 @@ function normalizePathname(requestUrl, basePath) {
 	if (pathname.startsWith(basePath + "/")) return pathname.slice(basePath.length).replace(/\/+$/, "") || "/";
 	return pathname;
 }
-
 //#endregion
 export { normalizePathname };
-//# sourceMappingURL=url.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/core",
-  "version": "1.5.6",
+  "version": "1.6.0-beta.0",
   "description": "The most comprehensive authentication framework for TypeScript.",
   "type": "module",
   "license": "MIT",
@@ -19,9 +19,11 @@
   "publishConfig": {
     "access": "public"
   },
+  "sideEffects": false,
   "files": [
     "dist",
-    "src"
+    "src",
+    "!src/**/*.test.ts"
   ],
   "main": "./dist/index.mjs",
   "module": "./dist/index.mjs",
@@ -143,23 +145,23 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@better-auth/utils": "0.3.1",
+    "@better-auth/utils": "0.4.0",
     "@better-fetch/fetch": "1.1.21",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/sdk-trace-base": "^1.30.0",
     "@opentelemetry/sdk-trace-node": "^1.30.0",
-    "better-call": "1.3.2",
+    "better-call": "2.0.3",
     "@cloudflare/workers-types": "^4.20250121.0",
     "jose": "^6.1.3",
-    "kysely": "^0.28.12",
+    "kysely": "^0.28.14",
     "nanostores": "^1.1.1",
-    "tsdown": "0.21.0-beta.2"
+    "tsdown": "0.21.1"
   },
   "peerDependencies": {
-    "@better-auth/utils": "0.3.1",
+    "@better-auth/utils": "0.4.0",
     "@better-fetch/fetch": "1.1.21",
     "@opentelemetry/api": "^1.9.0",
-    "better-call": "1.3.2",
+    "better-call": "2.0.3",
     "@cloudflare/workers-types": ">=4",
     "jose": "^6.1.0",
     "kysely": "^0.28.5",
@@ -173,7 +175,7 @@
   "scripts": {
     "build": "tsdown",
     "dev": "tsdown --watch",
-    "lint:package": "publint run --strict",
+    "lint:package": "publint run --strict --pack false",
     "lint:types": "attw --profile esm-only --pack .",
     "typecheck": "tsc --project tsconfig.json",
     "test": "vitest",