@better-auth/core 1.6.26 → 1.6.28

package/dist/db/type.d.mts

@@ -1,15 +1,15 @@
 import { Awaitable, LiteralString, UnionToIntersection } from "../types/helper.mjs";
 import { BetterAuthOptions } from "../types/init-options.mjs";
-import "../types/index.mjs";
 import { StandardSchemaV1 } from "@standard-schema/spec";
+
 //#region src/db/type.d.ts
 type BaseModelNames = "user" | "account" | "session" | "verification";
 type ModelNames<T extends string = LiteralString> = BaseModelNames | T | "rate-limit";
 type InferDBValueType<T extends DBFieldType> = T extends "string" ? string : T extends "number" ? number : T extends "boolean" ? boolean : T extends "date" ? Date : T extends "json" ? Record<string, any> : T extends `${infer U}[]` ? U extends "string" ? string[] : number[] : T extends Array<any> ? T[number] : never;
 type InferDBFieldOutput<T extends DBFieldAttribute> = T["returned"] extends false ? never : T["required"] extends false ? InferDBValueType<T["type"]> | undefined | null : InferDBValueType<T["type"]>;
 type InferDBFieldInput<T extends DBFieldAttribute> = InferDBValueType<T["type"]>;
-type InferDBFieldsInput<Field> = Field extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Field[key]["required"] extends false ? never : Field[key]["defaultValue"] extends string | number | boolean | Date ? never : Field[key]["input"] extends false ? never : key]: InferDBFieldInput<Field[key]>; } & { [key in Key as Field[key]["input"] extends false ? never : key]?: InferDBFieldInput<Field[key]> | undefined | null; } : {};
-type InferDBFieldsOutput<Fields extends Record<string, DBFieldAttribute>> = Fields extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? key : never : key]: InferDBFieldOutput<Fields[key]>; } & { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? never : key : never]?: InferDBFieldOutput<Fields[key]> | null; } : never;
+type InferDBFieldsInput<Field> = Field extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Field[key]["required"] extends false ? never : Field[key]["defaultValue"] extends string | number | boolean | Date ? never : Field[key]["input"] extends false ? never : key]: InferDBFieldInput<Field[key]> } & { [key in Key as Field[key]["input"] extends false ? never : key]?: InferDBFieldInput<Field[key]> | undefined | null } : {};
+type InferDBFieldsOutput<Fields extends Record<string, DBFieldAttribute>> = Fields extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? key : never : key]: InferDBFieldOutput<Fields[key]> } & { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? never : key : never]?: InferDBFieldOutput<Fields[key]> | null } : never;
 type InferDBFieldsFromOptionsInput<DBOptions extends BetterAuthOptions["session"] | BetterAuthOptions["user"] | BetterAuthOptions["verification"] | BetterAuthOptions["account"] | BetterAuthOptions["rateLimit"]> = DBOptions extends {
   additionalFields: Record<string, DBFieldAttribute>;
 } ? InferDBFieldsInput<DBOptions["additionalFields"]> : {};
@@ -19,12 +19,12 @@ type InferDBFieldsFromOptions<DBOptions extends BetterAuthOptions["session"] | B
 type InferDBFieldsFromPluginsInput<ModelName extends string, Plugins extends unknown[] | undefined> = Plugins extends [] ? {} : Plugins extends [infer P, ...infer Rest] ? P extends {
   schema: { [key in ModelName]: {
     fields: infer Fields;
-  }; };
+  } };
 } ? Fields extends Record<string, DBFieldAttribute> ? UnionToIntersection<InferDBFieldsInput<Fields> & InferDBFieldsFromPluginsInput<ModelName, Rest>> : InferDBFieldsFromPluginsInput<ModelName, Rest> : InferDBFieldsFromPluginsInput<ModelName, Rest> : {};
 type InferDBFieldsFromPlugins<ModelName extends string, Plugins extends unknown[] | undefined> = Plugins extends [] ? {} : Plugins extends [infer P, ...infer Rest] ? P extends {
   schema: { [key in ModelName]: {
     fields: infer Fields;
-  }; };
+  } };
 } ? Fields extends Record<string, DBFieldAttribute> ? UnionToIntersection<InferDBFieldsOutput<Fields> & InferDBFieldsFromPlugins<ModelName, Rest>> : InferDBFieldsFromPlugins<ModelName, Rest> : InferDBFieldsFromPlugins<ModelName, Rest> : {};
 type DBFieldType = "string" | "number" | "boolean" | "date" | "json" | `${"string" | "number"}[]` | Array<LiteralString>;
 type DBPrimitive = string | number | boolean | Date | null | undefined | string[] | number[] | (Record<string, unknown> | unknown[]);
@@ -89,7 +89,8 @@ type DBFieldAttributeConfig = {
    */
   bigint?: boolean | undefined;
   /**
-   * A zod schema to validate the value.
+   * A Standard Schema to validate the value. Works with any Standard Schema
+   * library, such as Zod, Valibot or ArkType.
    */
   validator?: {
     input?: StandardSchemaV1;
@@ -172,14 +173,17 @@ interface SecondaryStorage {
   /**
    * Key to store
    */
+
   key: string,
   /**
    * Value to store
    */
+
   value: string,
   /**
    * Time to live in seconds
    */
+
   ttl?: number | undefined) => Awaitable<void | null | unknown>;
   /**
    *

package/dist/env/logger.d.mts

@@ -1,32 +1,32 @@
 //#region src/env/logger.d.ts
 declare const TTY_COLORS: {
-  readonly reset: "";
-  readonly bright: "";
-  readonly dim: "";
-  readonly undim: "";
-  readonly underscore: "";
-  readonly blink: "";
-  readonly reverse: "";
-  readonly hidden: "";
+  readonly reset: "\u001B[0m";
+  readonly bright: "\u001B[1m";
+  readonly dim: "\u001B[2m";
+  readonly undim: "\u001B[22m";
+  readonly underscore: "\u001B[4m";
+  readonly blink: "\u001B[5m";
+  readonly reverse: "\u001B[7m";
+  readonly hidden: "\u001B[8m";
   readonly fg: {
-    readonly black: "";
-    readonly red: "";
-    readonly green: "";
-    readonly yellow: "";
-    readonly blue: "";
-    readonly magenta: "";
-    readonly cyan: "";
-    readonly white: "";
+    readonly black: "\u001B[30m";
+    readonly red: "\u001B[31m";
+    readonly green: "\u001B[32m";
+    readonly yellow: "\u001B[33m";
+    readonly blue: "\u001B[34m";
+    readonly magenta: "\u001B[35m";
+    readonly cyan: "\u001B[36m";
+    readonly white: "\u001B[37m";
   };
   readonly bg: {
-    readonly black: "";
-    readonly red: "";
-    readonly green: "";
-    readonly yellow: "";
-    readonly blue: "";
-    readonly magenta: "";
-    readonly cyan: "";
-    readonly white: "";
+    readonly black: "\u001B[40m";
+    readonly red: "\u001B[41m";
+    readonly green: "\u001B[42m";
+    readonly yellow: "\u001B[43m";
+    readonly blue: "\u001B[44m";
+    readonly magenta: "\u001B[45m";
+    readonly cyan: "\u001B[46m";
+    readonly white: "\u001B[47m";
   };
 };
 type LogLevel = "debug" | "info" | "success" | "warn" | "error";
@@ -39,7 +39,7 @@ interface Logger {
   log?: ((level: Exclude<LogLevel, "success">, message: string, ...args: any[]) => void) | undefined;
 }
 type LogHandlerParams = Parameters<NonNullable<Logger["log"]>> extends [LogLevel, ...infer Rest] ? Rest : never;
-type InternalLogger = { [K in LogLevel]: (...params: LogHandlerParams) => void; } & {
+type InternalLogger = { [K in LogLevel]: (...params: LogHandlerParams) => void } & {
   get level(): LogLevel;
 };
 declare const createLogger: (options?: Logger | undefined) => InternalLogger;

package/dist/error/codes.d.mts

@@ -1,4 +1,5 @@
 import { RawError } from "../utils/error-codes.mjs";
+
 //#region src/error/codes.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {

package/dist/error/index.d.mts

@@ -1,5 +1,6 @@
 import { APIErrorCode, BASE_ERROR_CODES } from "./codes.mjs";
 import { APIError as APIError$1 } from "better-call/error";
+
 //#region src/error/index.d.ts
 declare class BetterAuthError extends Error {
   constructor(message: string, options?: {

package/dist/index.d.mts

@@ -6,4 +6,4 @@ import { SecretConfig } from "./types/secret.mjs";
 import { AuthContext, BetterAuthPluginRegistry, BetterAuthPluginRegistryIdentifier, GenericEndpointContext, InfoContext, InternalAdapter, PluginContext } from "./types/context.mjs";
 import { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientFetchOption, ClientStore } from "./types/plugin-client.mjs";
 import { StandardSchemaV1 } from "./types/index.mjs";
-export type { AuthContext, Awaitable, AwaitableFunction, BaseURLConfig, BetterAuthAdvancedOptions, BetterAuthClientOptions, BetterAuthClientPlugin, BetterAuthCookie, BetterAuthCookies, BetterAuthDBOptions, BetterAuthOptions, BetterAuthPlugin, BetterAuthPluginErrorCodePart, BetterAuthPluginRegistry, BetterAuthPluginRegistryIdentifier, BetterAuthRateLimitOptions, BetterAuthRateLimitRule, BetterAuthRateLimitStorage, ClientAtomListener, ClientFetchOption, ClientStore, DynamicBaseURLConfig, GenerateIdFn, GenericEndpointContext, HookEndpointContext, InfoContext, InternalAdapter, LiteralString, LiteralUnion, PluginContext, Prettify, Primitive, SecretConfig, StandardSchemaV1, StoreIdentifierOption, UnionToIntersection };
+export { AuthContext, Awaitable, AwaitableFunction, BaseURLConfig, BetterAuthAdvancedOptions, BetterAuthClientOptions, BetterAuthClientPlugin, BetterAuthCookie, BetterAuthCookies, BetterAuthDBOptions, BetterAuthOptions, BetterAuthPlugin, BetterAuthPluginErrorCodePart, BetterAuthPluginRegistry, BetterAuthPluginRegistryIdentifier, BetterAuthRateLimitOptions, BetterAuthRateLimitRule, BetterAuthRateLimitStorage, ClientAtomListener, ClientFetchOption, ClientStore, DynamicBaseURLConfig, GenerateIdFn, GenericEndpointContext, HookEndpointContext, InfoContext, InternalAdapter, LiteralString, LiteralUnion, PluginContext, Prettify, Primitive, SecretConfig, StandardSchemaV1, StoreIdentifierOption, UnionToIntersection };

package/dist/instrumentation/attributes.d.mts

@@ -1,4 +1,5 @@
 import { ATTR_DB_COLLECTION_NAME, ATTR_DB_OPERATION_NAME, ATTR_HTTP_RESPONSE_STATUS_CODE, ATTR_HTTP_ROUTE } from "@opentelemetry/semantic-conventions";
+
 //#region src/instrumentation/attributes.d.ts
 /** Operation identifier (e.g. getSession, signUpWithEmailAndPassword). Uses endpoint operationId when set, otherwise the endpoint key. */
 declare const ATTR_OPERATION_ID: "better_auth.operation_id";

package/dist/instrumentation/pure.index.d.mts

@@ -1,4 +1,5 @@
 import { ATTR_CONTEXT, ATTR_DB_COLLECTION_NAME, ATTR_DB_OPERATION_NAME, ATTR_HOOK_TYPE, ATTR_HTTP_RESPONSE_STATUS_CODE, ATTR_HTTP_ROUTE, ATTR_OPERATION_ID } from "./attributes.mjs";
+
 //#region src/instrumentation/pure.index.d.ts
 declare function withSpan<T>(name: string, attributes: Record<string, string | number | boolean>, fn: () => T): T;
 declare function withSpan<T>(name: string, attributes: Record<string, string | number | boolean>, fn: () => Promise<T>): Promise<T>;

package/dist/instrumentation/tracer.mjs

@@ -2,7 +2,7 @@ import { ATTR_HTTP_RESPONSE_STATUS_CODE } from "./attributes.mjs";
 import { getOpenTelemetryAPI } from "./api.mjs";
 //#region src/instrumentation/tracer.ts
 const INSTRUMENTATION_SCOPE = "better-auth";
-const INSTRUMENTATION_VERSION = "1.6.26";
+const INSTRUMENTATION_VERSION = "1.6.28";
 /**
 * Better-auth uses `throw ctx.redirect(url)` for flow control (e.g. OAuth
 * callbacks). These are APIErrors with 3xx status codes and should not be

package/dist/oauth2/client-credentials-token.d.mts

@@ -1,8 +1,13 @@
 import { AwaitableFunction } from "../types/helper.mjs";
-import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "./oauth-provider.mjs";
+
 //#region src/oauth2/client-credentials-token.d.ts
-declare function clientCredentialsTokenRequest({ options, scope, authentication, resource }: {
+declare function clientCredentialsTokenRequest({
+  options,
+  scope,
+  authentication,
+  resource
+}: {
   options: AwaitableFunction<ProviderOptions & {
     clientSecret: string;
   }>;
@@ -16,7 +21,12 @@ declare function clientCredentialsTokenRequest({ options, scope, authentication,
 /**
  * @deprecated use async'd clientCredentialsTokenRequest instead
  */
-declare function createClientCredentialsTokenRequest({ options, scope, authentication, resource }: {
+declare function createClientCredentialsTokenRequest({
+  options,
+  scope,
+  authentication,
+  resource
+}: {
   options: ProviderOptions & {
     clientSecret: string;
   };
@@ -27,7 +37,13 @@ declare function createClientCredentialsTokenRequest({ options, scope, authentic
   body: URLSearchParams;
   headers: Record<string, any>;
 };
-declare function clientCredentialsToken({ options, tokenEndpoint, scope, authentication, resource }: {
+declare function clientCredentialsToken({
+  options,
+  tokenEndpoint,
+  scope,
+  authentication,
+  resource
+}: {
   options: AwaitableFunction<ProviderOptions & {
     clientSecret: string;
   }>;

package/dist/oauth2/create-authorization-url.d.mts

@@ -1,9 +1,26 @@
 import { AwaitableFunction } from "../types/helper.mjs";
-import "../types/index.mjs";
 import { ProviderOptions } from "./oauth-provider.mjs";
-import "./index.mjs";
 //#region src/oauth2/create-authorization-url.d.ts
-declare function createAuthorizationURL({ id, options, authorizationEndpoint, state, codeVerifier, scopes, claims, redirectURI, duration, prompt, accessType, responseType, display, loginHint, hd, responseMode, additionalParams, scopeJoiner }: {
+declare function createAuthorizationURL({
+  id,
+  options,
+  authorizationEndpoint,
+  state,
+  codeVerifier,
+  scopes,
+  claims,
+  redirectURI,
+  duration,
+  prompt,
+  accessType,
+  responseType,
+  display,
+  loginHint,
+  hd,
+  responseMode,
+  additionalParams,
+  scopeJoiner
+}: {
   id: string;
   options: AwaitableFunction<ProviderOptions>;
   redirectURI: string;

package/dist/oauth2/oauth-provider.d.mts

@@ -1,6 +1,5 @@
 import { Awaitable, LiteralString } from "../types/helper.mjs";
 import { GenericEndpointContext } from "../types/context.mjs";
-import "../types/index.mjs";
 //#region src/oauth2/oauth-provider.d.ts
 interface OAuth2Tokens {
   tokenType?: string | undefined;

package/dist/oauth2/refresh-access-token.d.mts

@@ -1,8 +1,14 @@
 import { AwaitableFunction } from "../types/helper.mjs";
-import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "./oauth-provider.mjs";
+
 //#region src/oauth2/refresh-access-token.d.ts
-declare function refreshAccessTokenRequest({ refreshToken, options, authentication, extraParams, resource }: {
+declare function refreshAccessTokenRequest({
+  refreshToken,
+  options,
+  authentication,
+  extraParams,
+  resource
+}: {
   refreshToken: string;
   options: AwaitableFunction<Partial<ProviderOptions>>;
   authentication?: ("basic" | "post") | undefined;
@@ -15,7 +21,13 @@ declare function refreshAccessTokenRequest({ refreshToken, options, authenticati
 /**
  * @deprecated use async'd refreshAccessTokenRequest instead
  */
-declare function createRefreshAccessTokenRequest({ refreshToken, options, authentication, extraParams, resource }: {
+declare function createRefreshAccessTokenRequest({
+  refreshToken,
+  options,
+  authentication,
+  extraParams,
+  resource
+}: {
   refreshToken: string;
   options: ProviderOptions;
   authentication?: ("basic" | "post") | undefined;
@@ -25,7 +37,13 @@ declare function createRefreshAccessTokenRequest({ refreshToken, options, authen
   body: URLSearchParams;
   headers: Record<string, any>;
 };
-declare function refreshAccessToken({ refreshToken, options, tokenEndpoint, authentication, extraParams }: {
+declare function refreshAccessToken({
+  refreshToken,
+  options,
+  tokenEndpoint,
+  authentication,
+  extraParams
+}: {
   refreshToken: string;
   options: Partial<ProviderOptions>;
   tokenEndpoint: string;

package/dist/oauth2/reject-redirects.mjs

@@ -1,7 +1,7 @@
 import { BetterAuthError } from "../error/index.mjs";
 import { betterFetch } from "@better-fetch/fetch";
 //#region src/oauth2/reject-redirects.ts
-const HTTP_REDIRECT_STATUSES = /* @__PURE__ */ new Set([
+const HTTP_REDIRECT_STATUSES = new Set([
 	301,
 	302,
 	303,

package/dist/oauth2/utils.d.mts

@@ -1,4 +1,5 @@
 import { OAuth2Tokens } from "./oauth-provider.mjs";
+
 //#region src/oauth2/utils.d.ts
 declare function getOAuth2Tokens(data: Record<string, any>): OAuth2Tokens;
 /**

package/dist/oauth2/validate-authorization-code.d.mts

@@ -1,9 +1,19 @@
 import { AwaitableFunction } from "../types/helper.mjs";
-import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "./oauth-provider.mjs";
-import "./index.mjs";
+import * as _$jose from "jose";
+
 //#region src/oauth2/validate-authorization-code.d.ts
-declare function authorizationCodeRequest({ code, codeVerifier, redirectURI, options, authentication, deviceId, headers, additionalParams, resource }: {
+declare function authorizationCodeRequest({
+  code,
+  codeVerifier,
+  redirectURI,
+  options,
+  authentication,
+  deviceId,
+  headers,
+  additionalParams,
+  resource
+}: {
   code: string;
   redirectURI: string;
   options: AwaitableFunction<Partial<ProviderOptions>>;
@@ -20,7 +30,17 @@ declare function authorizationCodeRequest({ code, codeVerifier, redirectURI, opt
 /**
  * @deprecated use async'd authorizationCodeRequest instead
  */
-declare function createAuthorizationCodeRequest({ code, codeVerifier, redirectURI, options, authentication, deviceId, headers, additionalParams, resource }: {
+declare function createAuthorizationCodeRequest({
+  code,
+  codeVerifier,
+  redirectURI,
+  options,
+  authentication,
+  deviceId,
+  headers,
+  additionalParams,
+  resource
+}: {
   code: string;
   redirectURI: string;
   options: Partial<ProviderOptions>;
@@ -34,7 +54,18 @@ declare function createAuthorizationCodeRequest({ code, codeVerifier, redirectUR
   body: URLSearchParams;
   headers: Record<string, any>;
 };
-declare function validateAuthorizationCode({ code, codeVerifier, redirectURI, options, tokenEndpoint, authentication, deviceId, headers, additionalParams, resource }: {
+declare function validateAuthorizationCode({
+  code,
+  codeVerifier,
+  redirectURI,
+  options,
+  tokenEndpoint,
+  authentication,
+  deviceId,
+  headers,
+  additionalParams,
+  resource
+}: {
   code: string;
   redirectURI: string;
   options: AwaitableFunction<Partial<ProviderOptions>>;
@@ -49,6 +80,6 @@ declare function validateAuthorizationCode({ code, codeVerifier, redirectURI, op
 declare function validateToken(token: string, jwksEndpoint: string, options?: {
   audience?: string | string[];
   issuer?: string | string[];
-}): Promise<import("jose").JWTVerifyResult<import("jose").JWTPayload> & import("jose").ResolvedKey>;
+}): Promise<_$jose.JWTVerifyResult<_$jose.JWTPayload> & _$jose.ResolvedKey>;
 //#endregion
 export { authorizationCodeRequest, createAuthorizationCodeRequest, validateAuthorizationCode, validateToken };

package/dist/oauth2/verify.d.mts

@@ -1,8 +1,8 @@
 import { JSONWebKeySet, JWTPayload, JWTVerifyOptions } from "jose";
+
 //#region src/oauth2/verify.d.ts
 type JwksFetchOptions = {
-  /** Jwks url or promise of a Jwks */
-  jwksFetch: string | (() => Promise<JSONWebKeySet | undefined>);
+  /** Jwks url or promise of a Jwks */jwksFetch: string | (() => Promise<JSONWebKeySet | undefined>);
   /**
    * Stable object to cache the result of a function `jwksFetch` under,
    * with the same TTL and kid-miss refetch rules as string sources.
@@ -10,6 +10,9 @@ type JwksFetchOptions = {
    */
   jwksCacheKey?: object;
 };
+/**
+ * @internal
+ */
 interface VerifyAccessTokenRemote {
   /** Full url of the introspect endpoint. Should end with `/oauth2/introspect` */
   introspectUrl: string;
@@ -44,8 +47,7 @@ interface VerifyAccessTokenRemote {
  * Can also be configured for remote verification.
  */
 declare function verifyJwsAccessToken(token: string, opts: JwksFetchOptions & {
-  /** Verify options */
-  verifyOptions: JWTVerifyOptions & Required<Pick<JWTVerifyOptions, "audience" | "issuer">>;
+  /** Verify options */verifyOptions: JWTVerifyOptions & Required<Pick<JWTVerifyOptions, "audience" | "issuer">>;
 }): Promise<JWTPayload>;
 declare function getJwks(token: string, opts: JwksFetchOptions): Promise<JSONWebKeySet>;
 /**
@@ -54,14 +56,10 @@ declare function getJwks(token: string, opts: JwksFetchOptions): Promise<JSONWeb
  * Can also be configured for remote verification.
  */
 declare function verifyAccessToken(token: string, opts: {
-  /** Verify options */
-  verifyOptions: JWTVerifyOptions & Required<Pick<JWTVerifyOptions, "audience" | "issuer">>;
-  /** Scopes to additionally verify. Token must include all but not exact. */
-  scopes?: string[];
-  /** Required to verify access token locally */
-  jwksUrl?: string;
-  /** If provided, can verify a token remotely */
+  /** Verify options */verifyOptions: JWTVerifyOptions & Required<Pick<JWTVerifyOptions, "audience" | "issuer">>; /** Scopes to additionally verify. Token must include all but not exact. */
+  scopes?: string[]; /** Required to verify access token locally */
+  jwksUrl?: string; /** If provided, can verify a token remotely */
   remoteVerify?: VerifyAccessTokenRemote;
 }): Promise<JWTPayload>;
 //#endregion
-export { VerifyAccessTokenRemote, getJwks, verifyAccessToken, verifyJwsAccessToken };
+export { getJwks, verifyAccessToken, verifyJwsAccessToken };

package/dist/oauth2/verify.mjs

@@ -3,7 +3,7 @@ import { fetchRefusingRedirects } from "./reject-redirects.mjs";
 import { APIError } from "better-call";
 import { UnsecuredJWT, createLocalJWKSet, decodeProtectedHeader, errors, jwtVerify } from "jose";
 //#region src/oauth2/verify.ts
-const joseInfrastructureErrorCodes = /* @__PURE__ */ new Set([
+const joseInfrastructureErrorCodes = new Set([
 	errors.JWKSTimeout.code,
 	errors.JWKSInvalid.code,
 	errors.JWKSMultipleMatchingKeys.code
@@ -199,4 +199,4 @@ async function verifyAccessToken(token, opts) {
 	return payload;
 }
 //#endregion
-export { getJwks, jwksCache, verifyAccessToken, verifyJwsAccessToken };
+export { getJwks, verifyAccessToken, verifyJwsAccessToken };

package/dist/social-providers/apple.d.mts

@@ -1,7 +1,5 @@
 import { GenericEndpointContext } from "../types/context.mjs";
-import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/apple.d.ts
 interface AppleProfile {
   /**
@@ -70,7 +68,12 @@ interface AppleOptions extends ProviderOptions<AppleProfile> {
 declare const apple: (options: AppleOptions) => {
   id: "apple";
   name: string;
-  createAuthorizationURL({ state, scopes, redirectURI, codeVerifier }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI,
+    codeVerifier
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -78,7 +81,11 @@ declare const apple: (options: AppleOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/atlassian.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/atlassian.d.ts
 interface AtlassianProfile {
   account_type?: string | undefined;
@@ -22,7 +21,12 @@ interface AtlassianOptions extends ProviderOptions<AtlassianProfile> {
 declare const atlassian: (options: AtlassianOptions) => {
   id: "atlassian";
   name: string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -30,7 +34,11 @@ declare const atlassian: (options: AtlassianOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/cognito.d.mts

@@ -1,7 +1,5 @@
 import { GenericEndpointContext } from "../types/context.mjs";
-import "../types/index.mjs";
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/cognito.d.ts
 interface CognitoProfile {
   sub: string;
@@ -37,7 +35,12 @@ interface CognitoOptions extends ProviderOptions<CognitoProfile> {
 declare const cognito: (options: CognitoOptions) => {
   id: "cognito";
   name: string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -45,7 +48,11 @@ declare const cognito: (options: CognitoOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/discord.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/discord.d.ts
 interface DiscordProfile extends Record<string, any> {
   /** the user's id (i.e. the numerical snowflake) */
@@ -78,7 +77,11 @@ interface DiscordOptions extends ProviderOptions<DiscordProfile> {
 declare const discord: (options: DiscordOptions) => {
   id: "discord";
   name: string;
-  createAuthorizationURL({ state, scopes, redirectURI }: {
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -86,7 +89,10 @@ declare const discord: (options: DiscordOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }): URL;
-  validateAuthorizationCode: ({ code, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/dropbox.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/dropbox.d.ts
 interface DropboxProfile {
   account_id: string;
@@ -21,7 +20,12 @@ interface DropboxOptions extends ProviderOptions<DropboxProfile> {
 declare const dropbox: (options: DropboxOptions) => {
   id: "dropbox";
   name: string;
-  createAuthorizationURL: ({ state, scopes, codeVerifier, redirectURI }: {
+  createAuthorizationURL: ({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -29,7 +33,11 @@ declare const dropbox: (options: DropboxOptions) => {
     display?: string | undefined;
     loginHint?: string | undefined;
   }) => Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;