@better-auth/core 1.7.0-rc.4 → 1.7.0-rc.6

package/dist/social-providers/spotify.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/spotify.d.ts
 interface SpotifyProfile {
   id: string;
@@ -15,8 +14,16 @@ interface SpotifyOptions extends ProviderOptions<SpotifyProfile> {
 declare const spotify: (options: SpotifyOptions) => {
   id: "spotify";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<SpotifyProfile>) => string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<SpotifyProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -26,7 +33,11 @@ declare const spotify: (options: SpotifyOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/tiktok.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/tiktok.d.ts
 /**
  * [More info](https://developers.tiktok.com/doc/tiktok-api-v2-get-user-info/)
@@ -52,8 +51,7 @@ interface TiktokProfile extends Record<string, any> {
        *
        * To return this field, add `fields=username` in the user profile request's query parameter.
        */
-      username: string;
-      /** @note Email is currently unsupported by TikTok  */
+      username: string; /** @note Email is currently unsupported by TikTok  */
       email?: string | undefined;
       /**
        * User's bio description if there is a valid one.
@@ -123,8 +121,15 @@ interface TiktokOptions extends ProviderOptions<TiktokProfile> {
 declare const tiktok: (options: TiktokOptions) => {
   id: "tiktok";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<TiktokProfile>) => string;
-  createAuthorizationURL({ state, scopes, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<TiktokProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -134,7 +139,10 @@ declare const tiktok: (options: TiktokOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): URL;
-  validateAuthorizationCode: ({ code, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/twitch.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/twitch.d.ts
 /**
  * @see https://dev.twitch.tv/docs/authentication/getting-tokens-oidc/#requesting-claims
@@ -33,8 +32,15 @@ interface TwitchOptions extends ProviderOptions<TwitchProfile> {
 declare const twitch: (options: TwitchOptions) => {
   id: "twitch";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<TwitchProfile>) => string;
-  createAuthorizationURL({ state, scopes, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<TwitchProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -44,7 +50,10 @@ declare const twitch: (options: TwitchOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/twitter.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/twitter.d.ts
 interface TwitterProfile {
   data: {
@@ -7,12 +6,9 @@ interface TwitterProfile {
      * Unique identifier of this user. This is returned as a string in order to avoid complications with languages and tools
      * that cannot handle large integers.
      */
-    id: string;
-    /** The friendly name of this user, as shown on their profile. */
-    name: string;
-    /** The email address of this user. */
-    email?: string | undefined;
-    /** The Twitter handle (screen name) of this user. */
+    id: string; /** The friendly name of this user, as shown on their profile. */
+    name: string; /** The email address of this user. */
+    email?: string | undefined; /** The Twitter handle (screen name) of this user. */
     username: string;
     /**
      * The location specified in the user's profile, if the user provided one.
@@ -27,23 +23,15 @@ interface TwitterProfile {
      *To return this field, add `user.fields=entities` in the authorization request's query parameter.
      */
     entities?: {
-      /** Contains details about the user's profile website. */
-      url: {
-        /** Contains details about the user's profile website. */
-        urls: Array<{
-          /** The start position (zero-based) of the recognized user's profile website. All start indices are inclusive. */
-          start: number;
-          /** The end position (zero-based) of the recognized user's profile website. This end index is exclusive. */
-          end: number;
-          /** The URL in the format entered by the user. */
-          url: string;
-          /** The fully resolved URL. */
-          expanded_url: string;
-          /** The URL as displayed in the user's profile. */
+      /** Contains details about the user's profile website. */url: {
+        /** Contains details about the user's profile website. */urls: Array<{
+          /** The start position (zero-based) of the recognized user's profile website. All start indices are inclusive. */start: number; /** The end position (zero-based) of the recognized user's profile website. This end index is exclusive. */
+          end: number; /** The URL in the format entered by the user. */
+          url: string; /** The fully resolved URL. */
+          expanded_url: string; /** The URL as displayed in the user's profile. */
           display_url: string;
         }>;
-      };
-      /** Contains details about URLs, Hashtags, Cashtags, or mentions located within a user's description. */
+      }; /** Contains details about URLs, Hashtags, Cashtags, or mentions located within a user's description. */
       description: {
         hashtags: Array<{
           start: number;
@@ -69,8 +57,7 @@ interface TwitterProfile {
      *
      * To return this field, add `user.fields=url` in the authorization request's query parameter.
      */
-    url?: string | undefined;
-    /** The URL to the profile image for this user, as shown on the user's profile. */
+    url?: string | undefined; /** The URL to the profile image for this user, as shown on the user's profile. */
     profile_image_url?: string | undefined;
     protected?: boolean | undefined;
     /**
@@ -95,7 +82,9 @@ interface TwitterOption extends ProviderOptions<TwitterProfile> {
 declare const twitter: (options: TwitterOption) => {
   id: "twitter";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<TwitterProfile>) => string;
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<TwitterProfile>) => string;
   createAuthorizationURL(data: {
     state: string;
     codeVerifier: string;
@@ -106,7 +95,11 @@ declare const twitter: (options: TwitterOption) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/vercel.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/vercel.d.ts
 interface VercelProfile {
   sub: string;
@@ -15,8 +14,16 @@ interface VercelOptions extends ProviderOptions<VercelProfile> {
 declare const vercel: (options: VercelOptions) => {
   id: "vercel";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<VercelProfile>) => string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<VercelProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -26,7 +33,11 @@ declare const vercel: (options: VercelOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/vk.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/vk.d.ts
 interface VkProfile {
   user: {
@@ -21,8 +20,16 @@ interface VkOption extends ProviderOptions<VkProfile> {
 declare const vk: (options: VkOption) => {
   id: "vk";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<VkProfile>) => string;
-  createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<VkProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    codeVerifier,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -32,7 +39,12 @@ declare const vk: (options: VkOption) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): Promise<URL>;
-  validateAuthorizationCode: ({ code, codeVerifier, redirectURI, deviceId }: {
+  validateAuthorizationCode: ({
+    code,
+    codeVerifier,
+    redirectURI,
+    deviceId
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/wechat.d.mts

@@ -1,5 +1,4 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/wechat.d.ts
 /**
  * WeChat user profile information
@@ -54,8 +53,15 @@ interface WeChatOptions extends ProviderOptions<WeChatProfile> {
 declare const wechat: (options: WeChatOptions) => {
   id: "wechat";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<WeChatProfile>) => string;
-  createAuthorizationURL({ state, scopes, redirectURI, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<WeChatProfile>) => string;
+  createAuthorizationURL({
+    state,
+    scopes,
+    redirectURI,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -65,7 +71,9 @@ declare const wechat: (options: WeChatOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }): URL;
-  validateAuthorizationCode: ({ code }: {
+  validateAuthorizationCode: ({
+    code
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/social-providers/zoom.d.mts

@@ -1,9 +1,10 @@
 import { OAuth2Tokens, OAuth2UserInfo, OAuthAccountKeyContext, ProviderOptions } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 //#region src/social-providers/zoom.d.ts
-type LoginType = 0 | /** Facebook OAuth */ 1 | /** Google OAuth */ 24 | /** Apple OAuth */ 27 | /** Microsoft OAuth */ 97 | /** Mobile device */ 98 | /** RingCentral OAuth */ 99 | /** API user */ 100 | /** Zoom Work email */ 101; /** Single Sign-On (SSO) */
+type LoginType = 0 /** Facebook OAuth */ | 1 /** Google OAuth */ | 24 /** Apple OAuth */ | 27 /** Microsoft OAuth */ | 97 /** Mobile device */ | 98 /** RingCentral OAuth */ | 99 /** API user */ | 100 /** Zoom Work email */ | 101;
+/** Single Sign-On (SSO) */
 type AccountStatus = "pending" | "active" | "inactive";
-type PronounOption = 1 | /** Ask the user every time */ 2 | /** Always display */ 3; /** Do not display */
+type PronounOption = 1 /** Ask the user every time */ | 2 /** Always display */ | 3;
+/** Do not display */
 interface PhoneNumber {
   /** The country code of the phone number (Example: "+1") */
   code: string;
@@ -115,8 +116,15 @@ interface ZoomOptions extends ProviderOptions<ZoomProfile> {
 declare const zoom: (userOptions: ZoomOptions) => {
   id: "zoom";
   name: string;
-  accountSubject: ({ profile }: OAuthAccountKeyContext<ZoomProfile>) => string;
-  createAuthorizationURL: ({ state, redirectURI, codeVerifier, additionalParams }: {
+  accountSubject: ({
+    profile
+  }: OAuthAccountKeyContext<ZoomProfile>) => string;
+  createAuthorizationURL: ({
+    state,
+    redirectURI,
+    codeVerifier,
+    additionalParams
+  }: {
     state: string;
     codeVerifier: string;
     scopes?: string[] | undefined;
@@ -126,7 +134,11 @@ declare const zoom: (userOptions: ZoomOptions) => {
     idTokenNonce?: string | undefined;
     additionalParams?: Record<string, string> | undefined;
   }) => Promise<URL>;
-  validateAuthorizationCode: ({ code, redirectURI, codeVerifier }: {
+  validateAuthorizationCode: ({
+    code,
+    redirectURI,
+    codeVerifier
+  }: {
     code: string;
     redirectURI: string;
     codeVerifier?: string | undefined;

package/dist/types/context.d.mts

@@ -8,12 +8,11 @@ import { Awaitable, LiteralString } from "./helper.mjs";
 import { BetterAuthPlugin } from "./plugin.mjs";
 import { BetterAuthOptions, BetterAuthRateLimitOptions, UserProvisioningSource } from "./init-options.mjs";
 import { Account, AccountKey } from "../db/schema/account.mjs";
-import "../db/index.mjs";
 import { BetterAuthCookie, BetterAuthCookies, CookieCachePayload } from "./cookie.mjs";
 import { SecretConfig } from "./secret.mjs";
 import { OAuthProvider } from "../oauth2/oauth-provider.mjs";
-import "../oauth2/index.mjs";
 import { CookieOptions, EndpointContext } from "better-call";
+
 //#region src/types/context.d.ts
 /**
  * @internal
@@ -74,6 +73,7 @@ interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions
    * Provisioning source. The creation seam adds `action: "create-user"` and
    * runs the `user.validateUserInfo` gate.
    */
+
   source: UserProvisioningSource): Promise<T & User>;
   createAccount<T extends Record<string, any>>(account: Omit<Account, "id" | "createdAt" | "updatedAt"> & Partial<Account> & T): Promise<T & Account>;
   listSessions(userId: string, options?: {

package/dist/types/cookie.d.mts

@@ -1,7 +1,7 @@
 import { Session } from "../db/schema/session.mjs";
 import { User } from "../db/schema/user.mjs";
-import "../db/index.mjs";
 import { CookieOptions } from "better-call";
+
 //#region src/types/cookie.d.ts
 type BetterAuthCookie = {
   name: string;

package/dist/types/helper.d.mts

@@ -4,7 +4,7 @@ type Awaitable<T> = T | Promise<T>;
 type AwaitableFunction<T> = T | (() => Awaitable<T>);
 type LiteralString = "" | (string & Record<never, never>);
 type LiteralUnion<LiteralType, BaseType extends Primitive> = LiteralType | (BaseType & Record<never, never>);
-type Prettify<T> = { [K in keyof T]: T[K]; } & {};
+type Prettify<T> = { [K in keyof T]: T[K] } & {};
 type UnionToIntersection<U> = (U extends any ? (k: U) => void : never) extends ((k: infer I) => void) ? I : never;
 //#endregion
 export { Awaitable, AwaitableFunction, LiteralString, LiteralUnion, Prettify, Primitive, UnionToIntersection };

package/dist/types/index.d.mts

@@ -6,4 +6,4 @@ import { SecretConfig } from "./secret.mjs";
 import { AuthContext, BetterAuthPluginRegistry, BetterAuthPluginRegistryIdentifier, CookieCacheSigner, GenericEndpointContext, InfoContext, InternalAdapter, PluginContext } from "./context.mjs";
 import { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientFetchOption, ClientStore } from "./plugin-client.mjs";
 import { StandardSchemaV1 as StandardSchemaV1$1 } from "@standard-schema/spec";
-export type { AuthContext, Awaitable, AwaitableFunction, BaseURLConfig, BetterAuthAdvancedOptions, BetterAuthClientOptions, BetterAuthClientPlugin, BetterAuthCookie, BetterAuthCookies, BetterAuthDBOptions, BetterAuthOptions, BetterAuthPlugin, BetterAuthPluginErrorCodePart, BetterAuthPluginRegistry, BetterAuthPluginRegistryIdentifier, BetterAuthRateLimitOptions, BetterAuthRateLimitRule, BetterAuthRateLimitStorage, ClientAtomListener, ClientFetchOption, ClientStore, CookieCachePayload, CookieCacheSigner, DynamicBaseURLConfig, GenerateIdFn, GenericEndpointContext, HookEndpointContext, InfoContext, InternalAdapter, LiteralString, LiteralUnion, PluginContext, Prettify, Primitive, SecretConfig, StandardSchemaV1$1 as StandardSchemaV1, StoreIdentifierOption, UnionToIntersection, UserProvisioningSource, ValidateUserInfoAction, ValidateUserInfoMethod, ValidateUserInfoOAuthInfo, ValidateUserInfoResult, ValidateUserInfoSSOInfo, ValidateUserInfoSource };
+export { type StandardSchemaV1$1 as StandardSchemaV1 };

package/dist/types/init-options.d.mts

@@ -9,7 +9,6 @@ import { SocialProviderList, SocialProviders } from "../social-providers/index.m
 import { Awaitable, LiteralString, LiteralUnion } from "./helper.mjs";
 import { BetterAuthPlugin } from "./plugin.mjs";
 import { Account, BaseAccount } from "../db/schema/account.mjs";
-import "../db/index.mjs";
 import { AuthContext, GenericEndpointContext } from "./context.mjs";
 import { AuthMiddleware } from "../api/index.mjs";
 import { CookieOptions } from "better-call";
@@ -17,9 +16,10 @@ import { Database } from "bun:sqlite";
 import { DatabaseSync } from "node:sqlite";
 import { D1Database } from "@cloudflare/workers-types";
 import { Dialect, Kysely, MysqlPool, PostgresPool, SqliteDatabase } from "kysely";
+
 //#region src/types/init-options.d.ts
 type KyselyDatabaseType = "postgres" | "mysql" | "sqlite" | "mssql";
-type Optional<T> = { [P in keyof T]?: T[P] | undefined; };
+type Optional<T> = { [P in keyof T]?: T[P] | undefined };
 type StoreIdentifierOption = "plain" | "hashed" | {
   hash: (identifier: string) => Promise<string>;
 };
@@ -53,24 +53,18 @@ type ValidateUserInfoAction = "create-user" | "link-account" | "sign-in";
 type ValidateUserInfoMethod = "oauth" | "sso-oidc" | "sso-saml" | "email-password" | "magic-link" | "email-otp" | "anonymous" | "siwe" | "phone-number" | "admin" | (string & {});
 /** OAuth-specific provisioning context; present only when `method` is `"oauth"`. */
 type ValidateUserInfoOAuthInfo = {
-  /** The social or generic OAuth provider id (e.g. `"google"`). */
-  providerId: string;
-  /** The raw provider profile (userinfo or id-token claims), unmapped. */
+  /** The social or generic OAuth provider id (e.g. `"google"`). */providerId: string; /** The raw provider profile (userinfo or id-token claims), unmapped. */
   profile?: Record<string, unknown> | undefined;
 };
 /** SSO-specific provisioning context; present for OIDC and SAML SSO methods. */
 type ValidateUserInfoSSOInfo = {
-  /** The configured SSO provider id. */
-  providerId: string;
-  /** The raw OIDC claims or SAML assertion attributes, unmapped. */
+  /** The configured SSO provider id. */providerId: string; /** The raw OIDC claims or SAML assertion attributes, unmapped. */
   profile?: Record<string, unknown> | undefined;
 };
 /** Provisioning origin passed to `createUser`; the creation seam adds `action: "create-user"` to build {@link ValidateUserInfoSource}. */
 type UserProvisioningSource = {
-  method: ValidateUserInfoMethod;
-  /** Provider id and raw profile; present iff `method` is `"oauth"`. */
-  oauth?: ValidateUserInfoOAuthInfo | undefined;
-  /** Provider id and raw profile; present iff `method` is `"sso-oidc"` or `"sso-saml"`. */
+  method: ValidateUserInfoMethod; /** Provider id and raw profile; present iff `method` is `"oauth"`. */
+  oauth?: ValidateUserInfoOAuthInfo | undefined; /** Provider id and raw profile; present iff `method` is `"sso-oidc"` or `"sso-saml"`. */
   sso?: ValidateUserInfoSSOInfo | undefined;
 };
 /**
@@ -93,8 +87,7 @@ type ValidateUserInfoSource = UserProvisioningSource & {
   action: ValidateUserInfoAction;
 };
 type ValidateUserInfoResult = {
-  /** A short, machine-readable rejection code, surfaced to the client. */
-  error: string;
+  /** A short, machine-readable rejection code, surfaced to the client. */error: string;
   /**
    * A human-readable reason, surfaced to the client. Do not put sensitive
    * details here.
@@ -109,7 +102,8 @@ type DynamicBaseURLConfig = {
   /**
    * List of allowed hostnames. Supports wildcard patterns.
    *
-   * The derived host from the request will be validated against this list.
+   * `x-forwarded-host` is used only when `advanced.trustedProxyHeaders` is
+   * enabled.
    * Uses the same wildcard matching as `trustedOrigins`.
    *
    * @example
@@ -123,8 +117,9 @@ type DynamicBaseURLConfig = {
    */
   allowedHosts: string[];
   /**
-   * Fallback URL to use if the derived host doesn't match any allowed host.
-   * If not set, Better Auth will throw an error when the host doesn't match.
+   * Fallback URL used when no allowed request host can be resolved.
+   * If omitted, Better Auth throws when the request host is unavailable or not
+   * allowed.
    *
    * @example "https://myapp.com"
    */
@@ -133,7 +128,7 @@ type DynamicBaseURLConfig = {
    * Protocol to use when constructing the URL.
    * - `"https"`: Always use HTTPS (recommended for production)
    * - `"http"`: Always use HTTP (for local development)
-   * - `"auto"`: Derive from `x-forwarded-proto` header or default to HTTPS
+   * - `"auto"`: Trust `x-forwarded-proto` only when proxy headers are enabled
    *
    * @default "auto"
    */
@@ -197,7 +192,7 @@ type BetterAuthDBOptions<ModelName extends string, Keys extends string = string>
   /**
    * Additional fields for the model
    */
-  additionalFields?: { [Key in Exclude<string, Keys | "id">]: DBFieldAttribute; };
+  additionalFields?: { [Key in Exclude<string, Keys | "id">]: DBFieldAttribute };
 };
 type BetterAuthRateLimitOptions = Optional<BetterAuthRateLimitRule> & Omit<BetterAuthDBOptions<"rateLimit", keyof BaseRateLimit>, "additionalFields"> & {
   /**
@@ -396,7 +391,7 @@ type BetterAuthAdvancedOptions = {
   /**
    * Trusted proxy headers
    *
-   * - `x-forwarded-host`
+    * - `x-forwarded-host`
    * - `x-forwarded-proto`
    *
    * If set to `true` and no `baseURL` option is provided, we will use the headers to infer the
@@ -786,18 +781,15 @@ type BetterAuthOptions = {
      * ```
      */
     customSyntheticUser?: (params: {
-      /** Core user fields: name, email, emailVerified, image, createdAt, updatedAt */
-      coreFields: {
+      /** Core user fields: name, email, emailVerified, image, createdAt, updatedAt */coreFields: {
         name: string;
         email: string;
         emailVerified: boolean;
         image: string | null;
         createdAt: Date;
         updatedAt: Date;
-      };
-      /** Processed additional fields from options.user.additionalFields (with defaults applied) */
-      additionalFields: Record<string, unknown>;
-      /** Generated user ID */
+      }; /** Processed additional fields from options.user.additionalFields (with defaults applied) */
+      additionalFields: Record<string, unknown>; /** Generated user ID */
       id: string;
     }) => Record<string, unknown>;
   } | undefined;

package/dist/types/plugin-client.d.mts

@@ -2,6 +2,7 @@ import { LiteralString } from "./helper.mjs";
 import { BetterAuthOptions } from "./init-options.mjs";
 import { BetterFetch, BetterFetchOption, BetterFetchPlugin } from "@better-fetch/fetch";
 import { Atom, WritableAtom } from "nanostores";
+
 //#region src/types/plugin-client.d.ts
 type InferableServerPlugin = {
   id?: LiteralString | undefined;
@@ -88,6 +89,7 @@ interface BetterAuthClientPlugin {
   /**
    * better-auth client options
    */
+
   options: BetterAuthClientOptions | undefined) => Record<string, any>;
   /**
    * State atoms that'll be resolved by each framework
@@ -118,4 +120,4 @@ interface BetterAuthClientPlugin {
   }>;
 }
 //#endregion
-export { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientFetchOption, ClientStore, RevalidateOptions };
+export { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientFetchOption, ClientStore };

package/dist/types/plugin.d.mts

@@ -2,13 +2,13 @@ import { BetterAuthPluginDBSchema } from "../db/plugin.mjs";
 import { Awaitable, LiteralString } from "./helper.mjs";
 import { RawError } from "../utils/error-codes.mjs";
 import { BetterAuthOptions } from "./init-options.mjs";
-import "../db/index.mjs";
 import { AuthContext } from "./context.mjs";
 import { AuthMiddleware } from "../api/index.mjs";
 import { Endpoint, EndpointContext, InputContext, Middleware } from "better-call";
 import { Migration } from "kysely";
+
 //#region src/types/plugin.d.ts
-type DeepPartial<T> = T extends Function ? T : T extends object ? { [K in keyof T]?: DeepPartial<T[K]>; } : T;
+type DeepPartial<T> = T extends Function ? T : T extends object ? { [K in keyof T]?: DeepPartial<T[K]> } : T;
 type HookEndpointContext = Partial<EndpointContext<string, any> & Omit<InputContext<string, any>, "method">> & {
   path?: string;
   context: AuthContext & {

package/dist/utils/async.d.mts

@@ -1,4 +1,5 @@
 import { Awaitable } from "../types/helper.mjs";
+
 //#region src/utils/async.d.ts
 interface MapConcurrentOptions {
   /**

package/dist/utils/db.d.mts

@@ -1,5 +1,4 @@
 import { DBFieldAttribute } from "../db/type.mjs";
-import "../db/index.mjs";
 //#region src/utils/db.d.ts
 /**
  * Filters output data by removing fields with the `returned: false` attribute.

package/dist/utils/deprecate.d.mts

@@ -1,4 +1,5 @@
 import { InternalLogger } from "../env/logger.mjs";
+
 //#region src/utils/deprecate.d.ts
 /**
  * Wraps a function to log a deprecation warning at once.

package/dist/utils/email.d.mts

@@ -14,6 +14,9 @@ interface PlaceholderEmailOptions {
  *
  * @throws TypeError if the generated email is invalid.
  */
-declare function createPlaceholderEmail({ identifier, namespace }: PlaceholderEmailOptions): string;
+declare function createPlaceholderEmail({
+  identifier,
+  namespace
+}: PlaceholderEmailOptions): string;
 //#endregion
 export { PlaceholderEmailOptions, createPlaceholderEmail };

package/dist/utils/error-codes.d.mts

@@ -3,11 +3,11 @@ type UpperLetter = "A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "
 type SpecialCharacter = "_";
 type IsValidUpperSnakeCase<S extends string> = S extends `${infer F}${infer R}` ? F extends UpperLetter | SpecialCharacter ? IsValidUpperSnakeCase<R> : false : true;
 type InvalidKeyError<K extends string> = `Invalid error code key: "${K}" - must only contain uppercase letters (A-Z) and underscores (_)`;
-type ValidateErrorCodes<T> = { [K in keyof T]: K extends string ? IsValidUpperSnakeCase<K> extends false ? InvalidKeyError<K> : T[K] : T[K]; };
+type ValidateErrorCodes<T> = { [K in keyof T]: K extends string ? IsValidUpperSnakeCase<K> extends false ? InvalidKeyError<K> : T[K] : T[K] };
 type RawError<K extends string = string> = {
   readonly code: K;
   message: string;
 };
-declare function defineErrorCodes<const T extends Record<string, string>, R extends { [K in keyof T & string]: RawError<K>; }>(codes: ValidateErrorCodes<T>): R;
+declare function defineErrorCodes<const T extends Record<string, string>, R extends { [K in keyof T & string]: RawError<K> }>(codes: ValidateErrorCodes<T>): R;
 //#endregion
 export { RawError, defineErrorCodes };