@better-auth/electron 1.5.0-beta.20 → 1.5.1-beta.1

package/dist/{browser-CCZQ2aoV.d.mts → client-DVs5eLfi.d.mts}

@@ -1,4 +1,7 @@
+import * as better_auth0 from "better-auth";
+import { ClientStore } from "better-auth";
 import * as z from "zod";
+import * as _better_fetch_fetch0 from "@better-fetch/fetch";
 import { BetterFetch, BetterFetchError, CreateFetchOption } from "@better-fetch/fetch";
 import electron from "electron";
 import { Awaitable, BetterAuthClientOptions } from "@better-auth/core";
@@ -308,4 +311,191 @@ declare function handleDeepLink({
   clientOptions?: BetterAuthClientOptions | undefined;
 }): Promise<void>;
 //#endregion
-export { ElectronOptions as _, kElectron as a, ElectronProxyClientOptions as c, FetchUserImageResult as d, fetchUserImage as f, setupRenderer as g, SetupRendererConfig as h, authenticate as i, ElectronSharedClientOptions as l, ExposedBridges as m, ElectronAuthenticateOptions as n, requestAuth as o, normalizeUserOutput as p, ElectronRequestAuthOptions as r, ElectronClientOptions as s, handleDeepLink as t, Storage as u, ElectronSharedOptions as v };
+//#region src/client.d.ts
+declare const electronClient: <O extends ElectronClientOptions>(options: O) => {
+  id: "electron";
+  fetchPlugins: {
+    id: string;
+    name: string;
+    init(url: string, options: ({
+      priority?: RequestPriority | undefined;
+      cache?: RequestCache | undefined;
+      credentials?: RequestCredentials | undefined;
+      headers?: (HeadersInit & (HeadersInit | {
+        accept: "application/json" | "text/plain" | "application/octet-stream";
+        "content-type": "application/json" | "text/plain" | "application/x-www-form-urlencoded" | "multipart/form-data" | "application/octet-stream";
+        authorization: "Bearer" | "Basic";
+      })) | undefined;
+      integrity?: string | undefined;
+      keepalive?: boolean | undefined;
+      method?: string | undefined;
+      mode?: RequestMode | undefined;
+      redirect?: RequestRedirect | undefined;
+      referrer?: string | undefined;
+      referrerPolicy?: ReferrerPolicy | undefined;
+      signal?: (AbortSignal | null) | undefined;
+      window?: null | undefined;
+      onRequest?: (<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>) => Promise<_better_fetch_fetch0.RequestContext | void> | _better_fetch_fetch0.RequestContext | void) | undefined;
+      onResponse?: ((context: _better_fetch_fetch0.ResponseContext) => Promise<Response | void | _better_fetch_fetch0.ResponseContext> | Response | _better_fetch_fetch0.ResponseContext | void) | undefined;
+      onSuccess?: ((context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void> | void) | undefined;
+      onError?: ((context: _better_fetch_fetch0.ErrorContext) => Promise<void> | void) | undefined;
+      onRetry?: ((response: _better_fetch_fetch0.ResponseContext) => Promise<void> | void) | undefined;
+      hookOptions?: {
+        cloneResponse?: boolean;
+      } | undefined;
+      timeout?: number | undefined;
+      customFetchImpl?: _better_fetch_fetch0.FetchEsque | undefined;
+      plugins?: _better_fetch_fetch0.BetterFetchPlugin[] | undefined;
+      baseURL?: string | undefined;
+      throw?: boolean | undefined;
+      auth?: ({
+        type: "Bearer";
+        token: string | Promise<string | undefined> | (() => string | Promise<string | undefined> | undefined) | undefined;
+      } | {
+        type: "Basic";
+        username: string | (() => string | undefined) | undefined;
+        password: string | (() => string | undefined) | undefined;
+      } | {
+        type: "Custom";
+        prefix: string | (() => string | undefined) | undefined;
+        value: string | (() => string | undefined) | undefined;
+      }) | undefined;
+      body?: any;
+      query?: any;
+      params?: any;
+      duplex?: "full" | "half" | undefined;
+      jsonParser?: ((text: string) => Promise<any> | any) | undefined;
+      retry?: _better_fetch_fetch0.RetryOptions | undefined;
+      retryAttempt?: number | undefined;
+      output?: (_better_fetch_fetch0.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+      errorSchema?: _better_fetch_fetch0.StandardSchemaV1 | undefined;
+      disableValidation?: boolean | undefined;
+    } & Record<string, any>) | undefined): Promise<{
+      url: string;
+      options: {
+        priority?: RequestPriority | undefined;
+        cache?: RequestCache | undefined;
+        credentials?: RequestCredentials | undefined;
+        headers?: (HeadersInit & (HeadersInit | {
+          accept: "application/json" | "text/plain" | "application/octet-stream";
+          "content-type": "application/json" | "text/plain" | "application/x-www-form-urlencoded" | "multipart/form-data" | "application/octet-stream";
+          authorization: "Bearer" | "Basic";
+        })) | undefined;
+        integrity?: string | undefined;
+        keepalive?: boolean | undefined;
+        method?: string | undefined;
+        mode?: RequestMode | undefined;
+        redirect?: RequestRedirect | undefined;
+        referrer?: string | undefined;
+        referrerPolicy?: ReferrerPolicy | undefined;
+        signal?: (AbortSignal | null) | undefined;
+        window?: null | undefined;
+        onRequest?: (<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>) => Promise<_better_fetch_fetch0.RequestContext | void> | _better_fetch_fetch0.RequestContext | void) | undefined;
+        onResponse?: ((context: _better_fetch_fetch0.ResponseContext) => Promise<Response | void | _better_fetch_fetch0.ResponseContext> | Response | _better_fetch_fetch0.ResponseContext | void) | undefined;
+        onSuccess?: ((context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void> | void) | undefined;
+        onError?: ((context: _better_fetch_fetch0.ErrorContext) => Promise<void> | void) | undefined;
+        onRetry?: ((response: _better_fetch_fetch0.ResponseContext) => Promise<void> | void) | undefined;
+        hookOptions?: {
+          cloneResponse?: boolean;
+        } | undefined;
+        timeout?: number | undefined;
+        customFetchImpl?: _better_fetch_fetch0.FetchEsque | undefined;
+        plugins?: _better_fetch_fetch0.BetterFetchPlugin[] | undefined;
+        baseURL?: string | undefined;
+        throw?: boolean | undefined;
+        auth?: ({
+          type: "Bearer";
+          token: string | Promise<string | undefined> | (() => string | Promise<string | undefined> | undefined) | undefined;
+        } | {
+          type: "Basic";
+          username: string | (() => string | undefined) | undefined;
+          password: string | (() => string | undefined) | undefined;
+        } | {
+          type: "Custom";
+          prefix: string | (() => string | undefined) | undefined;
+          value: string | (() => string | undefined) | undefined;
+        }) | undefined;
+        body?: any;
+        query?: any;
+        params?: any;
+        duplex?: "full" | "half" | undefined;
+        jsonParser?: ((text: string) => Promise<any> | any) | undefined;
+        retry?: _better_fetch_fetch0.RetryOptions | undefined;
+        retryAttempt?: number | undefined;
+        output?: (_better_fetch_fetch0.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+        errorSchema?: _better_fetch_fetch0.StandardSchemaV1 | undefined;
+        disableValidation?: boolean | undefined;
+      } & Record<string, any>;
+    }>;
+    hooks: {
+      onSuccess: (context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void>;
+      onError: (context: _better_fetch_fetch0.ErrorContext) => Promise<void>;
+    };
+  }[];
+  getActions: ($fetch: _better_fetch_fetch0.BetterFetch, $store: ClientStore, clientOptions: better_auth0.BetterAuthClientOptions | undefined) => {
+    /**
+     * Gets the stored cookie.
+     *
+     * You can use this to get the cookie stored in
+     * the device and use it in your fetch requests.
+     *
+     * @example
+     * ```ts
+     * const cookie = client.getCookie();
+     * await fetch("https://api.example.com", {
+     *   headers: {
+     *    cookie,
+     *   },
+     * });
+     * ```
+     */
+    getCookie: () => string;
+    /**
+     * Exchanges the authorization code for a session.
+     *
+     * Use this when you need to manually complete the exchange
+     * (e.g., when another app registered the scheme or deep linking fails).
+     *
+     * The authorization code is returned when the user is authorized in the browser. (`electron_authorization_code`)
+     *
+     * Note: Must be called after `requestAuth`, since the code verifier and state are stored when the auth flow is initiated.
+     */
+    authenticate: (data: ElectronAuthenticateOptions) => Promise<{
+      data: null;
+      error: {
+        message?: string | undefined;
+        status: number;
+        statusText: string;
+      };
+    } | {
+      data: {
+        token: string;
+        user: better_auth0.User & Record<string, any>;
+      };
+      error: null;
+    }>;
+    /**
+     * Initiates the authentication process.
+     * Opens the system's default browser for user authentication.
+     */
+    requestAuth: (options?: ElectronRequestAuthOptions | undefined) => Promise<void>;
+    /**
+     * Sets up the main process.
+     *
+     * - Registers custom protocol scheme.
+     * - Registers IPC bridge handlers.
+     * - Handles content security policy if needed.
+     */
+    setupMain: (cfg?: {
+      csp?: boolean | undefined;
+      bridges?: boolean | undefined;
+      scheme?: boolean | undefined;
+      getWindow?: () => electron.BrowserWindow | null | undefined;
+    }) => void;
+    $Infer: {
+      Bridges: ExposedBridges<O>;
+    };
+  };
+};
+//#endregion
+export { setupRenderer as _, authenticate as a, ElectronClientOptions as c, Storage as d, FetchUserImageResult as f, SetupRendererConfig as g, ExposedBridges as h, ElectronRequestAuthOptions as i, ElectronProxyClientOptions as l, normalizeUserOutput as m, handleDeepLink as n, kElectron as o, fetchUserImage as p, ElectronAuthenticateOptions as r, requestAuth as s, electronClient as t, ElectronSharedClientOptions as u, ElectronOptions as v, ElectronSharedOptions as y };

package/dist/client.d.mts

@@ -1,194 +1,2 @@
-import { a as kElectron, c as ElectronProxyClientOptions, d as FetchUserImageResult, f as fetchUserImage, g as setupRenderer, h as SetupRendererConfig, i as authenticate, l as ElectronSharedClientOptions, m as ExposedBridges, n as ElectronAuthenticateOptions, o as requestAuth, p as normalizeUserOutput, r as ElectronRequestAuthOptions, s as ElectronClientOptions, t as handleDeepLink, u as Storage, v as ElectronSharedOptions } from "./browser-CCZQ2aoV.mjs";
-import * as better_auth0 from "better-auth";
-import { ClientStore } from "better-auth";
-import * as _better_fetch_fetch0 from "@better-fetch/fetch";
-import electron from "electron";
-
-//#region src/client.d.ts
-declare const electronClient: <O extends ElectronClientOptions>(options: O) => {
-  id: "electron";
-  fetchPlugins: {
-    id: string;
-    name: string;
-    init(url: string, options: ({
-      cache?: RequestCache | undefined;
-      credentials?: RequestCredentials | undefined;
-      headers?: (HeadersInit & (HeadersInit | {
-        accept: "application/json" | "text/plain" | "application/octet-stream";
-        "content-type": "application/json" | "text/plain" | "application/x-www-form-urlencoded" | "multipart/form-data" | "application/octet-stream";
-        authorization: "Bearer" | "Basic";
-      })) | undefined;
-      integrity?: string | undefined;
-      keepalive?: boolean | undefined;
-      method?: string | undefined;
-      mode?: RequestMode | undefined;
-      priority?: RequestPriority | undefined;
-      redirect?: RequestRedirect | undefined;
-      referrer?: string | undefined;
-      referrerPolicy?: ReferrerPolicy | undefined;
-      signal?: (AbortSignal | null) | undefined;
-      window?: null | undefined;
-      onRequest?: (<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>) => Promise<_better_fetch_fetch0.RequestContext | void> | _better_fetch_fetch0.RequestContext | void) | undefined;
-      onResponse?: ((context: _better_fetch_fetch0.ResponseContext) => Promise<Response | void | _better_fetch_fetch0.ResponseContext> | Response | _better_fetch_fetch0.ResponseContext | void) | undefined;
-      onSuccess?: ((context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void> | void) | undefined;
-      onError?: ((context: _better_fetch_fetch0.ErrorContext) => Promise<void> | void) | undefined;
-      onRetry?: ((response: _better_fetch_fetch0.ResponseContext) => Promise<void> | void) | undefined;
-      hookOptions?: {
-        cloneResponse?: boolean;
-      } | undefined;
-      timeout?: number | undefined;
-      customFetchImpl?: _better_fetch_fetch0.FetchEsque | undefined;
-      plugins?: _better_fetch_fetch0.BetterFetchPlugin[] | undefined;
-      baseURL?: string | undefined;
-      throw?: boolean | undefined;
-      auth?: ({
-        type: "Bearer";
-        token: string | Promise<string | undefined> | (() => string | Promise<string | undefined> | undefined) | undefined;
-      } | {
-        type: "Basic";
-        username: string | (() => string | undefined) | undefined;
-        password: string | (() => string | undefined) | undefined;
-      } | {
-        type: "Custom";
-        prefix: string | (() => string | undefined) | undefined;
-        value: string | (() => string | undefined) | undefined;
-      }) | undefined;
-      body?: any;
-      query?: any;
-      params?: any;
-      duplex?: "full" | "half" | undefined;
-      jsonParser?: ((text: string) => Promise<any> | any) | undefined;
-      retry?: _better_fetch_fetch0.RetryOptions | undefined;
-      retryAttempt?: number | undefined;
-      output?: (_better_fetch_fetch0.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
-      errorSchema?: _better_fetch_fetch0.StandardSchemaV1 | undefined;
-      disableValidation?: boolean | undefined;
-    } & Record<string, any>) | undefined): Promise<{
-      url: string;
-      options: {
-        cache?: RequestCache | undefined;
-        credentials?: RequestCredentials | undefined;
-        headers?: (HeadersInit & (HeadersInit | {
-          accept: "application/json" | "text/plain" | "application/octet-stream";
-          "content-type": "application/json" | "text/plain" | "application/x-www-form-urlencoded" | "multipart/form-data" | "application/octet-stream";
-          authorization: "Bearer" | "Basic";
-        })) | undefined;
-        integrity?: string | undefined;
-        keepalive?: boolean | undefined;
-        method?: string | undefined;
-        mode?: RequestMode | undefined;
-        priority?: RequestPriority | undefined;
-        redirect?: RequestRedirect | undefined;
-        referrer?: string | undefined;
-        referrerPolicy?: ReferrerPolicy | undefined;
-        signal?: (AbortSignal | null) | undefined;
-        window?: null | undefined;
-        onRequest?: (<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>) => Promise<_better_fetch_fetch0.RequestContext | void> | _better_fetch_fetch0.RequestContext | void) | undefined;
-        onResponse?: ((context: _better_fetch_fetch0.ResponseContext) => Promise<Response | void | _better_fetch_fetch0.ResponseContext> | Response | _better_fetch_fetch0.ResponseContext | void) | undefined;
-        onSuccess?: ((context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void> | void) | undefined;
-        onError?: ((context: _better_fetch_fetch0.ErrorContext) => Promise<void> | void) | undefined;
-        onRetry?: ((response: _better_fetch_fetch0.ResponseContext) => Promise<void> | void) | undefined;
-        hookOptions?: {
-          cloneResponse?: boolean;
-        } | undefined;
-        timeout?: number | undefined;
-        customFetchImpl?: _better_fetch_fetch0.FetchEsque | undefined;
-        plugins?: _better_fetch_fetch0.BetterFetchPlugin[] | undefined;
-        baseURL?: string | undefined;
-        throw?: boolean | undefined;
-        auth?: ({
-          type: "Bearer";
-          token: string | Promise<string | undefined> | (() => string | Promise<string | undefined> | undefined) | undefined;
-        } | {
-          type: "Basic";
-          username: string | (() => string | undefined) | undefined;
-          password: string | (() => string | undefined) | undefined;
-        } | {
-          type: "Custom";
-          prefix: string | (() => string | undefined) | undefined;
-          value: string | (() => string | undefined) | undefined;
-        }) | undefined;
-        body?: any;
-        query?: any;
-        params?: any;
-        duplex?: "full" | "half" | undefined;
-        jsonParser?: ((text: string) => Promise<any> | any) | undefined;
-        retry?: _better_fetch_fetch0.RetryOptions | undefined;
-        retryAttempt?: number | undefined;
-        output?: (_better_fetch_fetch0.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
-        errorSchema?: _better_fetch_fetch0.StandardSchemaV1 | undefined;
-        disableValidation?: boolean | undefined;
-      } & Record<string, any>;
-    }>;
-    hooks: {
-      onSuccess: (context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void>;
-      onError: (context: _better_fetch_fetch0.ErrorContext) => Promise<void>;
-    };
-  }[];
-  getActions: ($fetch: _better_fetch_fetch0.BetterFetch, $store: ClientStore, clientOptions: better_auth0.BetterAuthClientOptions | undefined) => {
-    /**
-     * Gets the stored cookie.
-     *
-     * You can use this to get the cookie stored in
-     * the device and use it in your fetch requests.
-     *
-     * @example
-     * ```ts
-     * const cookie = client.getCookie();
-     * await fetch("https://api.example.com", {
-     *   headers: {
-     *    cookie,
-     *   },
-     * });
-     * ```
-     */
-    getCookie: () => string;
-    /**
-     * Exchanges the authorization code for a session.
-     *
-     * Use this when you need to manually complete the exchange
-     * (e.g., when another app registered the scheme or deep linking fails).
-     *
-     * The authorization code is returned when the user is authorized in the browser. (`electron_authorization_code`)
-     *
-     * Note: Must be called after `requestAuth`, since the code verifier and state are stored when the auth flow is initiated.
-     */
-    authenticate: (data: ElectronAuthenticateOptions) => Promise<{
-      data: null;
-      error: {
-        message?: string | undefined;
-        status: number;
-        statusText: string;
-      };
-    } | {
-      data: {
-        token: string;
-        user: better_auth0.User & Record<string, any>;
-      };
-      error: null;
-    }>;
-    /**
-     * Initiates the authentication process.
-     * Opens the system's default browser for user authentication.
-     */
-    requestAuth: (options?: ElectronRequestAuthOptions | undefined) => Promise<void>;
-    /**
-     * Sets up the main process.
-     *
-     * - Registers custom protocol scheme.
-     * - Registers IPC bridge handlers.
-     * - Handles content security policy if needed.
-     */
-    setupMain: (cfg?: {
-      csp?: boolean | undefined;
-      bridges?: boolean | undefined;
-      scheme?: boolean | undefined;
-      getWindow?: () => electron.BrowserWindow | null | undefined;
-    }) => void;
-    $Infer: {
-      Bridges: ExposedBridges<O>;
-    };
-  };
-};
-//#endregion
+import { _ as setupRenderer, a as authenticate, c as ElectronClientOptions, d as Storage, f as FetchUserImageResult, g as SetupRendererConfig, h as ExposedBridges, i as ElectronRequestAuthOptions, l as ElectronProxyClientOptions, m as normalizeUserOutput, n as handleDeepLink, o as kElectron, p as fetchUserImage, r as ElectronAuthenticateOptions, s as requestAuth, t as electronClient, u as ElectronSharedClientOptions, y as ElectronSharedOptions } from "./client-DVs5eLfi.mjs";
 export { ElectronAuthenticateOptions, ElectronClientOptions, ElectronProxyClientOptions, ElectronRequestAuthOptions, ElectronSharedClientOptions, ElectronSharedOptions, ExposedBridges, FetchUserImageResult, SetupRendererConfig, Storage, authenticate, electronClient, fetchUserImage, handleDeepLink, kElectron, normalizeUserOutput, requestAuth, setupRenderer };

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { _ as ElectronOptions, d as FetchUserImageResult, f as fetchUserImage, p as normalizeUserOutput, v as ElectronSharedOptions } from "./browser-CCZQ2aoV.mjs";
+import { f as FetchUserImageResult, m as normalizeUserOutput, p as fetchUserImage, v as ElectronOptions, y as ElectronSharedOptions } from "./client-DVs5eLfi.mjs";
 import * as better_auth0 from "better-auth";
 import * as z from "zod";
 import * as _better_auth_core0 from "@better-auth/core";
@@ -114,6 +114,7 @@ declare const electron: (options?: ElectronOptions | undefined) => {
         internalAdapter: better_auth0.InternalAdapter<better_auth0.BetterAuthOptions>;
         createAuthCookie: (cookieName: string, overrideAttributes?: Partial<better_call0.CookieOptions> | undefined) => better_auth0.BetterAuthCookie;
         secret: string;
+        secretConfig: string | better_auth0.SecretConfig;
         sessionConfig: {
           updateAge: number;
           expiresIn: number;

package/dist/index.mjs

@@ -68,7 +68,7 @@ const electronToken = (_opts) => createAuthEndpoint("/electron/token", {
 		const codeVerifier = Buffer.from(await createHash("SHA-256").digest(ctx.body.code_verifier));
 		if (codeChallenge.length !== codeVerifier.length || !timingSafeEqual(codeChallenge, codeVerifier)) throw APIError.from("BAD_REQUEST", ELECTRON_ERROR_CODES.INVALID_CODE_VERIFIER);
 	} else if (tokenRecord.codeChallenge !== ctx.body.code_verifier) throw APIError.from("BAD_REQUEST", ELECTRON_ERROR_CODES.INVALID_CODE_VERIFIER);
-	await ctx.context.internalAdapter.deleteVerificationValue(token.id);
+	await ctx.context.internalAdapter.deleteVerificationByIdentifier(`electron:${ctx.body.token}`);
 	const user = await ctx.context.internalAdapter.findUserById(tokenRecord.userId);
 	if (!user) throw APIError.from("INTERNAL_SERVER_ERROR", BASE_ERROR_CODES.USER_NOT_FOUND);
 	const session = await ctx.context.internalAdapter.createSession(user.id);

package/dist/preload.d.mts

@@ -6,6 +6,7 @@ import "nanostores";
 import { StandardSchemaV1 } from "@standard-schema/spec";
 import { Database } from "bun:sqlite";
 import { DatabaseSync } from "node:sqlite";
+import { D1Database } from "@cloudflare/workers-types";
 import { Dialect, Kysely, Migration, MysqlPool, PostgresPool, SqliteDatabase } from "kysely";
 import "better-auth";
 
@@ -827,6 +828,17 @@ type BetterAuthCookies = {
   dontRememberToken: BetterAuthCookie;
 }; //#endregion
 //#endregion
+//#region ../core/dist/types/secret.d.mts
+//#region src/types/secret.d.ts
+interface SecretConfig {
+  /** Map of version number → secret value */
+  keys: Map<number, string>;
+  /** Version to use for new encryption (first entry in secrets array) */
+  currentVersion: number;
+  /** Legacy secret for bare-hex fallback (from BETTER_AUTH_SECRET) */
+  legacySecret?: string;
+} //#endregion
+//#endregion
 //#region ../core/dist/db/schema/session.d.mts
 //#region src/db/schema/session.d.ts
 declare const sessionSchema: z.ZodObject<{
@@ -1153,7 +1165,9 @@ interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions
   }>;
   createUser<T extends Record<string, any>>(user: Omit<User, "id" | "createdAt" | "updatedAt" | "emailVerified"> & Partial<User> & Record<string, any>): Promise<T & User>;
   createAccount<T extends Record<string, any>>(account: Omit<Account, "id" | "createdAt" | "updatedAt"> & Partial<Account> & T): Promise<T & Account>;
-  listSessions(userId: string): Promise<Session[]>;
+  listSessions(userId: string, options?: {
+    onlyActiveSessions?: boolean | undefined;
+  } | undefined): Promise<Session[]>;
   listUsers(limit?: number | undefined, offset?: number | undefined, sortBy?: {
     field: string;
     direction: "asc" | "desc";
@@ -1165,7 +1179,9 @@ interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions
     session: Session & Record<string, any>;
     user: User & Record<string, any>;
   } | null>;
-  findSessions(sessionTokens: string[]): Promise<{
+  findSessions(sessionTokens: string[], options?: {
+    onlyActiveSessions?: boolean | undefined;
+  } | undefined): Promise<{
     session: Session;
     user: User;
   }[]>;
@@ -1197,9 +1213,8 @@ interface InternalAdapter<_Options extends BetterAuthOptions = BetterAuthOptions
   updateAccount(id: string, data: Partial<Account>): Promise<Account>;
   createVerificationValue(data: Omit<Verification, "createdAt" | "id" | "updatedAt"> & Partial<Verification>): Promise<Verification>;
   findVerificationValue(identifier: string): Promise<Verification | null>;
-  deleteVerificationValue(id: string): Promise<void>;
   deleteVerificationByIdentifier(identifier: string): Promise<void>;
-  updateVerificationValue(id: string, data: Partial<Verification>): Promise<Verification>;
+  updateVerificationByIdentifier(identifier: string, data: Partial<Verification>): Promise<Verification>;
 }
 type CreateCookieGetterFn = (cookieName: string, overrideAttributes?: Partial<CookieOptions> | undefined) => BetterAuthCookie;
 type CheckPasswordFn<Options extends BetterAuthOptions = BetterAuthOptions> = (userId: string, ctx: GenericEndpointContext<Options>) => Promise<boolean>;
@@ -1290,6 +1305,7 @@ type AuthContext<Options extends BetterAuthOptions = BetterAuthOptions> = Plugin
   internalAdapter: InternalAdapter<Options>;
   createAuthCookie: CreateCookieGetterFn;
   secret: string;
+  secretConfig: string | SecretConfig;
   sessionConfig: {
     updateAge: number;
     expiresIn: number;
@@ -4982,6 +4998,7 @@ declare const createAuthMiddleware: {
     internalAdapter: InternalAdapter<BetterAuthOptions>;
     createAuthCookie: (cookieName: string, overrideAttributes?: Partial<CookieOptions> | undefined) => BetterAuthCookie;
     secret: string;
+    secretConfig: string | SecretConfig;
     sessionConfig: {
       updateAge: number;
       expiresIn: number;
@@ -5110,6 +5127,7 @@ declare const createAuthMiddleware: {
     internalAdapter: InternalAdapter<BetterAuthOptions>;
     createAuthCookie: (cookieName: string, overrideAttributes?: Partial<CookieOptions> | undefined) => BetterAuthCookie;
     secret: string;
+    secretConfig: string | SecretConfig;
     sessionConfig: {
       updateAge: number;
       expiresIn: number;
@@ -5512,10 +5530,26 @@ type BetterAuthOptions = {
    * ```
    */
   secret?: string | undefined;
+  /**
+   * Versioned secrets for non-destructive secret rotation.
+   * When set, encryption uses an envelope format with key IDs.
+   * First entry is the current key used for new encryption.
+   * Remaining entries are decryption-only (previous rotations).
+   *
+   * Can also be set via BETTER_AUTH_SECRETS env var:
+   * `BETTER_AUTH_SECRETS=2:base64secret,1:base64secret`
+   *
+   * When set, `secret` is only used as legacy fallback
+   * for decrypting bare-hex payloads that predate the envelope format.
+   */
+  secrets?: Array<{
+    version: number;
+    value: string;
+  }> | undefined;
   /**
    * Database configuration
    */
-  database?: (PostgresPool | MysqlPool | SqliteDatabase | Dialect | DBAdapterInstance | Database | DatabaseSync | {
+  database?: (PostgresPool | MysqlPool | SqliteDatabase | Dialect | DBAdapterInstance | Database | DatabaseSync | D1Database | {
     dialect: Dialect;
     type: KyselyDatabaseType;
     /**
@@ -5754,6 +5788,42 @@ type BetterAuthOptions = {
     data: {
       user: User;
     }, request?: Request) => Promise<void>;
+    /**
+     * Build a custom synthetic user for email enumeration
+     * protection. When a sign-up attempt is made with an
+     * email that already exists, this function is called
+     * to build the fake user response.
+     *
+     * Use this when plugins add fields to the user table
+     * (e.g. admin plugin adds `role`, `banned`, etc.)
+     * to ensure the fake response is indistinguishable
+     * from a real sign-up.
+     *
+     * @example
+     * ```ts
+     * customSyntheticUser: ({ coreFields, additionalFields, id }) => ({
+     *   ...coreFields,
+     *   role: "user",
+     *   banned: false,
+     *   banReason: null,
+     *   banExpires: null,
+     *   ...additionalFields,
+     *   id,
+     * })
+     * ```
+     */
+    customSyntheticUser?: (params: {
+      /** Core user fields: name, email, emailVerified, image, createdAt, updatedAt */coreFields: {
+        name: string;
+        email: string;
+        emailVerified: boolean;
+        image: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+      }; /** Processed additional fields from options.user.additionalFields (with defaults applied) */
+      additionalFields: Record<string, unknown>; /** Generated user ID */
+      id: string;
+    }) => Record<string, unknown>;
   } | undefined;
   /**
    * list of social providers

package/dist/proxy.d.mts

@@ -1,4 +1,4 @@
-import { c as ElectronProxyClientOptions } from "./browser-CCZQ2aoV.mjs";
+import { l as ElectronProxyClientOptions } from "./client-DVs5eLfi.mjs";
 import { electron } from "./index.mjs";
 
 //#region src/proxy.d.ts

package/dist/storage.d.mts

@@ -1,5 +1,4 @@
-import { u as Storage } from "./browser-CCZQ2aoV.mjs";
-import "./client.mjs";
+import { d as Storage } from "./client-DVs5eLfi.mjs";
 import { Options } from "conf";
 
 //#region src/storage.d.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/electron",
-  "version": "1.5.0-beta.20",
+  "version": "1.5.1-beta.1",
   "description": "Better Auth integration for Electron applications.",
   "type": "module",
   "license": "MIT",
@@ -78,9 +78,9 @@
     "@types/better-sqlite3": "^7.6.13",
     "better-sqlite3": "^12.6.2",
     "electron": "^38.8.4",
-    "tsdown": "^0.20.3",
-    "@better-auth/core": "1.5.0-beta.20",
-    "better-auth": "1.5.0-beta.20"
+    "tsdown": "0.21.0-beta.2",
+    "@better-auth/core": "1.5.1-beta.1",
+    "better-auth": "1.5.1-beta.1"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.3.1",
@@ -88,8 +88,8 @@
     "better-call": "1.3.2",
     "conf": "^15.0.2",
     "electron": ">=36.0.0",
-    "@better-auth/core": "1.5.0-beta.20",
-    "better-auth": "1.5.0-beta.20"
+    "@better-auth/core": "1.5.1-beta.1",
+    "better-auth": "1.5.1-beta.1"
   },
   "peerDependenciesMeta": {
     "electron": {