@better-auth/infra 0.2.6 → 0.2.7

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { a as DashGetAuditLogsInput, i as DashGetAllAuditLogsInput, n as DashAuditLogsResponse, o as dashClient, r as DashClientOptions, t as DashAuditLog } from "./dash-client-CVCHbtoB.mjs";
+import { a as DashGetAuditLogsInput, i as DashGetAllAuditLogsInput, n as DashAuditLogsResponse, o as dashClient, r as DashClientOptions, t as DashAuditLog } from "./dash-client-B6U89e1S.mjs";
 import * as _$_better_fetch_fetch0 from "@better-fetch/fetch";
 
 //#region src/sentinel/client.d.ts
@@ -8,6 +8,11 @@ interface SentinelClientOptions {
    * @default "https://kv.better-auth.com"
    */
   identifyUrl?: string;
+  /**
+   * Timeout for KV identify and related HTTP requests (milliseconds).
+   * @default 1000
+   */
+  kvTimeout?: number;
   /**
    * Whether to automatically solve PoW challenges (default: true)
    */

package/dist/client.mjs

@@ -1,5 +1,6 @@
-import { r as KV_TIMEOUT_MS } from "./constants-DdWGfvz1.mjs";
-import { a as identify, c as dashClient, i as generateRequestId, n as encodePoWSolution, r as solvePoWChallenge, s as hash, t as decodePoWChallenge } from "./pow-CT9ehp8e.mjs";
+import "./constants-CvriWQVc.mjs";
+import { n as createKV } from "./fetch-DiAhoiKA.mjs";
+import { a as generateRequestId, c as hash, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as identify, r as encodePoWSolution, t as createPowRetryTimeout } from "./pow-retry-BTL4g3RP.mjs";
 import { env } from "@better-auth/core/env";
 //#region src/sentinel/fingerprint.ts
 function murmurhash3(str, seed = 0) {
@@ -384,7 +385,7 @@ async function getFingerprint() {
 		return null;
 	}
 }
-async function sendIdentify(identifyUrl) {
+async function sendIdentify($kv) {
 	if (identifySent || typeof window === "undefined") return;
 	const fingerprint = await getFingerprint();
 	if (!fingerprint) return;
@@ -401,7 +402,7 @@ async function sendIdentify(identifyUrl) {
 		incognito: detectIncognito()
 	};
 	try {
-		await identify(identifyUrl, payload, AbortSignal.timeout(KV_TIMEOUT_MS));
+		await identify($kv, payload);
 	} catch (error) {
 		console.warn("[Dash] Identify request failed:", error);
 	} finally {
@@ -411,24 +412,30 @@ async function sendIdentify(identifyUrl) {
 /**
 * Wait for identify to complete, with a timeout
 * Returns immediately if identify hasn't started or has completed
+*
+* When `timeoutMs` is omitted or nullish, {@link KV_TIMEOUT_MS} is used.
 */
-async function waitForIdentify(timeoutMs = 500) {
+async function waitForIdentify(timeoutMs) {
 	if (!identifyCompletePromise) return;
-	await Promise.race([identifyCompletePromise, new Promise((resolve) => setTimeout(resolve, timeoutMs))]);
+	const ms = timeoutMs ?? 1e3;
+	await Promise.race([identifyCompletePromise, new Promise((resolve) => setTimeout(resolve, ms))]);
 }
 //#endregion
 //#region src/sentinel/client.ts
 const DEFAULT_IDENTIFY_URL = "https://kv.better-auth.com";
 const sentinelClient = (options) => {
 	const autoSolve = options?.autoSolveChallenge !== false;
-	const identifyUrl = options?.identifyUrl ?? env.BETTER_AUTH_KV_URL ?? DEFAULT_IDENTIFY_URL;
+	const $kv = createKV({
+		kvUrl: options?.identifyUrl ?? env.BETTER_AUTH_KV_URL ?? DEFAULT_IDENTIFY_URL,
+		kvTimeout: options?.kvTimeout
+	});
 	if (typeof window !== "undefined") {
 		const scheduleIdentify = () => {
 			if ("requestIdleCallback" in window) window.requestIdleCallback(() => {
-				sendIdentify(identifyUrl);
+				sendIdentify($kv);
 			});
 			else setTimeout(() => {
-				sendIdentify(identifyUrl);
+				sendIdentify($kv);
 			}, 100);
 		};
 		if (document.readyState === "complete") scheduleIdentify();
@@ -441,7 +448,7 @@ const sentinelClient = (options) => {
 			name: "sentinel-fingerprint",
 			hooks: { async onRequest(context) {
 				if (typeof window === "undefined") return context;
-				await waitForIdentify(500);
+				await waitForIdentify(options?.kvTimeout);
 				const fingerprint = await getFingerprint();
 				if (!fingerprint) return context;
 				const headers = context.headers || new Headers();
@@ -483,16 +490,23 @@ const sentinelClient = (options) => {
 						retryHeaders.set("Content-Type", "application/json");
 						let body;
 						if (context.request && context.request.body) body = context.request._originalBody;
-						const retryResponse = await fetch(originalUrl, {
-							method: context.request?.method || "POST",
-							headers: retryHeaders,
-							body,
-							credentials: "include"
-						});
-						return {
-							...context,
-							response: retryResponse
-						};
+						const req = context.request;
+						const powRetry = createPowRetryTimeout(req.timeout);
+						try {
+							const retryResponse = await fetch(originalUrl, {
+								method: req.method || "POST",
+								headers: retryHeaders,
+								body,
+								credentials: "include",
+								...powRetry.signal ? { signal: powRetry.signal } : {}
+							});
+							return {
+								...context,
+								response: retryResponse
+							};
+						} finally {
+							powRetry.cleanup?.();
+						}
 					} catch (error) {
 						console.error("[Sentinel] Failed to solve PoW challenge:", error);
 						options?.onChallengeFailed?.(error instanceof Error ? error : new Error(String(error)));

package/dist/{constants-DdWGfvz1.mjs → constants-CvriWQVc.mjs}

@@ -11,6 +11,10 @@ const INFRA_API_URL = env.BETTER_AUTH_API_URL || "https://dash.better-auth.com";
 */
 const INFRA_KV_URL = env.BETTER_AUTH_KV_URL || "https://kv.better-auth.com";
 /** Timeout for KV HTTP operations (ms) */
-const KV_TIMEOUT_MS = 5e3;
+const KV_TIMEOUT_MS = 1e3;
+/**
+* Timeout for API calls HTTP calls (ms)
+*/
+const INFRA_API_TIMEOUT_MS = 3e3;
 //#endregion
-export { INFRA_KV_URL as n, KV_TIMEOUT_MS as r, INFRA_API_URL as t };
+export { KV_TIMEOUT_MS as i, INFRA_API_URL as n, INFRA_KV_URL as r, INFRA_API_TIMEOUT_MS as t };

package/dist/email.d.mts

@@ -146,6 +146,11 @@ interface SendEmailResult {
 interface EmailConfig {
   apiKey?: string;
   apiUrl?: string;
+  /**
+   * Timeout for Dash email API HTTP requests (milliseconds).
+   * @default 3000
+   */
+  apiTimeout?: number;
 }
 /**
  * Type-safe send email options

package/dist/email.mjs

@@ -1,6 +1,7 @@
-import { t as INFRA_API_URL } from "./constants-DdWGfvz1.mjs";
+import { n as INFRA_API_URL } from "./constants-CvriWQVc.mjs";
 import { logger } from "better-auth";
 import { env } from "@better-auth/core/env";
+import { createFetch } from "@better-fetch/fetch";
 //#region src/email.ts
 /**
 * Email sending module for @better-auth/infra
@@ -34,6 +35,11 @@ function createEmailSender(config) {
 	const apiUrl = baseUrl.endsWith("/api") ? baseUrl : `${baseUrl}/api`;
 	const apiKey = config?.apiKey || env.BETTER_AUTH_API_KEY || "";
 	if (!apiKey) logger.warn("[Dash] No API key provided for email sending. Set BETTER_AUTH_API_KEY environment variable or pass apiKey in config.");
+	const $api = createFetch({
+		baseURL: apiUrl,
+		headers: { Authorization: `Bearer ${apiKey}` },
+		timeout: config?.apiTimeout ?? 3e3
+	});
 	/**
 	* Send an email using a template from Better Auth Infra
 	*/
@@ -43,26 +49,26 @@ function createEmailSender(config) {
 			error: "API key not configured"
 		};
 		try {
-			const response = await fetch(`${apiUrl}/v1/email/send`, {
+			const { data, error } = await $api("/v1/email/send", {
 				method: "POST",
-				headers: {
-					"Content-Type": "application/json",
-					Authorization: `Bearer ${apiKey}`
-				},
-				body: JSON.stringify({
+				body: {
 					template: options.template,
 					to: options.to,
 					variables: options.variables || {},
 					subject: options.subject
-				})
+				}
 			});
-			if (!response.ok) return {
+			if (error) return {
 				success: false,
-				error: (await response.json().catch(() => ({ message: "Unknown error" }))).message || `HTTP ${response.status}`
+				error: error.message || `HTTP ${error.status}`
+			};
+			if (typeof data !== "object" || Array.isArray(data)) return {
+				success: false,
+				error: "Failed to parse JSON"
 			};
 			return {
 				success: true,
-				messageId: (await response.json()).messageId
+				messageId: data.messageId
 			};
 		} catch (error) {
 			logger.warn("[Dash] Email send failed:", error);
@@ -81,13 +87,9 @@ function createEmailSender(config) {
 			failures: Object.fromEntries(options.emails.map((e) => [e.to, [{ error: "API key not configured" }]]))
 		};
 		try {
-			const response = await fetch(`${apiUrl}/v1/email/send-bulk`, {
+			const { data, error } = await $api("/v1/email/send-bulk", {
 				method: "POST",
-				headers: {
-					"Content-Type": "application/json",
-					Authorization: `Bearer ${apiKey}`
-				},
-				body: JSON.stringify({
+				body: {
 					template: options.template,
 					emails: options.emails.map((e) => ({
 						to: e.to,
@@ -95,19 +97,19 @@ function createEmailSender(config) {
 					})),
 					subject: options.subject,
 					variables: options.variables || {}
-				})
+				}
 			});
-			if (!response.ok) {
-				const error = await response.json().catch(() => ({ message: "Unknown error" }));
-				return {
-					success: false,
-					failures: Object.fromEntries(options.emails.map((e) => [e.to, [{ error: error.message || `HTTP ${response.status}` }]]))
-				};
-			}
-			const result = await response.json();
+			if (error) return {
+				success: false,
+				failures: Object.fromEntries(options.emails.map((e) => [e.to, [{ error: error.message || `HTTP ${error.status}` }]]))
+			};
+			if (typeof data !== "object" || Array.isArray(data) || typeof data.success !== "boolean") return {
+				success: false,
+				failures: Object.fromEntries(options.emails.map((e) => [e.to, [{ error: "Failed to parse JSON" }]]))
+			};
 			return {
-				success: result.success,
-				failures: result.failures
+				success: data.success,
+				failures: data.failures
 			};
 		} catch (error) {
 			logger.warn("[Dash] Bulk email send failed:", error);
@@ -123,9 +125,9 @@ function createEmailSender(config) {
 	async function getTemplates() {
 		if (!apiKey) return [];
 		try {
-			const response = await fetch(`${apiUrl}/v1/email/templates`, { headers: { Authorization: `Bearer ${apiKey}` } });
-			if (!response.ok) return [];
-			return response.json();
+			const { data, error } = await $api("/v1/email/templates", { method: "GET" });
+			if (error || !data || !Array.isArray(data)) return [];
+			return data;
 		} catch (error) {
 			logger.warn("[Dash] Failed to fetch email templates:", error);
 			return [];

package/dist/fetch-DiAhoiKA.mjs

@@ -0,0 +1,26 @@
+import "./constants-CvriWQVc.mjs";
+import { createFetch } from "@better-fetch/fetch";
+//#region src/fetch.ts
+function createAPI(options, fetchOptions) {
+	return createFetch({
+		baseURL: options.apiUrl,
+		headers: {
+			"user-agent": "better-auth",
+			"x-api-key": options.apiKey
+		},
+		timeout: options.apiTimeout,
+		...fetchOptions
+	});
+}
+function createKV(options, fetchOptions) {
+	const headers = { "user-agent": "better-auth" };
+	if (options.apiKey) headers["x-api-key"] = options.apiKey;
+	return createFetch({
+		baseURL: options.kvUrl,
+		headers,
+		timeout: options.kvTimeout ?? 1e3,
+		...fetchOptions
+	});
+}
+//#endregion
+export { createKV as n, createAPI as t };

package/dist/index.d.mts

@@ -1,6 +1,8 @@
 import { EMAIL_TEMPLATES, EmailConfig, EmailTemplateId, EmailTemplateVariables, SendBulkEmailsOptions, SendBulkEmailsResult, SendEmailOptions, SendEmailResult, createEmailSender, sendBulkEmails, sendEmail } from "./email.mjs";
 import * as _$better_auth0 from "better-auth";
 import { Account, AuthContext, BetterAuthPlugin, GenericEndpointContext, Session, User } from "better-auth";
+import * as _$_better_fetch_fetch0 from "@better-fetch/fetch";
+import { createFetch } from "@better-fetch/fetch";
 import * as _$jose from "jose";
 import * as zod from "zod";
 import z$1 from "zod";
@@ -448,6 +450,16 @@ interface InfraPluginConnectionOptions {
    * @default process.env.BETTER_AUTH_API_KEY
    */
   apiKey?: string;
+  /**
+   * Timeout for Dash API HTTP requests (milliseconds).
+   * @default 3000
+   */
+  apiTimeout?: number;
+  /**
+   * Timeout for KV HTTP requests (milliseconds).
+   * @default 1000
+   */
+  kvTimeout?: number;
 }
 /**
  * Configuration options for the dash plugin.
@@ -483,21 +495,31 @@ interface SentinelOptions extends InfraPluginConnectionOptions {
 }
 /**
  * Internal connection options with required fields resolved.
- * @internal
  */
 interface InfraPluginConnectionOptionsInternal extends InfraPluginConnectionOptions {
   apiUrl: string;
   kvUrl: string;
   apiKey: string;
+  apiTimeout: number;
+  kvTimeout: number;
 }
 /**
  * Internal options with required fields resolved
- * @internal
  */
-interface DashOptionsInternal extends Omit<DashOptions, keyof InfraPluginConnectionOptions>, InfraPluginConnectionOptionsInternal {}
+interface DashOptionsInternal extends Omit<DashOptions, keyof InfraPluginConnectionOptions>, InfraPluginConnectionOptionsInternal {
+  /**
+   * Shared Dash HTTP client from {@link createAPI}; injected by {@link dash} when wiring endpoints.
+   *
+   * @internal
+   */
+  $api: ReturnType<typeof _$_better_fetch_fetch0.createFetch>;
+}
+/**
+ * Resolved dash options from {@link resolveDashOptions} / plugin-stored config; excludes injected `$api`.
+ */
+type DashOptionsResolved = Omit<DashOptionsInternal, "$api">;
 /**
  * Internal sentinel options with required fields resolved.
- * @internal
  */
 interface SentinelOptionsInternal extends Omit<SentinelOptions, keyof InfraPluginConnectionOptions>, InfraPluginConnectionOptionsInternal {}
 /**
@@ -513,7 +535,7 @@ interface LocationData {
 type LocationDataContext = LocationData;
 type InfraEndpointContext = (GenericEndpointContext & {
   context: {
-    identification: Identification | null;
+    identification?: Identification | null | undefined;
     visitorId: string | null;
     requestId: string | null;
     location: LocationData | undefined;
@@ -608,6 +630,11 @@ interface SendSMSResult {
 interface SMSConfig {
   apiKey?: string;
   apiUrl?: string;
+  /**
+   * Timeout for Dash SMS API HTTP requests (milliseconds).
+   * @default 3000
+   */
+  apiTimeout?: number;
 }
 /**
  * Options for sending SMS
@@ -726,7 +753,7 @@ interface DashIdRow {
   id: string;
 }
 //#endregion
-//#region ../../node_modules/.bun/@better-auth+scim@1.6.9+191040a6ff16b29a/node_modules/@better-auth/scim/dist/index.d.mts
+//#region ../../node_modules/.bun/@better-auth+scim@1.6.9+b412fc3af1df8c24/node_modules/@better-auth/scim/dist/index.d.mts
 //#region src/types.d.ts
 interface SCIMProvider {
   id: string;
@@ -4596,7 +4623,7 @@ declare function normalizeEmail(email: string, context: AuthContext): string;
 //#region src/index.d.ts
 declare const dash: <O extends DashOptions>(options?: O) => {
   id: "dash";
-  options: DashOptionsInternal;
+  options: DashOptionsResolved;
   version: string;
   init(ctx: _$better_auth0.AuthContext): {
     options: {
@@ -4649,7 +4676,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               userAgent?: string | null | undefined;
             } & Record<string, unknown>, _ctx: _$better_auth0.GenericEndpointContext | null): Promise<{
               data: {
-                loginMethod: string | null | undefined;
+                loginMethod: string | null;
               };
             } | undefined>;
             after(session: {
@@ -5906,4 +5933,4 @@ declare const dash: <O extends DashOptions>(options?: O) => {
   } : {};
 };
 //#endregion
-export { type APIError, CHALLENGE_TTL, type CompromisedPasswordResult, type CredentialStuffingResult, DBField, DEFAULT_DIFFICULTY, DashAddTeamMemberResponse, DashBanManyResponse, DashCheckUserByEmailResponse, DashCheckUserExistsResponse, DashCompleteInvitationResponse, DashConfigResponse, DashCreateOrganizationBody, DashCreateOrganizationResponse, DashCreateTeamResponse, DashCreateUserResponse, DashDeleteManyUsersResponse, DashDirectoryCreateResponse, DashDirectoryDeleteResponse, DashDirectoryItem, DashDirectoryRegenerateTokenResponse, DashExecuteAdapterCountResponse, DashExecuteAdapterFindManyResponse, DashExecuteAdapterFindOneResponse, DashExecuteAdapterMutationResponse, DashExecuteAdapterResponse, DashExportOrganizationsResponse, DashIdRow, DashInviteMemberResponse, DashMaybeSuccessResponse, type DashOptions, DashOptionsInternal, DashOrganizationAddMemberResponse, DashOrganizationDeleteManyResponse, DashOrganizationDetailResponse, DashOrganizationInvitationItem, DashOrganizationInvitationListResponse, DashOrganizationInvitationStatusItem, DashOrganizationListResponse, DashOrganizationMember, DashOrganizationMemberListItem, DashOrganizationMemberListResponse, DashOrganizationMemberUser, DashOrganizationOptionsResponse, DashOrganizationTeamItem, DashOrganizationTeamListResponse, DashOrganizationUpdateMemberRoleResponse, DashOrganizationUpdateResponse, DashSendManyVerificationEmailsResponse, DashSessionRevokeManyResponse, DashSsoCreateProviderResponse, DashSsoDeleteResponse, DashSsoMarkDomainVerifiedResponse, DashSsoProviderItem, DashSsoProviderSummary, DashSsoUpdateProviderResponse, DashSsoVerificationTokenResponse, DashSsoVerifyDomainResponse, DashSuccessResponse, DashTeam, DashTeamMember, DashTeamMemberListResponse, DashTwoFactorBackupCodesResponse, DashTwoFactorEnableResponse, DashTwoFactorTotpViewResponse, DashUpdateTeamResponse, DashUpdateUserResponse, DashUserDetailsResponse, DashUserGraphDataResponse, DashUserListResponse, DashUserOrganizationsResponse, DashUserRetentionDataResponse, DashUserStatsActivePeriod, DashUserStatsResponse, DashUserStatsSignUpPeriod, DashValidateResponse, DirectorySyncConnection, EMAIL_TEMPLATES, type EmailConfig, type EmailTemplateId, type EmailTemplateVariables, type Endpoint, type EndpointOptions, type EventLocation, type EventTypesResponse, type ImpossibleTravelResult, InfraEndpointContext, InfraPluginConnectionOptions, InfraPluginConnectionOptionsInternal, LocationData, LocationDataContext, type PoWChallenge, type PoWSolution, SCIMPlugin, type SMSConfig, type SMSTemplateId, type SMSTemplateVariables, SMS_TEMPLATES, type SecurityEvent, type SecurityEventType, type SecurityOptions, type SecurityVerdict, type SendBulkEmailsOptions, type SendBulkEmailsResult, type SendEmailOptions, type SendEmailResult, type SendSMSOptions, type SendSMSResult, type SentinelOptions, SentinelOptionsInternal, type StaleUserResult, type ThresholdConfig, USER_EVENT_TYPES, type UserEvent, type UserEventType, type UserEventsResponse, createEmailSender, createSMSSender, dash, decodePoWChallenge, encodePoWSolution, normalizeEmail, sendBulkEmails, sendEmail, sendSMS, sentinel, solvePoWChallenge, verifyPoWSolution };
+export { type APIError, CHALLENGE_TTL, type CompromisedPasswordResult, type CredentialStuffingResult, DBField, DEFAULT_DIFFICULTY, DashAddTeamMemberResponse, DashBanManyResponse, DashCheckUserByEmailResponse, DashCheckUserExistsResponse, DashCompleteInvitationResponse, DashConfigResponse, DashCreateOrganizationBody, DashCreateOrganizationResponse, DashCreateTeamResponse, DashCreateUserResponse, DashDeleteManyUsersResponse, DashDirectoryCreateResponse, DashDirectoryDeleteResponse, DashDirectoryItem, DashDirectoryRegenerateTokenResponse, DashExecuteAdapterCountResponse, DashExecuteAdapterFindManyResponse, DashExecuteAdapterFindOneResponse, DashExecuteAdapterMutationResponse, DashExecuteAdapterResponse, DashExportOrganizationsResponse, DashIdRow, DashInviteMemberResponse, DashMaybeSuccessResponse, type DashOptions, DashOptionsInternal, DashOptionsResolved, DashOrganizationAddMemberResponse, DashOrganizationDeleteManyResponse, DashOrganizationDetailResponse, DashOrganizationInvitationItem, DashOrganizationInvitationListResponse, DashOrganizationInvitationStatusItem, DashOrganizationListResponse, DashOrganizationMember, DashOrganizationMemberListItem, DashOrganizationMemberListResponse, DashOrganizationMemberUser, DashOrganizationOptionsResponse, DashOrganizationTeamItem, DashOrganizationTeamListResponse, DashOrganizationUpdateMemberRoleResponse, DashOrganizationUpdateResponse, DashSendManyVerificationEmailsResponse, DashSessionRevokeManyResponse, DashSsoCreateProviderResponse, DashSsoDeleteResponse, DashSsoMarkDomainVerifiedResponse, DashSsoProviderItem, DashSsoProviderSummary, DashSsoUpdateProviderResponse, DashSsoVerificationTokenResponse, DashSsoVerifyDomainResponse, DashSuccessResponse, DashTeam, DashTeamMember, DashTeamMemberListResponse, DashTwoFactorBackupCodesResponse, DashTwoFactorEnableResponse, DashTwoFactorTotpViewResponse, DashUpdateTeamResponse, DashUpdateUserResponse, DashUserDetailsResponse, DashUserGraphDataResponse, DashUserListResponse, DashUserOrganizationsResponse, DashUserRetentionDataResponse, DashUserStatsActivePeriod, DashUserStatsResponse, DashUserStatsSignUpPeriod, DashValidateResponse, DirectorySyncConnection, EMAIL_TEMPLATES, type EmailConfig, type EmailTemplateId, type EmailTemplateVariables, type Endpoint, type EndpointOptions, type EventLocation, type EventTypesResponse, type ImpossibleTravelResult, InfraEndpointContext, InfraPluginConnectionOptions, InfraPluginConnectionOptionsInternal, LocationData, LocationDataContext, type PoWChallenge, type PoWSolution, SCIMPlugin, type SMSConfig, type SMSTemplateId, type SMSTemplateVariables, SMS_TEMPLATES, type SecurityEvent, type SecurityEventType, type SecurityOptions, type SecurityVerdict, type SendBulkEmailsOptions, type SendBulkEmailsResult, type SendEmailOptions, type SendEmailResult, type SendSMSOptions, type SendSMSResult, type SentinelOptions, SentinelOptionsInternal, type StaleUserResult, type ThresholdConfig, USER_EVENT_TYPES, type UserEvent, type UserEventType, type UserEventsResponse, createEmailSender, createSMSSender, dash, decodePoWChallenge, encodePoWSolution, normalizeEmail, sendBulkEmails, sendEmail, sendSMS, sentinel, solvePoWChallenge, verifyPoWSolution };