@better-auth/infra 0.3.4 → 0.3.6

package/CHANGELOG.md

@@ -5,6 +5,27 @@ All notable changes to `@better-auth/infra` are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.6] - 2026-07-09
+
+### Changed
+
+- **Activity tracking writes** — `lastActiveAt` updates now run through Better Auth background tasks (`runInBackgroundOrAwait`) instead of blocking the request or using fire-and-forget promises, so activity tracking no longer delays responses when a background runner is available.
+
+## [0.3.5] - 2026-07-06
+
+
+### Added
+
+- **`GET /dash/users` partial fetches** — Endpoint was optimized to load only the requested fields (sessions or accounts) instead of all fields.
+
+### Changed
+
+- **SCIM organization ownership model** — On Better Auth 1.7+, directory sync ownership is tied to the organization; this version closely follows the new ownership model while maintaining backwards compatibility with older versions.
+- **Dashboard query performance** — Organization, team, user, and invitation routes use narrower `select` clauses, adapter joins instead of sequential lookups, parallel independent queries, and a shared concurrency cap (`DASH_DB_QUERY_CONCURRENCY`, 5) for analytics workloads.
+- **Activity tracking writes** — `lastActiveAt` updates were optimized to avoid unnecessary row returns.
+- **Sentinel on dashboard routes** — `/dash` routes skip device identification and Sentinel security checks (free-trial abuse, impossible travel, credential stuffing, and related hooks).
+- **Event tracking** — Session lifecycle events reuse user data from the request context when available, avoiding redundant user lookups after sign-in.
+
 ## [0.3.4] - 2026-06-26
 
 ### Fixed
@@ -115,6 +136,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Fixed impossible travel security challenges.
 
+[0.3.5]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.4...infra@v0.3.5
 [0.3.4]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.3...infra@v0.3.4
 [0.3.3]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.2...infra@v0.3.3
 [0.3.2]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.1...infra@v0.3.2

package/dist/client.mjs

@@ -1,5 +1,5 @@
-import { n as hash, o as createKV } from "./crypto-BlYEkWgT.mjs";
-import { a as resolveSentinelClientIdentifyUrl, c as dashClient, i as solvePoWChallenge, n as decodePoWChallenge, o as generateRequestId, r as encodePoWSolution, s as identify, t as createPowRetryTimeout } from "./pow-retry-BN8NVM3m.mjs";
+import { n as hash, o as createKV } from "./crypto-Deqoay7H.mjs";
+import { a as resolveSentinelClientIdentifyUrl, c as dashClient, i as solvePoWChallenge, n as decodePoWChallenge, o as generateRequestId, r as encodePoWSolution, s as identify, t as createPowRetryTimeout } from "./pow-retry-DXiVsZkt.mjs";
 import { env } from "@better-auth/core/env";
 //#region src/sentinel/fingerprint.ts
 function murmurhash3(str, seed = 0) {

package/dist/{constants-D81vWTXm.mjs → constants-CQiIiY9L.mjs}

@@ -1,7 +1,7 @@
 import { env } from "@better-auth/core/env";
 //#endregion
 //#region src/version.ts
-const PLUGIN_VERSION = "0.3.4";
+const PLUGIN_VERSION = "0.3.6";
 //#endregion
 //#region src/constants.ts
 /**

package/dist/{crypto-BlYEkWgT.mjs → crypto-Deqoay7H.mjs}

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT } from "./constants-D81vWTXm.mjs";
+import { i as INFRA_USER_AGENT } from "./constants-CQiIiY9L.mjs";
 import { createFetch } from "@better-fetch/fetch";
 //#region src/fetch.ts
 function createAPI(options, fetchOptions) {

package/dist/email.mjs

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-D81vWTXm.mjs";
+import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-CQiIiY9L.mjs";
 import { logger } from "better-auth";
 import { env } from "@better-auth/core/env";
 import { createFetch } from "@better-fetch/fetch";

package/dist/index.d.mts

@@ -966,6 +966,8 @@ interface DashCompleteInvitationResponse {
 }
 //#endregion
 //#region src/routes/organizations/types.d.ts
+declare const ORGANIZATION_USER_PREVIEW_SELECT: readonly ["id", "name", "email", "image"];
+type OrganizationUserPreview = Pick<User, (typeof ORGANIZATION_USER_PREVIEW_SELECT)[number]>;
 type DashOrganizationUpdateResponse = Organization;
 /** Mirrors joined `user` row fields exposed on dash org APIs. Omitted when the user has no email (e.g. phone-only). */
 type DashOrganizationMemberUser = {
@@ -1243,7 +1245,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
           update: {
             after(user: {
@@ -1254,7 +1256,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
           delete: {
             after(user: {
@@ -1265,7 +1267,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               emailVerified: boolean;
               name: string;
               image?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
         };
         session: {
@@ -1279,7 +1281,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               token: string;
               ipAddress?: string | null | undefined;
               userAgent?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<{
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<{
               data: {
                 loginMethod: string | null;
               };
@@ -1293,7 +1295,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               token: string;
               ipAddress?: string | null | undefined;
               userAgent?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
           delete: {
             after(session: {
@@ -1305,7 +1307,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               token: string;
               ipAddress?: string | null | undefined;
               userAgent?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
         };
         account: {
@@ -1324,7 +1326,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               refreshTokenExpiresAt?: Date | null | undefined;
               scope?: string | null | undefined;
               password?: string | null | undefined;
-            }, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            }, _ctx: GenericEndpointContext | null): Promise<void>;
           };
           update: {
             after(account: {
@@ -1341,7 +1343,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               refreshTokenExpiresAt?: Date | null | undefined;
               scope?: string | null | undefined;
               password?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
           delete: {
             after(account: {
@@ -1358,7 +1360,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               refreshTokenExpiresAt?: Date | null | undefined;
               scope?: string | null | undefined;
               password?: string | null | undefined;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
         };
         verification: {
@@ -1370,7 +1372,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               value: string;
               expiresAt: Date;
               identifier: string;
-            } & Record<string, unknown>, _ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, _ctx: GenericEndpointContext | null): Promise<void>;
           };
           delete: {
             after(verification: {
@@ -1380,7 +1382,7 @@ declare const dash: <O extends DashOptions>(options?: O) => {
               value: string;
               expiresAt: Date;
               identifier: string;
-            } & Record<string, unknown>, ctx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            } & Record<string, unknown>, ctx: GenericEndpointContext | null): Promise<void>;
           };
         };
       };
@@ -1784,6 +1786,8 @@ declare const dash: <O extends DashOptions>(options?: O) => {
       use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         payload: {
           userId: string;
+          sessionOnly?: boolean | undefined;
+          accountOnly?: boolean | undefined;
         };
       }>)[];
       query: import("zod").ZodOptional<import("zod").ZodObject<{
@@ -2626,4 +2630,4 @@ declare const dash: <O extends DashOptions>(options?: O) => {
   } : {};
 };
 //#endregion
-export { type APIError, CHALLENGE_TTL, type CompromisedPasswordResult, type CredentialStuffingResult, type DBField, DEFAULT_DIFFICULTY, type DashAddTeamMemberResponse, type DashBanManyResponse, type DashCheckUserByEmailResponse, type DashCheckUserExistsResponse, type DashCompleteInvitationResponse, type DashConfigResponse, type DashCreateOrganizationBody, type DashCreateOrganizationResponse, type DashCreateTeamResponse, type DashCreateUserResponse, type DashDeleteManyUsersResponse, type DashDirectoryCreateResponse, type DashDirectoryDeleteResponse, type DashDirectoryItem, type DashDirectoryRegenerateTokenResponse, type DashExecuteAdapterCountResponse, type DashExecuteAdapterFindManyResponse, type DashExecuteAdapterFindOneResponse, type DashExecuteAdapterMutationResponse, type DashExecuteAdapterResponse, type DashExportOrganizationsResponse, type DashIdRow, type DashInviteMemberResponse, type DashMaybeSuccessResponse, type DashOptions, type DashOptionsInternal, type DashOptionsResolved, type DashOrganizationAddMemberResponse, type DashOrganizationDeleteManyResponse, type DashOrganizationDetailResponse, type DashOrganizationInvitationItem, type DashOrganizationInvitationListResponse, type DashOrganizationInvitationStatusItem, type DashOrganizationListResponse, type DashOrganizationMember, type DashOrganizationMemberListItem, type DashOrganizationMemberListResponse, type DashOrganizationMemberUser, type DashOrganizationOptionsResponse, type DashOrganizationTeamItem, type DashOrganizationTeamListResponse, type DashOrganizationUpdateMemberRoleResponse, type DashOrganizationUpdateResponse, type DashSendManyVerificationEmailsResponse, type DashSessionRevokeManyResponse, type DashSsoCreateProviderResponse, type DashSsoDeleteResponse, type DashSsoMarkDomainVerifiedResponse, type DashSsoProviderItem, type DashSsoProviderSummary, type DashSsoUpdateProviderResponse, type DashSsoVerificationTokenResponse, type DashSsoVerifyDomainResponse, type DashSuccessResponse, type DashTeam, type DashTeamMember, type DashTeamMemberListResponse, type DashTwoFactorBackupCodesResponse, type DashTwoFactorEnableResponse, type DashTwoFactorStatus, type DashTwoFactorTotpViewResponse, type DashUpdateTeamResponse, type DashUpdateUserResponse, type DashUserDetailsResponse, type DashUserGraphDataResponse, type DashUserListResponse, type DashUserOrganizationsResponse, type DashUserRetentionDataResponse, type DashUserStatsActivePeriod, type DashUserStatsResponse, type DashUserStatsSignUpPeriod, type DashValidateResponse, type DirectorySyncConnection, EMAIL_TEMPLATES, type EmailConfig, type EmailTemplateId, type EmailTemplateVariables, type Endpoint, type EndpointOptions, type EventLocation, type EventTypesResponse, type ImpossibleTravelResult, type InfraEndpointContext, type InfraPluginConnectionOptions, type InfraPluginConnectionOptionsInternal, type LocationData, type LocationDataContext, type PoWChallenge, type PoWSolution, type SCIMPlugin, type SMSConfig, type SMSTemplateId, type SMSTemplateVariables, SMS_TEMPLATES, type SecurityEvent, type SecurityEventType, type SecurityOptions, type SecurityVerdict, type SendBulkEmailsOptions, type SendBulkEmailsResult, type SendEmailOptions, type SendEmailResult, type SendSMSOptions, type SendSMSResult, type SentinelOptions, type SentinelOptionsInternal, type StaleUserResult, type ThresholdConfig, USER_EVENT_TYPES, type UserEvent, type UserEventType, type UserEventsResponse, createEmailSender, createSMSSender, dash, decodePoWChallenge, encodePoWSolution, normalizeEmail, sendBulkEmails, sendEmail, sendSMS, sentinel, solvePoWChallenge, verifyPoWSolution };
+export { type APIError, CHALLENGE_TTL, type CompromisedPasswordResult, type CredentialStuffingResult, type DBField, DEFAULT_DIFFICULTY, type DashAddTeamMemberResponse, type DashBanManyResponse, type DashCheckUserByEmailResponse, type DashCheckUserExistsResponse, type DashCompleteInvitationResponse, type DashConfigResponse, type DashCreateOrganizationBody, type DashCreateOrganizationResponse, type DashCreateTeamResponse, type DashCreateUserResponse, type DashDeleteManyUsersResponse, type DashDirectoryCreateResponse, type DashDirectoryDeleteResponse, type DashDirectoryItem, type DashDirectoryRegenerateTokenResponse, type DashExecuteAdapterCountResponse, type DashExecuteAdapterFindManyResponse, type DashExecuteAdapterFindOneResponse, type DashExecuteAdapterMutationResponse, type DashExecuteAdapterResponse, type DashExportOrganizationsResponse, type DashIdRow, type DashInviteMemberResponse, type DashMaybeSuccessResponse, type DashOptions, type DashOptionsInternal, type DashOptionsResolved, type DashOrganizationAddMemberResponse, type DashOrganizationDeleteManyResponse, type DashOrganizationDetailResponse, type DashOrganizationInvitationItem, type DashOrganizationInvitationListResponse, type DashOrganizationInvitationStatusItem, type DashOrganizationListResponse, type DashOrganizationMember, type DashOrganizationMemberListItem, type DashOrganizationMemberListResponse, type DashOrganizationMemberUser, type DashOrganizationOptionsResponse, type DashOrganizationTeamItem, type DashOrganizationTeamListResponse, type DashOrganizationUpdateMemberRoleResponse, type DashOrganizationUpdateResponse, type DashSendManyVerificationEmailsResponse, type DashSessionRevokeManyResponse, type DashSsoCreateProviderResponse, type DashSsoDeleteResponse, type DashSsoMarkDomainVerifiedResponse, type DashSsoProviderItem, type DashSsoProviderSummary, type DashSsoUpdateProviderResponse, type DashSsoVerificationTokenResponse, type DashSsoVerifyDomainResponse, type DashSuccessResponse, type DashTeam, type DashTeamMember, type DashTeamMemberListResponse, type DashTwoFactorBackupCodesResponse, type DashTwoFactorEnableResponse, type DashTwoFactorStatus, type DashTwoFactorTotpViewResponse, type DashUpdateTeamResponse, type DashUpdateUserResponse, type DashUserDetailsResponse, type DashUserGraphDataResponse, type DashUserListResponse, type DashUserOrganizationsResponse, type DashUserRetentionDataResponse, type DashUserStatsActivePeriod, type DashUserStatsResponse, type DashUserStatsSignUpPeriod, type DashValidateResponse, type DirectorySyncConnection, EMAIL_TEMPLATES, type EmailConfig, type EmailTemplateId, type EmailTemplateVariables, type Endpoint, type EndpointOptions, type EventLocation, type EventTypesResponse, type ImpossibleTravelResult, type InfraEndpointContext, type InfraPluginConnectionOptions, type InfraPluginConnectionOptionsInternal, type LocationData, type LocationDataContext, type ORGANIZATION_USER_PREVIEW_SELECT, type OrganizationUserPreview, type PoWChallenge, type PoWSolution, type SCIMPlugin, type SMSConfig, type SMSTemplateId, type SMSTemplateVariables, SMS_TEMPLATES, type SecurityEvent, type SecurityEventType, type SecurityOptions, type SecurityVerdict, type SendBulkEmailsOptions, type SendBulkEmailsResult, type SendEmailOptions, type SendEmailResult, type SendSMSOptions, type SendSMSResult, type SentinelOptions, type SentinelOptionsInternal, type StaleUserResult, type ThresholdConfig, USER_EVENT_TYPES, type UserEvent, type UserEventType, type UserEventsResponse, createEmailSender, createSMSSender, dash, decodePoWChallenge, encodePoWSolution, normalizeEmail, sendBulkEmails, sendEmail, sendSMS, sentinel, solvePoWChallenge, verifyPoWSolution };