@better-auth/infra 0.4.6 → 0.4.7

package/CHANGELOG.md

@@ -5,7 +5,12 @@ All notable changes to `@better-auth/infra` are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0/).
 
-## [Unreleased]
+## [0.4.7] - 2026-09-07
+
+### Fixed
+
+- **Sentinel types under `exactOptionalPropertyTypes`** — `sentinel()`, `sentinelClient()`, and `sentinelNativeClient()` type-check cleanly when consumers enable TypeScript `exactOptionalPropertyTypes`.
+- **Sentinel audio fingerprint** — `sentinelClient()` now builds the audio component with `OfflineAudioContext` (and `webkitOfflineAudioContext`) instead of a live `AudioContext` + `ScriptProcessor`. Avoids autoplay/suspended-context and output-route failures in restricted browsers while keeping the same soft confidence signal on identify.
 
 ## [0.4.6] - 2026-09-07
 
@@ -224,4 +229,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 [0.3.1]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.0...infra@v0.3.1
 [0.3.0]: https://github.com/better-auth/infrastructure/compare/infra@v0.2.14...infra@v0.3.0
 [0.2.14]: https://github.com/better-auth/better-auth-infra/compare/@better-auth/infra@0.2.13...@better-auth/infra@0.2.14
-[0.2.13]: https://github.com/better-auth/better-auth-infra/compare/@better-auth/infra@0.2.12...@better-auth/infra@0.2.13
+[0.2.13]: https://github.com/better-auth/better-auth-infra/compare/@better-auth/infra@0.2.12...@better-auth/infra@0.2.13

package/dist/client.d.mts

@@ -1,4 +1,5 @@
-import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-Cim5Fztg.mjs";
+import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-Be9mAljS.mjs";
+import { BetterFetchPlugin } from "@better-fetch/fetch";
 //#region src/sentinel/client.d.ts
 interface SentinelClientOptions {
   /**
@@ -35,21 +36,7 @@ interface SentinelClientOptions {
 }
 declare const sentinelClient: (options?: SentinelClientOptions) => {
   id: "sentinel";
-  fetchPlugins: ({
-    id: string;
-    name: string;
-    hooks: {
-      onRequest<T extends Record<string, any>>(context: import("@better-fetch/fetch").RequestContext<T>): Promise<import("@better-fetch/fetch").RequestContext<T>>;
-      onResponse?: undefined;
-    };
-  } | {
-    id: string;
-    name: string;
-    hooks: {
-      onResponse(context: import("@better-fetch/fetch").ResponseContext): Promise<import("@better-fetch/fetch").ResponseContext>;
-      onRequest<T extends Record<string, any>>(context: import("@better-fetch/fetch").RequestContext<T>): Promise<import("@better-fetch/fetch").RequestContext<T>>;
-    };
-  })[];
+  fetchPlugins: BetterFetchPlugin[];
 };
 //#endregion
 export { type DashAuditLog, type DashAuditLogsResponse, type DashClientOptions, type DashGetAllAuditLogsInput, type DashGetAuditLogsInput, type SentinelClientOptions, dashClient, sentinelClient };

package/dist/client.mjs

@@ -1,5 +1,5 @@
-import { n as hash, o as createKV } from "./crypto-CfK70MTZ.mjs";
-import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, s as generateRequestId, t as createPowRetryTimeout } from "./pow-retry-DkrUdqDd.mjs";
+import { n as hash, o as createKV } from "./crypto-C9Iqqv8l.mjs";
+import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, s as generateRequestId, t as createPowRetryTimeout } from "./pow-retry-Bk5otjQT.mjs";
 import { env } from "@better-auth/core/env";
 //#region src/sentinel/fingerprint.ts
 function murmurhash3(str, seed = 0) {
@@ -123,54 +123,32 @@ function getWebGLFingerprint() {
 }
 async function getAudioFingerprint() {
 	try {
-		const AudioContextClass = window.AudioContext || window.webkitAudioContext;
-		if (!AudioContextClass) return null;
-		const context = new AudioContextClass();
+		const OfflineAudioContextClass = window.OfflineAudioContext || window.webkitOfflineAudioContext;
+		if (!OfflineAudioContextClass) return null;
+		const context = new OfflineAudioContextClass(1, 4096, 44100);
 		const oscillator = context.createOscillator();
-		const analyser = context.createAnalyser();
-		const gain = context.createGain();
-		const scriptProcessor = context.createScriptProcessor(4096, 1, 1);
-		gain.gain.value = 0;
+		const compressor = context.createDynamicsCompressor();
 		oscillator.type = "triangle";
 		oscillator.frequency.setValueAtTime(1e4, context.currentTime);
-		oscillator.connect(analyser);
-		analyser.connect(scriptProcessor);
-		scriptProcessor.connect(gain);
-		gain.connect(context.destination);
+		compressor.threshold.setValueAtTime(-50, context.currentTime);
+		compressor.knee.setValueAtTime(40, context.currentTime);
+		compressor.ratio.setValueAtTime(12, context.currentTime);
+		compressor.attack.setValueAtTime(0, context.currentTime);
+		compressor.release.setValueAtTime(.25, context.currentTime);
+		oscillator.connect(compressor);
+		compressor.connect(context.destination);
 		oscillator.start(0);
-		let resolved = false;
-		const cleanup = () => {
-			if (resolved) return;
-			resolved = true;
-			try {
-				oscillator.stop();
-				oscillator.disconnect();
-				analyser.disconnect();
-				scriptProcessor.disconnect();
-				gain.disconnect();
-			} catch {}
-			try {
-				if (context.state !== "closed") context.close();
-			} catch {}
-		};
-		return new Promise((resolve) => {
-			scriptProcessor.onaudioprocess = (e) => {
-				if (resolved) return;
-				const output = e.inputBuffer.getChannelData(0);
-				let sum = 0;
-				for (let i = 0; i < output.length; i++) {
-					const val = output[i];
-					if (val !== void 0) sum += Math.abs(val);
-				}
-				cleanup();
-				resolve(sum);
-			};
-			setTimeout(() => {
-				if (resolved) return;
-				cleanup();
-				resolve(null);
-			}, 1e3);
-		});
+		const buffer = await Promise.race([context.startRendering(), new Promise((resolve) => {
+			setTimeout(() => resolve(null), 1e3);
+		})]);
+		if (!buffer) return null;
+		const output = buffer.getChannelData(0);
+		let sum = 0;
+		for (let i = 0; i < output.length; i++) {
+			const val = output[i];
+			if (val !== void 0) sum += Math.abs(val);
+		}
+		return sum;
 	} catch {
 		return null;
 	}

package/dist/{constants-CApB_fKA.mjs → constants-BypXAAvQ.mjs}

@@ -1,7 +1,7 @@
 import { env } from "@better-auth/core/env";
 //#endregion
 //#region src/version.ts
-const PLUGIN_VERSION = "0.4.6";
+const PLUGIN_VERSION = "0.4.7";
 //#endregion
 //#region src/constants.ts
 /**

package/dist/{crypto-CfK70MTZ.mjs → crypto-C9Iqqv8l.mjs}

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT } from "./constants-CApB_fKA.mjs";
+import { i as INFRA_USER_AGENT } from "./constants-BypXAAvQ.mjs";
 import { createFetch } from "@better-fetch/fetch";
 import { sha256 } from "@noble/hashes/sha2.js";
 //#region src/fetch.ts

package/dist/email.mjs

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-CApB_fKA.mjs";
+import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-BypXAAvQ.mjs";
 import { logger } from "better-auth";
 import { env } from "@better-auth/core/env";
 import { createFetch } from "@better-fetch/fetch";

package/dist/{identify-client-options-Cim5Fztg.d.mts → identify-client-options-Be9mAljS.d.mts}

@@ -1,4 +1,4 @@
-import { m as KvRetryOptions } from "./types-sP9ucYj1.mjs";
+import { m as KvRetryOptions } from "./types-Ba7NK8JV.mjs";
 import { BetterAuthClientOptions, ClientStore } from "better-auth";
 import { BetterFetch } from "@better-fetch/fetch";
 //#region src/dash-client.d.ts

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { C as ImpossibleTravelResult, D as SecurityVerdict, E as SecurityOptions, O as StaleUserResult, S as CredentialStuffingResult, T as SecurityEventType, _ as LocationDataContext, a as DashOptionsInternal, b as sentinel, c as EndpointOptions, d as InfraPluginConnectionOptionsInternal, f as KvOptions, g as LocationData, h as KvRetryOptionsResolved, i as DashOptions, k as ThresholdConfig, l as InfraEndpointContext, m as KvRetryOptions, n as ApiOptions, o as DashOptionsResolved, p as KvOptionsResolved, r as ApiOptionsResolved, s as Endpoint, t as APIError, u as InfraPluginConnectionOptions, v as SentinelOptions, w as SecurityEvent, x as CompromisedPasswordResult, y as SentinelOptionsInternal } from "./types-sP9ucYj1.mjs";
+import { C as ImpossibleTravelResult, D as SecurityVerdict, E as SecurityOptions, O as StaleUserResult, S as CredentialStuffingResult, T as SecurityEventType, _ as LocationDataContext, a as DashOptionsInternal, b as sentinel, c as EndpointOptions, d as InfraPluginConnectionOptionsInternal, f as KvOptions, g as LocationData, h as KvRetryOptionsResolved, i as DashOptions, k as ThresholdConfig, l as InfraEndpointContext, m as KvRetryOptions, n as ApiOptions, o as DashOptionsResolved, p as KvOptionsResolved, r as ApiOptionsResolved, s as Endpoint, t as APIError, u as InfraPluginConnectionOptions, v as SentinelOptions, w as SecurityEvent, x as CompromisedPasswordResult, y as SentinelOptionsInternal } from "./types-Ba7NK8JV.mjs";
 import { EMAIL_TEMPLATES, EmailConfig, EmailTemplateId, EmailTemplateVariables, SendBulkEmailsOptions, SendBulkEmailsResult, SendEmailOptions, SendEmailResult, createEmailSender, sendBulkEmails, sendEmail } from "./email.mjs";
 import { Account, AuthContext, GenericEndpointContext, Session, User } from "better-auth";
 import z from "zod";

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { i as INFRA_USER_AGENT, n as INFRA_API_URL, o as PLUGIN_VERSION, r as INFRA_KV_URL } from "./constants-CApB_fKA.mjs";
-import { a as createAPI, n as hash$1, o as createKV, r as hmacSha256Hex } from "./crypto-CfK70MTZ.mjs";
+import { i as INFRA_USER_AGENT, n as INFRA_API_URL, o as PLUGIN_VERSION, r as INFRA_KV_URL } from "./constants-BypXAAvQ.mjs";
+import { a as createAPI, n as hash$1, o as createKV, r as hmacSha256Hex } from "./crypto-C9Iqqv8l.mjs";
 import { EMAIL_TEMPLATES, createEmailSender, sendBulkEmails, sendEmail } from "./email.mjs";
 import { getCurrentAdapter, getCurrentAuthContext, getCurrentDBAdapterAsyncLocalStorage, runWithTransaction } from "@better-auth/core/context";
 import { APIError, generateId, getAuthTables, logger } from "better-auth";
@@ -2576,8 +2576,8 @@ const sentinel = (options) => {
 					customRules
 				} },
 				options: {
-					emailValidation: opts.security?.emailValidation,
-					emailNormalization: opts.security?.emailNormalization,
+					...opts.security?.emailValidation !== void 0 ? { emailValidation: opts.security.emailValidation } : {},
+					...opts.security?.emailNormalization !== void 0 ? { emailNormalization: opts.security.emailNormalization } : {},
 					rateLimit: { customRules },
 					databaseHooks: {
 						user: {

package/dist/native.d.mts

@@ -1,4 +1,4 @@
-import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-Cim5Fztg.mjs";
+import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-Be9mAljS.mjs";
 import { BetterAuthClientPlugin } from "better-auth";
 //#region src/sentinel/native/client.d.ts
 interface SentinelNativeClientOptions {

package/dist/native.mjs

@@ -1,5 +1,5 @@
-import { o as createKV, t as bytesToHex } from "./crypto-CfK70MTZ.mjs";
-import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, t as createPowRetryTimeout } from "./pow-retry-DkrUdqDd.mjs";
+import { o as createKV, t as bytesToHex } from "./crypto-C9Iqqv8l.mjs";
+import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, t as createPowRetryTimeout } from "./pow-retry-Bk5otjQT.mjs";
 import { env } from "@better-auth/core/env";
 import { Dimensions, InteractionManager, PixelRatio, Platform } from "react-native";
 //#region src/sentinel/native/components.ts

package/dist/{pow-retry-DkrUdqDd.mjs → pow-retry-Bk5otjQT.mjs}

@@ -1,4 +1,4 @@
-import { i as randomBytes, n as hash, t as bytesToHex } from "./crypto-CfK70MTZ.mjs";
+import { i as randomBytes, n as hash, t as bytesToHex } from "./crypto-C9Iqqv8l.mjs";
 //#region src/dash-client.ts
 function resolveDashUserId(input, options) {
 	return input.userId || options?.resolveUserId?.({

package/dist/{types-sP9ucYj1.d.mts → types-Ba7NK8JV.d.mts}

@@ -170,28 +170,13 @@ declare const sentinel: (options?: SentinelOptions) => {
   init(ctx: import("better-auth").AuthContext): {
     context: {
       rateLimit: {
-        customRules: {
-          [key: string]: false | BetterAuthRateLimitRule | ((request: Request, currentRule: BetterAuthRateLimitRule) => import("@better-auth/core").Awaitable<false | BetterAuthRateLimitRule>);
-        };
         enabled: boolean;
         window: number;
         max: number;
         storage: "memory" | "database" | "secondary-storage";
-        modelName?: import("better-auth").LiteralString | "rateLimit" | undefined;
-        fields?: Partial<Record<"key" | "count" | "lastRequest", string>> | undefined;
-        customStorage?: import("better-auth").BetterAuthRateLimitStorage | undefined;
-      };
+      } & Omit<import("better-auth").BetterAuthRateLimitOptions, "window" | "enabled" | "max" | "storage">;
     };
     options: {
-      emailValidation: {
-        enabled?: boolean;
-        strictness?: "low" | "medium" | "high";
-        action?: SecurityAction;
-        domainAllowlist?: string[];
-      } | undefined;
-      emailNormalization: {
-        enabled?: boolean;
-      } | undefined;
       rateLimit: {
         customRules: {
           [key: string]: false | BetterAuthRateLimitRule | ((request: Request, currentRule: BetterAuthRateLimitRule) => import("@better-auth/core").Awaitable<false | BetterAuthRateLimitRule>);
@@ -276,6 +261,15 @@ declare const sentinel: (options?: SentinelOptions) => {
           };
         };
       };
+      emailNormalization?: {
+        enabled?: boolean;
+      } | undefined;
+      emailValidation?: {
+        enabled?: boolean;
+        strictness?: "low" | "medium" | "high";
+        action?: SecurityAction;
+        domainAllowlist?: string[];
+      } | undefined;
     };
   };
   hooks: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/infra",
-  "version": "0.4.6",
+  "version": "0.4.7",
   "description": "Dashboard and analytics plugin for Better Auth",
   "type": "module",
   "main": "dist/index.mjs",
@@ -17,21 +17,25 @@
   },
   "exports": {
     ".": {
+      "@infra/source": "./src/index.ts",
       "types": "./dist/index.d.mts",
       "import": "./dist/index.mjs",
       "default": "./dist/index.mjs"
     },
     "./client": {
+      "@infra/source": "./src/client.ts",
       "types": "./dist/client.d.mts",
       "import": "./dist/client.mjs",
       "default": "./dist/client.mjs"
     },
     "./email": {
+      "@infra/source": "./src/email.ts",
       "types": "./dist/email.d.mts",
       "import": "./dist/email.mjs",
       "default": "./dist/email.mjs"
     },
     "./native": {
+      "@infra/source": "./src/native.ts",
       "types": "./dist/native.d.mts",
       "import": "./dist/native.mjs",
       "default": "./dist/native.mjs"