@better-auth/infra 0.4.6 → 0.4.8

package/CHANGELOG.md

@@ -5,7 +5,18 @@ All notable changes to `@better-auth/infra` are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0/).
 
-## [Unreleased]
+## [0.4.8] - 2026-09-09
+
+### Added
+
+- **`apiOptions.headers` / `kvOptions.headers`** — Extra headers on dash, sentinel, email, and SMS HTTP clients. Built-in auth headers cannot be overridden.
+
+## [0.4.7] - 2026-09-07
+
+### Fixed
+
+- **Sentinel types under `exactOptionalPropertyTypes`** — `sentinel()`, `sentinelClient()`, and `sentinelNativeClient()` type-check cleanly when consumers enable TypeScript `exactOptionalPropertyTypes`.
+- **Sentinel audio fingerprint** — `sentinelClient()` now builds the audio component with `OfflineAudioContext` (and `webkitOfflineAudioContext`) instead of a live `AudioContext` + `ScriptProcessor`. Avoids autoplay/suspended-context and output-route failures in restricted browsers while keeping the same soft confidence signal on identify.
 
 ## [0.4.6] - 2026-09-07
 
@@ -224,4 +235,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 [0.3.1]: https://github.com/better-auth/infrastructure/compare/infra@v0.3.0...infra@v0.3.1
 [0.3.0]: https://github.com/better-auth/infrastructure/compare/infra@v0.2.14...infra@v0.3.0
 [0.2.14]: https://github.com/better-auth/better-auth-infra/compare/@better-auth/infra@0.2.13...@better-auth/infra@0.2.14
-[0.2.13]: https://github.com/better-auth/better-auth-infra/compare/@better-auth/infra@0.2.12...@better-auth/infra@0.2.13
+[0.2.13]: https://github.com/better-auth/better-auth-infra/compare/@better-auth/infra@0.2.12...@better-auth/infra@0.2.13

package/dist/client.d.mts

@@ -1,4 +1,5 @@
-import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-Cim5Fztg.mjs";
+import { a as DashGetAllAuditLogsInput, i as DashClientOptions, n as DashAuditLog, o as DashGetAuditLogsInput, r as DashAuditLogsResponse, s as dashClient, t as IdentifyClientOptions } from "./identify-client-options-DgKA4Eq8.mjs";
+import { BetterFetchPlugin } from "@better-fetch/fetch";
 //#region src/sentinel/client.d.ts
 interface SentinelClientOptions {
   /**
@@ -35,21 +36,7 @@ interface SentinelClientOptions {
 }
 declare const sentinelClient: (options?: SentinelClientOptions) => {
   id: "sentinel";
-  fetchPlugins: ({
-    id: string;
-    name: string;
-    hooks: {
-      onRequest<T extends Record<string, any>>(context: import("@better-fetch/fetch").RequestContext<T>): Promise<import("@better-fetch/fetch").RequestContext<T>>;
-      onResponse?: undefined;
-    };
-  } | {
-    id: string;
-    name: string;
-    hooks: {
-      onResponse(context: import("@better-fetch/fetch").ResponseContext): Promise<import("@better-fetch/fetch").ResponseContext>;
-      onRequest<T extends Record<string, any>>(context: import("@better-fetch/fetch").RequestContext<T>): Promise<import("@better-fetch/fetch").RequestContext<T>>;
-    };
-  })[];
+  fetchPlugins: BetterFetchPlugin[];
 };
 //#endregion
 export { type DashAuditLog, type DashAuditLogsResponse, type DashClientOptions, type DashGetAllAuditLogsInput, type DashGetAuditLogsInput, type SentinelClientOptions, dashClient, sentinelClient };

package/dist/client.mjs

@@ -1,5 +1,5 @@
-import { n as hash, o as createKV } from "./crypto-CfK70MTZ.mjs";
-import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, s as generateRequestId, t as createPowRetryTimeout } from "./pow-retry-DkrUdqDd.mjs";
+import { n as hash, o as createKV } from "./crypto-DRS7yhmR.mjs";
+import { a as resolveSentinelClientIdentifyUrl, c as identify, i as solvePoWChallenge, l as dashClient, n as decodePoWChallenge, o as resolveIdentifyClientRetry, r as encodePoWSolution, s as generateRequestId, t as createPowRetryTimeout } from "./pow-retry-Di0eUKbA.mjs";
 import { env } from "@better-auth/core/env";
 //#region src/sentinel/fingerprint.ts
 function murmurhash3(str, seed = 0) {
@@ -123,54 +123,32 @@ function getWebGLFingerprint() {
 }
 async function getAudioFingerprint() {
 	try {
-		const AudioContextClass = window.AudioContext || window.webkitAudioContext;
-		if (!AudioContextClass) return null;
-		const context = new AudioContextClass();
+		const OfflineAudioContextClass = window.OfflineAudioContext || window.webkitOfflineAudioContext;
+		if (!OfflineAudioContextClass) return null;
+		const context = new OfflineAudioContextClass(1, 4096, 44100);
 		const oscillator = context.createOscillator();
-		const analyser = context.createAnalyser();
-		const gain = context.createGain();
-		const scriptProcessor = context.createScriptProcessor(4096, 1, 1);
-		gain.gain.value = 0;
+		const compressor = context.createDynamicsCompressor();
 		oscillator.type = "triangle";
 		oscillator.frequency.setValueAtTime(1e4, context.currentTime);
-		oscillator.connect(analyser);
-		analyser.connect(scriptProcessor);
-		scriptProcessor.connect(gain);
-		gain.connect(context.destination);
+		compressor.threshold.setValueAtTime(-50, context.currentTime);
+		compressor.knee.setValueAtTime(40, context.currentTime);
+		compressor.ratio.setValueAtTime(12, context.currentTime);
+		compressor.attack.setValueAtTime(0, context.currentTime);
+		compressor.release.setValueAtTime(.25, context.currentTime);
+		oscillator.connect(compressor);
+		compressor.connect(context.destination);
 		oscillator.start(0);
-		let resolved = false;
-		const cleanup = () => {
-			if (resolved) return;
-			resolved = true;
-			try {
-				oscillator.stop();
-				oscillator.disconnect();
-				analyser.disconnect();
-				scriptProcessor.disconnect();
-				gain.disconnect();
-			} catch {}
-			try {
-				if (context.state !== "closed") context.close();
-			} catch {}
-		};
-		return new Promise((resolve) => {
-			scriptProcessor.onaudioprocess = (e) => {
-				if (resolved) return;
-				const output = e.inputBuffer.getChannelData(0);
-				let sum = 0;
-				for (let i = 0; i < output.length; i++) {
-					const val = output[i];
-					if (val !== void 0) sum += Math.abs(val);
-				}
-				cleanup();
-				resolve(sum);
-			};
-			setTimeout(() => {
-				if (resolved) return;
-				cleanup();
-				resolve(null);
-			}, 1e3);
-		});
+		const buffer = await Promise.race([context.startRendering(), new Promise((resolve) => {
+			setTimeout(() => resolve(null), 1e3);
+		})]);
+		if (!buffer) return null;
+		const output = buffer.getChannelData(0);
+		let sum = 0;
+		for (let i = 0; i < output.length; i++) {
+			const val = output[i];
+			if (val !== void 0) sum += Math.abs(val);
+		}
+		return sum;
 	} catch {
 		return null;
 	}

package/dist/{constants-CApB_fKA.mjs → constants-C8_UJzzu.mjs}

@@ -1,7 +1,7 @@
 import { env } from "@better-auth/core/env";
 //#endregion
 //#region src/version.ts
-const PLUGIN_VERSION = "0.4.6";
+const PLUGIN_VERSION = "0.4.8";
 //#endregion
 //#region src/constants.ts
 /**

package/dist/{crypto-CfK70MTZ.mjs → crypto-DRS7yhmR.mjs}

@@ -1,26 +1,29 @@
-import { i as INFRA_USER_AGENT } from "./constants-CApB_fKA.mjs";
+import { i as INFRA_USER_AGENT } from "./constants-C8_UJzzu.mjs";
 import { createFetch } from "@better-fetch/fetch";
 import { sha256 } from "@noble/hashes/sha2.js";
 //#region src/fetch.ts
 function createAPI(options, fetchOptions) {
 	return createFetch({
 		baseURL: options.apiUrl,
+		timeout: options.apiOptions.timeout,
+		...fetchOptions,
 		headers: {
+			...options.apiOptions.headers,
 			"user-agent": INFRA_USER_AGENT,
 			"x-api-key": options.apiKey
-		},
-		timeout: options.apiOptions.timeout,
-		...fetchOptions
+		}
 	});
 }
 function createKV(options, fetchOptions) {
-	const headers = { "user-agent": INFRA_USER_AGENT };
-	if (options.apiKey) headers["x-api-key"] = options.apiKey;
 	return createFetch({
 		baseURL: options.kvUrl,
-		headers,
 		timeout: options.timeout ?? 1e3,
-		...fetchOptions
+		...fetchOptions,
+		headers: {
+			...options.headers,
+			"user-agent": INFRA_USER_AGENT,
+			...options.apiKey ? { "x-api-key": options.apiKey } : {}
+		}
 	});
 }
 //#endregion

package/dist/email.d.mts

@@ -155,6 +155,11 @@ interface EmailConfig {
      * @default 3000
      */
     timeout?: number;
+    /**
+     * Extra headers on every email API request.
+     * Cannot override built-in headers (`user-agent`, `Authorization`).
+     */
+    headers?: Record<string, string>;
   };
   /**
    * Timeout for Dash email API HTTP requests (milliseconds).

package/dist/email.mjs

@@ -1,4 +1,4 @@
-import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-CApB_fKA.mjs";
+import { i as INFRA_USER_AGENT, n as INFRA_API_URL } from "./constants-C8_UJzzu.mjs";
 import { logger } from "better-auth";
 import { env } from "@better-auth/core/env";
 import { createFetch } from "@better-fetch/fetch";
@@ -37,11 +37,12 @@ function createEmailSender(config) {
 	if (!apiKey) logger.warn("[Dash] No API key provided for email sending. Set BETTER_AUTH_API_KEY environment variable or pass apiKey in config.");
 	const $api = createFetch({
 		baseURL: apiUrl,
+		timeout: config?.apiOptions?.timeout ?? config?.apiTimeout ?? 3e3,
 		headers: {
+			...config?.apiOptions?.headers,
 			"user-agent": INFRA_USER_AGENT,
 			Authorization: `Bearer ${apiKey}`
-		},
-		timeout: config?.apiOptions?.timeout ?? config?.apiTimeout ?? 3e3
+		}
 	});
 	/**
 	* Send an email using a template from Better Auth Infra

package/dist/{identify-client-options-Cim5Fztg.d.mts → identify-client-options-DgKA4Eq8.d.mts}

@@ -1,4 +1,4 @@
-import { m as KvRetryOptions } from "./types-sP9ucYj1.mjs";
+import { g as KvRetryOptions } from "./types-BkUWsMpe.mjs";
 import { BetterAuthClientOptions, ClientStore } from "better-auth";
 import { BetterFetch } from "@better-fetch/fetch";
 //#region src/dash-client.d.ts