@better-auth/stripe 1.6.1 → 1.6.3

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { n as stripe, s as StripePlan } from "./index-DCU1841o.mjs";
+import { l as StripePlan, n as stripe } from "./index-C8Utp7ig.mjs";
 import * as better_auth0 from "better-auth";
 
 //#region src/error-codes.d.ts

package/dist/client.mjs

@@ -1,4 +1,4 @@
-import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-Ba11hgE-.mjs";
+import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-CuYdNC0o.mjs";
 //#region src/client.ts
 const stripeClient = (options) => {
 	return {

package/dist/{index-DCU1841o.d.mts → index-C8Utp7ig.d.mts}

@@ -2,9 +2,9 @@ import * as better_auth0 from "better-auth";
 import { GenericEndpointContext, InferOptionSchema, Session, User } from "better-auth";
 import * as zod from "zod";
 import * as better_call0 from "better-call";
-import * as zod_v4_core0 from "zod/v4/core";
 import { Organization } from "better-auth/plugins/organization";
 import Stripe from "stripe";
+import * as zod_v4_core0 from "zod/v4/core";
 
 //#region src/schema.d.ts
 declare const subscriptions: {
@@ -112,6 +112,8 @@ type StripeCtxSession = {
   session: Session & WithActiveOrganizationId;
   user: User & WithStripeCustomerId;
 };
+type CheckoutSessionLocale = NonNullable<Stripe.Checkout.SessionCreateParams["locale"]>;
+type CheckoutSessionLineItem = NonNullable<Stripe.Checkout.SessionCreateParams["line_items"]>[number];
 type StripePlan = {
   /**
    * Monthly price id
@@ -182,7 +184,7 @@ type StripePlan = {
    *
    * @see https://docs.stripe.com/billing/subscriptions/mixed-interval#limitations
    */
-  lineItems?: Stripe.Checkout.SessionCreateParams.LineItem[] | undefined;
+  lineItems?: CheckoutSessionLineItem[] | undefined;
   /**
    * Free trial days
    */
@@ -533,7 +535,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
         }>>;
         metadata: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
         seats: zod.ZodOptional<zod.ZodNumber>;
-        locale: zod.ZodOptional<zod.ZodCustom<Stripe.Checkout.Session.Locale, Stripe.Checkout.Session.Locale>>;
+        locale: zod.ZodOptional<zod.ZodCustom<CheckoutSessionLocale, CheckoutSessionLocale>>;
         successUrl: zod.ZodDefault<zod.ZodString>;
         cancelUrl: zod.ZodDefault<zod.ZodString>;
         returnUrl: zod.ZodOptional<zod.ZodString>;
@@ -565,9 +567,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
               email: string;
               emailVerified: boolean;
               name: string;
-              image /**
-                     * Sync organization name to Stripe customer
-                     */?: string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>)[];
@@ -577,74 +577,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
     }, {
       url: string;
       redirect: boolean;
-    } | {
-      redirect: boolean;
-      id: string;
-      object: "checkout.session";
-      adaptive_pricing: Stripe.Checkout.Session.AdaptivePricing | null;
-      after_expiration: Stripe.Checkout.Session.AfterExpiration | null;
-      allow_promotion_codes: boolean | null;
-      amount_subtotal: number | null;
-      amount_total: number | null;
-      automatic_tax: Stripe.Checkout.Session.AutomaticTax;
-      billing_address_collection: Stripe.Checkout.Session.BillingAddressCollection | null;
-      branding_settings?: Stripe.Checkout.Session.BrandingSettings;
-      cancel_url: string | null;
-      client_reference_id: string | null;
-      client_secret: string | null;
-      collected_information: Stripe.Checkout.Session.CollectedInformation | null;
-      consent: Stripe.Checkout.Session.Consent | null;
-      consent_collection: Stripe.Checkout.Session.ConsentCollection | null;
-      created: number;
-      currency: string | null;
-      currency_conversion: Stripe.Checkout.Session.CurrencyConversion | null;
-      custom_fields: Array<Stripe.Checkout.Session.CustomField>;
-      custom_text: Stripe.Checkout.Session.CustomText;
-      customer: string | Stripe.Customer | Stripe.DeletedCustomer | null;
-      customer_account: string | null;
-      customer_creation: Stripe.Checkout.Session.CustomerCreation | null;
-      customer_details: Stripe.Checkout.Session.CustomerDetails | null;
-      customer_email: string | null;
-      discounts: Array<Stripe.Checkout.Session.Discount> | null;
-      excluded_payment_method_types?: Array<string>;
-      expires_at: number;
-      invoice: string | Stripe.Invoice | null;
-      invoice_creation: Stripe.Checkout.Session.InvoiceCreation | null;
-      line_items?: Stripe.ApiList<Stripe.LineItem>;
-      livemode: boolean;
-      locale: Stripe.Checkout.Session.Locale | null;
-      metadata: Stripe.Metadata | null;
-      mode: Stripe.Checkout.Session.Mode;
-      name_collection?: Stripe.Checkout.Session.NameCollection;
-      optional_items?: Array<Stripe.Checkout.Session.OptionalItem> | null;
-      origin_context: Stripe.Checkout.Session.OriginContext | null;
-      payment_intent: string | Stripe.PaymentIntent | null;
-      payment_link: string | Stripe.PaymentLink | null;
-      payment_method_collection: Stripe.Checkout.Session.PaymentMethodCollection | null;
-      payment_method_configuration_details: Stripe.Checkout.Session.PaymentMethodConfigurationDetails | null;
-      payment_method_options: Stripe.Checkout.Session.PaymentMethodOptions | null;
-      payment_method_types: Array<string>;
-      payment_status: Stripe.Checkout.Session.PaymentStatus;
-      permissions: Stripe.Checkout.Session.Permissions | null;
-      phone_number_collection?: Stripe.Checkout.Session.PhoneNumberCollection;
-      presentment_details?: Stripe.Checkout.Session.PresentmentDetails;
-      recovered_from: string | null;
-      redirect_on_completion?: Stripe.Checkout.Session.RedirectOnCompletion;
-      return_url?: string;
-      saved_payment_method_options: Stripe.Checkout.Session.SavedPaymentMethodOptions | null;
-      setup_intent: string | Stripe.SetupIntent | null;
-      shipping_address_collection: Stripe.Checkout.Session.ShippingAddressCollection | null;
-      shipping_cost: Stripe.Checkout.Session.ShippingCost | null;
-      shipping_options: Array<Stripe.Checkout.Session.ShippingOption>;
-      status: Stripe.Checkout.Session.Status | null;
-      submit_type: Stripe.Checkout.Session.SubmitType | null;
-      subscription: string | Stripe.Subscription | null;
-      success_url: string | null;
-      tax_id_collection?: Stripe.Checkout.Session.TaxIdCollection;
-      total_details: Stripe.Checkout.Session.TotalDetails | null;
-      ui_mode: Stripe.Checkout.Session.UiMode | null;
-      url: string | null;
-      wallet_options: Stripe.Checkout.Session.WalletOptions | null;
+    } | (Stripe.Checkout.Session & {
       lastResponse: {
         headers: {
           [key: string]: string;
@@ -655,7 +588,9 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
         idempotencyKey?: string;
         stripeAccount?: string;
       };
-    }>;
+    } & {
+      redirect: boolean;
+    })>;
     cancelSubscription: better_call0.StrictEndpoint<"/subscription/cancel", {
       method: "POST";
       body: zod.ZodObject<{
@@ -693,9 +628,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
               email: string;
               emailVerified: boolean;
               name: string;
-              image /**
-                     * Sync organization name to Stripe customer
-                     */?: string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>)[];
@@ -741,9 +674,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
               email: string;
               emailVerified: boolean;
               name: string;
-              image /**
-                     * Sync organization name to Stripe customer
-                     */?: string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>)[];
@@ -785,9 +716,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
               email: string;
               emailVerified: boolean;
               name: string;
-              image /**
-                     * Sync organization name to Stripe customer
-                     */?: string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>)[];
@@ -829,7 +758,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
     createBillingPortal: better_call0.StrictEndpoint<"/subscription/billing-portal", {
       method: "POST";
       body: zod.ZodObject<{
-        locale: zod.ZodOptional<zod.ZodCustom<Stripe.Checkout.Session.Locale, Stripe.Checkout.Session.Locale>>;
+        locale: zod.ZodOptional<zod.ZodCustom<CheckoutSessionLocale, CheckoutSessionLocale>>;
         referenceId: zod.ZodOptional<zod.ZodString>;
         customerType: zod.ZodOptional<zod.ZodEnum<{
           user: "user";
@@ -863,9 +792,7 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
               email: string;
               emailVerified: boolean;
               name: string;
-              image /**
-                     * Sync organization name to Stripe customer
-                     */?: string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>)[];
@@ -1013,4 +940,4 @@ declare const stripe: <O extends StripeOptions>(options: O) => {
 };
 type StripePlugin<O extends StripeOptions> = ReturnType<typeof stripe<O>>;
 //#endregion
-export { StripeCtxSession as a, Subscription as c, WithStripeCustomerId as d, CustomerType as i, SubscriptionOptions as l, stripe as n, StripeOptions as o, AuthorizeReferenceAction as r, StripePlan as s, StripePlugin as t, WithActiveOrganizationId as u };
+export { CheckoutSessionLocale as a, StripeOptions as c, SubscriptionOptions as d, WithActiveOrganizationId as f, CheckoutSessionLineItem as i, StripePlan as l, stripe as n, CustomerType as o, WithStripeCustomerId as p, AuthorizeReferenceAction as r, StripeCtxSession as s, StripePlugin as t, Subscription as u };

package/dist/index.d.mts

@@ -1,2 +1,2 @@
-import { a as StripeCtxSession, c as Subscription, d as WithStripeCustomerId, i as CustomerType, l as SubscriptionOptions, n as stripe, o as StripeOptions, r as AuthorizeReferenceAction, s as StripePlan, t as StripePlugin, u as WithActiveOrganizationId } from "./index-DCU1841o.mjs";
-export { AuthorizeReferenceAction, CustomerType, StripeCtxSession, StripeOptions, StripePlan, StripePlugin, Subscription, SubscriptionOptions, WithActiveOrganizationId, WithStripeCustomerId, stripe };
+import { a as CheckoutSessionLocale, c as StripeOptions, d as SubscriptionOptions, f as WithActiveOrganizationId, i as CheckoutSessionLineItem, l as StripePlan, n as stripe, o as CustomerType, p as WithStripeCustomerId, r as AuthorizeReferenceAction, s as StripeCtxSession, t as StripePlugin, u as Subscription } from "./index-C8Utp7ig.mjs";
+export { AuthorizeReferenceAction, CheckoutSessionLineItem, CheckoutSessionLocale, CustomerType, StripeCtxSession, StripeOptions, StripePlan, StripePlugin, Subscription, SubscriptionOptions, WithActiveOrganizationId, WithStripeCustomerId, stripe };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-Ba11hgE-.mjs";
+import { n as STRIPE_ERROR_CODES, t as PACKAGE_VERSION } from "./version-CuYdNC0o.mjs";
 import { APIError, HIDE_METADATA } from "better-auth";
 import { defu } from "defu";
 import { createAuthEndpoint, createAuthMiddleware } from "@better-auth/core/api";
@@ -7,9 +7,27 @@ import { getSessionFromCtx, originCheck, sessionMiddleware } from "better-auth/a
 import * as z from "zod";
 import { mergeSchema } from "better-auth/db";
 //#region src/metadata.ts
+const UNSAFE_METADATA_KEYS = new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
 /**
-* Customer metadata - set internal fields and extract typed fields.
+* Merge flat Stripe metadata objects, giving `internalFields` final priority.
+* Drops reserved keys that could mutate the target's prototype chain.
 */
+function mergeMetadata(internalFields, userMetadata) {
+	const merged = {};
+	for (const source of userMetadata) {
+		if (!source) continue;
+		for (const [key, value] of Object.entries(source)) {
+			if (UNSAFE_METADATA_KEYS.has(key)) continue;
+			merged[key] = value;
+		}
+	}
+	for (const [key, value] of Object.entries(internalFields)) merged[key] = value;
+	return merged;
+}
 const customerMetadata = {
 	keys: {
 		userId: "userId",
@@ -17,7 +35,7 @@ const customerMetadata = {
 		customerType: "customerType"
 	},
 	set(internalFields, ...userMetadata) {
-		return defu(internalFields, ...userMetadata.filter(Boolean));
+		return mergeMetadata(internalFields, userMetadata);
 	},
 	get(metadata) {
 		return {
@@ -27,9 +45,6 @@ const customerMetadata = {
 		};
 	}
 };
-/**
-* Subscription/Checkout metadata - set internal fields and extract typed fields.
-*/
 const subscriptionMetadata = {
 	keys: {
 		userId: "userId",
@@ -37,7 +52,7 @@ const subscriptionMetadata = {
 		referenceId: "referenceId"
 	},
 	set(internalFields, ...userMetadata) {
-		return defu(internalFields, ...userMetadata.filter(Boolean));
+		return mergeMetadata(internalFields, userMetadata);
 	},
 	get(metadata) {
 		return {
@@ -463,24 +478,37 @@ const referenceMiddleware = (subscriptionOptions, action) => createAuthMiddlewar
 //#endregion
 //#region src/routes.ts
 /**
-* Converts a relative URL to an absolute URL using baseURL.
+* Resolves a Stripe price object, either from a lookup key or by retrieving
+* by ID. Used to inspect `recurring.usage_type` for metered billing.
 * @internal
 */
-function getUrl(ctx, url) {
-	if (/^[a-zA-Z][a-zA-Z0-9+\-.]*:/.test(url)) return url;
-	return `${ctx.context.options.baseURL}${url.startsWith("/") ? url : `/${url}`}`;
+async function resolveStripePrice(stripeClient, priceId, lookupKey) {
+	try {
+		if (lookupKey) {
+			const priceData = (await stripeClient.prices.list({
+				lookup_keys: [lookupKey],
+				active: true,
+				limit: 1
+			})).data[0];
+			if (priceData) return priceData;
+		}
+		if (priceId) return await stripeClient.prices.retrieve(priceId);
+	} catch {}
+}
+/**
+* Checks if a Stripe price uses metered (usage-based) billing.
+* @internal
+*/
+function isMeteredPrice(price) {
+	return price?.recurring?.usage_type === "metered";
 }
 /**
-* Resolves a Stripe price ID from a lookup key.
+* Converts a relative URL to an absolute URL using baseURL.
 * @internal
 */
-async function resolvePriceIdFromLookupKey(stripeClient, lookupKey) {
-	if (!lookupKey) return void 0;
-	return (await stripeClient.prices.list({
-		lookup_keys: [lookupKey],
-		active: true,
-		limit: 1
-	})).data[0]?.id;
+function getUrl(ctx, url) {
+	if (/^[a-zA-Z][a-zA-Z0-9+\-.]*:/.test(url)) return url;
+	return `${ctx.context.options.baseURL}${url.startsWith("/") ? url : `/${url}`}`;
 }
 /**
 * Determines the reference ID based on customer type.
@@ -677,10 +705,10 @@ const upgradeSubscription = (options) => {
 		const stripeSubscriptionPriceId = planItem?.price.id;
 		const incompleteSubscription = subscriptions.find((sub) => sub.status === "incomplete");
 		const priceId = ctx.body.annual ? plan.annualDiscountPriceId : plan.priceId;
-		const lookupKey = ctx.body.annual ? plan.annualDiscountLookupKey : plan.lookupKey;
-		const resolvedPriceId = lookupKey ? await resolvePriceIdFromLookupKey(client, lookupKey) : void 0;
-		const priceIdToUse = priceId || resolvedPriceId;
+		const resolvedPrice = await resolveStripePrice(client, priceId, ctx.body.annual ? plan.annualDiscountLookupKey : plan.lookupKey);
+		const priceIdToUse = resolvedPrice?.id ?? priceId;
 		if (!priceIdToUse) throw ctx.error("BAD_REQUEST", { message: "Price ID not found for the selected plan" });
+		const isMetered = isMeteredPrice(resolvedPrice);
 		const isAutoManagedSeats = !!(plan.seatPriceId && customerType === "organization");
 		let memberCount = 0;
 		if (isAutoManagedSeats) memberCount = await ctx.context.adapter.count({
@@ -780,7 +808,7 @@ const upgradeSubscription = (options) => {
 					if (itemPriceId === stripeSubscriptionPriceId) {
 						newPhaseItems.push({
 							price: priceIdToUse,
-							quantity: isAutoManagedSeats ? 1 : ctx.body.seats || 1
+							...isMetered ? {} : { quantity: isAutoManagedSeats ? 1 : ctx.body.seats || 1 }
 						});
 						continue;
 					}
@@ -853,7 +881,7 @@ const upgradeSubscription = (options) => {
 						itemUpdates.push({
 							id: si.id,
 							price: priceIdToUse,
-							quantity: isAutoManagedSeats ? 1 : ctx.body.seats || 1
+							...isMetered ? {} : { quantity: isAutoManagedSeats ? 1 : ctx.body.seats || 1 }
 						});
 						continue;
 					}
@@ -898,7 +926,7 @@ const upgradeSubscription = (options) => {
 						items: [{
 							id: planItem.id,
 							price: priceIdToUse,
-							...isAutoManagedSeats ? {} : { quantity: ctx.body.seats || 1 }
+							...isAutoManagedSeats || isMetered ? {} : { quantity: ctx.body.seats || 1 }
 						}]
 					}
 				}
@@ -955,54 +983,54 @@ const upgradeSubscription = (options) => {
 		})).some((s) => {
 			return !!(s.trialStart || s.trialEnd) || s.status === "trialing";
 		}) && plan.freeTrial ? { trial_period_days: plan.freeTrial.days } : void 0;
-		const checkoutSession = await client.checkout.sessions.create({
-			...customerId ? {
-				customer: customerId,
-				customer_update: customerType !== "user" ? { address: "auto" } : {
-					name: "auto",
-					address: "auto"
-				}
-			} : { customer_email: user.email },
-			locale: ctx.body.locale,
-			success_url: getUrl(ctx, `${ctx.context.baseURL}/subscription/success?callbackURL=${encodeURIComponent(ctx.body.successUrl)}&checkoutSessionId={CHECKOUT_SESSION_ID}`),
-			cancel_url: getUrl(ctx, ctx.body.cancelUrl),
-			line_items: [
-				...!isSeatOnlyPlan ? [{
-					price: priceIdToUse,
-					quantity: isAutoManagedSeats ? 1 : ctx.body.seats || 1
-				}] : [],
-				...isAutoManagedSeats ? [{
-					price: plan.seatPriceId,
-					quantity: memberCount
-				}] : [],
-				...plan.lineItems ?? []
-			],
-			subscription_data: {
-				...freeTrial,
+		const response = {
+			...await client.checkout.sessions.create({
+				...customerId ? {
+					customer: customerId,
+					customer_update: customerType !== "user" ? { address: "auto" } : {
+						name: "auto",
+						address: "auto"
+					}
+				} : { customer_email: user.email },
+				locale: ctx.body.locale,
+				success_url: getUrl(ctx, `${ctx.context.baseURL}/subscription/success?callbackURL=${encodeURIComponent(ctx.body.successUrl)}&checkoutSessionId={CHECKOUT_SESSION_ID}`),
+				cancel_url: getUrl(ctx, ctx.body.cancelUrl),
+				line_items: [
+					...!isSeatOnlyPlan ? [{
+						price: priceIdToUse,
+						...isMetered ? {} : { quantity: isAutoManagedSeats ? 1 : ctx.body.seats || 1 }
+					}] : [],
+					...isAutoManagedSeats ? [{
+						price: plan.seatPriceId,
+						quantity: memberCount
+					}] : [],
+					...plan.lineItems ?? []
+				],
+				subscription_data: {
+					...freeTrial,
+					metadata: subscriptionMetadata.set({
+						userId: user.id,
+						subscriptionId: subscription.id,
+						referenceId
+					}, ctx.body.metadata, params?.params?.subscription_data?.metadata)
+				},
+				mode: "subscription",
+				client_reference_id: referenceId,
+				...params?.params,
 				metadata: subscriptionMetadata.set({
 					userId: user.id,
 					subscriptionId: subscription.id,
 					referenceId
-				}, ctx.body.metadata, params?.params?.subscription_data?.metadata)
-			},
-			mode: "subscription",
-			client_reference_id: referenceId,
-			...params?.params,
-			metadata: subscriptionMetadata.set({
-				userId: user.id,
-				subscriptionId: subscription.id,
-				referenceId
-			}, ctx.body.metadata, params?.params?.metadata)
-		}, params?.options).catch(async (e) => {
-			throw ctx.error("BAD_REQUEST", {
-				message: e.message,
-				code: e.code
-			});
-		});
-		return ctx.json({
-			...checkoutSession,
+				}, ctx.body.metadata, params?.params?.metadata)
+			}, params?.options).catch(async (e) => {
+				throw ctx.error("BAD_REQUEST", {
+					message: e.message,
+					code: e.code
+				});
+			}),
 			redirect: !ctx.body.disableRedirect
-		});
+		};
+		return ctx.json(response);
 	});
 };
 const cancelSubscriptionBodySchema = z.object({

package/dist/{version-Ba11hgE-.mjs → version-CuYdNC0o.mjs}

@@ -27,6 +27,6 @@ const STRIPE_ERROR_CODES = defineErrorCodes({
 });
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.6.1";
+const PACKAGE_VERSION = "1.6.3";
 //#endregion
 export { STRIPE_ERROR_CODES as n, PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/stripe",
-  "version": "1.6.1",
+  "version": "1.6.3",
   "description": "Stripe plugin for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -51,21 +51,21 @@
     }
   },
   "dependencies": {
-    "defu": "^6.1.4",
+    "defu": "^6.1.5",
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "better-call": "1.3.5",
-    "stripe": "^20.4.0",
+    "stripe": "^22.0.1",
     "tsdown": "0.21.1",
-    "@better-auth/core": "1.6.1",
-    "better-auth": "1.6.1"
+    "@better-auth/core": "1.6.3",
+    "better-auth": "1.6.3"
   },
   "peerDependencies": {
     "better-call": "1.3.5",
-    "stripe": "^18 || ^19 || ^20",
-    "@better-auth/core": "^1.6.1",
-    "better-auth": "^1.6.1"
+    "stripe": "^18 || ^19 || ^20 || ^21 || ^22",
+    "@better-auth/core": "^1.6.3",
+    "better-auth": "^1.6.3"
   },
   "scripts": {
     "build": "tsdown",