@headless-lms/adapter-auth 0.2.0 → 0.3.1

package/dist/better-auth.d.ts

@@ -1,10 +1,447 @@
-import { $strip } from "./node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/core/schemas.js";
 import { CreateAuthOptions, Hooks } from "./types.js";
+import { SessionAdmin } from "@headless-lms/core/identity";
 import { AuthHeaders, AuthOrganization, MemberWriteContext, OrgAdmin, Role, UpdateOrganizationInput } from "@headless-lms/core/organizations";
-import { ActiveSession, Logger, NewOrganizationInput, SessionVerifier } from "@headless-lms/core/types";
+import { AccessTokenAuthorization } from "better-auth/oauth2";
+import { BetterAuthOptions, BetterAuthPlugin } from "better-auth";
+import { AccessGrant, AccessRequest, AccessTokenVerifier, ActiveSession, ApiKeySummary, AppAccessAdmin, ConnectedApp, CreatedApiKey, HeaderBag, Logger, NewApiKey, NewOrganizationInput, SessionVerifier } from "@headless-lms/core/types";
 import { IncomingHttpHeaders } from "node:http";
-import { SessionAdmin } from "@headless-lms/core/identity";
 //#region src/better-auth.d.ts
+declare function buildAuthOptions(opts: CreateAuthOptions): {
+  baseURL: string;
+  secret: string;
+  trustedOrigins: string[];
+  session: {
+    cookieCache: {
+      enabled: true;
+      maxAge: number;
+    };
+  };
+  advanced: {
+    database: {
+      generateId: () => string;
+    };
+    crossSubDomainCookies: {
+      enabled: true;
+      domain: string | undefined;
+    };
+    defaultCookieAttributes: {
+      sameSite: "lax";
+      secure: boolean;
+      httpOnly: true;
+    };
+  };
+  database: (options: BetterAuthOptions) => import("better-auth").DBAdapter<BetterAuthOptions>;
+  emailAndPassword: {
+    enabled: true;
+    sendResetPassword: (data: {
+      user: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        email: string;
+        emailVerified: boolean;
+        name: string;
+        image?: string | null | undefined;
+      };
+      url: string;
+      token: string;
+    }, request?: Request | undefined) => Promise<void>;
+    onPasswordReset: (data: {
+      user: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        email: string;
+        emailVerified: boolean;
+        name: string;
+        image?: string | null | undefined;
+      };
+    }, request?: Request | undefined) => Promise<void>;
+    revokeSessionsOnPasswordReset: true;
+  };
+  plugins: [{
+    id: "magic-link";
+    version: string;
+    endpoints: {
+      signInMagicLink: import("better-auth").StrictEndpoint<"/sign-in/magic-link", {
+        method: "POST";
+        requireHeaders: true;
+        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
+        body: import("better-auth").ZodObject<{
+          email: import("better-auth").ZodEmail;
+          name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+          callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+          newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+          errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+          metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            operationId: string;
+            description: string;
+            responses: {
+              200: {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        status: {
+                          type: string;
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        status: boolean;
+      }>;
+      magicLinkVerify: import("better-auth").StrictEndpoint<"/magic-link/verify", {
+        method: "GET";
+        query: import("better-auth").ZodObject<{
+          token: import("better-auth").ZodString;
+          callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+          errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+          newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
+        requireHeaders: true;
+        metadata: {
+          openapi: {
+            operationId: string;
+            description: string;
+            responses: {
+              200: {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        session: {
+                          $ref: string;
+                        };
+                        user: {
+                          $ref: string;
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        token: string;
+        user: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+        session: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+      }>;
+    };
+    rateLimit: {
+      pathMatcher(path: string): boolean;
+      window: number;
+      max: number;
+    }[];
+    options: import("better-auth/plugins").MagicLinkOptions;
+  }, import("better-auth/plugins").DefaultOrganizationPlugin<{
+    ac: {
+      newRole<const TRoleStatements extends import("better-auth/plugins").Statements>(statements: import("better-auth/plugins").RoleInput<{
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }, TRoleStatements>): import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<TRoleStatements>, {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>;
+      statements: {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      };
+    };
+    roles: {
+      owner: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
+        readonly course: ["create", "read", "update", "delete"];
+        readonly progress: ["view"];
+        readonly community: ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>, {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>;
+      admin: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
+        readonly course: ["create", "read", "update", "delete"];
+        readonly progress: ["view"];
+        readonly community: ["moderate"];
+        readonly organization: readonly ["update"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>, {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>;
+      instructor: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
+        readonly course: ["read", "update"];
+        readonly progress: ["view"];
+        readonly community: ["moderate"];
+      }>, {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>;
+      moderator: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
+        readonly course: ["read"];
+        readonly community: ["moderate"];
+      }>, {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>;
+      student: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
+        readonly course: ["read"];
+      }>, {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>;
+    };
+    creatorRole: string;
+    organizationHooks: Hooks;
+  }>, BetterAuthPlugin, ...BetterAuthPlugin[], BetterAuthPlugin, {
+    id: "custom-session";
+    version: string;
+    hooks: {
+      after: {
+        matcher: (ctx: import("better-auth").HookEndpointContext) => boolean;
+        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+          user: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          };
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+          activeMemberRole: string | null;
+          activeOrganization: {
+            id: string;
+            name: string;
+            slug: string;
+          } | null;
+          organizations: {
+            id: string;
+            name: string;
+            slug: string;
+          }[];
+        }[] | undefined>>;
+      }[];
+    };
+    endpoints: {
+      getSession: import("better-auth").StrictEndpoint<"/get-session", {
+        method: "GET";
+        query: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
+          disableCookieCache: import("better-auth").ZodOptional<import("better-auth").ZodCoercedBoolean<unknown>>;
+          disableRefresh: import("better-auth").ZodOptional<import("better-auth").ZodCoercedBoolean<unknown>>;
+        }, import("zod/v4/core").$strip>>;
+        metadata: {
+          CUSTOM_SESSION: boolean;
+          openapi: {
+            description: string;
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "array";
+                      nullable: boolean;
+                      items: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        requireHeaders: true;
+      }, {
+        user: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+        session: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        activeMemberRole: string | null;
+        activeOrganization: {
+          id: string;
+          name: string;
+          slug: string;
+        } | null;
+        organizations: {
+          id: string;
+          name: string;
+          slug: string;
+        }[];
+      } | null>;
+    };
+    $Infer: {
+      Session: {
+        user: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        };
+        session: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          userId: string;
+          expiresAt: Date;
+          token: string;
+          ipAddress?: string | null | undefined;
+          userAgent?: string | null | undefined;
+        };
+        activeMemberRole: string | null;
+        activeOrganization: {
+          id: string;
+          name: string;
+          slug: string;
+        } | null;
+        organizations: {
+          id: string;
+          name: string;
+          slug: string;
+        }[];
+      };
+    };
+    options: import("better-auth/plugins").CustomSessionPluginOptions | undefined;
+  }];
+  hooks: {
+    before: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+      context: {
+        body: Record<string, unknown>;
+      };
+    } | undefined>>;
+  };
+  databaseHooks: {
+    user: {
+      create: {
+        before: (user: import("better-auth").User & Record<string, unknown>, context: import("better-auth").GenericEndpointContext | null) => Promise<boolean | void | {
+          data: import("better-auth").User;
+        }>;
+      };
+    };
+    session: {
+      create: {
+        before: ((session: import("better-auth").Session & Record<string, unknown>, context: import("better-auth").GenericEndpointContext | null) => Promise<boolean | void | {
+          data: import("better-auth").Session & Record<string, unknown>;
+        }>) | undefined;
+      };
+    };
+  };
+};
 declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth<{
   baseURL: string;
   secret: string;
@@ -29,7 +466,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       httpOnly: true;
     };
   };
-  database: (options: import("better-auth").BetterAuthOptions) => import("better-auth").DBAdapter<import("better-auth").BetterAuthOptions>;
+  database: (options: BetterAuthOptions) => import("better-auth").DBAdapter<BetterAuthOptions>;
   emailAndPassword: {
     enabled: true;
     sendResetPassword: (data: {
@@ -65,7 +502,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       signInMagicLink: import("better-auth").StrictEndpoint<"/sign-in/magic-link", {
         method: "POST";
         requireHeaders: true;
-        use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>)[];
+        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
         body: import("better-auth").ZodObject<{
           email: import("better-auth").ZodEmail;
           name: import("better-auth").ZodOptional<import("better-auth").ZodString>;
@@ -73,7 +510,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
           newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
           errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
           metadata: import("better-auth").ZodOptional<import("better-auth").ZodRecord<import("better-auth").ZodString, import("better-auth").ZodAny>>;
-        }, $strip>;
+        }, import("zod/v4/core").$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -107,8 +544,8 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
           callbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
           errorCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
           newUserCallbackURL: import("better-auth").ZodOptional<import("better-auth").ZodString>;
-        }, $strip>;
-        use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>)[];
+        }, import("zod/v4/core").$strip>;
+        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
         requireHeaders: true;
         metadata: {
           openapi: {
@@ -170,6 +607,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       newRole<const TRoleStatements extends import("better-auth/plugins").Statements>(statements: import("better-auth/plugins").RoleInput<{
         readonly course: readonly ["create", "read", "update", "delete"];
         readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -178,6 +616,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       }, TRoleStatements>): import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<TRoleStatements>, {
         readonly course: readonly ["create", "read", "update", "delete"];
         readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -187,6 +626,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       statements: {
         readonly course: readonly ["create", "read", "update", "delete"];
         readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -198,6 +638,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       owner: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
         readonly course: ["create", "read", "update", "delete"];
         readonly progress: ["view"];
+        readonly community: ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -206,6 +647,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       }>, {
         readonly course: readonly ["create", "read", "update", "delete"];
         readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -215,6 +657,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       admin: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
         readonly course: ["create", "read", "update", "delete"];
         readonly progress: ["view"];
+        readonly community: ["moderate"];
         readonly organization: readonly ["update"];
         readonly invitation: readonly ["create", "cancel"];
         readonly member: readonly ["create", "update", "delete"];
@@ -223,6 +666,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       }>, {
         readonly course: readonly ["create", "read", "update", "delete"];
         readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -232,9 +676,24 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       instructor: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
         readonly course: ["read", "update"];
         readonly progress: ["view"];
+        readonly community: ["moderate"];
+      }>, {
+        readonly course: readonly ["create", "read", "update", "delete"];
+        readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>;
+      moderator: import("better-auth/plugins").Role<import("better-auth/plugins").ExactRoleStatements<{
+        readonly course: ["read"];
+        readonly community: ["moderate"];
       }>, {
         readonly course: readonly ["create", "read", "update", "delete"];
         readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -246,6 +705,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
       }>, {
         readonly course: readonly ["create", "read", "update", "delete"];
         readonly progress: readonly ["view"];
+        readonly community: readonly ["moderate"];
         readonly organization: readonly ["update", "delete"];
         readonly member: readonly ["create", "update", "delete"];
         readonly invitation: readonly ["create", "cancel"];
@@ -255,13 +715,13 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
     };
     creatorRole: string;
     organizationHooks: Hooks;
-  }>, {
+  }>, BetterAuthPlugin, ...BetterAuthPlugin[], BetterAuthPlugin, {
     id: "custom-session";
     version: string;
     hooks: {
       after: {
         matcher: (ctx: import("better-auth").HookEndpointContext) => boolean;
-        handler: (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
           user: {
             id: string;
             createdAt: Date;
@@ -292,7 +752,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
             name: string;
             slug: string;
           }[];
-        }[] | undefined>;
+        }[] | undefined>>;
       }[];
     };
     endpoints: {
@@ -301,7 +761,7 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
         query: import("better-auth").ZodOptional<import("better-auth").ZodObject<{
           disableCookieCache: import("better-auth").ZodOptional<import("better-auth").ZodCoercedBoolean<unknown>>;
           disableRefresh: import("better-auth").ZodOptional<import("better-auth").ZodCoercedBoolean<unknown>>;
-        }, $strip>>;
+        }, import("zod/v4/core").$strip>>;
         metadata: {
           CUSTOM_SESSION: boolean;
           openapi: {
@@ -394,6 +854,13 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
     };
     options: import("better-auth/plugins").CustomSessionPluginOptions | undefined;
   }];
+  hooks: {
+    before: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+      context: {
+        body: Record<string, unknown>;
+      };
+    } | undefined>>;
+  };
   databaseHooks: {
     user: {
       create: {
@@ -412,11 +879,70 @@ declare function createAuth(opts: CreateAuthOptions): import("better-auth").Auth
   };
 }>;
 type Auth = ReturnType<typeof createAuth>;
-declare class BetterAuth implements SessionVerifier, OrgAdmin, SessionAdmin {
+type JSONWebKeySet = {
+  keys: Array<Record<string, unknown>>;
+};
+type PluginApiKey = {
+  id: string;
+  name: string | null;
+  start: string | null;
+  referenceId: string;
+  metadata: unknown;
+  permissions: Record<string, string[]> | null;
+  createdAt: Date;
+  lastRequest: Date | null;
+};
+type PluginApi = {
+  getJwks(): Promise<JSONWebKeySet>;
+  verifyApiKey(input: {
+    body: {
+      key: string;
+    };
+  }): Promise<{
+    valid: boolean;
+    key: PluginApiKey | null;
+  }>;
+  createApiKey(input: {
+    body: {
+      name: string;
+      userId: string;
+      metadata: Record<string, unknown>;
+      permissions: Record<string, string[]>;
+    };
+  }): Promise<PluginApiKey & {
+    key: string;
+  }>;
+  listApiKeys(input: {
+    headers: Headers;
+  }): Promise<{
+    apiKeys: PluginApiKey[];
+  }>;
+  deleteApiKey(input: {
+    body: {
+      keyId: string;
+    };
+    headers: Headers;
+  }): Promise<unknown>;
+};
+declare class BetterAuth implements SessionVerifier, OrgAdmin, SessionAdmin, AccessTokenVerifier, AppAccessAdmin {
   protected auth: Auth;
   protected logger: Logger;
-  constructor(opts: CreateAuthOptions);
+  protected mcp: CreateAuthOptions["mcp"];
+  protected issuer: string;
+  protected jwksCacheKey: {};
+  constructor(opts: CreateAuthOptions, auth?: Auth);
+  protected get pluginApi(): PluginApi;
   handler(request: Request): Promise<Response>;
+  authorizationServerMetadata(request: Request): Promise<Response>;
+  verifyAccess(request: AccessRequest): Promise<AccessGrant | null>;
+  protected verifyAccessToken(authorization: AccessTokenAuthorization, request: AccessRequest): Promise<AccessGrant | null>;
+  protected verifyApiKey(key: string): Promise<AccessGrant | null>;
+  protected sessionUserId(headers: HeaderBag): Promise<string>;
+  listConnectedApps(headers: HeaderBag, orgId: string): Promise<ConnectedApp[]>;
+  revokeConnectedApp(headers: HeaderBag, orgId: string, clientId: string): Promise<void>;
+  listApiKeys(headers: HeaderBag, orgId: string): Promise<ApiKeySummary[]>;
+  createApiKey(input: NewApiKey): Promise<CreatedApiKey>;
+  deleteApiKey(headers: HeaderBag, orgId: string, keyId: string): Promise<void>;
   verify(headers: IncomingHttpHeaders): Promise<ActiveSession | null>;
   /** Stamps the org onto the caller's session row. The 5-minute cookie cache
    *  still holds the pre-stamp session, so callers refresh it client-side with
@@ -433,5 +959,5 @@ declare class BetterAuth implements SessionVerifier, OrgAdmin, SessionAdmin {
   protected resolveMemberId(ctx: MemberWriteContext, userExternalId: string): Promise<string>;
 }
 //#endregion
-export { Auth, BetterAuth, createAuth };
+export { Auth, BetterAuth, buildAuthOptions, createAuth };
 //# sourceMappingURL=better-auth.d.ts.map