@neondatabase/auth 0.1.0-beta.2 → 0.1.0-beta.20

package/dist/{adapter-core-C12KoaiU.d.mts → adapter-core-23fYTUxT.d.mts}

@@ -1,21 +1,54 @@
 import { createAuthClient } from "better-auth/react";
-import * as better_auth_client11 from "better-auth/client";
-import { AuthClient, BetterAuthClientOptions } from "better-auth/client";
-import * as better_auth_client_plugins7 from "better-auth/client/plugins";
-import * as jose0 from "jose";
-import * as better_auth220 from "better-auth";
-import * as _better_fetch_fetch138 from "@better-fetch/fetch";
-import * as nanostores1 from "nanostores";
-import * as better_call0 from "better-call";
+import * as better_auth_client35 from "better-auth/client";
+import { BetterAuthClientOptions, createAuthClient as createAuthClient$1 } from "better-auth/client";
 import * as zod0 from "zod";
+import * as jose2 from "jose";
+import * as better_auth454 from "better-auth";
+import * as _better_fetch_fetch266 from "@better-fetch/fetch";
+import { BetterFetchError as BetterFetchError$1 } from "@better-fetch/fetch";
+import * as better_auth_plugins17 from "better-auth/plugins";
+import * as nanostores7 from "nanostores";
+import * as better_call0 from "better-call";
+import { Invitation, InvitationInput, InvitationStatus, Member, MemberInput, Organization, OrganizationInput, OrganizationRole, Team, TeamInput, TeamMember, TeamMemberInput } from "better-auth/plugins/organization";
+import { JWKOptions, JWSAlgorithms, Jwk, JwtOptions } from "better-auth/plugins/jwt";
+import { AdminOptions, InferAdminRolesFromOption, SessionWithImpersonatedBy, UserWithRole } from "better-auth/plugins/admin";
+import { EmailOTPOptions } from "better-auth/plugins/email-otp";
 
+//#region src/types/index.d.ts
+type BetterAuthInstance = ReturnType<typeof createAuthClient$1<{
+  plugins: SupportedBetterAuthClientPlugins;
+}> | typeof createAuthClient<{
+  plugins: SupportedBetterAuthClientPlugins;
+}>>;
+//#endregion
 //#region src/core/adapter-core.d.ts
 interface NeonAuthAdapterCoreAuthOptions extends Omit<BetterAuthClientOptions, 'plugins'> {}
 declare const supportedBetterAuthClientPlugins: ({
+  id: "anonymous-token";
+  pathMethods: {
+    "/token/anonymous": "GET";
+  };
+  getActions: ($fetch: _better_fetch_fetch266.BetterFetch) => {
+    getAnonymousToken: (fetchOptions?: any) => Promise<{
+      data: {
+        token: string;
+        expires_at: number;
+      };
+      error: null;
+    } | {
+      data: null;
+      error: {
+        message?: string | undefined;
+        status: number;
+        statusText: string;
+      };
+    }>;
+  };
+} | {
   id: "better-auth-client";
-  $InferServerPlugin: ReturnType<(options?: better_auth_client_plugins7.JwtOptions | undefined) => {
+  $InferServerPlugin: ReturnType<(options?: better_auth_plugins17.JwtOptions | undefined) => {
     id: "jwt";
-    options: better_auth_client_plugins7.JwtOptions | undefined;
+    options: better_auth_plugins17.JwtOptions | undefined;
     endpoints: {
       getJwks: better_call0.StrictEndpoint<string, {
         method: "GET";
@@ -95,7 +128,7 @@ declare const supportedBetterAuthClientPlugins: ({
         };
       } & {
         use: any[];
-      }, jose0.JSONWebKeySet>;
+      }, jose2.JSONWebKeySet>;
       getToken: better_call0.StrictEndpoint<"/token", {
         method: "GET";
         requireHeaders: true;
@@ -156,15 +189,15 @@ declare const supportedBetterAuthClientPlugins: ({
           SERVER_ONLY: true;
           $Infer: {
             body: {
-              payload: jose0.JWTPayload;
-              overrideOptions?: better_auth_client_plugins7.JwtOptions | undefined;
+              payload: jose2.JWTPayload;
+              overrideOptions?: better_auth_plugins17.JwtOptions | undefined;
             };
           };
         };
         body: zod0.ZodObject<{
           payload: zod0.ZodRecord<zod0.ZodString, zod0.ZodAny>;
           overrideOptions: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodAny>>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
       } & {
         use: any[];
       }, {
@@ -191,16 +224,16 @@ declare const supportedBetterAuthClientPlugins: ({
         body: zod0.ZodObject<{
           token: zod0.ZodString;
           issuer: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
       } & {
         use: any[];
       }, {
-        payload: (jose0.JWTPayload & Required<Pick<jose0.JWTPayload, "sub" | "aud">>) | null;
+        payload: (jose2.JWTPayload & Required<Pick<jose2.JWTPayload, "sub" | "aud">>) | null;
       }>;
     };
     hooks: {
       after: {
-        matcher(context: better_auth220.HookEndpointContext): boolean;
+        matcher(context: better_auth454.HookEndpointContext): boolean;
         handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
@@ -230,7 +263,7 @@ declare const supportedBetterAuthClientPlugins: ({
   pathMethods: {
     [x: string]: "GET";
   };
-  getActions: ($fetch: _better_fetch_fetch138.BetterFetch) => {
+  getActions: ($fetch: _better_fetch_fetch266.BetterFetch) => {
     jwks: (fetchOptions?: any) => Promise<{
       data: null;
       error: {
@@ -239,7 +272,7 @@ declare const supportedBetterAuthClientPlugins: ({
         statusText: string;
       };
     } | {
-      data: jose0.JSONWebKeySet;
+      data: jose2.JSONWebKeySet;
       error: null;
     }>;
   };
@@ -285,7 +318,7 @@ declare const supportedBetterAuthClientPlugins: ({
                 token: string;
                 ipAddress?: string | null | undefined;
                 userAgent?: string | null | undefined;
-              } & Record<string, unknown>, ctx: better_auth220.GenericEndpointContext | undefined): Promise<void>;
+              } & Record<string, unknown>, ctx: better_auth454.GenericEndpointContext | null): Promise<void>;
             };
           };
         };
@@ -293,8 +326,8 @@ declare const supportedBetterAuthClientPlugins: ({
     };
     hooks: {
       after: {
-        matcher(context: better_auth220.HookEndpointContext): boolean;
-        handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<better_auth_client_plugins7.SessionWithImpersonatedBy[] | undefined>;
+        matcher(context: better_auth454.HookEndpointContext): boolean;
+        handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<better_auth_plugins17.SessionWithImpersonatedBy[] | undefined>;
       }[];
     };
     endpoints: {
@@ -303,12 +336,12 @@ declare const supportedBetterAuthClientPlugins: ({
         body: zod0.ZodObject<{
           userId: zod0.ZodCoercedString<unknown>;
           role: zod0.ZodUnion<readonly [zod0.ZodString, zod0.ZodArray<zod0.ZodString>]>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         requireHeaders: true;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -344,17 +377,17 @@ declare const supportedBetterAuthClientPlugins: ({
       } & {
         use: any[];
       }, {
-        user: better_auth_client_plugins7.UserWithRole;
+        user: better_auth_plugins17.UserWithRole;
       }>;
       getUser: better_call0.StrictEndpoint<"/admin/get-user", {
         method: "GET";
         query: zod0.ZodObject<{
           id: zod0.ZodString;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -400,7 +433,7 @@ declare const supportedBetterAuthClientPlugins: ({
           name: zod0.ZodString;
           role: zod0.ZodOptional<zod0.ZodUnion<readonly [zod0.ZodString, zod0.ZodArray<zod0.ZodString>]>>;
           data: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodAny>>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -437,18 +470,18 @@ declare const supportedBetterAuthClientPlugins: ({
       } & {
         use: any[];
       }, {
-        user: better_auth_client_plugins7.UserWithRole;
+        user: better_auth_plugins17.UserWithRole;
       }>;
       adminUpdateUser: better_call0.StrictEndpoint<"/admin/update-user", {
         method: "POST";
         body: zod0.ZodObject<{
           userId: zod0.ZodCoercedString<unknown>;
           data: zod0.ZodRecord<zod0.ZodAny, zod0.ZodAny>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -477,13 +510,13 @@ declare const supportedBetterAuthClientPlugins: ({
         };
       } & {
         use: any[];
-      }, better_auth_client_plugins7.UserWithRole>;
+      }, better_auth_plugins17.UserWithRole>;
       listUsers: better_call0.StrictEndpoint<"/admin/list-users", {
         method: "GET";
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         query: zod0.ZodObject<{
@@ -515,7 +548,7 @@ declare const supportedBetterAuthClientPlugins: ({
             gte: "gte";
             contains: "contains";
           }>>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -556,7 +589,7 @@ declare const supportedBetterAuthClientPlugins: ({
       } & {
         use: any[];
       }, {
-        users: better_auth_client_plugins7.UserWithRole[];
+        users: better_auth_plugins17.UserWithRole[];
         total: number;
         limit: number | undefined;
         offset: number | undefined;
@@ -568,13 +601,13 @@ declare const supportedBetterAuthClientPlugins: ({
         method: "POST";
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         body: zod0.ZodObject<{
           userId: zod0.ZodCoercedString<unknown>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -605,17 +638,17 @@ declare const supportedBetterAuthClientPlugins: ({
       } & {
         use: any[];
       }, {
-        sessions: better_auth_client_plugins7.SessionWithImpersonatedBy[];
+        sessions: better_auth_plugins17.SessionWithImpersonatedBy[];
       }>;
       unbanUser: better_call0.StrictEndpoint<"/admin/unban-user", {
         method: "POST";
         body: zod0.ZodObject<{
           userId: zod0.ZodCoercedString<unknown>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -661,11 +694,11 @@ declare const supportedBetterAuthClientPlugins: ({
           userId: zod0.ZodCoercedString<unknown>;
           banReason: zod0.ZodOptional<zod0.ZodString>;
           banExpiresIn: zod0.ZodOptional<zod0.ZodNumber>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -709,11 +742,11 @@ declare const supportedBetterAuthClientPlugins: ({
         method: "POST";
         body: zod0.ZodObject<{
           userId: zod0.ZodCoercedString<unknown>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -756,15 +789,7 @@ declare const supportedBetterAuthClientPlugins: ({
           ipAddress?: string | null | undefined;
           userAgent?: string | null | undefined;
         };
-        user: {
-          id: string;
-          createdAt: Date;
-          updatedAt: Date;
-          email: string;
-          emailVerified: boolean;
-          name: string;
-          image?: string | null | undefined;
-        };
+        user: better_auth_plugins17.UserWithRole;
       }>;
       stopImpersonating: better_call0.StrictEndpoint<"/admin/stop-impersonating", {
         method: "POST";
@@ -772,18 +797,18 @@ declare const supportedBetterAuthClientPlugins: ({
       } & {
         use: any[];
       }, {
-        session: better_auth220.Session & Record<string, any>;
-        user: better_auth220.User & Record<string, any>;
+        session: better_auth454.Session & Record<string, any>;
+        user: better_auth454.User & Record<string, any>;
       }>;
       revokeUserSession: better_call0.StrictEndpoint<"/admin/revoke-user-session", {
         method: "POST";
         body: zod0.ZodObject<{
           sessionToken: zod0.ZodString;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -819,11 +844,11 @@ declare const supportedBetterAuthClientPlugins: ({
         method: "POST";
         body: zod0.ZodObject<{
           userId: zod0.ZodCoercedString<unknown>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -859,11 +884,11 @@ declare const supportedBetterAuthClientPlugins: ({
         method: "POST";
         body: zod0.ZodObject<{
           userId: zod0.ZodCoercedString<unknown>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -900,11 +925,11 @@ declare const supportedBetterAuthClientPlugins: ({
         body: zod0.ZodObject<{
           newPassword: zod0.ZodString;
           userId: zod0.ZodCoercedString<unknown>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
           session: {
-            user: better_auth_client_plugins7.UserWithRole;
-            session: better_auth220.Session;
+            user: better_auth_plugins17.UserWithRole;
+            session: better_auth454.Session;
           };
         }>)[];
         metadata: {
@@ -941,13 +966,13 @@ declare const supportedBetterAuthClientPlugins: ({
         body: zod0.ZodIntersection<zod0.ZodObject<{
           userId: zod0.ZodOptional<zod0.ZodCoercedString<unknown>>;
           role: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth220.$strip>, zod0.ZodUnion<readonly [zod0.ZodObject<{
+        }, better_auth454.$strip>, zod0.ZodUnion<readonly [zod0.ZodObject<{
           permission: zod0.ZodRecord<zod0.ZodString, zod0.ZodArray<zod0.ZodString>>;
           permissions: zod0.ZodUndefined;
-        }, better_auth220.$strip>, zod0.ZodObject<{
+        }, better_auth454.$strip>, zod0.ZodObject<{
           permission: zod0.ZodUndefined;
           permissions: zod0.ZodRecord<zod0.ZodString, zod0.ZodArray<zod0.ZodString>>;
-        }, better_auth220.$strip>]>>;
+        }, better_auth454.$strip>]>>;
         metadata: {
           openapi: {
             description: string;
@@ -997,14 +1022,14 @@ declare const supportedBetterAuthClientPlugins: ({
           $Infer: {
             body: ({
               permission: {
-                readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
-                readonly session?: ("list" | "delete" | "revoke")[] | undefined;
+                readonly user?: ("get" | "delete" | "create" | "list" | "set-role" | "ban" | "impersonate" | "set-password" | "update")[] | undefined;
+                readonly session?: ("delete" | "list" | "revoke")[] | undefined;
               };
               permissions?: never | undefined;
             } | {
               permissions: {
-                readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
-                readonly session?: ("list" | "delete" | "revoke")[] | undefined;
+                readonly user?: ("get" | "delete" | "create" | "list" | "set-role" | "ban" | "impersonate" | "set-password" | "update")[] | undefined;
+                readonly session?: ("delete" | "list" | "revoke")[] | undefined;
               };
               permission?: never | undefined;
             }) & {
@@ -1040,6 +1065,7 @@ declare const supportedBetterAuthClientPlugins: ({
       readonly YOU_ARE_NOT_ALLOWED_TO_UPDATE_USERS: "You are not allowed to update users";
       readonly YOU_CANNOT_REMOVE_YOURSELF: "You cannot remove yourself";
       readonly YOU_ARE_NOT_ALLOWED_TO_SET_NON_EXISTENT_VALUE: "You are not allowed to set a non-existent role value";
+      readonly YOU_CANNOT_IMPERSONATE_ADMINS: "You cannot impersonate admins";
     };
     schema: {
       user: {
@@ -1082,14 +1108,14 @@ declare const supportedBetterAuthClientPlugins: ({
     admin: {
       checkRolePermission: <R extends "user" | "admin">(data: ({
         permission: {
-          readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
-          readonly session?: ("list" | "delete" | "revoke")[] | undefined;
+          readonly user?: ("get" | "delete" | "create" | "list" | "set-role" | "ban" | "impersonate" | "set-password" | "update")[] | undefined;
+          readonly session?: ("delete" | "list" | "revoke")[] | undefined;
         };
         permissions?: never | undefined;
       } | {
         permissions: {
-          readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "get" | "update")[] | undefined;
-          readonly session?: ("list" | "delete" | "revoke")[] | undefined;
+          readonly user?: ("get" | "delete" | "create" | "list" | "set-role" | "ban" | "impersonate" | "set-password" | "update")[] | undefined;
+          readonly session?: ("delete" | "list" | "revoke")[] | undefined;
         };
         permission?: never | undefined;
       }) & {
@@ -1103,8 +1129,8 @@ declare const supportedBetterAuthClientPlugins: ({
   };
 } | {
   id: "organization";
-  $InferServerPlugin: better_auth_client11.OrganizationPlugin<{
-    ac: better_auth_client11.AccessControl<{
+  $InferServerPlugin: better_auth_client35.OrganizationPlugin<{
+    ac: better_auth_client35.AccessControl<{
       readonly organization: readonly ["update", "delete"];
       readonly member: readonly ["create", "update", "delete"];
       readonly invitation: readonly ["create", "cancel"];
@@ -1112,9 +1138,9 @@ declare const supportedBetterAuthClientPlugins: ({
       readonly ac: readonly ["create", "read", "update", "delete"];
     }>;
     roles: {
-      admin: better_auth_client11.Role;
-      member: better_auth_client11.Role;
-      owner: better_auth_client11.Role;
+      admin: better_auth_client35.Role;
+      member: better_auth_client35.Role;
+      owner: better_auth_client35.Role;
     };
     teams: {
       enabled: false;
@@ -1122,27 +1148,27 @@ declare const supportedBetterAuthClientPlugins: ({
     schema: {
       organization?: {
         additionalFields?: {
-          [key: string]: better_auth220.DBFieldAttribute;
+          [key: string]: better_auth454.DBFieldAttribute;
         };
       };
       member?: {
         additionalFields?: {
-          [key: string]: better_auth220.DBFieldAttribute;
+          [key: string]: better_auth454.DBFieldAttribute;
         };
       };
       invitation?: {
         additionalFields?: {
-          [key: string]: better_auth220.DBFieldAttribute;
+          [key: string]: better_auth454.DBFieldAttribute;
         };
       };
       team?: {
         additionalFields?: {
-          [key: string]: better_auth220.DBFieldAttribute;
+          [key: string]: better_auth454.DBFieldAttribute;
         };
       };
       organizationRole?: {
         additionalFields?: {
-          [key: string]: better_auth220.DBFieldAttribute;
+          [key: string]: better_auth454.DBFieldAttribute;
         };
       };
     } | undefined;
@@ -1150,7 +1176,7 @@ declare const supportedBetterAuthClientPlugins: ({
       enabled: false;
     };
   }>;
-  getActions: ($fetch: _better_fetch_fetch138.BetterFetch, _$store: better_auth220.ClientStore, co: BetterAuthClientOptions | undefined) => {
+  getActions: ($fetch: _better_fetch_fetch266.BetterFetch, _$store: better_auth454.ClientStore, co: BetterAuthClientOptions | undefined) => {
     $Infer: {
       ActiveOrganization: {
         members: {
@@ -1171,7 +1197,7 @@ declare const supportedBetterAuthClientPlugins: ({
           organizationId: string;
           email: string;
           role: "admin" | "member" | "owner";
-          status: better_auth_client11.InvitationStatus;
+          status: better_auth_client35.InvitationStatus;
           inviterId: string;
           expiresAt: Date;
           createdAt: Date;
@@ -1197,7 +1223,7 @@ declare const supportedBetterAuthClientPlugins: ({
         organizationId: string;
         email: string;
         role: "admin" | "member" | "owner";
-        status: better_auth_client11.InvitationStatus;
+        status: better_auth_client35.InvitationStatus;
         inviterId: string;
         expiresAt: Date;
         createdAt: Date;
@@ -1227,19 +1253,19 @@ declare const supportedBetterAuthClientPlugins: ({
       checkRolePermission: <R extends "admin" | "member" | "owner">(data: ({
         permission: {
           readonly organization?: ("delete" | "update")[] | undefined;
-          readonly member?: ("create" | "delete" | "update")[] | undefined;
-          readonly invitation?: ("create" | "cancel")[] | undefined;
-          readonly team?: ("create" | "delete" | "update")[] | undefined;
-          readonly ac?: ("create" | "delete" | "update" | "read")[] | undefined;
+          readonly member?: ("delete" | "create" | "update")[] | undefined;
+          readonly invitation?: ("cancel" | "create")[] | undefined;
+          readonly team?: ("delete" | "create" | "update")[] | undefined;
+          readonly ac?: ("delete" | "create" | "update" | "read")[] | undefined;
         };
         permissions?: never | undefined;
       } | {
         permissions: {
           readonly organization?: ("delete" | "update")[] | undefined;
-          readonly member?: ("create" | "delete" | "update")[] | undefined;
-          readonly invitation?: ("create" | "cancel")[] | undefined;
-          readonly team?: ("create" | "delete" | "update")[] | undefined;
-          readonly ac?: ("create" | "delete" | "update" | "read")[] | undefined;
+          readonly member?: ("delete" | "create" | "update")[] | undefined;
+          readonly invitation?: ("cancel" | "create")[] | undefined;
+          readonly team?: ("delete" | "create" | "update")[] | undefined;
+          readonly ac?: ("delete" | "create" | "update" | "read")[] | undefined;
         };
         permission?: never | undefined;
       }) & {
@@ -1247,13 +1273,13 @@ declare const supportedBetterAuthClientPlugins: ({
       }) => boolean;
     };
   };
-  getAtoms: ($fetch: _better_fetch_fetch138.BetterFetch) => {
-    $listOrg: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    $activeOrgSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    $activeMemberSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    $activeMemberRoleSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
-    activeOrganization: nanostores1.PreinitializedWritableAtom<{
-      data: better_auth220.Prettify<{
+  getAtoms: ($fetch: _better_fetch_fetch266.BetterFetch) => {
+    $listOrg: nanostores7.PreinitializedWritableAtom<boolean> & object;
+    $activeOrgSignal: nanostores7.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberSignal: nanostores7.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberRoleSignal: nanostores7.PreinitializedWritableAtom<boolean> & object;
+    activeOrganization: nanostores7.PreinitializedWritableAtom<{
+      data: better_auth454.Prettify<{
         id: string;
         name: string;
         slug: string;
@@ -1279,20 +1305,20 @@ declare const supportedBetterAuthClientPlugins: ({
           organizationId: string;
           email: string;
           role: "admin" | "member" | "owner";
-          status: better_auth_client11.InvitationStatus;
+          status: better_auth_client35.InvitationStatus;
           inviterId: string;
           expiresAt: Date;
           createdAt: Date;
         }[];
       }> | null;
-      error: null | _better_fetch_fetch138.BetterFetchError;
+      error: null | _better_fetch_fetch266.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
-        query?: better_auth220.SessionQueryParams;
+        query?: better_auth454.SessionQueryParams;
       } | undefined) => Promise<void>;
     }> & object;
-    listOrganizations: nanostores1.PreinitializedWritableAtom<{
+    listOrganizations: nanostores7.PreinitializedWritableAtom<{
       data: {
         id: string;
         name: string;
@@ -1301,14 +1327,14 @@ declare const supportedBetterAuthClientPlugins: ({
         logo?: string | null | undefined | undefined;
         metadata?: any;
       }[] | null;
-      error: null | _better_fetch_fetch138.BetterFetchError;
+      error: null | _better_fetch_fetch266.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
-        query?: better_auth220.SessionQueryParams;
+        query?: better_auth454.SessionQueryParams;
       } | undefined) => Promise<void>;
     }> & object;
-    activeMember: nanostores1.PreinitializedWritableAtom<{
+    activeMember: nanostores7.PreinitializedWritableAtom<{
       data: {
         id: string;
         organizationId: string;
@@ -1316,22 +1342,22 @@ declare const supportedBetterAuthClientPlugins: ({
         role: string;
         createdAt: Date;
       } | null;
-      error: null | _better_fetch_fetch138.BetterFetchError;
+      error: null | _better_fetch_fetch266.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
-        query?: better_auth220.SessionQueryParams;
+        query?: better_auth454.SessionQueryParams;
       } | undefined) => Promise<void>;
     }> & object;
-    activeMemberRole: nanostores1.PreinitializedWritableAtom<{
+    activeMemberRole: nanostores7.PreinitializedWritableAtom<{
       data: {
         role: string;
       } | null;
-      error: null | _better_fetch_fetch138.BetterFetchError;
+      error: null | _better_fetch_fetch266.BetterFetchError;
       isPending: boolean;
       isRefetching: boolean;
       refetch: (queryParams?: {
-        query?: better_auth220.SessionQueryParams;
+        query?: better_auth454.SessionQueryParams;
       } | undefined) => Promise<void>;
     }> & object;
   };
@@ -1357,13 +1383,13 @@ declare const supportedBetterAuthClientPlugins: ({
   })[];
 } | {
   id: "email-otp";
-  $InferServerPlugin: {
+  $InferServerPlugin: ReturnType<(options: better_auth_plugins17.EmailOTPOptions) => {
     id: "email-otp";
-    init(ctx: better_auth220.AuthContext): {
+    init(ctx: better_auth454.AuthContext): {
       options: {
         emailVerification: {
           sendVerificationEmail(data: {
-            user: better_auth220.User;
+            user: better_auth454.User;
             url: string;
             token: string;
           }, request: Request | undefined): Promise<void>;
@@ -1380,7 +1406,7 @@ declare const supportedBetterAuthClientPlugins: ({
             "email-verification": "email-verification";
             "forget-password": "forget-password";
           }>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -1418,7 +1444,7 @@ declare const supportedBetterAuthClientPlugins: ({
             "email-verification": "email-verification";
             "forget-password": "forget-password";
           }>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           SERVER_ONLY: true;
           openapi: {
@@ -1450,7 +1476,7 @@ declare const supportedBetterAuthClientPlugins: ({
             "email-verification": "email-verification";
             "forget-password": "forget-password";
           }>;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           SERVER_ONLY: true;
           openapi: {
@@ -1495,7 +1521,7 @@ declare const supportedBetterAuthClientPlugins: ({
             "forget-password": "forget-password";
           }>;
           otp: zod0.ZodString;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -1529,7 +1555,7 @@ declare const supportedBetterAuthClientPlugins: ({
         body: zod0.ZodObject<{
           email: zod0.ZodString;
           otp: zod0.ZodString;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1595,7 +1621,7 @@ declare const supportedBetterAuthClientPlugins: ({
         body: zod0.ZodObject<{
           email: zod0.ZodString;
           otp: zod0.ZodString;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -1642,7 +1668,7 @@ declare const supportedBetterAuthClientPlugins: ({
         method: "POST";
         body: zod0.ZodObject<{
           email: zod0.ZodString;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -1678,7 +1704,7 @@ declare const supportedBetterAuthClientPlugins: ({
           email: zod0.ZodString;
           otp: zod0.ZodString;
           password: zod0.ZodString;
-        }, better_auth220.$strip>;
+        }, better_auth454.$strip>;
         metadata: {
           openapi: {
             operationId: string;
@@ -1710,7 +1736,7 @@ declare const supportedBetterAuthClientPlugins: ({
     };
     hooks: {
       after: {
-        matcher(context: better_auth220.HookEndpointContext): boolean;
+        matcher(context: better_auth454.HookEndpointContext): boolean;
         handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
@@ -1736,496 +1762,11 @@ declare const supportedBetterAuthClientPlugins: ({
       window: number;
       max: number;
     })[];
-  };
-  atomListeners: {
-    matcher: (path: string) => path is "/email-otp/verify-email" | "/sign-in/email-otp";
-    signal: "$sessionSignal";
-  }[];
-} | {
-  id: "anonymous";
-  $InferServerPlugin: ReturnType<(options?: better_auth_client_plugins7.AnonymousOptions | undefined) => {
-    id: "anonymous";
-    endpoints: {
-      signInAnonymous: better_call0.StrictEndpoint<"/sign-in/anonymous", {
-        method: "POST";
-        metadata: {
-          openapi: {
-            description: string;
-            responses: {
-              200: {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        user: {
-                          $ref: string;
-                        };
-                        session: {
-                          $ref: string;
-                        };
-                      };
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        token: string;
-        user: {
-          id: string;
-          email: string;
-          emailVerified: boolean;
-          name: string;
-          createdAt: Date;
-          updatedAt: Date;
-        };
-      } | null>;
-    };
-    hooks: {
-      after: {
-        matcher(ctx: better_auth220.HookEndpointContext): boolean;
-        handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
-      }[];
-    };
-    schema: {
-      user: {
-        fields: {
-          isAnonymous: {
-            type: "boolean";
-            required: false;
-            input: false;
-            defaultValue: false;
-          };
-        };
-      };
-    };
-    $ERROR_CODES: {
-      readonly INVALID_EMAIL_FORMAT: "Email was not generated in a valid format";
-      readonly FAILED_TO_CREATE_USER: "Failed to create user";
-      readonly COULD_NOT_CREATE_SESSION: "Could not create session";
-      readonly ANONYMOUS_USERS_CANNOT_SIGN_IN_AGAIN_ANONYMOUSLY: "Anonymous users cannot sign in again anonymously";
-    };
-  }>;
-  pathMethods: {
-    "/sign-in/anonymous": "POST";
-  };
-  atomListeners: {
-    matcher: (path: string) => path is "/sign-in/anonymous";
-    signal: "$sessionSignal";
-  }[];
-} | {
-  id: "phoneNumber";
-  $InferServerPlugin: ReturnType<(options?: better_auth_client_plugins7.PhoneNumberOptions | undefined) => {
-    id: "phone-number";
-    hooks: {
-      before: {
-        matcher: (ctx: better_auth220.HookEndpointContext) => boolean;
-        handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<never>;
-      }[];
-    };
-    endpoints: {
-      signInPhoneNumber: better_call0.StrictEndpoint<"/sign-in/phone-number", {
-        method: "POST";
-        body: zod0.ZodObject<{
-          phoneNumber: zod0.ZodString;
-          password: zod0.ZodString;
-          rememberMe: zod0.ZodOptional<zod0.ZodBoolean>;
-        }, better_auth220.$strip>;
-        metadata: {
-          openapi: {
-            summary: string;
-            description: string;
-            responses: {
-              200: {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        user: {
-                          $ref: string;
-                        };
-                        session: {
-                          $ref: string;
-                        };
-                      };
-                    };
-                  };
-                };
-              };
-              400: {
-                description: string;
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        token: string;
-        user: better_auth_client_plugins7.UserWithPhoneNumber;
-      }>;
-      sendPhoneNumberOTP: better_call0.StrictEndpoint<"/phone-number/send-otp", {
-        method: "POST";
-        body: zod0.ZodObject<{
-          phoneNumber: zod0.ZodString;
-        }, better_auth220.$strip>;
-        metadata: {
-          openapi: {
-            summary: string;
-            description: string;
-            responses: {
-              200: {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        message: {
-                          type: string;
-                        };
-                      };
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        message: string;
-      }>;
-      verifyPhoneNumber: better_call0.StrictEndpoint<"/phone-number/verify", {
-        method: "POST";
-        body: zod0.ZodObject<{
-          phoneNumber: zod0.ZodString;
-          code: zod0.ZodString;
-          disableSession: zod0.ZodOptional<zod0.ZodBoolean>;
-          updatePhoneNumber: zod0.ZodOptional<zod0.ZodBoolean>;
-        }, better_auth220.$strip>;
-        metadata: {
-          openapi: {
-            summary: string;
-            description: string;
-            responses: {
-              "200": {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        status: {
-                          type: string;
-                          description: string;
-                          enum: boolean[];
-                        };
-                        token: {
-                          type: string;
-                          nullable: boolean;
-                          description: string;
-                        };
-                        user: {
-                          type: string;
-                          nullable: boolean;
-                          properties: {
-                            id: {
-                              type: string;
-                              description: string;
-                            };
-                            email: {
-                              type: string;
-                              format: string;
-                              nullable: boolean;
-                              description: string;
-                            };
-                            emailVerified: {
-                              type: string;
-                              nullable: boolean;
-                              description: string;
-                            };
-                            name: {
-                              type: string;
-                              nullable: boolean;
-                              description: string;
-                            };
-                            image: {
-                              type: string;
-                              format: string;
-                              nullable: boolean;
-                              description: string;
-                            };
-                            phoneNumber: {
-                              type: string;
-                              description: string;
-                            };
-                            phoneNumberVerified: {
-                              type: string;
-                              description: string;
-                            };
-                            createdAt: {
-                              type: string;
-                              format: string;
-                              description: string;
-                            };
-                            updatedAt: {
-                              type: string;
-                              format: string;
-                              description: string;
-                            };
-                          };
-                          required: string[];
-                          description: string;
-                        };
-                      };
-                      required: string[];
-                    };
-                  };
-                };
-              };
-              400: {
-                description: string;
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        status: boolean;
-        token: string;
-        user: better_auth_client_plugins7.UserWithPhoneNumber;
-      } | {
-        status: boolean;
-        token: null;
-        user: better_auth_client_plugins7.UserWithPhoneNumber;
-      }>;
-      requestPasswordResetPhoneNumber: better_call0.StrictEndpoint<"/phone-number/request-password-reset", {
-        method: "POST";
-        body: zod0.ZodObject<{
-          phoneNumber: zod0.ZodString;
-        }, better_auth220.$strip>;
-        metadata: {
-          openapi: {
-            description: string;
-            responses: {
-              "200": {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        status: {
-                          type: string;
-                          description: string;
-                          enum: boolean[];
-                        };
-                      };
-                      required: string[];
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        status: boolean;
-      }>;
-      resetPasswordPhoneNumber: better_call0.StrictEndpoint<"/phone-number/reset-password", {
-        method: "POST";
-        body: zod0.ZodObject<{
-          otp: zod0.ZodString;
-          phoneNumber: zod0.ZodString;
-          newPassword: zod0.ZodString;
-        }, better_auth220.$strip>;
-        metadata: {
-          openapi: {
-            description: string;
-            responses: {
-              "200": {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        status: {
-                          type: string;
-                          description: string;
-                          enum: boolean[];
-                        };
-                      };
-                      required: string[];
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        status: boolean;
-      }>;
-    };
-    schema: {
-      user: {
-        fields: {
-          phoneNumber: {
-            type: "string";
-            required: false;
-            unique: true;
-            sortable: true;
-            returned: true;
-          };
-          phoneNumberVerified: {
-            type: "boolean";
-            required: false;
-            returned: true;
-            input: false;
-          };
-        };
-      };
-    };
-    rateLimit: {
-      pathMatcher(path: string): boolean;
-      window: number;
-      max: number;
-    }[];
-    $ERROR_CODES: {
-      readonly INVALID_PHONE_NUMBER: "Invalid phone number";
-      readonly PHONE_NUMBER_EXIST: "Phone number already exists";
-      readonly PHONE_NUMBER_NOT_EXIST: "phone number isn't registered";
-      readonly INVALID_PHONE_NUMBER_OR_PASSWORD: "Invalid phone number or password";
-      readonly UNEXPECTED_ERROR: "Unexpected error";
-      readonly OTP_NOT_FOUND: "OTP not found";
-      readonly OTP_EXPIRED: "OTP expired";
-      readonly INVALID_OTP: "Invalid OTP";
-      readonly PHONE_NUMBER_NOT_VERIFIED: "Phone number not verified";
-      readonly PHONE_NUMBER_CANNOT_BE_UPDATED: "Phone number cannot be updated";
-      readonly SEND_OTP_NOT_IMPLEMENTED: "sendOTP not implemented";
-      readonly TOO_MANY_ATTEMPTS: "Too many attempts";
-    };
   }>;
   atomListeners: {
-    matcher(path: string): path is "/phone-number/verify" | "/sign-in/phone-number" | "/phone-number/update";
+    matcher: (path: string) => path is "/email-otp/verify-email" | "/sign-in/email-otp";
     signal: "$sessionSignal";
   }[];
-} | {
-  id: "magic-link";
-  $InferServerPlugin: {
-    id: "magic-link";
-    endpoints: {
-      signInMagicLink: better_call0.StrictEndpoint<"/sign-in/magic-link", {
-        method: "POST";
-        requireHeaders: true;
-        body: zod0.ZodObject<{
-          email: zod0.ZodEmail;
-          name: zod0.ZodOptional<zod0.ZodString>;
-          callbackURL: zod0.ZodOptional<zod0.ZodString>;
-          newUserCallbackURL: zod0.ZodOptional<zod0.ZodString>;
-          errorCallbackURL: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth220.$strip>;
-        metadata: {
-          openapi: {
-            operationId: string;
-            description: string;
-            responses: {
-              200: {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        status: {
-                          type: string;
-                        };
-                      };
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        status: boolean;
-      }>;
-      magicLinkVerify: better_call0.StrictEndpoint<"/magic-link/verify", {
-        method: "GET";
-        query: zod0.ZodObject<{
-          token: zod0.ZodString;
-          callbackURL: zod0.ZodOptional<zod0.ZodString>;
-          errorCallbackURL: zod0.ZodOptional<zod0.ZodString>;
-          newUserCallbackURL: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth220.$strip>;
-        use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
-        requireHeaders: true;
-        metadata: {
-          openapi: {
-            operationId: string;
-            description: string;
-            responses: {
-              200: {
-                description: string;
-                content: {
-                  "application/json": {
-                    schema: {
-                      type: "object";
-                      properties: {
-                        session: {
-                          $ref: string;
-                        };
-                        user: {
-                          $ref: string;
-                        };
-                      };
-                    };
-                  };
-                };
-              };
-            };
-          };
-        };
-      } & {
-        use: any[];
-      }, {
-        token: string;
-        user: {
-          id: string;
-          email: string;
-          emailVerified: boolean;
-          name: string;
-          image: string | null | undefined;
-          createdAt: Date;
-          updatedAt: Date;
-        };
-      }>;
-    };
-    rateLimit: {
-      pathMatcher(path: string): boolean;
-      window: number;
-      max: number;
-    }[];
-  };
 })[];
 type SupportedBetterAuthClientPlugins = typeof supportedBetterAuthClientPlugins;
 declare abstract class NeonAuthAdapterCore {
@@ -2240,8 +1781,15 @@ declare abstract class NeonAuthAdapterCore {
    * See CLAUDE.md for architecture details and API mappings.
    */
   constructor(betterAuthClientOptions: NeonAuthAdapterCoreAuthOptions);
-  abstract getBetterAuthInstance?(): AuthClient<BetterAuthClientOptions> | ReturnType<typeof createAuthClient>;
-  abstract getJWTToken(): Promise<string | null>;
+  abstract getBetterAuthInstance(): BetterAuthInstance;
+  /**
+   * Get JWT token for authenticated or anonymous access.
+   * Single source of truth for token retrieval logic.
+   *
+   * @param allowAnonymous - When true, fetches anonymous token if no session exists
+   * @returns JWT token string or null if unavailable
+   */
+  getJWTToken(allowAnonymous: boolean): Promise<string | null>;
 }
 //#endregion
-export { NeonAuthAdapterCoreAuthOptions as n, SupportedBetterAuthClientPlugins as r, NeonAuthAdapterCore as t };
+export { TeamInput as C, UserWithRole as E, Team as S, TeamMemberInput as T, MemberInput as _, BetterAuthInstance as a, OrganizationRole as b, InferAdminRolesFromOption as c, InvitationStatus as d, JWKOptions as f, Member as g, JwtOptions as h, AdminOptions as i, Invitation as l, Jwk as m, NeonAuthAdapterCoreAuthOptions as n, BetterFetchError$1 as o, JWSAlgorithms as p, SupportedBetterAuthClientPlugins as r, EmailOTPOptions as s, NeonAuthAdapterCore as t, InvitationInput as u, Organization as v, TeamMember as w, SessionWithImpersonatedBy as x, OrganizationInput as y };