@nextsparkjs/core 0.1.0-beta.75 → 0.1.0-beta.76

package/dist/templates/app/(auth)/reset-password/page.tsx

@@ -142,7 +142,7 @@ function ResetPasswordContent() {
               placeholder="Create a strong password"
               showRequirements={true}
               password={password || ""}
-              data-cy={sel('auth.resetPassword.password')}
+              data-cy={sel('auth.resetPassword.passwordInput')}
             />
             {errors.password && (
               <p className="text-sm text-destructive">{errors.password.message}</p>
@@ -156,7 +156,7 @@ function ResetPasswordContent() {
               id="confirmPassword"
               autoComplete="new-password"
               placeholder="Confirm your new password"
-              data-cy={sel('auth.resetPassword.confirmPassword')}
+              data-cy={sel('auth.resetPassword.confirmInput')}
             />
             {errors.confirmPassword && (
               <p className="text-sm text-destructive">{errors.confirmPassword.message}</p>
@@ -167,7 +167,7 @@ function ResetPasswordContent() {
             type="submit"
             disabled={loading || !token}
             className="w-full"
-            data-cy={sel('auth.resetPassword.submitButton')}
+            data-cy={sel('auth.resetPassword.submit')}
           >
             {loading ? (
               <>
@@ -184,7 +184,7 @@ function ResetPasswordContent() {
           <Link
             href="/login"
             className="text-sm text-primary hover:underline"
-            data-cy={sel('auth.resetPassword.backToLogin')}
+            data-cy={sel('auth.resetPassword.back')}
           >
             Back to Login
           </Link>

package/dist/templates/app/(auth)/verify-email/page.tsx

@@ -116,7 +116,7 @@ function VerifyEmailContent() {
 
   if (status === 'loading') {
     return (
-      <div className="space-y-4" data-cy={sel('auth.verifyEmail.container')}>
+      <div className="space-y-4" data-cy={sel('auth.verifyEmail.loading')}>
         <div className="text-center">
           <h2 className="text-xl font-semibold">Verifying Email</h2>
           <p className="text-sm text-muted-foreground mt-2">Please wait while we verify your email address</p>
@@ -130,7 +130,7 @@ function VerifyEmailContent() {
 
   if (status === 'success') {
     return (
-      <div className="space-y-4" data-cy={sel('auth.verifyEmail.successMessage')}>
+      <div className="space-y-4" data-cy={sel('auth.verifyEmail.success')}>
         <div className="text-center">
           <div className="flex justify-center mb-2">
             <CheckCircle className="h-12 w-12 text-primary" />
@@ -148,7 +148,7 @@ function VerifyEmailContent() {
   }
 
   return (
-    <div className="space-y-4">
+    <div className="space-y-4" data-cy={sel('auth.verifyEmail.error')}>
       <div className="text-center">
         <div className="flex justify-center mb-2">
           <AlertCircle className="h-12 w-12 text-destructive" />
@@ -157,15 +157,15 @@ function VerifyEmailContent() {
         <p className="text-sm text-muted-foreground mt-2">We couldn&apos;t verify your email address</p>
       </div>
       {error && (
-        <Alert variant="destructive" data-cy={sel('auth.verifyEmail.error')}>
+        <Alert variant="destructive" data-cy={sel('auth.verifyEmail.errorMessage')}>
           <AlertDescription>{error}</AlertDescription>
         </Alert>
       )}
       <div className="flex gap-2">
-        <Button onClick={() => router.push('/signup')} variant="outline" className="flex-1">
+        <Button onClick={() => router.push('/signup')} variant="outline" className="flex-1" data-cy={sel('auth.verifyEmail.backSignup')}>
           Back to Sign Up
         </Button>
-        <Button onClick={() => router.push('/login')} className="flex-1">
+        <Button onClick={() => router.push('/login')} className="flex-1" data-cy={sel('auth.verifyEmail.goLogin')}>
           Go to Login
         </Button>
       </div>

package/dist/templates/app/(public)/[...slug]/page.tsx

@@ -45,8 +45,7 @@ function getEntityConfigs(): Record<string, EntityConfig> {
   const registry = getEntityRegistry()
   const configs: Record<string, EntityConfig> = {}
   for (const [key, entry] of Object.entries(registry)) {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    configs[key] = (entry as any).config as EntityConfig
+    configs[key] = entry.config as EntityConfig
   }
   return configs
 }

package/dist/templates/app/(public)/docs/[section]/[page]/page.tsx

@@ -16,7 +16,7 @@ interface DocsPageProps {
 }
 
 export async function generateStaticParams() {
-  const params: Array<{ section: string; page: string }> = []
+  const params = []
 
   // Generate params for public docs only
   for (const section of DOCS_REGISTRY.public) {

package/dist/templates/app/api/csp-report/route.ts

@@ -1,12 +1,34 @@
 import { randomUUID } from 'node:crypto';
 import { NextRequest, NextResponse } from 'next/server';
 
+// Dynamic import for rate limiting - graceful fallback if not available
+let checkDistributedRateLimit: ((id: string, tier: string) => Promise<{ allowed: boolean; limit: number; remaining: number; resetTime: number; retryAfter?: number }>) | null = null;
+let createRateLimitErrorResponse: ((result: { allowed: boolean; limit: number; remaining: number; resetTime: number; retryAfter?: number }) => NextResponse) | null = null;
+
+// Try to load rate limiting functions
+try {
+  const rateLimitModule = require('@nextsparkjs/core/lib/api');
+  checkDistributedRateLimit = rateLimitModule.checkDistributedRateLimit;
+  createRateLimitErrorResponse = rateLimitModule.createRateLimitErrorResponse;
+} catch {
+  // Rate limiting not available - will skip rate limit checks
+  console.warn('[CSP Report] Rate limiting not available - running without rate limits');
+}
+
 /**
  * CSP Violation Report Endpoint
  *
  * Receives Content-Security-Policy violation reports from browsers.
  * Reports are logged for monitoring and debugging CSP issues.
  *
+ * Rate limiting: Uses 'api' tier (100 requests/minute per IP) to prevent abuse.
+ * Falls back gracefully if rate limiting is not available.
+ *
+ * NOTE: This file exists in both apps/dev/app/api/csp-report/ and
+ * packages/core/templates/app/api/csp-report/. The template version
+ * is used when creating new projects from the core package.
+ * Changes should be synchronized between both files.
+ *
  * @see https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP#violation_report_syntax
  */
 
@@ -32,8 +54,52 @@ const getAllowedOrigin = () => {
   return process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000';
 };
 
+/**
+ * Get client IP address from request headers.
+ * Handles various proxy scenarios (X-Forwarded-For, X-Real-IP, etc.)
+ */
+function getClientIp(request: NextRequest): string {
+  const forwardedFor = request.headers.get('x-forwarded-for');
+  if (forwardedFor) {
+    const ips = forwardedFor.split(',').map(ip => ip.trim());
+    if (ips[0]) return ips[0];
+  }
+  const realIp = request.headers.get('x-real-ip');
+  if (realIp) return realIp;
+  const cfIp = request.headers.get('cf-connecting-ip');
+  if (cfIp) return cfIp;
+  return 'unknown';
+}
+
 export async function POST(request: NextRequest) {
   const requestId = randomUUID().slice(0, 8);
+  let rateLimitHeaders: Record<string, string> = {};
+
+  // Rate limiting: 100 requests per minute per IP (api tier)
+  // Skip if rate limiting is not available
+  if (checkDistributedRateLimit && createRateLimitErrorResponse) {
+    try {
+      const clientIp = getClientIp(request);
+      const rateLimitResult = await checkDistributedRateLimit(`csp-report:ip:${clientIp}`, 'api');
+
+      if (!rateLimitResult.allowed) {
+        console.warn(`[CSP Report ${requestId}] Rate limit exceeded for IP: ${clientIp}`);
+        return createRateLimitErrorResponse(rateLimitResult);
+      }
+
+      // Store rate limit headers to include in response
+      rateLimitHeaders = {
+        'X-RateLimit-Limit': rateLimitResult.limit.toString(),
+        'X-RateLimit-Remaining': rateLimitResult.remaining.toString(),
+        'X-RateLimit-Reset': rateLimitResult.resetTime.toString(),
+      };
+    } catch (rateLimitError) {
+      // Log but continue without rate limiting
+      console.warn(`[CSP Report ${requestId}] Rate limit check failed, continuing without:`, {
+        error: rateLimitError instanceof Error ? rateLimitError.message : 'Unknown error',
+      });
+    }
+  }
 
   try {
     const contentType = request.headers.get('content-type') || '';
@@ -41,7 +107,7 @@ export async function POST(request: NextRequest) {
     // CSP reports are sent as application/csp-report or application/json
     if (!contentType.includes('application/csp-report') && !contentType.includes('application/json')) {
       console.warn(`[CSP Report ${requestId}] Invalid content-type: ${contentType}`);
-      return new NextResponse('Invalid content type', { status: 400 });
+      return new Response('Invalid content type', { status: 400 });
     }
 
     let rawBody: string | undefined;
@@ -54,7 +120,7 @@ export async function POST(request: NextRequest) {
         console.warn(`[CSP Report ${requestId}] Invalid report format - missing csp-report key`, {
           bodyPreview: rawBody.slice(0, 200),
         });
-        return new NextResponse('Invalid report format', { status: 400 });
+        return new Response('Invalid report format', { status: 400 });
       }
 
       // Log the violation for monitoring
@@ -73,14 +139,17 @@ export async function POST(request: NextRequest) {
       });
 
       // Return 204 No Content - browsers don't expect a response body
-      return new NextResponse(null, { status: 204 });
+      return new Response(null, {
+        status: 204,
+        headers: rateLimitHeaders,
+      });
     } catch (parseError) {
       console.error(`[CSP Report ${requestId}] JSON parse error:`, {
         error: parseError instanceof Error ? parseError.message : 'Unknown error',
         bodyPreview: rawBody?.slice(0, 200),
       });
       // Still return 204 to not break browser behavior
-      return new NextResponse(null, { status: 204 });
+      return new Response(null, { status: 204 });
     }
   } catch (error) {
     console.error(`[CSP Report ${requestId}] Unexpected error:`, {
@@ -88,14 +157,14 @@ export async function POST(request: NextRequest) {
       stack: error instanceof Error ? error.stack : undefined,
     });
     // Still return 204 to not break browser behavior
-    return new NextResponse(null, { status: 204 });
+    return new Response(null, { status: 204 });
   }
 }
 
 // Handle preflight requests for CORS
 // Restrict to same origin instead of allowing all origins
 export async function OPTIONS() {
-  return new NextResponse(null, {
+  return new Response(null, {
     status: 204,
     headers: {
       'Access-Control-Allow-Origin': getAllowedOrigin(),

package/dist/templates/app/api/devtools/config/entities/route.ts

@@ -1,13 +1,6 @@
-import { getTypedSession } from "@nextsparkjs/core/lib/auth";
+import { auth } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
-import { getEntityRegistry } from "@nextsparkjs/core/lib/entities/queries";
-import type { EntityConfig, ChildEntityDefinition } from "@nextsparkjs/core/lib/entities/types";
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
-
-// Type guard to check if entity is a full EntityConfig
-function isEntityConfig(entity: EntityConfig | ChildEntityDefinition): entity is EntityConfig {
-  return 'slug' in entity
-}
+import { ENTITY_REGISTRY } from "@nextsparkjs/registries/entity-registry";
 
 /**
  * Entity information structure
@@ -30,8 +23,11 @@ interface EntityInfo {
     label?: string;
     required?: boolean;
   }[];
-  // Note: Permissions are now defined centrally in permissions.config.ts
-  // Use PermissionService to query entity permissions
+  // Permissions are now optional in entity config (centralized in permissions.config.ts)
+  permissions?: {
+    actions: Array<{ action: string; label: string; description?: string }>;
+    customActions?: Array<{ action: string; label: string; description?: string }>;
+  };
 }
 
 /**
@@ -40,10 +36,10 @@ interface EntityInfo {
  * Returns entity registry information
  * Only accessible to developer role
  */
-export const GET = withRateLimitTier(async (request: Request) => {
+export async function GET(request: Request) {
   try {
     // Verify developer role
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({ headers: request.headers });
 
     if (!session?.user || session.user.role !== "developer") {
       return NextResponse.json(
@@ -57,12 +53,9 @@ export const GET = withRateLimitTier(async (request: Request) => {
 
     // Build entity info array
     const entities: EntityInfo[] = [];
-    const registry = getEntityRegistry();
 
-    for (const [, entry] of Object.entries(registry)) {
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      const config = (entry as any).config;
-      if (!isEntityConfig(config)) continue;
+    for (const [, entry] of Object.entries(ENTITY_REGISTRY)) {
+      const config = entry.config;
 
       entities.push({
         slug: config.slug,
@@ -82,7 +75,6 @@ export const GET = withRateLimitTier(async (request: Request) => {
           label: field.label,
           required: field.required,
         })) || [],
-        // Note: Permissions are now centralized in permissions.config.ts
       });
     }
 
@@ -113,4 +105,4 @@ export const GET = withRateLimitTier(async (request: Request) => {
       { status: 500 }
     );
   }
-}, 'read');
+}

package/dist/templates/app/api/devtools/config/theme/route.ts

@@ -1,7 +1,6 @@
-import { getTypedSession } from "@nextsparkjs/core/lib/auth";
+import { auth } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
 import { ThemeService } from "@nextsparkjs/core/lib/services/theme.service";
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
 
 /**
  * GET /api/devtools/config/theme
@@ -9,10 +8,10 @@ import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
  * Returns current theme configuration
  * Only accessible to developer role
  */
-export const GET = withRateLimitTier(async (request: Request) => {
+export async function GET(request: Request) {
   try {
     // Verify developer role
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({ headers: request.headers });
 
     if (!session?.user || session.user.role !== "developer") {
       return NextResponse.json(
@@ -64,4 +63,4 @@ export const GET = withRateLimitTier(async (request: Request) => {
       { status: 500 }
     );
   }
-}, 'read');
+}

package/dist/templates/app/api/devtools/tests/[...path]/route.ts

@@ -1,9 +1,8 @@
-import { getTypedSession } from "@nextsparkjs/core/lib/auth";
+import { auth } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
 import { readFile, stat } from "fs/promises";
 import { join } from "path";
 import matter from "gray-matter";
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
 
 /**
  * GET /api/devtools/tests/[...path]
@@ -13,13 +12,13 @@ import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
  *
  * @param path - Array of path segments (e.g., ['auth', 'login.md'])
  */
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: Request,
   { params }: { params: Promise<{ path: string[] }> }
-) => {
+) {
   try {
     // Verify developer role
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({ headers: request.headers });
 
     if (!session?.user || session.user.role !== "developer") {
       return NextResponse.json(
@@ -128,4 +127,4 @@ export const GET = withRateLimitTier(async (
       { status: 500 }
     );
   }
-}, 'read');
+}

package/dist/templates/app/api/devtools/tests/route.ts

@@ -1,8 +1,7 @@
-import { getTypedSession } from "@nextsparkjs/core/lib/auth";
+import { auth } from "@nextsparkjs/core/lib/auth";
 import { NextResponse } from "next/server";
 import { readdir, stat } from "fs/promises";
 import { join } from "path";
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
 
 /**
  * File tree node structure
@@ -59,10 +58,10 @@ async function buildFileTree(dirPath: string, basePath: string): Promise<FileTre
  * Returns file tree structure of test documentation files
  * Only accessible to developer role
  */
-export const GET = withRateLimitTier(async (request: Request) => {
+export async function GET(request: Request) {
   try {
     // Verify developer role
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({ headers: request.headers });
 
     if (!session?.user || session.user.role !== "developer") {
       return NextResponse.json(
@@ -132,4 +131,4 @@ export const GET = withRateLimitTier(async (request: Request) => {
       { status: 500 }
     );
   }
-}, 'read');
+}

package/dist/templates/app/api/health/route.ts

@@ -1,13 +1,11 @@
 import { queryWithRLS } from "@nextsparkjs/core/lib/db";
-import { withRateLimitTier } from "@nextsparkjs/core/lib/api/rate-limit";
-import { NextResponse } from "next/server";
 
-export const GET = withRateLimitTier(async () => {
+export async function GET() {
   try {
     // Test database connection
     await queryWithRLS('SELECT 1');
     
-    return NextResponse.json({
+    return Response.json({ 
       status: 'healthy',
       timestamp: new Date().toISOString(),
       services: {
@@ -17,7 +15,7 @@ export const GET = withRateLimitTier(async () => {
     });
   } catch (error) {
     console.error('Health check failed:', error);
-    return NextResponse.json({
+    return Response.json({ 
       status: 'unhealthy',
       timestamp: new Date().toISOString(),
       error: 'Database connection failed',
@@ -27,5 +25,5 @@ export const GET = withRateLimitTier(async () => {
       }
     }, { status: 503 });
   }
-}, 'read');
+}
 

package/dist/templates/app/api/internal/user-metadata/route.ts

@@ -1,9 +1,8 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { MetaService } from '@nextsparkjs/core/lib/services/meta.service'
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit'
 
 // Endpoint interno para crear metadata default después del signup
-export const POST = withRateLimitTier(async (req: NextRequest) => {
+export async function POST(req: NextRequest) {
   try {
     const body = await req.json()
     const { userId, metadata } = body
@@ -34,4 +33,4 @@ export const POST = withRateLimitTier(async (req: NextRequest) => {
       error: 'Internal server error'
     }, { status: 500 })
   }
-}, 'write');
+}

package/dist/templates/app/api/superadmin/subscriptions/route.ts

@@ -1,7 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { getTypedSession } from '@nextsparkjs/core/lib/auth';
+import { auth } from '@nextsparkjs/core/lib/auth';
 import { queryWithRLS } from '@nextsparkjs/core/lib/db';
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
 
 interface SubscriptionResult {
   id: string;
@@ -52,10 +51,12 @@ interface PlanDistribution {
  * Retrieves all subscriptions with stats for superadmin overview.
  * Supports filtering by status and pagination.
  */
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   try {
     // Get the current session using Better Auth
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({
+      headers: request.headers
+    });
 
     // Check if user is authenticated
     if (!session?.user) {
@@ -306,4 +307,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       { status: 500 }
     );
   }
-}, 'strict');
+}

package/dist/templates/app/api/superadmin/teams/[teamId]/route.ts

@@ -1,7 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { getTypedSession } from '@nextsparkjs/core/lib/auth';
+import { auth } from '@nextsparkjs/core/lib/auth';
 import { queryWithRLS } from '@nextsparkjs/core/lib/db';
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
 
 interface TeamResult {
   id: string;
@@ -63,15 +62,17 @@ interface UsageResult {
  * Retrieves a single team with owner info and members.
  * Only accessible by superadmin or developer users.
  */
-export const GET = withRateLimitTier(async (
+export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ teamId: string }> }
-) => {
+) {
   try {
     const { teamId } = await params;
 
     // Get the current session using Better Auth
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({
+      headers: request.headers
+    });
 
     // Check if user is authenticated
     if (!session?.user) {
@@ -282,4 +283,4 @@ export const GET = withRateLimitTier(async (
       { status: 500 }
     );
   }
-}, 'strict');
+}

package/dist/templates/app/api/superadmin/teams/route.ts

@@ -1,8 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { getTypedSession } from '@nextsparkjs/core/lib/auth';
+import { auth } from '@nextsparkjs/core/lib/auth';
 import { queryWithRLS } from '@nextsparkjs/core/lib/db';
 import { SYSTEM_ADMIN_TEAM_ID } from '@nextsparkjs/core/lib/api/auth/dual-auth';
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
 
 interface TeamWithStats {
   id: string;
@@ -32,10 +31,12 @@ interface TeamWithStats {
  * - counts: Object with team counts
  * - pagination: Pagination info
  */
-export const GET = withRateLimitTier(async (request: NextRequest) => {
+export async function GET(request: NextRequest) {
   try {
     // Get the current session using Better Auth
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({
+      headers: request.headers
+    });
 
     // Check if user is authenticated
     if (!session?.user) {
@@ -184,4 +185,4 @@ export const GET = withRateLimitTier(async (request: NextRequest) => {
       { status: 500 }
     );
   }
-}, 'strict');
+}

package/dist/templates/app/api/superadmin/users/[userId]/route.ts

@@ -1,7 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server';
-import { getTypedSession } from '@nextsparkjs/core/lib/auth';
+import { auth } from '@nextsparkjs/core/lib/auth';
 import { queryWithRLS } from '@nextsparkjs/core/lib/db';
-import { withRateLimitTier } from '@nextsparkjs/core/lib/api/rate-limit';
 
 interface UserResult {
   id: string;
@@ -47,10 +46,12 @@ interface RouteParams {
  * - teams: Array of team memberships
  * - stats: User statistics
  */
-export const GET = withRateLimitTier(async (request: NextRequest, { params }: RouteParams) => {
+export async function GET(request: NextRequest, { params }: RouteParams) {
   try {
     // Get the current session using Better Auth
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({
+      headers: request.headers
+    });
 
     // Check if user is authenticated
     if (!session?.user) {
@@ -213,7 +214,7 @@ export const GET = withRateLimitTier(async (request: NextRequest, { params }: Ro
       { status: 500 }
     );
   }
-}, 'strict');
+}
 
 interface UserActionBody {
   action: 'change-role' | 'suspend' | 'unsuspend' | 'verify-email';
@@ -232,10 +233,12 @@ interface UserActionBody {
  * - unsuspend: Restore user's role to 'member'
  * - verify-email: Manually verify user's email
  */
-export const PATCH = withRateLimitTier(async (request: NextRequest, { params }: RouteParams) => {
+export async function PATCH(request: NextRequest, { params }: RouteParams) {
   try {
     // Get the current session using Better Auth
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({
+      headers: request.headers
+    });
 
     // Check if user is authenticated
     if (!session?.user) {
@@ -391,7 +394,7 @@ export const PATCH = withRateLimitTier(async (request: NextRequest, { params }:
       { status: 500 }
     );
   }
-}, 'strict');
+}
 
 /**
  * DELETE /api/superadmin/users/[userId]
@@ -404,10 +407,12 @@ export const PATCH = withRateLimitTier(async (request: NextRequest, { params }:
  * - Delete user's personal team
  * - Delete the user account
  */
-export const DELETE = withRateLimitTier(async (request: NextRequest, { params }: RouteParams) => {
+export async function DELETE(request: NextRequest, { params }: RouteParams) {
   try {
     // Get the current session using Better Auth
-    const session = await getTypedSession(request.headers);
+    const session = await auth.api.getSession({
+      headers: request.headers
+    });
 
     // Check if user is authenticated
     if (!session?.user) {
@@ -532,4 +537,4 @@ export const DELETE = withRateLimitTier(async (request: NextRequest, { params }:
       { status: 500 }
     );
   }
-}, 'strict');
+}