@payez/next-mvp 4.1.14 → 4.1.21

package/dist/client/better-auth-client.d.ts

@@ -24,7 +24,7 @@ export declare const authClient: {
             metadata?: Record<string, any> | undefined;
         } & {
             fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
             status: boolean;
         }, {
             code?: string | undefined;
@@ -46,7 +46,7 @@ export declare const authClient: {
                 newUserCallbackURL?: string | undefined;
             };
             fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<Omit<{
+        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<Omit<{
             token: string;
             user: {
                 id: string;
@@ -124,7 +124,7 @@ export declare const authClient: {
             additionalData?: Record<string, any> | undefined;
         } & {
             fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
             redirect: boolean;
             url: string;
         } | (Omit<{
@@ -159,7 +159,7 @@ export declare const authClient: {
     signOut: <FetchOptions extends import("@better-auth/core").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth/react").Prettify<{
         query?: Record<string, any> | undefined;
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         success: boolean;
     }, {
         code?: string | undefined;
@@ -181,7 +181,7 @@ export declare const authClient: {
             image?: string | undefined;
             callbackURL?: string | undefined;
             fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<(Omit<{
+        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<(Omit<{
             token: null;
             user: {
                 id: string;
@@ -242,7 +242,7 @@ export declare const authClient: {
             rememberMe?: boolean | undefined;
         } & {
             fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<Omit<{
+        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<Omit<{
             redirect: boolean;
             token: string;
             url?: string | undefined;
@@ -281,7 +281,7 @@ export declare const authClient: {
         token?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -297,7 +297,7 @@ export declare const authClient: {
             callbackURL?: string | undefined;
         };
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<NonNullable<void | {
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<NonNullable<void | {
         status: boolean;
     }>, {
         code?: string | undefined;
@@ -312,7 +312,7 @@ export declare const authClient: {
         callbackURL?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -327,7 +327,7 @@ export declare const authClient: {
         callbackURL?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -344,7 +344,7 @@ export declare const authClient: {
         revokeOtherSessions?: boolean | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<Omit<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<Omit<{
         token: string | null;
         user: {
             id: string;
@@ -380,7 +380,7 @@ export declare const authClient: {
 } & {
     updateSession: <FetchOptions extends import("@better-auth/core").ClientFetchOption<Partial<Partial<{}>> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth/react").Prettify<Partial<{}> & {
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         session: {
             id: string;
             createdAt: Date;
@@ -405,16 +405,16 @@ export declare const authClient: {
             $InferServerPlugin: ReturnType<(options: import("better-auth/plugins/magic-link").MagicLinkOptions) => {
                 id: "magic-link";
                 endpoints: {
-                    signInMagicLink: import("better-call").StrictEndpoint<"/sign-in/magic-link", {
+                    signInMagicLink: import("better-auth/*").StrictEndpoint<"/sign-in/magic-link", {
                         method: "POST";
                         requireHeaders: true;
-                        body: import("zod").ZodObject<{
-                            email: import("zod").ZodEmail;
-                            name: import("zod").ZodOptional<import("zod").ZodString>;
-                            callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
-                            newUserCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
-                            errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
-                            metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
+                        body: import("better-auth/*").ZodObject<{
+                            email: import("better-auth/*").ZodEmail;
+                            name: import("better-auth/*").ZodOptional<import("better-auth/*").ZodString>;
+                            callbackURL: import("better-auth/*").ZodOptional<import("better-auth/*").ZodString>;
+                            newUserCallbackURL: import("better-auth/*").ZodOptional<import("better-auth/*").ZodString>;
+                            errorCallbackURL: import("better-auth/*").ZodOptional<import("better-auth/*").ZodString>;
+                            metadata: import("better-auth/*").ZodOptional<import("better-auth/*").ZodRecord<import("better-auth/*").ZodString, import("better-auth/*").ZodAny>>;
                         }, import("better-auth/*").$strip>;
                         metadata: {
                             openapi: {
@@ -442,15 +442,15 @@ export declare const authClient: {
                     }, {
                         status: boolean;
                     }>;
-                    magicLinkVerify: import("better-call").StrictEndpoint<"/magic-link/verify", {
+                    magicLinkVerify: import("better-auth/*").StrictEndpoint<"/magic-link/verify", {
                         method: "GET";
-                        query: import("zod").ZodObject<{
-                            token: import("zod").ZodString;
-                            callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
-                            errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
-                            newUserCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+                        query: import("better-auth/*").ZodObject<{
+                            token: import("better-auth/*").ZodString;
+                            callbackURL: import("better-auth/*").ZodOptional<import("better-auth/*").ZodString>;
+                            errorCallbackURL: import("better-auth/*").ZodOptional<import("better-auth/*").ZodString>;
+                            newUserCallbackURL: import("better-auth/*").ZodOptional<import("better-auth/*").ZodString>;
                         }, import("better-auth/*").$strip>;
-                        use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+                        use: ((inputContext: import("better-auth/*").MiddlewareInputContext<import("better-auth/*").MiddlewareOptions>) => Promise<void>)[];
                         requireHeaders: true;
                         metadata: {
                             openapi: {
@@ -499,7 +499,7 @@ export declare const authClient: {
                 options: import("better-auth/plugins/magic-link").MagicLinkOptions;
             }>;
         }[];
-    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -516,7 +516,7 @@ export declare const authClient: {
         token?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         success: boolean;
         message: string;
     }, {
@@ -532,7 +532,7 @@ export declare const authClient: {
         redirectTo?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
         message: string;
     }, {
@@ -550,7 +550,7 @@ export declare const authClient: {
                 callbackURL: string;
             };
             fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<never, {
+        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<never, {
             code?: string | undefined;
             message?: string | undefined;
         }, FetchOptions["throw"] extends true ? true : false>>;
@@ -559,7 +559,7 @@ export declare const authClient: {
     listSessions: <FetchOptions extends import("@better-auth/core").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth/react").Prettify<{
         query?: Record<string, any> | undefined;
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<import("better-auth/react").Prettify<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<import("better-auth/react").Prettify<{
         id: string;
         createdAt: Date;
         updatedAt: Date;
@@ -579,7 +579,7 @@ export declare const authClient: {
         token: string;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -589,7 +589,7 @@ export declare const authClient: {
     revokeSessions: <FetchOptions extends import("@better-auth/core").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth/react").Prettify<{
         query?: Record<string, any> | undefined;
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -599,7 +599,7 @@ export declare const authClient: {
     revokeOtherSessions: <FetchOptions extends import("@better-auth/core").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth/react").Prettify<{
         query?: Record<string, any> | undefined;
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -638,7 +638,7 @@ export declare const authClient: {
         additionalData?: Record<string, any> | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         url: string;
         redirect: boolean;
     }, {
@@ -649,7 +649,7 @@ export declare const authClient: {
     listAccounts: <FetchOptions extends import("@better-auth/core").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth/react").Prettify<{
         query?: Record<string, any> | undefined;
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         scopes: string[];
         id: string;
         createdAt: Date;
@@ -672,7 +672,7 @@ export declare const authClient: {
                 callbackURL?: string | undefined;
             };
             fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
             success: boolean;
             message: string;
         }, {
@@ -689,7 +689,7 @@ export declare const authClient: {
         accountId?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -706,7 +706,7 @@ export declare const authClient: {
         userId?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         accessToken: string | undefined;
         refreshToken: string;
         accessTokenExpiresAt: Date | undefined;
@@ -730,7 +730,7 @@ export declare const authClient: {
         userId?: string | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         accessToken: string;
         accessTokenExpiresAt: Date | undefined;
         scopes: string[];
@@ -747,7 +747,7 @@ export declare const authClient: {
             accountId?: string | undefined;
         } | undefined;
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         user: import("better-auth/*").OAuth2UserInfo;
         data: Record<string, any>;
     }, {
@@ -764,7 +764,7 @@ export declare const authClient: {
             disableRefresh?: unknown;
         } | undefined;
         fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         user: import("better-auth/react").StripEmptyObjects<{
             id: string;
             createdAt: Date;
@@ -813,7 +813,7 @@ export declare const authClient: {
         } | null;
         isPending: boolean;
         isRefetching: boolean;
-        error: import("@better-fetch/fetch").BetterFetchError | null;
+        error: import("better-auth/react").BetterFetchError | null;
         refetch: (queryParams
         /**
          * NextAuth-compatible signOut wrapper.
@@ -847,21 +847,21 @@ export declare const authClient: {
             }>;
         };
     };
-    $fetch: import("@better-fetch/fetch").BetterFetch<{
-        plugins: (import("@better-fetch/fetch").BetterFetchPlugin<Record<string, any>> | {
+    $fetch: import("better-auth/react").BetterFetch<{
+        plugins: (import("better-auth/react").BetterFetchPlugin<Record<string, any>> | {
             id: string;
             name: string;
             hooks: {
-                onSuccess(context: import("@better-fetch/fetch").SuccessContext<any>): void;
+                onSuccess(context: import("better-auth/react").SuccessContext<any>): void;
             };
         } | {
             id: string;
             name: string;
             hooks: {
-                onSuccess: ((context: import("@better-fetch/fetch").SuccessContext<any>) => Promise<void> | void) | undefined;
-                onError: ((context: import("@better-fetch/fetch").ErrorContext) => Promise<void> | void) | undefined;
-                onRequest: (<T extends Record<string, any>>(context: import("@better-fetch/fetch").RequestContext<T>) => Promise<import("@better-fetch/fetch").RequestContext | void> | import("@better-fetch/fetch").RequestContext | void) | undefined;
-                onResponse: ((context: import("@better-fetch/fetch").ResponseContext) => Promise<Response | void | import("@better-fetch/fetch").ResponseContext> | Response | import("@better-fetch/fetch").ResponseContext | void) | undefined;
+                onSuccess: ((context: import("better-auth/react").SuccessContext<any>) => Promise<void> | void) | undefined;
+                onError: ((context: import("better-auth/react").ErrorContext) => Promise<void> | void) | undefined;
+                onRequest: (<T extends Record<string, any>>(context: import("better-auth/react").RequestContext<T>) => Promise<import("better-auth/react").RequestContext | void> | import("better-auth/react").RequestContext | void) | undefined;
+                onResponse: ((context: import("better-auth/react").ResponseContext) => Promise<Response | void | import("better-auth/react").ResponseContext> | Response | import("better-auth/react").ResponseContext | void) | undefined;
             };
         })[];
         cache?: RequestCache | undefined;
@@ -881,12 +881,12 @@ export declare const authClient: {
         referrerPolicy?: ReferrerPolicy | undefined;
         signal?: (AbortSignal | null) | undefined;
         window?: null | undefined;
-        onRetry?: ((response: import("@better-fetch/fetch").ResponseContext) => Promise<void> | void) | undefined;
+        onRetry?: ((response: import("better-auth/react").ResponseContext) => Promise<void> | void) | undefined;
         hookOptions?: {
             cloneResponse?: boolean;
         } | undefined;
         timeout?: number | undefined;
-        customFetchImpl: import("@better-fetch/fetch").FetchEsque;
+        customFetchImpl: import("better-auth/react").FetchEsque;
         baseURL: string;
         throw?: boolean | undefined;
         auth?: ({
@@ -906,17 +906,17 @@ export declare const authClient: {
         params?: any;
         duplex?: "full" | "half" | undefined;
         jsonParser: (text: string) => Promise<any> | any;
-        retry?: import("@better-fetch/fetch").RetryOptions | undefined;
+        retry?: import("better-auth/react").RetryOptions | undefined;
         retryAttempt?: number | undefined;
-        output?: (import("@better-fetch/fetch").StandardSchemaV1 | typeof Blob | typeof File) | undefined;
-        errorSchema?: import("@better-fetch/fetch").StandardSchemaV1 | undefined;
+        output?: (import("better-auth/react").StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+        errorSchema?: import("better-auth/react").StandardSchemaV1 | undefined;
         disableValidation?: boolean | undefined;
         disableSignal?: boolean | undefined;
     }, unknown, unknown, {}>;
     $store: {
         notify: (signal?: (Omit<string, "$sessionSignal"> | "$sessionSignal") | undefined) => void;
         listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
-        atoms: Record<string, import("nanostores/atom").WritableAtom<any>>;
+        atoms: Record<string, import("better-auth/react").WritableAtom<any>>;
     };
     $ERROR_CODES: {
         USER_NOT_FOUND: import("better-auth/*").RawError<"USER_NOT_FOUND">;
@@ -993,7 +993,7 @@ export declare const useSession: () => {
     } | null;
     isPending: boolean;
     isRefetching: boolean;
-    error: import("@better-fetch/fetch").BetterFetchError | null;
+    error: import("better-auth/react").BetterFetchError | null;
     refetch: (queryParams
     /**
      * NextAuth-compatible signOut wrapper.
@@ -1020,7 +1020,7 @@ export declare const useSession: () => {
         metadata?: Record<string, any> | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         status: boolean;
     }, {
         code?: string | undefined;
@@ -1077,7 +1077,7 @@ export declare const useSession: () => {
         additionalData?: Record<string, any> | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
         redirect: boolean;
         url: string;
     } | (Omit<{
@@ -1120,7 +1120,7 @@ export declare const useSession: () => {
         rememberMe?: boolean | undefined;
     } & {
         fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<Omit<{
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<Omit<{
         redirect: boolean;
         token: string;
         url?: string | undefined;
@@ -1150,7 +1150,7 @@ export declare const useSession: () => {
 }, signOut: <FetchOptions extends import("@better-auth/core").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, any> | undefined>>(data_0?: import("better-auth/react").Prettify<{
     query?: Record<string, any> | undefined;
     fetchOptions?: FetchOptions | undefined;
-}> | undefined, data_1?: FetchOptions | undefined) => Promise<import("@better-fetch/fetch").BetterFetchResponse<{
+}> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/react").BetterFetchResponse<{
     success: boolean;
 }, {
     code?: string | undefined;

package/dist/lib/ensure-fresh-access-token.js

@@ -50,6 +50,13 @@ async function ensureFreshAccessToken(sessionToken, config, options = {}) {
     }
     const storedToken = session.idpAccessToken;
     if (!storedToken) {
+        // Card 187871: same conflation as getIdpToken (server/auth.ts) - a live
+        // session with no access token and mfaVerified !== true is a user
+        // mid-2FA, not dead. Only terminal once the session itself claims 2FA
+        // is already done.
+        if (session.mfaVerified !== true) {
+            return { ok: false, code: 'NO_TOKEN_PENDING_2FA', message: 'Two-factor authentication required', status: 401, terminal: false };
+        }
         return { ok: false, code: 'NO_TOKEN', message: 'No IDP access token in session', status: 401, terminal: true };
     }
     const now = Date.now();
@@ -158,8 +165,16 @@ async function ensureFreshAccessToken(sessionToken, config, options = {}) {
         if (isOAuthSession && session.mfaVerified && acrValue === '1') {
             acrValue = '2';
         }
+        // WO-2: send the POST-lock current refresh token, not the pre-lock snapshot.
+        // `session` was read before we acquired the lock; a concurrent refresh that
+        // completed while we waited rotates the token, so the pre-lock value is stale
+        // and would draw an avoidable 401 (the CAS now catches the resulting wipe, but
+        // the round-trip is wasted). `latest` is the authoritative post-lock session.
+        // Auth-context (amr/acr/2FA) intentionally still derives from `session` — it is
+        // the identity context of THIS request, unchanged by a token rotation.
+        const sentRefreshToken = latest?.idpRefreshToken ?? session.idpRefreshToken;
         const body = {
-            refresh_token: session.idpRefreshToken,
+            refresh_token: sentRefreshToken,
             amr: authMethods,
             acr: acrValue,
         };
@@ -200,15 +215,41 @@ async function ensureFreshAccessToken(sessionToken, config, options = {}) {
         if (!idpResponse.ok) {
             const idpError = responseData?.error || {};
             const code = idpError.code || 'UNKNOWN_ERROR';
-            const discardToken = idpResponse.status === 401 || idpError.discard_token === true;
+            let discardToken = idpResponse.status === 401 || idpError.discard_token === true;
             const retryable = idpResponse.status !== 401 && idpError.retryable === true;
             if (discardToken) {
-                await (0, session_store_1.updateSession)(sessionToken, {
-                    idpRefreshToken: '',
-                    idpRefreshTokenExpires: undefined,
-                    refreshTokenClearedAt: Date.now(),
-                    refreshTokenClearedReason: `IDP_DISCARD_TOKEN:${code}`,
-                });
+                // Race-safe discard (CAS): only clear if the refresh token we used is STILL
+                // current. A concurrent refresh may have already rotated it — our 401 is then
+                // stale/expected, and wiping here would silently log out a healthy session
+                // (the rotation-race wipe, QA 6873 site 1/2). Compare-and-skip if it changed;
+                // a concurrent rotation is NOT a terminal condition.
+                const postRefresh = await (0, session_store_1.getSession)(sessionToken);
+                // CAS compares against the token we ACTUALLY SENT (WO-2: sentRefreshToken,
+                // the post-lock value), not the pre-lock snapshot — otherwise a token rotated
+                // between pre-lock read and our send would be misjudged.
+                const tokenUnchanged = !!sentRefreshToken && postRefresh?.idpRefreshToken === sentRefreshToken;
+                if (tokenUnchanged) {
+                    await (0, session_store_1.updateSession)(sessionToken, {
+                        idpRefreshToken: '',
+                        idpRefreshTokenExpires: undefined,
+                        refreshTokenClearedAt: Date.now(),
+                        refreshTokenClearedReason: `IDP_DISCARD_TOKEN:${code}`,
+                    });
+                }
+                else {
+                    // Concurrent refresh already rotated the token — our 401 is stale. Return the
+                    // freshly-rotated token directly so the loser succeeds without a retry round-trip
+                    // (race-fix follow-up #1).
+                    discardToken = false;
+                    if (postRefresh?.idpAccessToken && postRefresh.idpAccessTokenExpires) {
+                        return {
+                            ok: true,
+                            accessToken: postRefresh.idpAccessToken,
+                            accessTokenExpires: postRefresh.idpAccessTokenExpires,
+                            refreshed: true,
+                        };
+                    }
+                }
             }
             return {
                 ok: false,

package/dist/lib/session-store.d.ts

@@ -9,6 +9,7 @@
  */
 import { SessionData } from '../models/SessionModel';
 export type { SessionData } from '../models/SessionModel';
+export declare const SESSION_TTL: number;
 export interface RefreshLockInfo {
     sessionToken: string;
     acquiredAt: number;

package/dist/lib/session-store.js

@@ -12,6 +12,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_TTL = void 0;
 exports.generateSessionToken = generateSessionToken;
 exports.createSession = createSession;
 exports.getSession = getSession;
@@ -46,7 +47,10 @@ const getSessionVersionKey = (token) => `${(0, app_slug_1.getSessionPrefix)()}ve
 // Better Auth uses a different key format: ba:{appSlug}:{token}
 const getBetterAuthSessionKey = (token, appSlug) => `ba:${appSlug || 'app'}:${token}`;
 const REFRESH_LOCK_TTL = 60; // 60 seconds
-const SESSION_TTL = 3 * 24 * 60 * 60; // 3 days in seconds (matches refresh token lifetime)
+// 3 days in seconds (matches refresh token lifetime). EXPORTED as the single source
+// of session TTL — better-auth.ts derives its BA-session Redis TTL from this so the
+// two can never drift apart again (the 7d-vs-3d drift = the zombie-session window, QA 6952).
+exports.SESSION_TTL = 3 * 24 * 60 * 60;
 /**
  * Generates a new session token.
  * @returns A new session token string.
@@ -66,8 +70,8 @@ async function createSession(data) {
     const versionKey = getSessionVersionKey(sessionToken);
     try {
         await redis_1.default.multi()
-            .setex(key, SESSION_TTL, JSON.stringify(data))
-            .setex(versionKey, SESSION_TTL, '1')
+            .setex(key, exports.SESSION_TTL, JSON.stringify(data))
+            .setex(versionKey, exports.SESSION_TTL, '1')
             .exec();
     }
     catch (error) {
@@ -131,6 +135,13 @@ async function getBetterAuthSession(sessionToken, appSlug) {
                 idpRefreshToken: data.idpTokens?.idpRefreshToken,
                 idpAccessTokenExpires: data.idpTokens?.idpAccessTokenExpires,
                 mfaVerified: data.idpTokens?.mfaVerified ?? false,
+                // Cards 141688/141741 — the IDP's routing decision, carried not derived.
+                // `null` is a real value here (IDP said nothing is outstanding), so it
+                // must stay distinguishable from `undefined` (we never captured it —
+                // true of every session minted before this change). No `?? null`:
+                // defaulting would turn "unknown" into "fully authenticated" and
+                // fail open on the existing session population.
+                nextStep: data.idpTokens?.nextStep,
                 roles: data.idpTokens?.roles || [],
                 idpClientId: data.idpTokens?.idpClientId ?? data.idpTokens?.clientId ?? data.idpClientId,
                 merchantId: data.idpTokens?.merchantId ?? data.merchantId,
@@ -148,7 +159,7 @@ async function getBetterAuthSession(sessionToken, appSlug) {
  */
 async function touchSession(token) {
     const key = getSessionKey(token);
-    await redis_1.default.expire(key, SESSION_TTL);
+    await redis_1.default.expire(key, exports.SESSION_TTL);
 }
 /**
  * Retrieves a session along with a version identifier for optimistic locking.
@@ -214,9 +225,9 @@ async function setSession(sessionToken, data) {
     const key = getSessionKey(sessionToken);
     const versionKey = getSessionVersionKey(sessionToken);
     await redis_1.default.multi()
-        .setex(key, SESSION_TTL, JSON.stringify(data))
+        .setex(key, exports.SESSION_TTL, JSON.stringify(data))
         .incr(versionKey)
-        .expire(versionKey, SESSION_TTL)
+        .expire(versionKey, exports.SESSION_TTL)
         .exec();
 }
 /**
@@ -254,9 +265,9 @@ async function updateSession(sessionToken, updates) {
     const updatedSession = { ...currentSession, ...updates };
     // Write the entire updated session back to Redis with version increment
     await redis_1.default.multi()
-        .setex(key, SESSION_TTL, JSON.stringify(updatedSession))
+        .setex(key, exports.SESSION_TTL, JSON.stringify(updatedSession))
         .incr(versionKey)
-        .expire(versionKey, SESSION_TTL)
+        .expire(versionKey, exports.SESSION_TTL)
         .exec();
     return updatedSession;
 }

package/dist/lib/token-lifecycle.d.ts

@@ -31,6 +31,8 @@ export interface TokenError {
     error: 'NO_SESSION' | 'NO_TOKEN' | 'EXPIRED' | 'REFRESH_FAILED' | 'SESSION_EXPIRED_NO_REFRESH';
     message: string;
     terminal?: boolean;
+    code?: string;
+    resolution?: string;
 }
 export type EnsureFreshTokenResult = TokenResult | TokenError;
 /**