@protobase/server 0.33.4 → 0.34.1

package/dist/better-auth/create-auth.d.ts

@@ -1,11 +1,13 @@
 import { StaffSignIn } from "./staff-log.js";
+import { RoleDefinitions, RolesInput } from "./organizations/role-definitions.js";
+import { ConnectedApp } from "./mcp/connected-apps.js";
 import { Mailer } from "../mail/smtp-mailer.js";
 import { OperatorProvider } from "./operator-provider.js";
-import { RoleDefinitions, RolesInput } from "./organizations/role-definitions.js";
 import { OrganizationRole } from "./organizations/store.js";
+import { SignInPolicy } from "./sign-in-policy.js";
+import { McpAuthOptions } from "./mcp/mcp-plugins.js";
 import { OrganizationsOptions, ResolvedOrganizations } from "./organizations/options.js";
 import { PlatformSignIn } from "./platform-sign-in.js";
-import { SignInPolicy } from "./sign-in-policy.js";
 import { SsoOptions } from "./saml-sign-in.js";
 import { signUpPaths } from "./sign-up/sign-up-plugin.js";
 import { PasswordHash } from "./password-hashes.js";
@@ -132,6 +134,14 @@ export type CreateAuthOptions = {
    * are held globally (on the user) or per membership. Off by default: the app works as one organization.
    */
   organizations?: OrganizationsOptions;
+  /**
+   * Turns on an OAuth provider for MCP clients: a client such as an AI assistant or code editor that speaks MCP registers
+   * itself, the person signs in on the app's own pages and allows it on the connect page, and the client gets tokens
+   * for the MCP endpoint only, with the role and organization the person worked in when they allowed it. `true` for the
+   * defaults, or the endpoint's `path` (default `/api/mcp`) and the `connectPage` (default `/-/connect`). Needs an
+   * https `baseURL`, or localhost, and the OAuth tables from `protobase auth migration`. Off by default.
+   */
+  mcp?: true | McpAuthOptions;
 };
 type UserCreateHooks = NonNullable<NonNullable<NonNullable<BetterAuthOptions['databaseHooks']>['user']>['create']>;
 /** Better Auth's `databaseHooks.user.create.after`: the created user (with its `role`) and the request context, `null` outside a request. */
@@ -270,18 +280,18 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       after: {
         matcher(context: import("better-auth").HookEndpointContext): boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<import("better-auth/plugins").SessionWithImpersonatedBy[] | undefined>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<import("better-auth/plugins").SessionWithImpersonatedBy[] | undefined>>;
       }[];
     };
     endpoints: {
-      setRole: import("better-auth").StrictEndpoint<"/admin/set-role", {
+      setRole: import("better-call").StrictEndpoint<"/admin/set-role", {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
           role: import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodArray<import("zod").ZodString>]>;
         }, import("zod/v4/core").$strip>;
         requireHeaders: true;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -329,12 +339,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         user: import("better-auth/plugins").UserWithRole;
       }>;
-      getUser: import("better-auth").StrictEndpoint<"/admin/get-user", {
+      getUser: import("better-call").StrictEndpoint<"/admin/get-user", {
         method: "GET";
         query: import("zod").ZodObject<{
           id: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -345,7 +355,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               expiresAt: Date;
               token: string;
               ipAddress?: string | null | undefined;
-              userAgent? /** Signs cookies and encrypts the JWT private keys. Generate with `openssl rand -base64 32`. */ : string | null | undefined;
+              userAgent?: string | null | undefined;
             };
           };
         }>>[];
@@ -374,7 +384,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, import("better-auth/plugins").UserWithRole>;
-      createUser: import("better-auth").StrictEndpoint<"/admin/create-user", {
+      createUser: import("better-call").StrictEndpoint<"/admin/create-user", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -419,13 +429,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         user: import("better-auth/plugins").UserWithRole;
       }>;
-      adminUpdateUser: import("better-auth").StrictEndpoint<"/admin/update-user", {
+      adminUpdateUser: import("better-call").StrictEndpoint<"/admin/update-user", {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
           data: import("zod").ZodRecord<import("zod").ZodAny, import("zod").ZodAny>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -465,9 +475,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, import("better-auth/plugins").UserWithRole>;
-      listUsers: import("better-auth").StrictEndpoint<"/admin/list-users", {
+      listUsers: import("better-call").StrictEndpoint<"/admin/list-users", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -557,9 +567,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         users: import("better-auth/plugins").UserWithRole[];
         total: number;
       }>;
-      listUserSessions: import("better-auth").StrictEndpoint<"/admin/list-user-sessions", {
+      listUserSessions: import("better-call").StrictEndpoint<"/admin/list-user-sessions", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -607,12 +617,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         sessions: import("better-auth/plugins").SessionWithImpersonatedBy[];
       }>;
-      unbanUser: import("better-auth").StrictEndpoint<"/admin/unban-user", {
+      unbanUser: import("better-call").StrictEndpoint<"/admin/unban-user", {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -654,14 +664,14 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         user: import("better-auth/plugins").UserWithRole;
       }>;
-      banUser: import("better-auth").StrictEndpoint<"/admin/ban-user", {
+      banUser: import("better-call").StrictEndpoint<"/admin/ban-user", {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
           banReason: import("zod").ZodOptional<import("zod").ZodString>;
           banExpiresIn: import("zod").ZodOptional<import("zod").ZodNumber>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -703,12 +713,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         user: import("better-auth/plugins").UserWithRole;
       }>;
-      impersonateUser: import("better-auth").StrictEndpoint<"/admin/impersonate-user", {
+      impersonateUser: import("better-call").StrictEndpoint<"/admin/impersonate-user", {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -763,7 +773,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         };
         user: import("better-auth/plugins").UserWithRole;
       }>;
-      stopImpersonating: import("better-auth").StrictEndpoint<"/admin/stop-impersonating", {
+      stopImpersonating: import("better-call").StrictEndpoint<"/admin/stop-impersonating", {
         method: "POST";
         requireHeaders: true;
       }, {
@@ -787,12 +797,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           image?: string | null | undefined;
         } & Record<string, any>;
       }>;
-      revokeUserSession: import("better-auth").StrictEndpoint<"/admin/revoke-user-session", {
+      revokeUserSession: import("better-call").StrictEndpoint<"/admin/revoke-user-session", {
         method: "POST";
         body: import("zod").ZodObject<{
           sessionToken: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -834,12 +844,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      revokeUserSessions: import("better-auth").StrictEndpoint<"/admin/revoke-user-sessions", {
+      revokeUserSessions: import("better-call").StrictEndpoint<"/admin/revoke-user-sessions", {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -881,12 +891,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      removeUser: import("better-auth").StrictEndpoint<"/admin/remove-user", {
+      removeUser: import("better-call").StrictEndpoint<"/admin/remove-user", {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -928,13 +938,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      setUserPassword: import("better-auth").StrictEndpoint<"/admin/set-user-password", {
+      setUserPassword: import("better-call").StrictEndpoint<"/admin/set-user-password", {
         method: "POST";
         body: import("zod").ZodObject<{
           newPassword: import("zod").ZodString;
           userId: import("zod").ZodCoercedString<unknown>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             user: import("better-auth/plugins").UserWithRole;
             session: {
@@ -976,7 +986,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         status: boolean;
       }>;
-      userHasPermission: import("better-auth").StrictEndpoint<"/admin/has-permission", {
+      userHasPermission: import("better-call").StrictEndpoint<"/admin/has-permission", {
         method: "POST";
         body: import("zod").ZodIntersection<import("zod").ZodObject<{
           userId: import("zod").ZodOptional<import("zod").ZodCoercedString<unknown>>;
@@ -1163,30 +1173,30 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           user: import("better-auth").User & Record<string, any>;
           session: import("better-auth").Session & Record<string, any>;
         }) => Promise<{
-          role: any;
-          email: string;
           sid: string;
+          role: string | null | undefined;
+          email: string;
         } | {
+          sid: string;
           org?: undefined;
           org_role?: undefined;
           app_roles?: undefined;
-          role: any;
+          role: string | null | undefined;
           email: string;
-          sid: string;
         } | {
+          sid: string;
           org: string;
           org_role: OrganizationRole;
           app_roles: string[];
-          role: any;
+          role: string | null | undefined;
           email: string;
-          sid: string;
         } | {
+          sid: string;
           org: string;
           org_role?: undefined;
           app_roles?: undefined;
-          role: any;
+          role: string | null | undefined;
           email: string;
-          sid: string;
         }>;
       };
       disableSettingJwtHeader: true;
@@ -1206,7 +1216,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       };
     } | undefined;
     endpoints: {
-      getJwks: import("better-auth").StrictEndpoint<string, {
+      getJwks: import("better-call").StrictEndpoint<string, {
         method: "GET";
         metadata: {
           openapi: {
@@ -1283,10 +1293,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, import("jose").JSONWebKeySet>;
-      getToken: import("better-auth").StrictEndpoint<"/token", {
+      getToken: import("better-call").StrictEndpoint<"/token", {
         method: "GET";
         requireHeaders: true;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1335,7 +1345,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         token: string;
       }>;
-      signJWT: import("better-auth").StrictEndpoint<string, {
+      signJWT: import("better-call").StrictEndpoint<string, {
         method: "POST";
         metadata: {
           $Infer: {
@@ -1352,7 +1362,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         token: string;
       }>;
-      verifyJWT: import("better-auth").StrictEndpoint<string, {
+      verifyJWT: import("better-call").StrictEndpoint<string, {
         method: "POST";
         metadata: {
           $Infer: {
@@ -1380,7 +1390,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       after: {
         matcher(context: import("better-auth").HookEndpointContext): boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
     schema: {
@@ -1417,7 +1427,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       after: {
         matcher: (context: Parameters<(context: import("better-auth").HookEndpointContext) => boolean>[0]) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           twoFactorRedirect: boolean;
           twoFactorMethods: string[];
         } | undefined>>;
@@ -1426,7 +1436,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     id: "two-factor";
     version: string;
     endpoints: {
-      enableTwoFactor: import("better-auth").StrictEndpoint<"/two-factor/enable", {
+      enableTwoFactor: import("better-call").StrictEndpoint<"/two-factor/enable", {
         method: "POST";
         body: import("zod").ZodObject<{
           password: import("zod").ZodOptional<import("zod").ZodString>;
@@ -1443,7 +1453,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           }>>;
           issuer: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1510,14 +1520,14 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         totpURI: string;
         backupCodes: string[];
       }>;
-      disableTwoFactor: import("better-auth").StrictEndpoint<"/two-factor/disable", {
+      disableTwoFactor: import("better-call").StrictEndpoint<"/two-factor/disable", {
         method: "POST";
         body: import("zod").ZodObject<{
           password: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip> | import("zod").ZodObject<{
           password: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1566,7 +1576,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         status: boolean;
       }>;
-      verifyBackupCode: import("better-auth").StrictEndpoint<"/two-factor/verify-backup-code", {
+      verifyBackupCode: import("better-call").StrictEndpoint<"/two-factor/verify-backup-code", {
         method: "POST";
         body: import("zod").ZodObject<{
           code: import("zod").ZodString;
@@ -1677,14 +1687,14 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           image?: string | null | undefined;
         }) | import("better-auth/plugins").UserWithTwoFactor;
       }>;
-      generateBackupCodes: import("better-auth").StrictEndpoint<"/two-factor/generate-backup-codes", {
+      generateBackupCodes: import("better-call").StrictEndpoint<"/two-factor/generate-backup-codes", {
         method: "POST";
         body: import("zod").ZodObject<{
           password: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip> | import("zod").ZodObject<{
           password: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1743,7 +1753,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         status: boolean;
         backupCodes: string[];
       }>;
-      viewBackupCodes: import("better-auth").StrictEndpoint<string, {
+      viewBackupCodes: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           userId: import("zod").ZodCoercedString<unknown>;
@@ -1752,7 +1762,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         status: boolean;
         backupCodes: string[];
       }>;
-      sendTwoFactorOTP: import("better-auth").StrictEndpoint<"/two-factor/send-otp", {
+      sendTwoFactorOTP: import("better-call").StrictEndpoint<"/two-factor/send-otp", {
         method: "POST";
         body: import("zod").ZodOptional<import("zod").ZodObject<{
           trustDevice: import("zod").ZodOptional<import("zod").ZodBoolean>;
@@ -1783,7 +1793,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         status: boolean;
       }>;
-      verifyTwoFactorOTP: import("better-auth").StrictEndpoint<"/two-factor/verify-otp", {
+      verifyTwoFactorOTP: import("better-call").StrictEndpoint<"/two-factor/verify-otp", {
         method: "POST";
         body: import("zod").ZodObject<{
           code: import("zod").ZodString;
@@ -1872,7 +1882,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           image?: string | null | undefined;
         };
       }>;
-      generateTOTP: import("better-auth").StrictEndpoint<string, {
+      generateTOTP: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           secret: import("zod").ZodString;
@@ -1903,9 +1913,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         code: string;
       }>;
-      getTOTPURI: import("better-auth").StrictEndpoint<"/two-factor/get-totp-uri", {
+      getTOTPURI: import("better-call").StrictEndpoint<"/two-factor/get-totp-uri", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -1959,7 +1969,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         totpURI: string;
       }>;
-      verifyTOTP: import("better-auth").StrictEndpoint<"/two-factor/verify-totp", {
+      verifyTOTP: import("better-call").StrictEndpoint<"/two-factor/verify-totp", {
         method: "POST";
         body: import("zod").ZodObject<{
           code: import("zod").ZodString;
@@ -2083,13 +2093,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     };
   } | {
     endpoints: {
-      generatePasskeyAuthenticationOptions: import("better-auth").StrictEndpoint<"/passkey/generate-authenticate-options", {
+      generatePasskeyAuthenticationOptions: import("better-call").StrictEndpoint<"/passkey/generate-authenticate-options", {
         method: "GET";
         query: import("zod").ZodOptional<import("zod").ZodObject<{
           rpId: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip>>;
       }, import("@simplewebauthn/server").PublicKeyCredentialRequestOptionsJSON>;
-      verifyPasskeyAuthentication: import("better-auth").StrictEndpoint<"/passkey/verify-authentication", {
+      verifyPasskeyAuthentication: import("better-call").StrictEndpoint<"/passkey/verify-authentication", {
         method: "POST";
         body: import("zod").ZodObject<{
           response: import("zod").ZodRecord<import("zod").ZodAny, import("zod").ZodAny>;
@@ -2115,9 +2125,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           image?: string | null | undefined;
         };
       }>;
-      generatePasskeyRegistrationOptions: import("better-auth").StrictEndpoint<"/passkey/generate-register-options", {
+      generatePasskeyRegistrationOptions: import("better-call").StrictEndpoint<"/passkey/generate-register-options", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -2152,7 +2162,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           openapi: {
             operationId: string;
             description: string;
-            parameters: import("better-auth").OpenAPIParameter[];
+            parameters: import("better-call").OpenAPIParameter[];
             responses: {
               200: {
                 description: string;
@@ -2255,14 +2265,14 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, import("@simplewebauthn/server").PublicKeyCredentialCreationOptionsJSON>;
-      verifyPasskeyRegistration: import("better-auth").StrictEndpoint<"/passkey/verify-registration", {
+      verifyPasskeyRegistration: import("better-call").StrictEndpoint<"/passkey/verify-registration", {
         method: "POST";
         body: import("zod").ZodObject<{
           response: import("zod").ZodAny;
           name: import("zod").ZodOptional<import("zod").ZodString>;
           createSession: import("zod").ZodOptional<import("zod").ZodBoolean>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -2320,9 +2330,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, import("@better-auth/passkey").Passkey>;
-      listPasskeys: import("better-auth").StrictEndpoint<"/passkey/list-user-passkeys", {
+      listPasskeys: import("better-call").StrictEndpoint<"/passkey/list-user-passkeys", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -2368,12 +2378,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, import("@better-auth/passkey").Passkey[]>;
-      deletePasskey: import("better-auth").StrictEndpoint<"/passkey/delete-passkey", {
+      deletePasskey: import("better-call").StrictEndpoint<"/passkey/delete-passkey", {
         method: "POST";
         body: import("zod").ZodObject<{
           id: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: (import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: (import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -2395,7 +2405,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               image?: string | null | undefined;
             };
           };
-        }>> | import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }>> | import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           verifiedResource: {};
         }>>)[];
         metadata: {
@@ -2425,13 +2435,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         status: boolean;
       }>;
-      updatePasskey: import("better-auth").StrictEndpoint<"/passkey/update-passkey", {
+      updatePasskey: import("better-call").StrictEndpoint<"/passkey/update-passkey", {
         method: "POST";
         body: import("zod").ZodObject<{
           id: import("zod").ZodString;
           name: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: (import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: (import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -2453,7 +2463,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               image?: string | null | undefined;
             };
           };
-        }>> | import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }>> | import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           verifiedResource: {};
         }>>)[];
         metadata: {
@@ -2577,9 +2587,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       };
     } | undefined;
     endpoints: {
-      sendVerificationOTP: import("better-auth").StrictEndpoint<"/email-otp/send-verification-otp", {
+      sendVerificationOTP: import("better-call").StrictEndpoint<"/email-otp/send-verification-otp", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>[];
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
           type: import("zod").ZodEnum<{
@@ -2615,7 +2625,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      createVerificationOTP: import("better-auth").StrictEndpoint<string, {
+      createVerificationOTP: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2645,7 +2655,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, string>;
-      getVerificationOTP: import("better-auth").StrictEndpoint<string, {
+      getVerificationOTP: import("better-call").StrictEndpoint<string, {
         method: "GET";
         query: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2687,7 +2697,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       } | {
         otp: string;
       }>;
-      checkVerificationOTP: import("better-auth").StrictEndpoint<"/email-otp/check-verification-otp", {
+      checkVerificationOTP: import("better-call").StrictEndpoint<"/email-otp/check-verification-otp", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2725,7 +2735,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      verifyEmailOTP: import("better-auth").StrictEndpoint<"/email-otp/verify-email", {
+      verifyEmailOTP: import("better-call").StrictEndpoint<"/email-otp/verify-email", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2789,7 +2799,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           image?: string | null | undefined;
         } & Record<string, any>;
       }>;
-      signInEmailOTP: import("better-auth").StrictEndpoint<"/sign-in/email-otp", {
+      signInEmailOTP: import("better-call").StrictEndpoint<"/sign-in/email-otp", {
         method: "POST";
         body: import("zod").ZodIntersection<import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2837,7 +2847,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           image?: string | null | undefined;
         };
       }>;
-      requestPasswordResetEmailOTP: import("better-auth").StrictEndpoint<"/email-otp/request-password-reset", {
+      requestPasswordResetEmailOTP: import("better-call").StrictEndpoint<"/email-otp/request-password-reset", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2869,7 +2879,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      forgetPasswordEmailOTP: import("better-auth").StrictEndpoint<"/forget-password/email-otp", {
+      forgetPasswordEmailOTP: import("better-call").StrictEndpoint<"/forget-password/email-otp", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2901,7 +2911,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      resetPasswordEmailOTP: import("better-auth").StrictEndpoint<"/email-otp/reset-password", {
+      resetPasswordEmailOTP: import("better-call").StrictEndpoint<"/email-otp/reset-password", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodString;
@@ -2934,13 +2944,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      requestEmailChangeEmailOTP: import("better-auth").StrictEndpoint<"/email-otp/request-email-change", {
+      requestEmailChangeEmailOTP: import("better-call").StrictEndpoint<"/email-otp/request-email-change", {
         method: "POST";
         body: import("zod").ZodObject<{
           newEmail: import("zod").ZodString;
           otp: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -2989,13 +2999,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         success: boolean;
       }>;
-      changeEmailEmailOTP: import("better-auth").StrictEndpoint<"/email-otp/change-email", {
+      changeEmailEmailOTP: import("better-call").StrictEndpoint<"/email-otp/change-email", {
         method: "POST";
         body: import("zod").ZodObject<{
           newEmail: import("zod").ZodString;
           otp: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3048,7 +3058,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       after: {
         matcher(context: import("better-auth").HookEndpointContext): boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
     rateLimit: ({
@@ -3097,7 +3107,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
   } | {
     id: "protobase-sign-up";
     endpoints: {
-      sendSignUpCode: import("better-auth").StrictEndpoint<string, {
+      sendSignUpCode: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodEmail>;
@@ -3105,7 +3115,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         sent: boolean;
       }>;
-      verifySignUpCode: import("better-auth").StrictEndpoint<string, {
+      verifySignUpCode: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodEmail>;
@@ -3114,7 +3124,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         ticket: string;
       }>;
-      createSignUpAccount: import("better-auth").StrictEndpoint<string, {
+      createSignUpAccount: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           ticket: import("zod").ZodString;
@@ -3136,8 +3146,18 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     init: (ctx: import("better-auth").AuthContext) => Promise<{
       context: {
         socialProviders: import("better-auth").OAuthProvider<object, Partial<import("better-auth").ProviderOptions<object>>>[];
+        genericOAuthPendingDiscovery: Map<string, {
+          config: import("better-auth/plugins").GenericOAuthConfig;
+          attempt?: Promise<void> | undefined;
+        }>;
       };
     }>;
+    hooks: {
+      before: {
+        matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+      }[];
+    };
     options: import("better-auth/plugins").GenericOAuthOptions<string>;
     $ERROR_CODES: {
       INVALID_OAUTH_CONFIGURATION: import("better-auth").RawError<"INVALID_OAUTH_CONFIGURATION">;
@@ -3147,7 +3167,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     id: "sso";
     version: string;
     endpoints: {
-      spMetadata: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/sp/metadata", {
+      spMetadata: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/saml2/sp/metadata", {
         method: "GET";
         query: import("zod").ZodObject<{
           providerId: import("zod").ZodString;
@@ -3165,12 +3185,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           };
         };
       }, Response>>;
-      registerSSOProvider: import("better-auth").StrictEndpoint<"/sso/register", {
+      registerSSOProvider: import("better-call").StrictEndpoint<"/sso/register", {
         method: "POST";
         body: import("zod").ZodObject<{
           [x: string]: import("zod").ZodOptional<import("zod").ZodAny>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3320,7 +3340,6 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
                                   description: string;
                                 };
                               };
-                              required: string[];
                             };
                           };
                           required: string[];
@@ -3371,7 +3390,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         domainVerified: boolean;
         domainVerificationToken: string;
       }>;
-      signInSSO: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sign-in/sso", {
+      signInSSO: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sign-in/sso", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodOptional<import("zod").ZodString>;
@@ -3493,7 +3512,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         url: string;
         redirect: boolean;
       }>>;
-      callbackSSO: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/callback/:providerId", {
+      callbackSSO: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/callback/:providerId", {
         method: "GET";
         query: import("zod").ZodObject<{
           code: import("zod").ZodOptional<import("zod").ZodString>;
@@ -3516,7 +3535,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           scope: "server";
         };
       }, never>>;
-      callbackSSOShared: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/callback", {
+      callbackSSOShared: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/callback", {
         metadata: {
           openapi: {
             operationId: string;
@@ -3539,7 +3558,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         }, import("zod/v4/core").$strip>;
         allowedMediaTypes: readonly ["application/x-www-form-urlencoded", "application/json"];
       }, never>>;
-      acsEndpoint: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/sp/acs/:providerId", {
+      acsEndpoint: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/saml2/sp/acs/:providerId", {
         method: ("GET" | "POST")[];
         body: import("zod").ZodOptional<import("zod").ZodObject<{
           SAMLResponse: import("zod").ZodString;
@@ -3569,7 +3588,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           scope: "server";
         };
       }, never>>;
-      sloEndpoint: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/sp/slo/:providerId", {
+      sloEndpoint: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/saml2/sp/slo/:providerId", {
         method: ("GET" | "POST")[];
         body: import("zod").ZodOptional<import("zod").ZodObject<{
           SAMLRequest: import("zod").ZodOptional<import("zod").ZodString>;
@@ -3590,12 +3609,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           scope: "server";
         };
       }, void | Response>>;
-      initiateSLO: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/saml2/logout/:providerId", {
+      initiateSLO: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/saml2/logout/:providerId", {
         method: "POST";
         body: import("zod").ZodObject<{
           callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3622,9 +3641,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           readonly scope: "server";
         };
       }, never>>;
-      listSSOProviders: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/providers", {
+      listSSOProviders: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/providers", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3700,9 +3719,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           spMetadataUrl: string;
         }[];
       }>>;
-      getSSOProvider: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/get-provider", {
+      getSSOProvider: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/get-provider", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3785,9 +3804,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         } | undefined;
         spMetadataUrl: string;
       }>>;
-      updateSSOProvider: ReturnType<(options: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/update-provider", {
+      updateSSOProvider: ReturnType<(options: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/update-provider", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3833,19 +3852,18 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
             pkce: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodBoolean>>>;
             overrideUserInfo: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodBoolean>>;
             mapping: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodObject<{
-              email: import("zod").ZodString;
+              email: import("zod").ZodOptional<import("zod").ZodString>;
               emailVerified: import("zod").ZodOptional<import("zod").ZodString>;
-              name: import("zod").ZodString;
+              name: import("zod").ZodOptional<import("zod").ZodString>;
               image: import("zod").ZodOptional<import("zod").ZodString>;
               extraFields: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
             }, import("zod/v4/core").$strict>>>;
           }, import("zod/v4/core").$strip>>;
           samlConfig: import("zod").ZodOptional<import("zod").ZodObject<{
-            audience: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
             mapping: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodObject<{
-              email: import("zod").ZodString;
+              email: import("zod").ZodOptional<import("zod").ZodString>;
               emailVerified: import("zod").ZodOptional<import("zod").ZodString>;
-              name: import("zod").ZodString;
+              name: import("zod").ZodOptional<import("zod").ZodString>;
               firstName: import("zod").ZodOptional<import("zod").ZodString>;
               lastName: import("zod").ZodOptional<import("zod").ZodString>;
               extraFields: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
@@ -3863,6 +3881,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
             }, import("zod/v4/core").$strip>>>;
             cert: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodArray<import("zod").ZodString>]>>>;
             entryPoint: import("zod").ZodOptional<import("zod").ZodString>;
+            audience: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
             callbackUrl: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodString>>;
             wantAssertionsSigned: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodBoolean>>;
             authnRequestsSigned: import("zod").ZodOptional<import("zod").ZodOptional<import("zod").ZodBoolean>>;
@@ -3948,9 +3967,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         } | undefined;
         spMetadataUrl: string;
       }>>;
-      deleteSSOProvider: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/delete-provider", {
+      deleteSSOProvider: ReturnType<(options?: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/delete-provider", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -3998,7 +4017,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         success: boolean;
       }>>;
     } & {
-      requestDomainVerification: ReturnType<(options: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/request-domain-verification", {
+      requestDomainVerification: ReturnType<(options: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/request-domain-verification", {
         method: "POST";
         body: import("zod").ZodObject<{
           providerId: import("zod").ZodString;
@@ -4020,7 +4039,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
             };
           };
         };
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -4046,7 +4065,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         domainVerificationToken: string;
       }>>;
-      verifyDomain: ReturnType<(options: import("@better-auth/sso").SSOOptions) => import("better-auth").StrictEndpoint<"/sso/verify-domain", {
+      verifyDomain: ReturnType<(options: import("@better-auth/sso").SSOOptions) => import("better-call").StrictEndpoint<"/sso/verify-domain", {
         method: "POST";
         body: import("zod").ZodObject<{
           providerId: import("zod").ZodString;
@@ -4071,7 +4090,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
             };
           };
         };
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -4133,7 +4152,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       before: {
         matcher: (context: import("better-auth").HookEndpointContext) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
   } | {
@@ -4186,10 +4205,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       };
     };
     endpoints: {
-      getSignInPolicy: import("better-auth").StrictEndpoint<"/policy/sign-in", {
+      getSignInPolicy: import("better-call").StrictEndpoint<"/policy/sign-in", {
         method: "GET";
-        use: import("better-auth").Middleware<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -4212,8 +4231,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               };
             };
           }>>[];
-        }, (inputContext: import("better-auth").MiddlewareInputContext<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }, (inputContext: import("better-call").MiddlewareInputContext<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -4288,10 +4307,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         effective: SignInPolicy;
         mail: boolean;
       }>;
-      setSignInPolicy: import("better-auth").StrictEndpoint<"/policy/sign-in", {
+      setSignInPolicy: import("better-call").StrictEndpoint<"/policy/sign-in", {
         method: "POST";
-        use: import("better-auth").Middleware<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -4314,8 +4333,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               };
             };
           }>>[];
-        }, (inputContext: import("better-auth").MiddlewareInputContext<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }, (inputContext: import("better-call").MiddlewareInputContext<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -4391,9 +4410,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         effective: SignInPolicy;
         mail: boolean;
       }>;
-      getSignInMethods: import("better-auth").StrictEndpoint<"/account/sign-in-methods", {
+      getSignInMethods: import("better-call").StrictEndpoint<"/account/sign-in-methods", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -4431,13 +4450,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       before: {
         matcher: (context: import("better-auth").HookEndpointContext) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
   } | {
     id: "protobase-gotrue-sessions";
     endpoints: {
-      goTrueSession: import("better-auth").StrictEndpoint<string, {
+      goTrueSession: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           sessionToken: import("zod").ZodString;
@@ -4476,7 +4495,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           email: string;
         };
       }>;
-      goTrueRefresh: import("better-auth").StrictEndpoint<string, {
+      goTrueRefresh: import("better-call").StrictEndpoint<string, {
         method: "POST";
         body: import("zod").ZodObject<{
           refreshToken: import("zod").ZodString;
@@ -4578,9 +4597,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       };
     };
     endpoints: {
-      getStaffSession: import("better-auth").StrictEndpoint<"/staff/session", {
+      getStaffSession: import("better-call").StrictEndpoint<"/staff/session", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -4606,9 +4625,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         staff: StaffSignIn | null;
       }>;
-      stopStaffSession: import("better-auth").StrictEndpoint<"/staff/stop", {
+      stopStaffSession: import("better-call").StrictEndpoint<"/staff/stop", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -4634,10 +4653,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         stopped: boolean;
       }>;
-      listStaffSignIns: import("better-auth").StrictEndpoint<"/staff/sign-ins", {
+      listStaffSignIns: import("better-call").StrictEndpoint<"/staff/sign-ins", {
         method: "GET";
-        use: import("better-auth").Middleware<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -4660,8 +4679,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               };
             };
           }>>[];
-        }, (inputContext: import("better-auth").MiddlewareInputContext<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }, (inputContext: import("better-call").MiddlewareInputContext<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -4730,7 +4749,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         signIns: StaffSignIn[];
       }>;
-      startStaffSignIn?: import("better-auth").StrictEndpoint<"/staff/sign-in", {
+      startStaffSignIn?: import("better-call").StrictEndpoint<"/staff/sign-in", {
         method: "POST";
         body: import("zod").ZodObject<{
           email: import("zod").ZodEmail;
@@ -4740,7 +4759,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         url: string;
       }> | undefined;
-      staffCallback?: import("better-auth").StrictEndpoint<"/staff/callback", {
+      staffCallback?: import("better-call").StrictEndpoint<"/staff/callback", {
         method: "GET";
         query: import("zod").ZodObject<{
           state: import("zod").ZodOptional<import("zod").ZodString>;
@@ -4751,7 +4770,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       before: {
         matcher: (context: import("better-auth").HookEndpointContext) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
   } | {
@@ -4779,9 +4798,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       };
     };
     endpoints: {
-      currentRole: import("better-auth").StrictEndpoint<"/role/current", {
+      currentRole: import("better-call").StrictEndpoint<"/role/current", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -4811,9 +4830,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           label: string;
         }[];
       }>;
-      switchRole: import("better-auth").StrictEndpoint<"/role/switch", {
+      switchRole: import("better-call").StrictEndpoint<"/role/switch", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -4846,7 +4865,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       before: {
         matcher: (ctx: import("better-auth").HookEndpointContext) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
   } | {
@@ -4854,7 +4873,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       before: {
         matcher: (ctx: import("better-auth").HookEndpointContext) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
   } | import("better-auth/plugins").DefaultOrganizationPlugin<{
@@ -5147,9 +5166,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
   }> | {
     id: "protobase-organizations";
     endpoints: {
-      setAppRoles: import("better-auth").StrictEndpoint<"/organization/set-app-roles", {
+      setAppRoles: import("better-call").StrictEndpoint<"/organization/set-app-roles", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -5186,9 +5205,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           createdAt: Date;
         };
       }>;
-      transferOwnership: import("better-auth").StrictEndpoint<"/organization/transfer-ownership", {
+      transferOwnership: import("better-call").StrictEndpoint<"/organization/transfer-ownership", {
         method: "POST";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -5221,9 +5240,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         owner: string;
       }>;
-      currentOrganization: import("better-auth").StrictEndpoint<"/organization/current", {
+      currentOrganization: import("better-call").StrictEndpoint<"/organization/current", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -5261,9 +5280,9 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           logo: string | null;
         };
       }>;
-      searchOrganizations: import("better-auth").StrictEndpoint<"/organization/search", {
+      searchOrganizations: import("better-call").StrictEndpoint<"/organization/search", {
         method: "GET";
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -5298,12 +5317,12 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         }[];
         total: number;
       }>;
-      acceptInvitation: import("better-auth").StrictEndpoint<"/invitation/accept", {
+      acceptInvitation: import("better-call").StrictEndpoint<"/invitation/accept", {
         method: "POST";
         body: import("zod").ZodObject<{
           token: import("zod").ZodString;
         }, import("zod/v4/core").$strip>;
-        use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
               id: string;
@@ -5342,13 +5361,13 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         matcher: (context: {
           path?: string;
         }) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
   } | {
     id: "protobase-users";
     endpoints: {
-      getInvitation: import("better-auth").StrictEndpoint<"/invitation", {
+      getInvitation: import("better-call").StrictEndpoint<"/invitation", {
         method: "GET";
         query: import("zod").ZodObject<{
           token: import("zod").ZodString;
@@ -5378,7 +5397,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           name: string;
         };
       }>;
-      signUpFromInvitation: import("better-auth").StrictEndpoint<"/invitation/sign-up", {
+      signUpFromInvitation: import("better-call").StrictEndpoint<"/invitation/sign-up", {
         method: "POST";
         body: import("zod").ZodObject<{
           token: import("zod").ZodString;
@@ -5400,10 +5419,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           organizationId: string;
         };
       }>;
-      inviteUser: import("better-auth").StrictEndpoint<"/users/invite", {
+      inviteUser: import("better-call").StrictEndpoint<"/users/invite", {
         method: "POST";
-        use: import("better-auth").Middleware<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5426,8 +5445,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               };
             };
           }>>[];
-        }, (inputContext: import("better-auth").MiddlewareInputContext<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }, (inputContext: import("better-call").MiddlewareInputContext<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5503,10 +5522,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         roles: string[];
         expiresAt: string;
       }>;
-      listUserInvitations: import("better-auth").StrictEndpoint<"/users/invitations", {
+      listUserInvitations: import("better-call").StrictEndpoint<"/users/invitations", {
         method: "GET";
-        use: import("better-auth").Middleware<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5529,8 +5548,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               };
             };
           }>>[];
-        }, (inputContext: import("better-auth").MiddlewareInputContext<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }, (inputContext: import("better-call").MiddlewareInputContext<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5604,10 +5623,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
           expiresAt: string;
         }[];
       }>;
-      cancelUserInvitation: import("better-auth").StrictEndpoint<"/users/invitations/cancel", {
+      cancelUserInvitation: import("better-call").StrictEndpoint<"/users/invitations/cancel", {
         method: "POST";
-        use: import("better-auth").Middleware<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5630,8 +5649,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               };
             };
           }>>[];
-        }, (inputContext: import("better-auth").MiddlewareInputContext<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }, (inputContext: import("better-call").MiddlewareInputContext<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5703,10 +5722,10 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
       }, {
         id: string;
       }>;
-      userRoles: import("better-auth").StrictEndpoint<"/users/roles", {
+      userRoles: import("better-call").StrictEndpoint<"/users/roles", {
         method: "GET";
-        use: import("better-auth").Middleware<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        use: import("better-call").Middleware<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5729,8 +5748,8 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
               };
             };
           }>>[];
-        }, (inputContext: import("better-auth").MiddlewareInputContext<{
-          use: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
+        }, (inputContext: import("better-call").MiddlewareInputContext<{
+          use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
             session: {
               session: Record<string, any> & {
                 id: string;
@@ -5808,7 +5827,7 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
         matcher: (context: {
           path?: string;
         }) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
   } | {
@@ -5816,186 +5835,2867 @@ export declare const createAuth: (options: CreateAuthOptions) => import("better-
     hooks: {
       after: {
         matcher: (ctx: import("better-auth").HookEndpointContext) => boolean;
-        handler: import("better-auth").Middleware<import("better-auth").MiddlewareOptions, (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<void>>;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
-  })[];
-  disabledPaths: string[];
-  databaseHooks: {
-    session?: {
-      create: {
-        before: (session: {
-          userId: string;
-          activeOrganizationId?: string | null;
-        } & Record<string, unknown>) => Promise<{
-          data: {
-            activeOrganizationId: string;
-            userId: string;
-          };
-        } | undefined>;
-      };
-      update: {
-        after: (session: {
-          userId: string;
-          activeOrganizationId?: string | null;
-        }) => Promise<void>;
-      };
-    } | undefined;
-    user: {
-      create: {
-        after?: ((user: import("better-auth").User & Record<string, unknown>, context: import("better-auth").GenericEndpointContext | null) => Promise<void>) | undefined;
-        before: (user: {
-          id: string;
-          createdAt: Date;
-          updatedAt: Date;
-          email: string;
-          emailVerified: boolean;
-          name: string;
-          image?: string | null | undefined;
-        } & Record<string, unknown>, context: import("better-auth").GenericEndpointContext | null) => Promise<{
-          data: {
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-          } & Record<string, unknown>;
-        }>;
-      };
-      update: {
-        before: (user: Partial<{
-          id: string;
-          createdAt: Date;
-          updatedAt: Date;
-          email: string;
-          emailVerified: boolean;
-          name: string;
-          image?: string | null | undefined;
-        }> & Record<string, unknown>) => Promise<{
-          data: Partial<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-          }> & Record<string, unknown>;
-        }>;
-      };
+  } | {
+    id: "protobase-mcp-signed-query-guard";
+    hooks: {
+      before: {
+        matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<never>>;
+      }[];
     };
-  };
-  rateLimit: {
-    enabled: true;
-    window: number;
-    max: number;
-    customRules: {
-      [signUpPaths.sendCode]: {
-        window: number;
-        max: number;
-      };
-      [signUpPaths.verifyCode]: {
-        window: number;
-        max: number;
-      };
-      [signUpPaths.create]: {
-        window: number;
-        max: number;
-      };
-      '/sign-in/email': {
-        window: number;
-        max: number;
-      };
-      '/staff/sign-in': {
-        window: number;
-        max: number;
-      };
-      '/invitation/sign-up': {
-        window: number;
-        max: number;
-      };
+  } | {
+    id: "protobase-mcp-request-defaults";
+    hooks: {
+      before: ({
+        matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          context: {
+            body: {
+              [x: string]: unknown;
+            };
+            query?: undefined;
+          };
+        } | {
+          context: {
+            query: {
+              [x: string]: unknown;
+            };
+            body?: undefined;
+          };
+        }>>;
+      } | {
+        matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+      })[];
     };
-  };
-  advanced: {
-    database?: {
-      generateId: "uuid";
-    } | undefined;
-    useSecureCookies: boolean;
-    defaultCookieAttributes: {
-      sameSite: "lax";
-      secure: boolean;
+  } | {
+    id: "protobase-mcp-setup-gate";
+    hooks: {
+      before: {
+        matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+      }[];
     };
-    backgroundTasks: {
-      handler: () => void;
+  } | {
+    id: "oauth-provider";
+    version: string;
+    options: NoInfer<import("@better-auth/oauth-provider").OAuthOptions<import("@better-auth/oauth-provider").Scope[]>>;
+    onRequest: (request: Request, ctx: import("better-auth").AuthContext) => Promise<{
+      response: Response;
+    } | {
+      request: Request;
+    } | void>;
+    init: (ctx: import("better-auth").AuthContext) => Promise<{
+      options: {
+        databaseHooks: {
+          session: {
+            delete: {
+              before(session: {
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                userId: string;
+                expiresAt: Date;
+                token: string;
+                ipAddress?: string | null | undefined;
+                userAgent?: string | null | undefined;
+              } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+              after(session: {
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                userId: string;
+                expiresAt: Date;
+                token: string;
+                ipAddress?: string | null | undefined;
+                userAgent?: string | null | undefined;
+              } & Record<string, unknown>, hookCtx: import("better-auth").GenericEndpointContext | null): Promise<void>;
+            };
+          };
+        };
+      };
+    }>;
+    hooks: {
+      before: {
+        matcher(ctx: import("better-auth").HookEndpointContext): any;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+      }[];
+      after: {
+        matcher(ctx: import("better-auth").HookEndpointContext): boolean;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          redirect: true;
+          url: string;
+        } | undefined>>;
+      }[];
     };
-  };
-  socialProviders?: import("better-auth").SocialProviders | undefined;
-  appName: string;
-  database: any;
-  baseURL: string | {
-    allowedHosts: string[];
-    fallback: string;
-    protocol: "https" | "http";
-  };
-  basePath: string;
-  secret: string;
-  trustedOrigins: string[];
-  emailAndPassword: {
-    resetPasswordTokenExpiresIn?: number | undefined;
-    revokeSessionsOnPasswordReset?: true | undefined;
-    sendResetPassword?: (({ user, url }: {
-      user: import("better-auth").User;
-      url: string;
-      token: string;
-    }) => Promise<void>) | undefined;
-    password?: {
-      verify: ({ hash, password }: {
-        hash: string;
-        password: string;
-      }) => Promise<boolean>;
-    } | undefined;
-    enabled: true;
-    disableSignUp: true;
-    minPasswordLength: number;
-  };
-}> & {
-  /** Issuer and audience of the tokens: `baseURL`, on every origin. */
-  issuer: string;
-  /** Every origin the app is served on, `baseURL`'s first. */
-  origins: string[];
-  /** The RP ID of new passkeys. */
-  passkeyDomain: string;
-  roles: string[];
-  roleDefinitions: RoleDefinitions;
-  organizations: ResolvedOrganizations | undefined;
-  defaultRole: string | undefined;
-  /** New users get their ids from `generateUserId` instead of Better Auth's random text. */
-  generatesUserIds: boolean;
-  mail: boolean;
-  /** The policy until an admin saves one. */
-  signInPolicy: SignInPolicy;
-  passwordReset: boolean;
-  /** Open sign-up is on and offered: the app asks for it, and can mail the codes. */
-  signUp: boolean;
-  /** The role of accounts made by open sign-up, while it is offered. */
-  signUpRole: string | undefined;
-  /** The app keeps each user's metadata, in the column `users.metadata` names. */
-  userMetadata: boolean;
-  socialProviders: string[];
-  /** The app's name it signs in and mails as: `PROTOBASE_APP_NAME`, else `appName`, else `Protobase`. */
-  appName: string;
-  operator: string | undefined;
-  platformSignIn: {
-    provider: string;
-    name: string;
-  } | undefined;
-  /** The id and name of each SAML provider, for the sign-in page. */
-  samlProviders: {
-    id: string;
-    name: string;
-  }[];
+    endpoints: {
+      getOAuthServerConfig: import("better-call").StrictEndpoint<"/.well-known/oauth-authorization-server", {
+        method: "GET";
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, import("@better-auth/oauth-provider").AuthServerMetadata>;
+      getOpenIdConfig: import("better-call").StrictEndpoint<"/.well-known/openid-configuration", {
+        method: "GET";
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, {
+        jwks_uri?: string | undefined;
+        userinfo_endpoint: string;
+        acr_values_supported?: string[] | undefined;
+        subject_types_supported: ("public" | "pairwise")[];
+        claims_supported: string[];
+        claims_parameter_supported?: boolean | undefined;
+        end_session_endpoint: string;
+        request_parameter_supported?: boolean | undefined;
+        request_uri_parameter_supported?: boolean | undefined;
+        prompt_values_supported: import("@better-auth/oauth-provider").Prompt[];
+        issuer: string;
+        authorization_endpoint: string;
+        token_endpoint: string;
+        registration_endpoint?: string | undefined;
+        scopes_supported?: string[] | undefined;
+        response_types_supported: "code"[];
+        response_modes_supported: "query"[];
+        grant_types_supported: import("@better-auth/oauth-provider").GrantType[];
+        token_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
+        token_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
+        service_documentation?: string | undefined;
+        ui_locales_supported?: string[] | undefined;
+        op_policy_uri?: string | undefined;
+        op_tos_uri?: string | undefined;
+        revocation_endpoint?: string | undefined;
+        revocation_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
+        revocation_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
+        introspection_endpoint?: string | undefined;
+        introspection_endpoint_auth_methods_supported?: import("@better-auth/oauth-provider").TokenEndpointAuthMethod[] | undefined;
+        introspection_endpoint_auth_signing_alg_values_supported?: import("better-auth").PrivateKeyJwtSigningAlgorithm[] | undefined;
+        code_challenge_methods_supported: "S256"[];
+        authorization_response_iss_parameter_supported?: boolean | undefined;
+        client_id_metadata_document_supported?: boolean | undefined;
+        backchannel_logout_supported?: boolean | undefined;
+        backchannel_logout_session_supported?: boolean | undefined;
+        dpop_signing_alg_values_supported?: import("better-auth/plugins").JWSAlgorithms[] | undefined;
+        id_token_signing_alg_values_supported: import("better-auth/plugins").JWSAlgorithms[] | ["HS256"];
+      }>;
+      oauth2Authorize: import("better-call").StrictEndpoint<"/oauth2/authorize", {
+        method: ("GET" | "POST")[];
+        body: import("zod").ZodObject<{}, import("zod/v4/core").$loose>;
+        redirectOnError: import("@better-auth/oauth-provider").OAuthRedirectOnError<import("better-auth").GenericEndpointContext, {
+          redirect: true;
+          url: string;
+        }>;
+        metadata: {
+          allowedMediaTypes: string[];
+          openapi: {
+            description: string;
+            parameters: ({
+              name: string;
+              in: "query";
+              required: false;
+              schema: {
+                type: "string";
+                format?: undefined;
+                minimum?: undefined;
+                items?: undefined;
+              };
+              description: string;
+            } | {
+              name: string;
+              in: "query";
+              required: true;
+              schema: {
+                type: "string";
+                format?: undefined;
+                minimum?: undefined;
+                items?: undefined;
+              };
+              description: string;
+            } | {
+              name: string;
+              in: "query";
+              required: false;
+              schema: {
+                type: "string";
+                format: string;
+                minimum?: undefined;
+                items?: undefined;
+              };
+              description: string;
+            } | {
+              name: string;
+              in: "query";
+              required: false;
+              schema: {
+                type: "integer";
+                minimum: number;
+                format?: undefined;
+                items?: undefined;
+              };
+              description: string;
+            } | {
+              name: string;
+              in: "query";
+              required: false;
+              schema: {
+                type: "array";
+                items: {
+                  type: "string";
+                };
+                format?: undefined;
+                minimum?: undefined;
+              };
+              description: string;
+            })[];
+            responses: {
+              "302": {
+                description: string;
+                headers: {
+                  Location: {
+                    description: string;
+                    schema: {
+                      type: string;
+                      format: string;
+                    };
+                  };
+                };
+              };
+              "400": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        error: {
+                          type: string;
+                        };
+                        error_description: {
+                          type: string;
+                        };
+                        state: {
+                          type: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        redirect: true;
+        url: string;
+      }>;
+      oauth2Consent: import("better-call").StrictEndpoint<"/oauth2/consent", {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          accept: import("zod").ZodBoolean;
+          scope: import("zod").ZodOptional<import("zod").ZodString>;
+          claims: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>]>>;
+          oauth_query: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        metadata: {
+          openapi: {
+            description: string;
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        redirect: {
+                          type: string;
+                          description: string;
+                          enum: boolean[];
+                        };
+                        url: {
+                          type: string;
+                          format: string;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        redirect: true;
+        url: string;
+      } | {
+        redirect: boolean;
+        url: string;
+      }>;
+      oauth2Continue: import("better-call").StrictEndpoint<"/oauth2/continue", {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          selected: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          created: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          postLogin: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          oauth_query: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        metadata: {
+          openapi: {
+            description: string;
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        redirect: {
+                          type: string;
+                          description: string;
+                          enum: boolean[];
+                        };
+                        url: {
+                          type: string;
+                          format: string;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        redirect: true;
+        url: string;
+      }>;
+      oauth2Token: import("better-call").StrictEndpoint<"/oauth2/token", {
+        method: "POST";
+        cloneRequest: true;
+        body: import("zod").ZodObject<{
+          grant_type: import("zod").ZodString;
+          client_id: import("zod").ZodOptional<import("zod").ZodString>;
+          client_secret: import("zod").ZodOptional<import("zod").ZodString>;
+          client_assertion: import("zod").ZodOptional<import("zod").ZodString>;
+          client_assertion_type: import("zod").ZodOptional<import("zod").ZodString>;
+          code: import("zod").ZodOptional<import("zod").ZodString>;
+          code_verifier: import("zod").ZodOptional<import("zod").ZodString>;
+          redirect_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+          refresh_token: import("zod").ZodOptional<import("zod").ZodString>;
+          resource: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodArray<import("zod").ZodString>]>>;
+          scope: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$loose>;
+        errorCodesByField: {
+          grant_type: {
+            missing: "invalid_request";
+            invalid: "unsupported_grant_type";
+          };
+          resource: {
+            invalid: "invalid_target";
+          };
+        };
+        metadata: {
+          noStore: boolean;
+          allowedMediaTypes: string[];
+          openapi: {
+            description: string;
+            parameters: {
+              name: string;
+              in: "header";
+              required: false;
+              schema: {
+                type: "string";
+              };
+              description: string;
+            }[];
+            requestBody: {
+              required: boolean;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      grant_type: {
+                        type: string;
+                        description: string;
+                      };
+                      client_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret: {
+                        type: string;
+                        description: string;
+                      };
+                      code: {
+                        type: string;
+                        description: string;
+                      };
+                      code_verifier: {
+                        type: string;
+                        description: string;
+                      };
+                      redirect_uri: {
+                        type: string;
+                        format: string;
+                        description: string;
+                      };
+                      refresh_token: {
+                        type: string;
+                        description: string;
+                      };
+                      resource: {
+                        oneOf: ({
+                          type: string;
+                          description: string;
+                          items?: undefined;
+                        } | {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        })[];
+                        description: string;
+                      };
+                      scope: {
+                        type: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        access_token: {
+                          type: string;
+                          description: string;
+                        };
+                        token_type: {
+                          type: string;
+                          description: string;
+                          enum: string[];
+                        };
+                        expires_in: {
+                          type: string;
+                          description: string;
+                        };
+                        refresh_token: {
+                          type: string;
+                          description: string;
+                        };
+                        scope: {
+                          type: string;
+                          description: string;
+                        };
+                        id_token: {
+                          type: string;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+              "400": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        error: {
+                          type: string;
+                        };
+                        error_description: {
+                          type: string;
+                        };
+                        error_uri: {
+                          type: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        expires_in: number;
+        access_token: string;
+        expires_at: number;
+        token_type: import("@better-auth/oauth-provider").TokenType;
+        refresh_token: string | undefined;
+        scope: string;
+        id_token: string | undefined;
+      }>;
+      oauth2Introspect: import("better-call").StrictEndpoint<"/oauth2/introspect", {
+        method: "POST";
+        cloneRequest: true;
+        body: import("zod").ZodObject<{
+          client_id: import("zod").ZodOptional<import("zod").ZodString>;
+          client_secret: import("zod").ZodOptional<import("zod").ZodString>;
+          client_assertion: import("zod").ZodOptional<import("zod").ZodString>;
+          client_assertion_type: import("zod").ZodOptional<import("zod").ZodString>;
+          token: import("zod").ZodString;
+          token_type_hint: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          noStore: boolean;
+          allowedMediaTypes: string[];
+          openapi: {
+            description: string;
+            requestBody: {
+              required: boolean;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      client_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret: {
+                        type: string;
+                        description: string;
+                      };
+                      token: {
+                        type: string;
+                        description: string;
+                      };
+                      token_type_hint: {
+                        type: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        active: {
+                          type: string;
+                          description: string;
+                        };
+                        scope: {
+                          type: string;
+                          description: string;
+                        };
+                        client_id: {
+                          type: string;
+                          description: string;
+                        };
+                        username: {
+                          type: string;
+                          description: string;
+                        };
+                        token_type: {
+                          type: string;
+                          description: string;
+                        };
+                        exp: {
+                          type: string;
+                          description: string;
+                        };
+                        iat: {
+                          type: string;
+                          description: string;
+                        };
+                        nbf: {
+                          type: string;
+                          description: string;
+                        };
+                        sub: {
+                          type: string;
+                          description: string;
+                        };
+                        aud: {
+                          type: string;
+                          description: string;
+                        };
+                        iss: {
+                          type: string;
+                          description: string;
+                        };
+                        jti: {
+                          type: string;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+              "400": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        error: {
+                          type: string;
+                        };
+                        error_description: {
+                          type: string;
+                        };
+                        error_uri: {
+                          type: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, import("jose").JWTPayload>;
+      oauth2Revoke: import("better-call").StrictEndpoint<"/oauth2/revoke", {
+        method: "POST";
+        cloneRequest: true;
+        body: import("zod").ZodObject<{
+          client_id: import("zod").ZodOptional<import("zod").ZodString>;
+          client_secret: import("zod").ZodOptional<import("zod").ZodString>;
+          client_assertion: import("zod").ZodOptional<import("zod").ZodString>;
+          client_assertion_type: import("zod").ZodOptional<import("zod").ZodString>;
+          token: import("zod").ZodString;
+          token_type_hint: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          allowedMediaTypes: string[];
+          openapi: {
+            description: string;
+            requestBody: {
+              required: boolean;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      client_id: {
+                        type: string;
+                        description: string;
+                      };
+                      client_secret: {
+                        type: string;
+                        description: string;
+                      };
+                      token: {
+                        type: string;
+                        description: string;
+                      };
+                      token_type_hint: {
+                        type: string;
+                        description: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      description: string;
+                    };
+                  };
+                };
+              };
+              "400": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        error: {
+                          type: string;
+                        };
+                        error_description: {
+                          type: string;
+                        };
+                        error_uri: {
+                          type: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, null | undefined>;
+      oauth2UserInfo: import("better-call").StrictEndpoint<"/oauth2/userinfo", {
+        method: ("GET" | "POST")[];
+        body: import("zod").ZodOptional<import("zod").ZodObject<{
+          access_token: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$loose>>;
+        metadata: {
+          noStore: boolean;
+          allowedMediaTypes: string[];
+          openapi: {
+            description: string;
+            security: ({
+              bearerAuth: never[];
+              OAuth2?: undefined;
+            } | {
+              OAuth2: string[];
+              bearerAuth?: undefined;
+            })[];
+            parameters: {
+              name: string;
+              in: "header";
+              required: false;
+              schema: {
+                type: "string";
+              };
+              description: string;
+            }[];
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        sub: {
+                          type: string;
+                          description: string;
+                        };
+                        email: {
+                          type: string;
+                          format: string;
+                          nullable: boolean;
+                          description: string;
+                        };
+                        name: {
+                          type: string;
+                          nullable: boolean;
+                          description: string;
+                        };
+                        picture: {
+                          type: string;
+                          format: string;
+                          nullable: boolean;
+                          description: string;
+                        };
+                        given_name: {
+                          type: string;
+                          nullable: boolean;
+                          description: string;
+                        };
+                        family_name: {
+                          type: string;
+                          nullable: boolean;
+                          description: string;
+                        };
+                        email_verified: {
+                          type: string;
+                          nullable: boolean;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+              "401": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        error: {
+                          type: string;
+                        };
+                        error_description: {
+                          type: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+              "403": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        error: {
+                          type: string;
+                        };
+                        error_description: {
+                          type: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, {
+        sub: unknown;
+      }>;
+      oauth2EndSession: import("better-call").StrictEndpoint<"/oauth2/end-session", {
+        method: ("GET" | "POST")[];
+        body: import("zod").ZodOptional<import("zod").ZodObject<{
+          id_token_hint: import("zod").ZodOptional<import("zod").ZodString>;
+          client_id: import("zod").ZodOptional<import("zod").ZodString>;
+          post_logout_redirect_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+          state: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        query: import("zod").ZodOptional<import("zod").ZodObject<{
+          id_token_hint: import("zod").ZodOptional<import("zod").ZodString>;
+          client_id: import("zod").ZodOptional<import("zod").ZodString>;
+          post_logout_redirect_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+          state: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        metadata: {
+          noStore: boolean;
+          allowedMediaTypes: string[];
+          $Infer: {
+            body: {
+              id_token_hint?: string;
+              client_id?: string;
+              post_logout_redirect_uri?: string;
+              state?: string;
+            } | {
+              query: {
+                id_token_hint?: string;
+                client_id?: string;
+                post_logout_redirect_uri?: string;
+                state?: string;
+              };
+            };
+            query: {
+              id_token_hint?: string;
+              client_id?: string;
+              post_logout_redirect_uri?: string;
+              state?: string;
+            };
+          };
+          openapi: {
+            description: string;
+            responses: {
+              "200": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        redirect_uri: {
+                          type: string;
+                          format: string;
+                          description: string;
+                        };
+                        message: {
+                          type: string;
+                          description: string;
+                        };
+                      };
+                    };
+                  };
+                  "text/html": {
+                    schema: {
+                      type: "string";
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, Response | {
+        redirect: true;
+        url: string;
+      } | null>;
+      oauth2EndSessionConfirmation: import("better-call").StrictEndpoint<"/oauth2/end-session/confirm", {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          action: import("zod").ZodLiteral<"confirm">;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          noStore: boolean;
+          allowedMediaTypes: string[];
+          scope: "http";
+        };
+      }, Response | {
+        redirect: true;
+        url: string;
+      } | null>;
+      registerOAuthClient: import("better-call").StrictEndpoint<"/oauth2/register", {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+          scope: import("zod").ZodOptional<import("zod").ZodString>;
+          client_name: import("zod").ZodOptional<import("zod").ZodString>;
+          client_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          software_id: import("zod").ZodOptional<import("zod").ZodString>;
+          software_version: import("zod").ZodOptional<import("zod").ZodString>;
+          software_statement: import("zod").ZodOptional<import("zod").ZodString>;
+          post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+          backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+          backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          token_endpoint_auth_method: import("zod").ZodOptional<import("zod").ZodString>;
+          jwks: import("zod").ZodOptional<import("zod").ZodObject<{
+            keys: import("zod").ZodArray<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+          }, import("zod/v4/core").$strip>>;
+          jwks_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
+            code: "code";
+          }>>>;
+          application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
+            web: "web";
+            native: "native";
+          }>>;
+          subject_type: import("zod").ZodOptional<import("zod").ZodEnum<{
+            public: "public";
+            pairwise: "pairwise";
+          }>>;
+          dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          resources: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          skip_consent: import("zod").ZodOptional<import("zod").ZodNever>;
+        }, import("zod/v4/core").$strip>;
+        errorCodesByField: {
+          redirect_uris: "invalid_redirect_uri";
+          post_logout_redirect_uris: "invalid_redirect_uri";
+          software_statement: "invalid_software_statement";
+          resources: "invalid_target";
+        };
+        defaultError: "invalid_client_metadata";
+        metadata: {
+          noStore: boolean;
+          openapi: {
+            description: string;
+            responses: {
+              "201": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        client_id: {
+                          type: string;
+                          description: string;
+                        };
+                        client_secret: {
+                          type: string;
+                          description: string;
+                        };
+                        client_secret_expires_at: {
+                          type: string;
+                          description: string;
+                        };
+                        scope: {
+                          type: string;
+                          description: string;
+                        };
+                        user_id: {
+                          type: string;
+                          description: string;
+                        };
+                        client_id_issued_at: {
+                          type: string;
+                          description: string;
+                        };
+                        client_name: {
+                          type: string;
+                          description: string;
+                        };
+                        client_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        logo_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        contacts: {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        };
+                        tos_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        policy_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        software_id: {
+                          type: string;
+                          description: string;
+                        };
+                        software_version: {
+                          type: string;
+                          description: string;
+                        };
+                        software_statement: {
+                          type: string;
+                          description: string;
+                        };
+                        redirect_uris: {
+                          type: string;
+                          items: {
+                            type: string;
+                            format: string;
+                          };
+                          description: string;
+                        };
+                        post_logout_redirect_uris: {
+                          type: string;
+                          items: {
+                            type: string;
+                            format: string;
+                          };
+                          description: string;
+                        };
+                        backchannel_logout_uri: {
+                          type: string;
+                          format: string;
+                          description: string;
+                        };
+                        backchannel_logout_session_required: {
+                          type: string;
+                          description: string;
+                        };
+                        token_endpoint_auth_method: {
+                          type: string;
+                          description: string;
+                        };
+                        grant_types: {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        };
+                        response_types: {
+                          type: string;
+                          items: {
+                            type: string;
+                            enum: string[];
+                          };
+                          description: string;
+                        };
+                        application_type: {
+                          type: string;
+                          description: string;
+                          enum: string[];
+                        };
+                        resources: {
+                          type: string;
+                          items: {
+                            type: string;
+                            format: string;
+                          };
+                          description: string;
+                        };
+                        disabled: {
+                          type: string;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
+      adminCreateOAuthClient: import("better-call").StrictEndpoint<"/admin/oauth2/create-client", {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+          scope: import("zod").ZodOptional<import("zod").ZodString>;
+          client_name: import("zod").ZodOptional<import("zod").ZodString>;
+          client_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          software_id: import("zod").ZodOptional<import("zod").ZodString>;
+          software_version: import("zod").ZodOptional<import("zod").ZodString>;
+          software_statement: import("zod").ZodOptional<import("zod").ZodString>;
+          post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+          backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+          backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          token_endpoint_auth_method: import("zod").ZodOptional<import("zod").ZodString>;
+          application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
+            web: "web";
+            native: "native";
+          }>>;
+          jwks: import("zod").ZodOptional<import("zod").ZodObject<{
+            keys: import("zod").ZodArray<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+          }, import("zod/v4/core").$strip>>;
+          jwks_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          client_credentials_scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          resources: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
+            code: "code";
+          }>>>;
+          client_secret_expires_at: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodNumber]>>>;
+          skip_consent: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          enable_end_session: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          require_pkce: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          subject_type: import("zod").ZodOptional<import("zod").ZodEnum<{
+            public: "public";
+            pairwise: "pairwise";
+          }>>;
+          metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          noStore: boolean;
+          SERVER_ONLY: true;
+          openapi: {
+            description: string;
+            responses: {
+              "201": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        client_id: {
+                          type: string;
+                          description: string;
+                        };
+                        client_secret: {
+                          type: string;
+                          description: string;
+                        };
+                        client_secret_expires_at: {
+                          type: string;
+                          description: string;
+                        };
+                        scope: {
+                          type: string;
+                          description: string;
+                        };
+                        client_credentials_scopes: {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        };
+                        user_id: {
+                          type: string;
+                          description: string;
+                        };
+                        client_id_issued_at: {
+                          type: string;
+                          description: string;
+                        };
+                        client_name: {
+                          type: string;
+                          description: string;
+                        };
+                        client_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        logo_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        contacts: {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        };
+                        tos_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        policy_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        software_id: {
+                          type: string;
+                          description: string;
+                        };
+                        software_version: {
+                          type: string;
+                          description: string;
+                        };
+                        software_statement: {
+                          type: string;
+                          description: string;
+                        };
+                        redirect_uris: {
+                          type: string;
+                          items: {
+                            type: string;
+                            format: string;
+                          };
+                          description: string;
+                        };
+                        token_endpoint_auth_method: {
+                          type: string;
+                          description: string;
+                        };
+                        grant_types: {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        };
+                        response_types: {
+                          type: string;
+                          items: {
+                            type: string;
+                            enum: string[];
+                          };
+                          description: string;
+                        };
+                        application_type: {
+                          type: string;
+                          description: string;
+                          enum: string[];
+                        };
+                        resources: {
+                          type: string;
+                          items: {
+                            type: string;
+                            format: string;
+                          };
+                          description: string;
+                        };
+                        disabled: {
+                          type: string;
+                          description: string;
+                        };
+                        require_pkce: {
+                          type: string;
+                          description: string;
+                          default: boolean;
+                        };
+                        metadata: {
+                          type: string;
+                          additionalProperties: boolean;
+                          nullable: boolean;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
+      createOAuthClient: import("better-call").StrictEndpoint<"/oauth2/create-client", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        body: import("zod").ZodObject<{
+          redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+          scope: import("zod").ZodOptional<import("zod").ZodString>;
+          client_name: import("zod").ZodOptional<import("zod").ZodString>;
+          client_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          software_id: import("zod").ZodOptional<import("zod").ZodString>;
+          software_version: import("zod").ZodOptional<import("zod").ZodString>;
+          software_statement: import("zod").ZodOptional<import("zod").ZodString>;
+          post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+          backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+          backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          token_endpoint_auth_method: import("zod").ZodOptional<import("zod").ZodString>;
+          application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
+            web: "web";
+            native: "native";
+          }>>;
+          jwks: import("zod").ZodOptional<import("zod").ZodObject<{
+            keys: import("zod").ZodArray<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+          }, import("zod/v4/core").$strip>>;
+          jwks_uri: import("zod").ZodOptional<import("zod").ZodString>;
+          grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+          response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
+            code: "code";
+          }>>>;
+          dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          noStore: boolean;
+          openapi: {
+            description: string;
+            responses: {
+              "201": {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        client_id: {
+                          type: string;
+                          description: string;
+                        };
+                        client_secret: {
+                          type: string;
+                          description: string;
+                        };
+                        client_secret_expires_at: {
+                          type: string;
+                          description: string;
+                        };
+                        scope: {
+                          type: string;
+                          description: string;
+                        };
+                        user_id: {
+                          type: string;
+                          description: string;
+                        };
+                        client_id_issued_at: {
+                          type: string;
+                          description: string;
+                        };
+                        client_name: {
+                          type: string;
+                          description: string;
+                        };
+                        client_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        logo_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        contacts: {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        };
+                        tos_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        policy_uri: {
+                          type: string;
+                          description: string;
+                        };
+                        software_id: {
+                          type: string;
+                          description: string;
+                        };
+                        software_version: {
+                          type: string;
+                          description: string;
+                        };
+                        software_statement: {
+                          type: string;
+                          description: string;
+                        };
+                        redirect_uris: {
+                          type: string;
+                          items: {
+                            type: string;
+                            format: string;
+                          };
+                          description: string;
+                        };
+                        token_endpoint_auth_method: {
+                          type: string;
+                          description: string;
+                        };
+                        grant_types: {
+                          type: string;
+                          items: {
+                            type: string;
+                          };
+                          description: string;
+                        };
+                        response_types: {
+                          type: string;
+                          items: {
+                            type: string;
+                            enum: string[];
+                          };
+                          description: string;
+                        };
+                        application_type: {
+                          type: string;
+                          description: string;
+                          enum: string[];
+                        };
+                        resources: {
+                          type: string;
+                          items: {
+                            type: string;
+                            format: string;
+                          };
+                          description: string;
+                        };
+                        disabled: {
+                          type: string;
+                          description: string;
+                        };
+                        metadata: {
+                          type: string;
+                          additionalProperties: boolean;
+                          nullable: boolean;
+                          description: string;
+                        };
+                      };
+                      required: string[];
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
+      getOAuthClient: import("better-call").StrictEndpoint<"/oauth2/get-client", {
+        method: "GET";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        query: import("zod").ZodObject<{
+          client_id: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClient>;
+      getOAuthClientPublic: import("better-call").StrictEndpoint<"/oauth2/public-client", {
+        method: "GET";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        query: import("zod").ZodObject<{
+          client_id: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClient>;
+      getOAuthClientPublicPrelogin: import("better-call").StrictEndpoint<"/oauth2/public-client-prelogin", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
+        body: import("zod").ZodObject<{
+          client_id: import("zod").ZodString;
+          oauth_query: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClient>;
+      getOAuthClients: import("better-call").StrictEndpoint<"/oauth2/get-clients", {
+        method: "GET";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClient[] | null>;
+      adminUpdateOAuthClient: import("better-call").StrictEndpoint<"/admin/oauth2/update-client", {
+        method: "PATCH";
+        body: import("zod").ZodObject<{
+          client_id: import("zod").ZodString;
+          update: import("zod").ZodObject<{
+            redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+            scope: import("zod").ZodOptional<import("zod").ZodString>;
+            client_name: import("zod").ZodOptional<import("zod").ZodString>;
+            client_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            software_id: import("zod").ZodOptional<import("zod").ZodString>;
+            software_version: import("zod").ZodOptional<import("zod").ZodString>;
+            software_statement: import("zod").ZodOptional<import("zod").ZodString>;
+            post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+            backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+            backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
+              web: "web";
+              native: "native";
+            }>>;
+            grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            client_credentials_scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
+              code: "code";
+            }>>>;
+            client_secret_expires_at: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodNumber]>>;
+            skip_consent: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            enable_end_session: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            disabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            dpop_bound_access_tokens: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            metadata: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+          }, import("zod/v4/core").$strip>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          SERVER_ONLY: true;
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClientAdministrativeResponse>;
+      updateOAuthClient: import("better-call").StrictEndpoint<"/oauth2/update-client", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        body: import("zod").ZodObject<{
+          client_id: import("zod").ZodString;
+          update: import("zod").ZodObject<{
+            redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+            scope: import("zod").ZodOptional<import("zod").ZodString>;
+            client_name: import("zod").ZodOptional<import("zod").ZodString>;
+            client_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            logo_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            contacts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            tos_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            policy_uri: import("zod").ZodOptional<import("zod").ZodString>;
+            software_id: import("zod").ZodOptional<import("zod").ZodString>;
+            software_version: import("zod").ZodOptional<import("zod").ZodString>;
+            software_statement: import("zod").ZodOptional<import("zod").ZodString>;
+            post_logout_redirect_uris: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodURL>>;
+            backchannel_logout_uri: import("zod").ZodOptional<import("zod").ZodURL>;
+            backchannel_logout_session_required: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            application_type: import("zod").ZodOptional<import("zod").ZodEnum<{
+              web: "web";
+              native: "native";
+            }>>;
+            grant_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            response_types: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
+              code: "code";
+            }>>>;
+          }, import("zod/v4/core").$strip>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClientRegistrationResponse>;
+      rotateClientSecret: import("better-call").StrictEndpoint<"/oauth2/client/rotate-secret", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        body: import("zod").ZodObject<{
+          client_id: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          noStore: boolean;
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthClient>;
+      rotateClientKeys: import("better-call").StrictEndpoint<"/oauth2/client/rotate-keys", {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          client_assertion: import("zod").ZodString;
+          client_assertion_type: import("zod").ZodString;
+          jwks: import("zod").ZodObject<{
+            keys: import("zod").ZodArray<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
+          }, import("zod/v4/core").$strip>;
+        }, import("zod/v4/core").$strip>;
+        errorCodesByField: {
+          client_assertion: "invalid_client";
+          client_assertion_type: "invalid_client";
+          jwks: "invalid_client_metadata";
+        };
+        metadata: {
+          noStore: boolean;
+          openapi: {
+            description: string;
+          };
+        };
+      }, {
+        client_id: string;
+        jwks: {
+          keys: Record<string, unknown>[];
+        };
+      }>;
+      deleteOAuthClient: import("better-call").StrictEndpoint<"/oauth2/delete-client", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        body: import("zod").ZodObject<{
+          client_id: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, void>;
+      getOAuthConsent: import("better-call").StrictEndpoint<"/oauth2/get-consent", {
+        method: "GET";
+        query: import("zod").ZodObject<{
+          id: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>>;
+      getOAuthConsents: import("better-call").StrictEndpoint<"/oauth2/get-consents", {
+        method: "GET";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]>[]>;
+      updateOAuthConsent: import("better-call").StrictEndpoint<"/oauth2/update-consent", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        body: import("zod").ZodObject<{
+          id: import("zod").ZodString;
+          update: import("zod").ZodObject<{
+            scopes: import("zod").ZodArray<import("zod").ZodString>;
+          }, import("zod/v4/core").$strip>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, import("@better-auth/oauth-provider").OAuthConsent<import("@better-auth/oauth-provider").Scope[]> | null>;
+      deleteOAuthConsent: import("better-call").StrictEndpoint<"/oauth2/delete-consent", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        body: import("zod").ZodObject<{
+          id: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, void>;
+      adminCreateOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources", {
+        method: "POST";
+        body: import("zod").ZodObject<{
+          identifier: import("zod").ZodNonOptional<import("zod").ZodOptional<import("zod").ZodString>>;
+          name: import("zod").ZodOptional<import("zod").ZodString>;
+          accessTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+          refreshTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+          signingAlgorithm: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodEnum<{
+            RS256: "RS256";
+            PS256: "PS256";
+            ES256: "ES256";
+            ES512: "ES512";
+            EdDSA: "EdDSA";
+          }>>>;
+          signingKeyId: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+          allowedScopes: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodString>>>;
+          customClaims: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
+          dpopBoundAccessTokensRequired: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          disabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          metadata: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, import("@better-auth/oauth-provider").OAuthResource>;
+      adminListOAuthResources: import("better-call").StrictEndpoint<"/admin/oauth2/resources", {
+        method: "GET";
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, import("@better-auth/oauth-provider").OAuthResource[]>;
+      adminGetOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
+        method: "GET";
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, import("@better-auth/oauth-provider").OAuthResource>;
+      adminUpdateOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
+        method: "PATCH";
+        body: import("zod").ZodObject<{
+          identifier: import("zod").ZodOptional<import("zod").ZodString>;
+          name: import("zod").ZodOptional<import("zod").ZodString>;
+          accessTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+          refreshTokenTtl: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+          signingAlgorithm: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodEnum<{
+            RS256: "RS256";
+            PS256: "PS256";
+            ES256: "ES256";
+            ES512: "ES512";
+            EdDSA: "EdDSA";
+          }>>>;
+          signingKeyId: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+          allowedScopes: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodString>>>;
+          customClaims: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
+          dpopBoundAccessTokensRequired: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          disabled: import("zod").ZodOptional<import("zod").ZodBoolean>;
+          metadata: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
+        }, import("zod/v4/core").$strip>;
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, import("@better-auth/oauth-provider").OAuthResource>;
+      adminDeleteOAuthResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier", {
+        method: "DELETE";
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, {
+        deleted: boolean;
+      }>;
+      adminLinkClientResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
+        method: "POST";
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, {
+        linked: boolean;
+      }>;
+      adminUnlinkClientResource: import("better-call").StrictEndpoint<"/admin/oauth2/resources/:identifier/clients/:client_id", {
+        method: "DELETE";
+        metadata: {
+          SERVER_ONLY: true;
+        };
+      }, {
+        unlinked: boolean;
+      }>;
+    };
+    schema: {
+      oauthClient: {
+        modelName: string;
+        fields: {
+          clientId: {
+            type: "string";
+            unique: true;
+            required: true;
+          };
+          clientSecret: {
+            type: "string";
+            required: false;
+          };
+          clientDiscoveryId: {
+            type: "string";
+            required: false;
+          };
+          disabled: {
+            type: "boolean";
+            defaultValue: false;
+            required: false;
+          };
+          skipConsent: {
+            type: "boolean";
+            required: false;
+          };
+          enableEndSession: {
+            type: "boolean";
+            required: false;
+          };
+          subjectType: {
+            type: "string";
+            required: false;
+          };
+          scopes: {
+            type: "string[]";
+            required: false;
+          };
+          clientCredentialsScopes: {
+            type: "string[]";
+            required: false;
+            defaultValue: never[];
+          };
+          userId: {
+            type: "string";
+            required: false;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          createdAt: {
+            type: "date";
+            required: false;
+          };
+          updatedAt: {
+            type: "date";
+            required: false;
+          };
+          name: {
+            type: "string";
+            required: false;
+          };
+          uri: {
+            type: "string";
+            required: false;
+          };
+          icon: {
+            type: "string";
+            required: false;
+          };
+          contacts: {
+            type: "string[]";
+            required: false;
+          };
+          tos: {
+            type: "string";
+            required: false;
+          };
+          policy: {
+            type: "string";
+            required: false;
+          };
+          softwareId: {
+            type: "string";
+            required: false;
+          };
+          softwareVersion: {
+            type: "string";
+            required: false;
+          };
+          softwareStatement: {
+            type: "string";
+            required: false;
+          };
+          redirectUris: {
+            type: "string[]";
+            required: true;
+          };
+          postLogoutRedirectUris: {
+            type: "string[]";
+            required: false;
+          };
+          backchannelLogoutUri: {
+            type: "string";
+            required: false;
+          };
+          backchannelLogoutSessionRequired: {
+            type: "boolean";
+            required: false;
+          };
+          tokenEndpointAuthMethod: {
+            type: "string";
+            required: false;
+          };
+          applicationType: {
+            type: "string";
+            required: false;
+          };
+          jwks: {
+            type: "string";
+            required: false;
+          };
+          jwksUri: {
+            type: "string";
+            required: false;
+          };
+          grantTypes: {
+            type: "string[]";
+            required: false;
+          };
+          responseTypes: {
+            type: "string[]";
+            required: false;
+          };
+          requirePKCE: {
+            type: "boolean";
+            required: false;
+          };
+          dpopBoundAccessTokens: {
+            type: "boolean";
+            required: false;
+            defaultValue: false;
+          };
+          referenceId: {
+            type: "string";
+            required: false;
+          };
+          metadata: {
+            type: "json";
+            required: false;
+          };
+        };
+      };
+      oauthResource: {
+        modelName: string;
+        fields: {
+          identifier: {
+            type: "string";
+            required: true;
+            unique: true;
+          };
+          name: {
+            type: "string";
+            required: true;
+          };
+          accessTokenTtl: {
+            type: "number";
+            required: false;
+          };
+          refreshTokenTtl: {
+            type: "number";
+            required: false;
+          };
+          signingAlgorithm: {
+            type: "string";
+            required: false;
+          };
+          signingKeyId: {
+            type: "string";
+            required: false;
+          };
+          allowedScopes: {
+            type: "string[]";
+            required: false;
+          };
+          customClaims: {
+            type: "json";
+            required: false;
+          };
+          dpopBoundAccessTokensRequired: {
+            type: "boolean";
+            required: false;
+            defaultValue: false;
+          };
+          disabled: {
+            type: "boolean";
+            required: false;
+            defaultValue: false;
+          };
+          createdAt: {
+            type: "date";
+            required: false;
+          };
+          updatedAt: {
+            type: "date";
+            required: false;
+          };
+          policyVersion: {
+            type: "number";
+            required: false;
+            defaultValue: number;
+          };
+          metadata: {
+            type: "json";
+            required: false;
+          };
+        };
+      };
+      oauthClientResource: {
+        modelName: string;
+        fields: {
+          clientId: {
+            type: "string";
+            required: true;
+            references: {
+              model: string;
+              field: string;
+              onDelete: "cascade";
+            };
+            index: true;
+          };
+          resourceId: {
+            type: "string";
+            required: true;
+            references: {
+              model: string;
+              field: string;
+              onDelete: "cascade";
+            };
+            index: true;
+          };
+          metadata: {
+            type: "json";
+            required: false;
+          };
+          createdAt: {
+            type: "date";
+            required: false;
+          };
+        };
+        indexes: {
+          fields: [string, string];
+          unique: true;
+        }[];
+      };
+      oauthRefreshToken: {
+        fields: {
+          token: {
+            type: "string";
+            required: true;
+            unique: true;
+          };
+          clientId: {
+            type: "string";
+            required: true;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          sessionId: {
+            type: "string";
+            required: false;
+            references: {
+              model: string;
+              field: string;
+              onDelete: "set null";
+            };
+            index: true;
+          };
+          userId: {
+            type: "string";
+            required: true;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          referenceId: {
+            type: "string";
+            required: false;
+          };
+          authorizationCodeId: {
+            type: "string";
+            required: false;
+            index: true;
+          };
+          resources: {
+            type: "string[]";
+            required: false;
+          };
+          requestedUserInfoClaims: {
+            type: "string[]";
+            required: false;
+          };
+          expiresAt: {
+            type: "date";
+          };
+          createdAt: {
+            type: "date";
+          };
+          revoked: {
+            type: "date";
+            required: false;
+          };
+          rotatedAt: {
+            type: "date";
+            required: false;
+          };
+          rotationReplayResponse: {
+            type: "string";
+            required: false;
+          };
+          rotationReplayExpiresAt: {
+            type: "date";
+            required: false;
+          };
+          authTime: {
+            type: "date";
+            required: false;
+          };
+          confirmation: {
+            type: "json";
+            required: false;
+          };
+          scopes: {
+            type: "string[]";
+            required: true;
+          };
+        };
+      };
+      oauthAccessToken: {
+        modelName: string;
+        fields: {
+          token: {
+            type: "string";
+            unique: true;
+          };
+          clientId: {
+            type: "string";
+            required: true;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          sessionId: {
+            type: "string";
+            required: false;
+            references: {
+              model: string;
+              field: string;
+              onDelete: "set null";
+            };
+            index: true;
+          };
+          userId: {
+            type: "string";
+            required: false;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          referenceId: {
+            type: "string";
+            required: false;
+          };
+          authorizationCodeId: {
+            type: "string";
+            required: false;
+            index: true;
+          };
+          resources: {
+            type: "string[]";
+            required: false;
+          };
+          requestedUserInfoClaims: {
+            type: "string[]";
+            required: false;
+          };
+          refreshId: {
+            type: "string";
+            required: false;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          expiresAt: {
+            type: "date";
+          };
+          createdAt: {
+            type: "date";
+          };
+          revoked: {
+            type: "date";
+            required: false;
+          };
+          confirmation: {
+            type: "json";
+            required: false;
+          };
+          scopes: {
+            type: "string[]";
+            required: true;
+          };
+        };
+      };
+      oauthConsent: {
+        modelName: string;
+        fields: {
+          clientId: {
+            type: "string";
+            required: true;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          userId: {
+            type: "string";
+            required: false;
+            references: {
+              model: string;
+              field: string;
+            };
+            index: true;
+          };
+          referenceId: {
+            type: "string";
+            required: false;
+          };
+          resources: {
+            type: "string[]";
+            required: false;
+          };
+          requestedUserInfoClaims: {
+            type: "string[]";
+            required: false;
+          };
+          scopes: {
+            type: "string[]";
+            required: true;
+          };
+          createdAt: {
+            type: "date";
+          };
+          updatedAt: {
+            type: "date";
+          };
+        };
+      };
+      oauthClientAssertion: {
+        modelName: string;
+        fields: {
+          expiresAt: {
+            type: "date";
+            required: true;
+          };
+        };
+      };
+    };
+    rateLimit: ({
+      pathMatcher: (path: string) => path is "/oauth2/token";
+      window: number;
+      max: number;
+    } | {
+      pathMatcher: (path: string) => path is "/oauth2/authorize";
+      window: number;
+      max: number;
+    } | {
+      pathMatcher: (path: string) => path is "/oauth2/introspect";
+      window: number;
+      max: number;
+    } | {
+      pathMatcher: (path: string) => path is "/oauth2/revoke";
+      window: number;
+      max: number;
+    } | {
+      pathMatcher: (path: string) => path is "/oauth2/register";
+      window: number;
+      max: number;
+    } | {
+      pathMatcher: (path: string) => path is "/oauth2/client/rotate-keys";
+      window: number;
+      max: number;
+    } | {
+      pathMatcher: (path: string) => path is "/oauth2/userinfo";
+      window: number;
+      max: number;
+    })[];
+  } | {
+    id: "cimd";
+    version: string;
+    init(ctx: import("better-auth").AuthContext): void;
+  } | {
+    id: "protobase-mcp-grant-revocation";
+    hooks: {
+      after: {
+        matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+        handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
+      }[];
+    };
+  } | {
+    id: "protobase-mcp-connected-apps";
+    endpoints: {
+      listConnectedApps: import("better-call").StrictEndpoint<"/account/connected-apps", {
+        method: "GET";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+      }, {
+        apps: ConnectedApp[];
+      }>;
+      disconnectApp: import("better-call").StrictEndpoint<"/account/connected-apps/disconnect", {
+        method: "POST";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+        body: import("zod").ZodObject<{
+          clientId: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+      }, {
+        disconnected: boolean;
+      }>;
+    };
+  })[];
+  disabledPaths: string[];
+  databaseHooks: {
+    session?: {
+      create: {
+        before: (session: {
+          userId: string;
+          activeOrganizationId?: string | null;
+        } & Record<string, unknown>) => Promise<{
+          data: {
+            activeOrganizationId: string;
+            userId: string;
+          };
+        } | undefined>;
+      };
+      update: {
+        after: (session: {
+          userId: string;
+          activeOrganizationId?: string | null;
+        }) => Promise<void>;
+      };
+    } | undefined;
+    user: {
+      create: {
+        after?: ((user: import("better-auth").User & Record<string, unknown>, context: import("better-auth").GenericEndpointContext | null) => Promise<void>) | undefined;
+        before: (user: {
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        } & Record<string, unknown>, context: import("better-auth").GenericEndpointContext | null) => Promise<{
+          data: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          } & Record<string, unknown>;
+        }>;
+      };
+      update: {
+        before: (user: Partial<{
+          id: string;
+          createdAt: Date;
+          updatedAt: Date;
+          email: string;
+          emailVerified: boolean;
+          name: string;
+          image?: string | null | undefined;
+        }> & Record<string, unknown>) => Promise<{
+          data: Partial<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+          }> & Record<string, unknown>;
+        }>;
+      };
+    };
+  };
+  rateLimit: {
+    enabled: true;
+    window: number;
+    max: number;
+    customRules: {
+      [signUpPaths.sendCode]: {
+        window: number;
+        max: number;
+      };
+      [signUpPaths.verifyCode]: {
+        window: number;
+        max: number;
+      };
+      [signUpPaths.create]: {
+        window: number;
+        max: number;
+      };
+      '/sign-in/email': {
+        window: number;
+        max: number;
+      };
+      '/staff/sign-in': {
+        window: number;
+        max: number;
+      };
+      '/invitation/sign-up': {
+        window: number;
+        max: number;
+      };
+    };
+  };
+  advanced: {
+    database?: {
+      generateId: "uuid";
+    } | undefined;
+    useSecureCookies: boolean;
+    defaultCookieAttributes: {
+      sameSite: "lax";
+      secure: boolean;
+    };
+    backgroundTasks: {
+      handler: () => void;
+    };
+  };
+  socialProviders?: import("better-auth").SocialProviders | undefined;
+  appName: string;
+  database: any;
+  baseURL: string | {
+    allowedHosts: string[];
+    fallback: string;
+    protocol: "https" | "http";
+  };
+  basePath: string;
+  secret: string;
+  trustedOrigins: string[];
+  emailAndPassword: {
+    onPasswordReset?: ((data: {
+      user: import("better-auth").User;
+    }, request?: Request) => Promise<void>) | undefined;
+    resetPasswordTokenExpiresIn?: number | undefined;
+    revokeSessionsOnPasswordReset?: true | undefined;
+    sendResetPassword?: (({ user, url }: {
+      user: import("better-auth").User;
+      url: string;
+      token: string;
+    }) => Promise<void>) | undefined;
+    password?: {
+      verify: ({ hash, password }: {
+        hash: string;
+        password: string;
+      }) => Promise<boolean>;
+    } | undefined;
+    enabled: true;
+    disableSignUp: true;
+    minPasswordLength: number;
+    maxPasswordLength: number;
+  };
+}> & {
+  /** Issuer and audience of the tokens: `baseURL`, on every origin. */
+  issuer: string;
+  /** Every origin the app is served on, `baseURL`'s first. */
+  origins: string[];
+  /** The RP ID of new passkeys. */
+  passkeyDomain: string;
+  roles: string[];
+  roleDefinitions: RoleDefinitions;
+  organizations: ResolvedOrganizations | undefined;
+  defaultRole: string | undefined;
+  /** New users get their ids from `generateUserId` instead of Better Auth's random text. */
+  generatesUserIds: boolean;
+  mail: boolean;
+  /** The policy until an admin saves one. */
+  signInPolicy: SignInPolicy;
+  passwordReset: boolean;
+  /** Open sign-up is on and offered: the app asks for it, and can mail the codes. */
+  signUp: boolean;
+  /** The role of accounts made by open sign-up, while it is offered. */
+  signUpRole: string | undefined;
+  /** The app keeps each user's metadata, in the column `users.metadata` names. */
+  userMetadata: boolean;
+  socialProviders: string[];
+  /** The app's name it signs in and mails as: `PROTOBASE_APP_NAME`, else `appName`, else `Protobase`. */
+  appName: string;
+  operator: string | undefined;
+  platformSignIn: {
+    provider: string;
+    name: string;
+  } | undefined;
+  /** The id and name of each SAML provider, for the sign-in page. */
+  samlProviders: {
+    id: string;
+    name: string;
+  }[];
+  /** The OAuth provider for MCP clients, when on: the endpoint's resource (its URL) and path, and the scope its tokens carry. */
+  mcp: {
+    resource: string;
+    path: string;
+    scope: string;
+  } | undefined;
 };
 export type AdminAuth = ReturnType<typeof createAuth>;
 //#endregion