@protobase/server 0.53.6 → 0.53.8

package/dist/better-auth/auth-settings.d.ts

@@ -74,6 +74,35 @@ export declare const appAuthOptions: (settings: AuthSettings, { pool, db, hooks,
 /** The app's Better Auth from its `auth` settings, built at serve time with only the plugins they turn on. */
 export declare const buildAppAuth: (settings: AuthSettings, input: AppAuthInput) => Promise<import("better-auth").Auth<{
   user: {
+    deleteUser: {
+      enabled: boolean;
+      beforeDelete: (user: {
+        id: string;
+        email: string;
+      }) => Promise<void>;
+      afterDelete: (user: {
+        id: string;
+      }) => Promise<void>;
+    };
+    additionalFields?: {
+      metadata?: {
+        readonly type: "json";
+        readonly required: false;
+        readonly fieldName: string;
+      } | undefined;
+      lastOrganizationId?: {
+        readonly type: "string";
+        readonly required: false;
+        readonly input: false;
+        readonly fieldName: "last_organization_id";
+      } | undefined;
+      emailConfirmedAt: {
+        readonly type: "date";
+        readonly required: false;
+        readonly input: false;
+        readonly fieldName: "email_confirmed_at";
+      };
+    } | undefined;
     modelName: string;
     fields: {
       name: string;
@@ -84,7 +113,8 @@ export declare const buildAppAuth: (settings: AuthSettings, input: AppAuthInput)
       updatedAt: string;
     };
   } | {
-    additionalFields: {
+    deleteUser?: undefined;
+    additionalFields?: {
       metadata?: {
         readonly type: "json";
         readonly required: false;
@@ -102,7 +132,7 @@ export declare const buildAppAuth: (settings: AuthSettings, input: AppAuthInput)
         readonly input: false;
         readonly fieldName: "email_confirmed_at";
       };
-    };
+    } | undefined;
     modelName: string;
     fields: {
       name: string;
@@ -160,6 +190,13 @@ export declare const buildAppAuth: (settings: AuthSettings, input: AppAuthInput)
         handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
+  } | {
+    id: "protobase-locked-accounts";
+    init: (ctx: import("better-auth").AuthContext) => {
+      context: {
+        adapter: import("better-auth").DBAdapter;
+      };
+    };
   } | {
     id: "admin";
     version: string;
@@ -970,8 +1007,8 @@ export declare const buildAppAuth: (settings: AuthSettings, input: AppAuthInput)
           $Infer: {
             body: {
               permissions: {
-                readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "set-email" | "get" | "update" | "impersonate-admins")[] | undefined;
-                readonly session?: ("list" | "delete" | "revoke")[] | undefined;
+                readonly user?: ("create" | "update" | "delete" | "list" | "set-role" | "ban" | "impersonate" | "set-password" | "set-email" | "get" | "impersonate-admins")[] | undefined;
+                readonly session?: ("delete" | "list" | "revoke")[] | undefined;
               };
             } & {
               userId?: string | undefined;
@@ -8744,6 +8781,7 @@ export declare const buildAppAuth: (settings: AuthSettings, input: AppAuthInput)
   signInFirst: "password" | "emailCode";
   passwordReset: boolean;
   leakedPasswords: boolean;
+  accountDeletion: boolean;
   signUp: boolean;
   signUpRole: string | undefined;
   userMetadata: boolean;

package/dist/better-auth/create-auth.d.ts

@@ -135,6 +135,12 @@ export type CreateAuthOptions = {
    * the password's SHA-1 hash leave the server. While the list cannot be reached, setting a password fails. Default off.
    */
   leakedPasswords?: boolean;
+  /**
+   * Lets the signed-in person delete their own account from the account page, with their password or from a session
+   * that signed in within the last day; `false` turns it off, for apps whose accounts are managed by an organization's
+   * admins. Default on, as app stores require an app that makes accounts to delete them too.
+   */
+  accountDeletion?: boolean;
   /**
    * The identity provider the operator's staff sign in with to sign in as people of this app, for support. Defaults
    * to the one the platform passes in `PROTOBASE_OPERATOR_ISSUER`, `PROTOBASE_OPERATOR_CLIENT_ID` and
@@ -193,6 +199,35 @@ export type AuthPlugins = {
 export declare const loadAuthPlugins: (options: Pick<CreateAuthOptions, "sso" | "mcp">) => Promise<AuthPlugins>;
 export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlugins) => import("better-auth").Auth<{
   user: {
+    deleteUser: {
+      enabled: boolean;
+      beforeDelete: (user: {
+        id: string;
+        email: string;
+      }) => Promise<void>;
+      afterDelete: (user: {
+        id: string;
+      }) => Promise<void>;
+    };
+    additionalFields?: {
+      metadata?: {
+        readonly type: "json";
+        readonly required: false;
+        readonly fieldName: string;
+      } | undefined;
+      lastOrganizationId?: {
+        readonly type: "string";
+        readonly required: false;
+        readonly input: false;
+        readonly fieldName: "last_organization_id";
+      } | undefined;
+      emailConfirmedAt: {
+        readonly type: "date";
+        readonly required: false;
+        readonly input: false;
+        readonly fieldName: "email_confirmed_at";
+      };
+    } | undefined;
     modelName: string;
     fields: {
       name: string;
@@ -203,7 +238,8 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
       updatedAt: string;
     };
   } | {
-    additionalFields: {
+    deleteUser?: undefined;
+    additionalFields?: {
       metadata?: {
         readonly type: "json";
         readonly required: false;
@@ -221,7 +257,7 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
         readonly input: false;
         readonly fieldName: "email_confirmed_at";
       };
-    };
+    } | undefined;
     modelName: string;
     fields: {
       name: string;
@@ -279,6 +315,13 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
         handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
       }[];
     };
+  } | {
+    id: "protobase-locked-accounts";
+    init: (ctx: import("better-auth").AuthContext) => {
+      context: {
+        adapter: import("better-auth").DBAdapter;
+      };
+    };
   } | {
     id: "admin";
     version: string;
@@ -1089,8 +1132,8 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
           $Infer: {
             body: {
               permissions: {
-                readonly user?: ("create" | "list" | "set-role" | "ban" | "impersonate" | "delete" | "set-password" | "set-email" | "get" | "update" | "impersonate-admins")[] | undefined;
-                readonly session?: ("list" | "delete" | "revoke")[] | undefined;
+                readonly user?: ("create" | "update" | "delete" | "list" | "set-role" | "ban" | "impersonate" | "set-password" | "set-email" | "get" | "impersonate-admins")[] | undefined;
+                readonly session?: ("delete" | "list" | "revoke")[] | undefined;
               };
             } & {
               userId?: string | undefined;
@@ -1750,7 +1793,7 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
           email: string;
           emailVerified: boolean;
           name: string;
-          image?: string | null | undefined;
+          image? /** Runs after a user is created, by any route: `createUser`, an admin, or a social sign-up. Default none. */ : string | null | undefined;
         }) | import("better-auth/plugins").UserWithTwoFactor;
       }>;
       generateBackupCodes: import("better-call").StrictEndpoint<"/two-factor/generate-backup-codes", {
@@ -8872,6 +8915,8 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
   passwordReset: boolean;
   /** New passwords are checked against Have I Been Pwned's list of leaked ones (`leakedPasswords`). */
   leakedPasswords: boolean;
+  /** The signed-in person can delete their own account (`accountDeletion`). */
+  accountDeletion: boolean;
   /** Open sign-up is on and offered: the app asks for it, and can mail the codes. */
   signUp: boolean;
   /** The role of accounts made by open sign-up, while it is offered. */

package/dist/better-auth/create-auth.js

@@ -18,8 +18,10 @@ import { lastAdminGuardPlugin } from "./last-admin-guard.js";
 import { setPasswordPath, setPasswordPlugin } from "./set-password.js";
 import { signUpPaths, signUpPlugin } from "./sign-up/sign-up-plugin.js";
 import { leakedPasswordsPlugin } from "./leaked-passwords.js";
-import { userDeletion } from "./user-deletion.js";
+import { lockedAccountsPlugin, readLockedAccounts } from "./locked-accounts.js";
 import { revokeMcpGrants } from "./mcp/revoke-grants.js";
+import { selfDeletionCallbackPath, selfDeletionOptions, selfDeletionPath } from "./self-deletion.js";
+import { userDeletion } from "./user-deletion.js";
 import { mcpUnusedPaths, resolveMcp } from "./mcp/mcp-plugins.js";
 import { lastOrganizationField, sessionOrganizationHooks } from "./organizations/session-organization.js";
 import { organizationPlugin } from "./organizations/organization-plugin.js";
@@ -62,6 +64,7 @@ const platformOperator = () => readOperatorSettings(globalThis.process?.env ?? {
 const platformSignInSettings = () => readPlatformSignIn(globalThis.process?.env ?? {});
 const platformOrigins = () => readOrigins(globalThis.process?.env ?? {});
 const platformPasskeyDomain = () => readPasskeyDomain(globalThis.process?.env ?? {});
+const platformLockedAccounts = () => readLockedAccounts(globalThis.process?.env ?? {});
 const tokenLifetime = "15m";
 /**
 * Better Auth for a single-tenant admin: sign-in with a password, an emailed code or a passkey, two-factor
@@ -88,7 +91,7 @@ const organizationPaths = ["/organization/set-active", "/organization/accept-inv
 * The options `createAuth` gives Better Auth, with the roles, default role, mailer, operator provider and platform
 * sign-in provider already resolved.
 */
-const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, definitions, defaultRole, appName = defaultAppName, mailer, signUpRole, operator, platformSignIn, saml = [], organizations, mcp, context = noContext, signInPolicy = defaultSignInPolicy, mobile, deletion, ...plugins }) => {
+const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, definitions, defaultRole, appName = defaultAppName, mailer, signUpRole, operator, platformSignIn, saml = [], organizations, mcp, context = noContext, signInPolicy = defaultSignInPolicy, mobile, deletion, lockedAccounts = [], ...plugins }) => {
 	const secure = options.baseURL.startsWith("https://");
 	const signIn = platformSignInFor(platformSignIn, Object.keys(options.socialProviders ?? {}));
 	const hosts = passkeyHosts([options.baseURL, ...origins]);
@@ -147,6 +150,13 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 		...organizations && userFieldsNamed(lastOrganizationField, users),
 		...metadataField(users)
 	};
+	const accountDeletion = options.accountDeletion !== false;
+	const deleteUser = accountDeletion ? { deleteUser: selfDeletionOptions({
+		lockedAccounts,
+		mcp: Boolean(mcp),
+		adapter: async () => (await context()).adapter,
+		...deletion && { deletion }
+	}) } : {};
 	return {
 		appName,
 		database: options.database,
@@ -165,10 +175,11 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 			...mail && passwordResetOptions(mail, mcp ? { onPasswordReset: async ({ user }) => revokeMcpGrants((await context()).adapter, user.id) } : {})
 		},
 		...options.socialProviders && { socialProviders: options.socialProviders },
-		user: Object.keys(userFields).length > 0 ? {
+		user: {
 			...userModel(users),
-			additionalFields: userFields
-		} : userModel(users),
+			...Object.keys(userFields).length > 0 && { additionalFields: userFields },
+			...deleteUser
+		},
 		session: coreNames.session,
 		verification: coreNames.verification,
 		account: {
@@ -177,6 +188,7 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 			...options.encryptOAuthTokens && { encryptOAuthTokens: true }
 		},
 		plugins: [
+			...lockedAccounts.length > 0 ? [lockedAccountsPlugin(lockedAccounts)] : [],
 			admin({
 				schema: pluginNames.admin,
 				defaultRole: defaultRole ?? "unassigned",
@@ -249,6 +261,8 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 			}) : []
 		].map((plugin) => withUserColumns(plugin, users)),
 		disabledPaths: [
+			selfDeletionCallbackPath,
+			...accountDeletion ? [] : [selfDeletionPath],
 			...unusedEmailCodePaths,
 			...adminImpersonationPaths,
 			...organizations ? organizationPaths : [],
@@ -362,10 +376,12 @@ const createAuth = (options, plugins = {}) => {
 	const context = () => instance?.$context ?? Promise.reject(/* @__PURE__ */ new Error("The auth instance is not made yet"));
 	const mobile = mobileRequests();
 	const deletion = userDeletion();
+	const lockedAccounts = platformLockedAccounts();
 	const authOptions = betterAuthOptions(options, {
 		...plugins,
 		mobile,
 		deletion,
+		lockedAccounts,
 		origins,
 		passkeyDomain,
 		roles,
@@ -380,7 +396,7 @@ const createAuth = (options, plugins = {}) => {
 		signInPolicy,
 		...organizations && { organizations },
 		...mcp && { mcp },
-		...(organizations || mcp) && { context }
+		context
 	});
 	assertNoEndpointKeyClashes(authOptions.plugins);
 	const auth = betterAuth(authOptions);
@@ -419,6 +435,8 @@ const createAuth = (options, plugins = {}) => {
 		passwordReset: Boolean(mailer),
 		/** New passwords are checked against Have I Been Pwned's list of leaked ones (`leakedPasswords`). */
 		leakedPasswords: Boolean(options.leakedPasswords),
+		/** The signed-in person can delete their own account (`accountDeletion`). */
+		accountDeletion: options.accountDeletion !== false,
 		/** Open sign-up is on and offered: the app asks for it, and can mail the codes. */
 		signUp: Boolean(signUpRole && mailer),
 		/** The role of accounts made by open sign-up, while it is offered. */

package/dist/better-auth/last-admin-guard.js

@@ -29,6 +29,13 @@ const adminChange = (path, body) => {
 		...banned !== void 0 && { banned }
 	};
 };
+/** Refuses, with `400 LAST_ADMIN`, a change that would leave no active admin. */
+const refuseLastAdmin = () => {
+	throw new APIError("BAD_REQUEST", {
+		code: "LAST_ADMIN",
+		message: "This is the last admin: make someone else an admin first."
+	});
+};
 const guardedPaths = [
 	"/admin/set-role",
 	"/admin/ban-user",
@@ -51,12 +58,9 @@ const lastAdminGuardPlugin = () => ({
 					"banned"
 				]
 			});
-			if (wouldLeaveNoAdmin(users, change)) throw new APIError("BAD_REQUEST", {
-				code: "LAST_ADMIN",
-				message: "This is the last admin: make someone else an admin first."
-			});
+			if (wouldLeaveNoAdmin(users, change)) refuseLastAdmin();
 		})
 	}] }
 });
 //#endregion
-export { adminChange, lastAdminGuardPlugin };
+export { adminChange, lastAdminGuardPlugin, refuseLastAdmin };

package/dist/better-auth/locked-accounts.js

@@ -0,0 +1,124 @@
+import { APIError } from "better-auth/api";
+//#region src/better-auth/locked-accounts.ts
+const lockedAccountsVariable = "PROTOBASE_LOCKED_ACCOUNTS";
+/** The addresses the platform passes in `PROTOBASE_LOCKED_ACCOUNTS`, comma separated, in lower case; none when it is unset. */
+const readLockedAccounts = (env) => [...new Set((env["PROTOBASE_LOCKED_ACCOUNTS"] ?? "").split(",").map((email) => email.trim().toLowerCase()).filter(Boolean))];
+const lockedFields = {
+	user: (field) => [
+		"email",
+		"emailVerified",
+		"twoFactorEnabled"
+	].includes(field),
+	account: (field) => [
+		"userId",
+		"providerId",
+		"accountId",
+		"password"
+	].includes(field),
+	passkey: (field) => !["counter", "updatedAt"].includes(field),
+	twoFactor: (field) => ![
+		"failedVerificationCount",
+		"lockedUntil",
+		"updatedAt"
+	].includes(field)
+};
+/** Refuses, with `403 ACCOUNT_LOCKED`, a change to or the deletion of a locked account. */
+const refuseLockedAccount = () => {
+	throw new APIError("FORBIDDEN", {
+		code: "ACCOUNT_LOCKED",
+		message: "This account is locked: its address, password, passkeys, two-factor authentication and linked accounts stay as they are, and it cannot be deleted."
+	});
+};
+/**
+* The adapter with the accounts of `emails` locked: their user's address, password, passkeys, two-factor
+* authentication and linked accounts stay as they are, and the user is not deleted, whatever endpoint or host call
+* writes. A locked account's first account row, made with its user, is the one write of those it allows.
+*/
+const lockAccounts = (adapter, emails) => {
+	const lockedIds = async () => new Set((await adapter.findMany({
+		model: "user",
+		where: [{
+			field: "email",
+			operator: "in",
+			value: emails
+		}],
+		select: ["id"]
+	})).map((user) => user.id));
+	const matchesLocked = async (model, where) => {
+		const ids = await lockedIds();
+		if (ids.size === 0) return false;
+		const owner = model === "user" ? "id" : "userId";
+		return (await adapter.findMany({
+			model,
+			where,
+			select: [owner]
+		})).some((row) => ids.has(row[owner]));
+	};
+	const checkUpdate = async (model, where, fields) => {
+		const locked = lockedFields[model];
+		if (locked && fields.some(locked) && await matchesLocked(model, where)) refuseLockedAccount();
+	};
+	const checkDelete = async (model, where) => {
+		if (lockedFields[model] && await matchesLocked(model, where)) refuseLockedAccount();
+	};
+	const checkCreate = async (model, data) => {
+		if (model === "user" || !lockedFields[model]) return;
+		if (!(await lockedIds()).has(data.userId)) return;
+		if (model === "account" && await adapter.count({
+			model: "account",
+			where: [{
+				field: "userId",
+				value: data.userId
+			}]
+		}) === 0) return;
+		refuseLockedAccount();
+	};
+	return {
+		...adapter,
+		create: async (data) => {
+			await checkCreate(data.model, data.data);
+			return adapter.create(data);
+		},
+		update: async (data) => {
+			await checkUpdate(data.model, data.where, Object.keys(data.update));
+			return adapter.update(data);
+		},
+		updateMany: async (data) => {
+			await checkUpdate(data.model, data.where, Object.keys(data.update));
+			return adapter.updateMany(data);
+		},
+		incrementOne: async (data) => {
+			await checkUpdate(data.model, data.where, [...Object.keys(data.increment), ...Object.keys(data.set ?? {})]);
+			return adapter.incrementOne(data);
+		},
+		delete: async (data) => {
+			await checkDelete(data.model, data.where);
+			return adapter.delete(data);
+		},
+		deleteMany: async (data) => {
+			await checkDelete(data.model, data.where);
+			return adapter.deleteMany(data);
+		},
+		consumeOne: async (data) => {
+			await checkDelete(data.model, data.where);
+			return adapter.consumeOne(data);
+		}
+	};
+};
+/**
+* Locks the accounts of `emails` (see `lockAccounts`) by guarding the auth store's adapter, which Better Auth's own
+* writes, its plugins' (passkeys and two-factor authentication write the store directly, past the database hooks)
+* and the host calls all go through, also in a transaction.
+*/
+const lockedAccountsPlugin = (emails) => ({
+	id: "protobase-locked-accounts",
+	init: (ctx) => {
+		const adapter = ctx.adapter;
+		return { context: { adapter: {
+			...lockAccounts(adapter, emails),
+			transaction: (callback) => adapter.transaction((trx) => callback(lockAccounts(trx, emails)))
+		} } };
+	}
+});
+//#endregion
+export { lockAccounts, lockedAccountsPlugin, lockedAccountsVariable, readLockedAccounts, refuseLockedAccount };

package/dist/better-auth/self-deletion.js

@@ -0,0 +1,40 @@
+import { wouldLeaveNoAdmin } from "./last-admin.js";
+import { refuseLastAdmin } from "./last-admin-guard.js";
+import { refuseLockedAccount } from "./locked-accounts.js";
+import { revokeMcpGrants } from "./mcp/revoke-grants.js";
+//#region src/better-auth/self-deletion.ts
+/** The paths of Better Auth's own deletion of the signed-in person's account, and of its emailed confirmation, which Protobase does not send. */
+const selfDeletionPath = "/delete-user";
+const selfDeletionCallbackPath = "/delete-user/callback";
+/**
+* Better Auth's `user.deleteUser`: the signed-in person deletes their own account, with their password or from a
+* session that signed in within the last day. Once Better Auth has checked that, a locked account and the last active
+* admin are refused, the `userDeletion` listeners and the MCP grants go, and Better Auth deletes the user with their
+* sessions and accounts; the listeners run once more after.
+*/
+const selfDeletionOptions = ({ lockedAccounts, deletion, mcp, adapter }) => ({
+	enabled: true,
+	beforeDelete: async (user) => {
+		if (lockedAccounts.includes(user.email.toLowerCase())) refuseLockedAccount();
+		const store = await adapter();
+		const users = await store.findMany({
+			model: "user",
+			select: [
+				"id",
+				"role",
+				"banned"
+			]
+		});
+		if (wouldLeaveNoAdmin(users, {
+			userId: user.id,
+			removed: true
+		})) refuseLastAdmin();
+		await deletion?.run(user.id);
+		if (mcp) await revokeMcpGrants(store, user.id);
+	},
+	afterDelete: async (user) => {
+		await deletion?.run(user.id);
+	}
+});
+//#endregion
+export { selfDeletionCallbackPath, selfDeletionOptions, selfDeletionPath };

package/dist/better-auth/status-route.js

@@ -9,7 +9,7 @@ import { Hono } from "hono";
 * `GET {authBase}/status`: `needsAdmin` while the admin store has no user, so a login page can say how to create one;
 * `signInMethods`, the ways to sign in the sign-in policy leaves on (`password`, `emailCode`, `passkey`), so it offers
 * only those; `passwordReset` when reset mail can be sent and passwords are on, so it offers "Forgot password?" only
-* then; `signInFirst: 'emailCode'` when the app has the sign-in page lead with an emailed code and the policy leaves both it and passwords on; `changeEmail` when mail can be sent, so the account page offers to change the address with an emailed code; `signUp` when the app has open sign-up, so it offers "Create an account"; the ids of the `socialProviders` people can sign in with, so it offers "Continue with GitHub" when `github` is
+* then; `signInFirst: 'emailCode'` when the app has the sign-in page lead with an emailed code and the policy leaves both it and passwords on; `changeEmail` when mail can be sent, so the account page offers to change the address with an emailed code; `accountDeletion` when people may delete their own account, so the account page offers it; `signUp` when the app has open sign-up, so it offers "Create an account"; the ids of the `socialProviders` people can sign in with, so it offers "Continue with GitHub" when `github` is
 * one; `platformSignIn`, the id and name of the platform's provider when it is one of them; `samlProviders`, the id and name of each SAML provider, when the app has any; `staffSignIn`, the
 * operator provider's name, when staff can sign in as people; `passkeyDomains`, when people have passkeys for more than
 * one of the app's hosts, the RP IDs a passkey sign-in can ask for, the passkey domain first; with organizations, who may create them and the roles
@@ -39,6 +39,7 @@ const statusRoute = (auth, { anonymous = false, plugins = [], locale } = {}) =>
 			passwordReset: auth.passwordReset && policy.password === "allowed",
 			...auth.signInFirst === "emailCode" && signInMethods.includes("emailCode") && signInMethods.includes("password") && { signInFirst: "emailCode" },
 			...auth.mail && { changeEmail: true },
+			...auth.accountDeletion && { accountDeletion: true },
 			...auth.signUp && { signUp: true },
 			socialProviders,
 			...platformSignIn && { platformSignIn },

package/dist/better-auth/user-deletion.js

@@ -4,9 +4,10 @@ import { createAuthMiddleware, getSessionFromCtx, isAPIError } from "better-auth
 //#region src/better-auth/user-deletion.ts
 const removePath = "/admin/remove-user";
 /**
-* What runs when a user is deleted, by an admin (`/admin/remove-user`) or by `deleteUser` (the CLI): each listener
-* before anything is deleted, so one that throws stops the deletion with the user, their sessions and accounts in
-* place, and once more after the user is gone, for what was added in between.
+* What runs when a user is deleted, by an admin (`/admin/remove-user`), by `deleteUser` (the CLI) or by themselves
+* (`/delete-user`, see `selfDeletionOptions`): each listener before anything is deleted, so one that throws stops the
+* deletion with the user, their sessions and accounts in place, and once more after the user is gone, for what was
+* added in between.
 */
 const userDeletion = () => {
 	const listeners = /* @__PURE__ */ new Map();

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.53.6";
+var version = "0.53.8";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.53.6",
+  "version": "0.53.8",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -40,9 +40,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.53.6",
-    "@protobase/query": "0.53.6",
-    "@protobase/schema": "0.53.6",
+    "@protobase/layout": "0.53.8",
+    "@protobase/query": "0.53.8",
+    "@protobase/schema": "0.53.8",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",