auth 1.5.4 → 1.5.6

package/dist/index.mjs

@@ -1,38 +1,584 @@
 #!/usr/bin/env node
 import { Command } from "commander";
+import { exec, execSync, spawn } from "node:child_process";
 import * as fs$2 from "node:fs";
 import fs, { existsSync, readFileSync, readdirSync } from "node:fs";
-import fs$1 from "node:fs/promises";
+import * as os$1 from "node:os";
+import os from "node:os";
 import * as path$1 from "node:path";
 import path, { join } from "node:path";
-import { createTelemetry, getTelemetryAuthConfig } from "@better-auth/telemetry";
-import { getAdapter } from "better-auth/db/adapter";
 import chalk from "chalk";
 import prompts from "prompts";
 import yoctoSpinner from "yocto-spinner";
-import * as z$1 from "zod/v4";
+import fs$1 from "node:fs/promises";
+import { createTelemetry, getTelemetryAuthConfig } from "@better-auth/telemetry";
+import { getAdapter } from "better-auth/db/adapter";
+import * as z from "zod";
 import { initGetFieldName, initGetModelName } from "better-auth/adapters";
 import { getAuthTables } from "better-auth/db";
 import prettier, { format } from "prettier";
 import { getMigrations } from "better-auth/db/migration";
 import { capitalizeFirstLetter } from "@better-auth/core/utils/string";
 import { produceSchema } from "@mrleebo/prisma-ast";
-import { exec, execSync, spawn } from "node:child_process";
 import Crypto from "node:crypto";
 import babelPresetReact from "@babel/preset-react";
 import babelPresetTypeScript from "@babel/preset-typescript";
 import { BetterAuthError } from "@better-auth/core/error";
 import { loadConfig } from "c12";
-import * as os$1 from "node:os";
-import os from "node:os";
+import { getTsconfig, parseTsconfig } from "get-tsconfig";
 import open from "open";
-import z from "zod";
 import { env } from "@better-auth/core/env";
 import { log } from "@clack/prompts";
 import { base64 } from "@better-auth/utils/base64";
 import * as semver from "semver";
 import "dotenv/config";
 
+//#region src/commands/ai.ts
+const PROTOCOL_URL = "https://agent-auth-protocol.com";
+const AGENT_CLI_PKG = "@auth/agent-cli";
+const AGENT_PLUGIN_PKG = "@better-auth/agent-auth";
+const DEFAULT_REGISTRY = "https://agent-auth.directory";
+const SKILLS_REPO = "better-auth/agent-auth";
+function cancelled() {
+	console.log(chalk.yellow("\n✋ Setup cancelled."));
+	process.exit(0);
+}
+function check(value) {
+	if (value === void 0 || value === null) cancelled();
+	return value;
+}
+async function aiAction() {
+	console.log("\n" + [
+		`   ██  ████`,
+		`   ████  ██  ${chalk.bold("Agent Auth")} ${chalk.dim("Setup")}`,
+		`   ██  ████  ${chalk.gray("AI agent authentication & capability-based authorization.")}`
+	].join("\n"));
+	console.log();
+	const { setup } = await prompts({
+		type: "select",
+		name: "setup",
+		message: "What would you like to do?",
+		choices: [{
+			title: "Integrate Agent Auth client",
+			value: "client",
+			description: "MCP server, CLI, or SDK for your agents"
+		}, {
+			title: "Create an Agent Auth server",
+			value: "server",
+			description: "expose capabilities from your service to AI agents"
+		}]
+	});
+	check(setup);
+	if (setup === "client") await setupClient();
+	else await setupServerSelection();
+}
+async function setupClient() {
+	const { method } = await prompts({
+		type: "select",
+		name: "method",
+		message: "How do you want to integrate?",
+		choices: [{
+			title: "MCP Server",
+			value: "mcp",
+			description: "for AI tools — Claude, Cursor, Windsurf, etc."
+		}, {
+			title: "CLI",
+			value: "cli",
+			description: "command-line tool for agent workflows"
+		}]
+	});
+	check(method);
+	if (method === "mcp") await setupMcp();
+	else await setupCli();
+}
+async function setupServerSelection() {
+	const { implementation } = await prompts({
+		type: "select",
+		name: "implementation",
+		message: "Choose an implementation",
+		choices: [{
+			title: "Better Auth + Agent Auth",
+			value: "better-auth",
+			description: "TypeScript"
+		}]
+	});
+	check(implementation);
+	await setupServer();
+}
+async function setupMcp() {
+	const { tool } = await prompts({
+		type: "select",
+		name: "tool",
+		message: "Which AI tool?",
+		choices: [
+			{
+				title: "Cursor",
+				value: "cursor"
+			},
+			{
+				title: "Claude Code",
+				value: "claude-code"
+			},
+			{
+				title: "Claude Desktop",
+				value: "claude-desktop"
+			},
+			{
+				title: "Windsurf",
+				value: "windsurf"
+			},
+			{
+				title: "VS Code / Copilot",
+				value: "vscode"
+			},
+			{
+				title: "Open Code",
+				value: "opencode"
+			},
+			{
+				title: "Other",
+				value: "other"
+			}
+		]
+	});
+	check(tool);
+	let scope = "global";
+	if (tool === "cursor" || tool === "vscode") {
+		const { s } = await prompts({
+			type: "select",
+			name: "s",
+			message: "Where should it be configured?",
+			choices: [{
+				title: "This project",
+				value: "project",
+				description: tool === "cursor" ? ".cursor/mcp.json" : ".vscode/mcp.json"
+			}, {
+				title: "Global (all projects)",
+				value: "global",
+				description: tool === "cursor" ? "~/.cursor/mcp.json" : "user settings"
+			}]
+		});
+		check(s);
+		scope = s;
+	}
+	const { registryUrl } = await prompts({
+		type: "text",
+		name: "registryUrl",
+		message: "Registry URL",
+		initial: DEFAULT_REGISTRY
+	});
+	const mcpArgs = buildMcpArgs(registryUrl?.trim() || DEFAULT_REGISTRY);
+	if (tool === "claude-code") await setupClaudeCode(mcpArgs);
+	else if (tool === "opencode") await setupOpenCode(mcpArgs);
+	else if (tool === "other") showJsonConfig({
+		command: "npx",
+		args: mcpArgs
+	});
+	else await writeMcpConfigInteractive(tool, scope, mcpArgs);
+	await offerSkillInstall("agent-auth-mcp");
+	showNextSteps([`${chalk.cyan("Docs")}    ${PROTOCOL_URL}/docs/integrate-client`, `${chalk.cyan("GitHub")}  https://github.com/better-auth/agent-auth`]);
+	console.log(chalk.green("\n✔ ") + chalk.bold("Done! ") + "Restart your AI tool to connect.\n");
+}
+async function setupClaudeCode(args) {
+	const { scope } = await prompts({
+		type: "select",
+		name: "scope",
+		message: "Where should it be configured?",
+		choices: [{
+			title: "This project",
+			value: "project",
+			description: "--scope project"
+		}, {
+			title: "Global (all projects)",
+			value: "user",
+			description: "--scope user"
+		}]
+	});
+	check(scope);
+	const cmd = [
+		"claude",
+		"mcp",
+		"add",
+		"agent-auth",
+		"--scope",
+		scope,
+		"--",
+		"npx",
+		...args
+	].join(" ");
+	console.log(chalk.bold.white("\nRun this command:"));
+	console.log(chalk.cyan(`  ${cmd}\n`));
+	const { run } = await prompts({
+		type: "confirm",
+		name: "run",
+		message: "Run it now?",
+		initial: true
+	});
+	if (run) {
+		const s = yoctoSpinner({
+			text: "Adding MCP server to Claude Code…",
+			color: "white"
+		});
+		s.start();
+		try {
+			execSync(cmd, { stdio: "pipe" });
+			s.success("Added to Claude Code.");
+		} catch {
+			s.stop();
+			console.log(chalk.yellow("⚠ Could not run the command automatically."));
+			console.log(chalk.gray("  Run the command above manually."));
+		}
+	}
+}
+async function setupOpenCode(args) {
+	const configPath = path$1.join(process.cwd(), "opencode.json");
+	const display = "opencode.json";
+	const openCodeEntry = {
+		type: "stdio",
+		command: "npx",
+		args,
+		enabled: true
+	};
+	const { write } = await prompts({
+		type: "confirm",
+		name: "write",
+		message: `Write config to ${chalk.cyan(display)}?`,
+		initial: true
+	});
+	if (write) {
+		writeOpenCodeConfig(configPath, openCodeEntry);
+		console.log(chalk.green(`\n✓ Written to ${display}`));
+	} else {
+		const json = JSON.stringify({
+			$schema: "https://opencode.ai/config.json",
+			mcp: { "agent-auth": openCodeEntry }
+		}, null, 2);
+		console.log(chalk.bold.white("\nAdd to your opencode.json:\n"));
+		console.log(json.split("\n").map((line) => chalk.cyan(`  ${line}`)).join("\n"));
+		console.log();
+	}
+}
+function writeOpenCodeConfig(configPath, entry) {
+	let config = {};
+	if (fs$2.existsSync(configPath)) try {
+		config = JSON.parse(fs$2.readFileSync(configPath, "utf-8"));
+	} catch {}
+	const mcp = config.mcp ?? {};
+	mcp["agent-auth"] = entry;
+	config.$schema = "https://opencode.ai/config.json";
+	config.mcp = mcp;
+	fs$2.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+}
+async function writeMcpConfigInteractive(tool, scope, args) {
+	const entry = {
+		command: "npx",
+		args
+	};
+	const configPath = getMcpConfigPath(tool, scope);
+	if (!configPath) {
+		showJsonConfig(entry);
+		return;
+	}
+	const display = displayPath(configPath, scope);
+	const { write } = await prompts({
+		type: "confirm",
+		name: "write",
+		message: `Write config to ${chalk.cyan(display)}?`,
+		initial: true
+	});
+	if (write) {
+		writeMcpConfig(configPath, entry);
+		console.log(chalk.green(`\n✓ Written to ${display}`));
+	} else showJsonConfig(entry);
+}
+async function setupCli() {
+	const { installCli } = await prompts({
+		type: "confirm",
+		name: "installCli",
+		message: `Install ${chalk.cyan(AGENT_CLI_PKG)} globally?`,
+		initial: true
+	});
+	if (installCli) {
+		const s = yoctoSpinner({
+			text: `Installing ${AGENT_CLI_PKG}…`,
+			color: "white"
+		});
+		s.start();
+		try {
+			execSync(`npm install -g ${AGENT_CLI_PKG}`, { stdio: "pipe" });
+			s.success(`${AGENT_CLI_PKG} installed globally.`);
+		} catch {
+			s.stop();
+			console.log(chalk.yellow("⚠ Could not install automatically. Run manually:"));
+			console.log(chalk.cyan(`  npm install -g ${AGENT_CLI_PKG}\n`));
+		}
+	} else console.log(chalk.dim(`\n  To install later: npm install -g ${AGENT_CLI_PKG}\n`));
+	await offerSkillInstall("agent-auth-cli");
+	console.log(chalk.bold.white("\nUsage:"));
+	console.log(chalk.gray("  # Discover a provider"));
+	console.log(chalk.cyan("  auth-agent discover https://api.example.com"));
+	console.log(chalk.gray("\n  # Search the registry for providers"));
+	console.log(chalk.cyan(`  auth-agent search "send email"`));
+	console.log(chalk.gray("\n  # Connect an agent with capabilities"));
+	console.log(chalk.cyan("  auth-agent connect --provider <url> --capabilities <cap1> <cap2>"));
+	console.log(chalk.gray("\n  # Execute a capability"));
+	console.log(chalk.cyan(`  auth-agent execute <agent-id> <capability> --args '{"key":"value"}'`));
+	console.log(chalk.gray("\n  # Run as MCP server"));
+	console.log(chalk.cyan(`  auth-agent mcp`));
+	showNextSteps([`${chalk.cyan("Docs")}    ${PROTOCOL_URL}/docs/integrate-client`, `${chalk.cyan("GitHub")}  https://github.com/better-auth/agent-auth`]);
+	console.log(chalk.green("\n✔ ") + chalk.bold("Ready. ") + "Run auth-agent --help to see all commands.\n");
+}
+async function setupServer() {
+	const { source } = await prompts({
+		type: "select",
+		name: "source",
+		message: "How do you want to define capabilities?",
+		choices: [
+			{
+				title: "Default",
+				value: "manual",
+				description: "define capabilities in code"
+			},
+			{
+				title: "From an OpenAPI spec",
+				value: "openapi",
+				description: "derive capabilities from an OpenAPI document"
+			},
+			{
+				title: "From an MCP server",
+				value: "mcp",
+				description: "proxy an existing MCP server's tools"
+			}
+		]
+	});
+	check(source);
+	const { name } = await prompts({
+		type: "text",
+		name: "name",
+		message: "What's your service called?",
+		validate: (v) => v?.trim() ? true : "Name is required."
+	});
+	check(name);
+	const { description } = await prompts({
+		type: "text",
+		name: "description",
+		message: `Short description ${chalk.dim("(press Enter to skip)")}`
+	});
+	const desc = description?.trim() || void 0;
+	let sourceUrl;
+	if (source === "openapi") {
+		const { url } = await prompts({
+			type: "text",
+			name: "url",
+			message: `OpenAPI spec URL ${chalk.dim("(e.g. https://api.example.com/openapi.json)")}`,
+			validate: (v) => v?.trim() ? true : "URL is required."
+		});
+		check(url);
+		sourceUrl = url.trim();
+	} else if (source === "mcp") {
+		const { url } = await prompts({
+			type: "text",
+			name: "url",
+			message: `MCP server URL ${chalk.dim("(e.g. https://api.example.com/mcp)")}`,
+			validate: (v) => v?.trim() ? true : "URL is required."
+		});
+		check(url);
+		sourceUrl = url.trim();
+	}
+	const code = generateServerCode(name.trim(), desc, source, sourceUrl);
+	const { write } = await prompts({
+		type: "confirm",
+		name: "write",
+		message: "Generate an auth config file?",
+		initial: true
+	});
+	if (write) {
+		const { filePath } = await prompts({
+			type: "text",
+			name: "filePath",
+			message: "File path",
+			initial: "lib/auth.ts"
+		});
+		const target = filePath?.trim() || "lib/auth.ts";
+		if (fs$2.existsSync(target)) {
+			const { overwrite } = await prompts({
+				type: "confirm",
+				name: "overwrite",
+				message: `${chalk.yellow(target)} already exists. Overwrite?`,
+				initial: false
+			});
+			if (!overwrite) {
+				showCodeBlock(code, "auth config");
+				showServerOutro();
+				return;
+			}
+		}
+		const dir = path$1.dirname(target);
+		if (dir && dir !== "." && !fs$2.existsSync(dir)) fs$2.mkdirSync(dir, { recursive: true });
+		fs$2.writeFileSync(target, code);
+		console.log(chalk.green(`\n✓ Created ${target}`));
+	} else showCodeBlock(code, "auth config");
+	showServerOutro();
+}
+function generateServerCode(name, description, source, sourceUrl) {
+	const descLine = description ? `\n\t\t\tproviderDescription: ${JSON.stringify(description)},` : "";
+	if (source === "openapi" && sourceUrl) return `import { betterAuth } from "better-auth";
+import { agentAuth } from "${AGENT_PLUGIN_PKG}";
+import { createFromOpenAPI } from "${AGENT_PLUGIN_PKG}/openapi";
+
+const spec = await fetch(${JSON.stringify(sourceUrl)}).then(r => r.json());
+
+const openapi = createFromOpenAPI(spec, {
+\tbaseUrl: ${JSON.stringify(sourceUrl.replace(/\/openapi\.json$|\/openapi\.yaml$|\/swagger\.json$|\/docs\/openapi$/, ""))},
+});
+
+export const auth = betterAuth({
+\tplugins: [
+\t\tagentAuth({
+\t\t\tproviderName: ${JSON.stringify(name)},${descLine}
+\t\t\t...openapi,
+\t\t}),
+\t],
+});
+`;
+	if (source === "mcp" && sourceUrl) return `import { betterAuth } from "better-auth";
+import { agentAuth } from "${AGENT_PLUGIN_PKG}";
+
+export const auth = betterAuth({
+\tplugins: [
+\t\tagentAuth({
+\t\t\tproviderName: ${JSON.stringify(name)},${descLine}
+\t\t\tmcpServer: ${JSON.stringify(sourceUrl)},
+\t\t}),
+\t],
+});
+`;
+	return `import { betterAuth } from "better-auth";
+import { agentAuth } from "${AGENT_PLUGIN_PKG}";
+
+export const auth = betterAuth({
+\tplugins: [
+\t\tagentAuth({
+\t\t\tproviderName: ${JSON.stringify(name)},${descLine}
+\t\t\tcapabilities: [
+\t\t\t\t{
+\t\t\t\t\tname: "example",
+\t\t\t\t\tdescription: "An example capability — replace with your own",
+\t\t\t\t\tinput: {
+\t\t\t\t\t\ttype: "object",
+\t\t\t\t\t\tproperties: {
+\t\t\t\t\t\t\tmessage: { type: "string", description: "Input message" },
+\t\t\t\t\t\t},
+\t\t\t\t\t},
+\t\t\t\t},
+\t\t\t],
+\t\t\tasync onExecute({ capability, arguments: args }) {
+\t\t\t\tswitch (capability) {
+\t\t\t\t\tcase "example":
+\t\t\t\t\t\treturn { message: \`Hello from \${(args as Record<string, string>).message}\` };
+\t\t\t\t\tdefault:
+\t\t\t\t\t\tthrow new Error(\`Unknown capability: \${capability}\`);
+\t\t\t\t}
+\t\t\t},
+\t\t}),
+\t],
+});
+`;
+}
+function showServerOutro() {
+	console.log(chalk.bold.white("\nNext steps:\n"));
+	console.log(chalk.white("  1. Install dependencies:"));
+	console.log(chalk.cyan(`     npm install better-auth ${AGENT_PLUGIN_PKG}\n`));
+	console.log(chalk.white("  2. Configure your database:"));
+	console.log(chalk.gray("     Better Auth needs a database to store agents, hosts, and grants."));
+	console.log(chalk.cyan("     https://www.better-auth.com/docs/concepts/database\n"));
+	console.log(chalk.white("  3. Run database migrations:"));
+	console.log(chalk.cyan("     npx auth migrate\n"));
+	console.log(chalk.white("  4. Expose the discovery endpoint at your app root:"));
+	console.log(chalk.gray("     GET /.well-known/agent-configuration"));
+	console.log(chalk.gray("     → return auth.api.getAgentConfiguration({ headers })\n"));
+	console.log(`  ${chalk.cyan("Docs")}    ${PROTOCOL_URL}/docs/build-server`);
+	console.log(`  ${chalk.cyan("GitHub")}  https://github.com/better-auth/agent-auth`);
+	console.log(chalk.green("\n✔ ") + chalk.bold("Server scaffolded. ") + "Follow the steps above to finish setup.\n");
+}
+async function offerSkillInstall(skillName) {
+	const { installSkill } = await prompts({
+		type: "confirm",
+		name: "installSkill",
+		message: `Install the ${chalk.cyan(skillName)} skill for your coding agents?`,
+		initial: true
+	});
+	if (!installSkill) return;
+	const cmd = `npx -y skills add ${SKILLS_REPO} --skill ${skillName}`;
+	const s = yoctoSpinner({
+		text: `Installing ${skillName} skill…`,
+		color: "white"
+	});
+	s.start();
+	try {
+		execSync(cmd, { stdio: "pipe" });
+		s.success(`${skillName} skill installed.`);
+	} catch {
+		s.stop();
+		console.log(chalk.yellow("⚠ Could not install automatically. Run manually:"));
+		console.log(chalk.cyan(`  ${cmd}\n`));
+	}
+}
+function buildMcpArgs(registry) {
+	const args = [
+		"-y",
+		AGENT_CLI_PKG,
+		"mcp"
+	];
+	if (registry && registry !== DEFAULT_REGISTRY) args.push("--registry-url", registry);
+	return args;
+}
+function getMcpConfigPath(tool, scope) {
+	const home = os$1.homedir();
+	switch (tool) {
+		case "cursor": return scope === "global" ? path$1.join(home, ".cursor", "mcp.json") : path$1.join(process.cwd(), ".cursor", "mcp.json");
+		case "claude-desktop":
+			if (process.platform === "win32") return path$1.join(process.env.APPDATA || home, "Claude", "claude_desktop_config.json");
+			if (process.platform === "darwin") return path$1.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+			return path$1.join(home, ".config", "Claude", "claude_desktop_config.json");
+		case "windsurf": return path$1.join(home, ".codeium", "windsurf", "mcp_config.json");
+		case "vscode": return scope === "global" ? null : path$1.join(process.cwd(), ".vscode", "mcp.json");
+		default: return null;
+	}
+}
+function writeMcpConfig(configPath, entry) {
+	let config = {};
+	if (fs$2.existsSync(configPath)) try {
+		config = JSON.parse(fs$2.readFileSync(configPath, "utf-8"));
+	} catch {}
+	const servers = config.mcpServers ?? {};
+	servers["agent-auth"] = entry;
+	config.mcpServers = servers;
+	const dir = path$1.dirname(configPath);
+	if (!fs$2.existsSync(dir)) fs$2.mkdirSync(dir, { recursive: true });
+	fs$2.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+}
+function displayPath(filePath, scope) {
+	if (scope === "project") return path$1.relative(process.cwd(), filePath) || filePath;
+	return filePath.replace(os$1.homedir(), "~");
+}
+function showJsonConfig(entry) {
+	const json = JSON.stringify({ mcpServers: { "agent-auth": entry } }, null, 2);
+	console.log(chalk.bold.white("\nAdd to your MCP configuration:\n"));
+	console.log(json.split("\n").map((line) => chalk.cyan(`  ${line}`)).join("\n"));
+	console.log();
+}
+function showCodeBlock(code, title) {
+	console.log(chalk.bold.white(`\n${title}:\n`));
+	console.log(code.split("\n").map((line) => chalk.dim(`  ${line}`)).join("\n"));
+}
+function showNextSteps(lines) {
+	console.log(chalk.bold.white("\nLearn more:\n"));
+	for (const line of lines) console.log(`  ${line}`);
+}
+const ai = new Command("ai").description("Interactive setup for Agent Auth — AI agent authentication").action(aiAction);
+
+//#endregion
 //#region src/generators/drizzle.ts
 function convertToSnakeCase(str, camelCase) {
 	if (camelCase) return str;
@@ -919,23 +1465,6 @@ const reserved = new Set([
 	"instanceof"
 ]);
 
-//#endregion
-//#region src/utils/get-tsconfig-info.ts
-function stripJsonComments(jsonString) {
-	return jsonString.replace(/\\"|"(?:\\"|[^"])*"|(\/\/.*|\/\*[\s\S]*?\*\/)/g, (m, g) => g ? "" : m).replace(/,(?=\s*[}\]])/g, "");
-}
-function getTsconfigInfo(cwd, flatPath) {
-	let tsConfigPath;
-	if (flatPath) tsConfigPath = flatPath;
-	else tsConfigPath = cwd ? path.join(cwd, "tsconfig.json") : path.join("tsconfig.json");
-	try {
-		const text = fs.readFileSync(tsConfigPath, "utf-8");
-		return JSON.parse(stripJsonComments(text));
-	} catch (error) {
-		throw error;
-	}
-}
-
 //#endregion
 //#region src/utils/get-config.ts
 let possiblePaths$1 = [
@@ -966,49 +1495,63 @@ possiblePaths$1 = [
 	...possiblePaths$1.map((it) => `src/${it}`),
 	...possiblePaths$1.map((it) => `app/${it}`)
 ];
-function resolveReferencePath(configDir, refPath) {
-	const resolvedPath = path.resolve(configDir, refPath);
-	if (refPath.endsWith(".json")) return resolvedPath;
-	if (fs.existsSync(resolvedPath)) try {
-		if (fs.statSync(resolvedPath).isFile()) return resolvedPath;
-	} catch {}
-	return path.resolve(configDir, refPath, "tsconfig.json");
+function mergeAliases(target, source) {
+	for (const [alias, aliasPath] of Object.entries(source)) if (!(alias in target)) target[alias] = aliasPath;
 }
-function getPathAliasesRecursive(tsconfigPath, visited = /* @__PURE__ */ new Set()) {
-	if (visited.has(tsconfigPath)) return {};
-	visited.add(tsconfigPath);
-	if (!fs.existsSync(tsconfigPath)) {
-		console.warn(`Referenced tsconfig not found: ${tsconfigPath}`);
-		return {};
+function extractAliases(tsconfig) {
+	const { paths = {}, baseUrl } = tsconfig.config.compilerOptions ?? {};
+	const result = {};
+	const configDir = path.dirname(tsconfig.path);
+	const resolvedBaseUrl = baseUrl ? path.resolve(configDir, baseUrl) : configDir;
+	for (const [alias, aliasPaths = []] of Object.entries(paths)) for (const aliasedPath of aliasPaths) {
+		const finalAlias = alias.slice(-1) === "*" ? alias.slice(0, -1) : alias;
+		const finalAliasedPath = aliasedPath.slice(-1) === "*" ? aliasedPath.slice(0, -1) : aliasedPath;
+		result[finalAlias || ""] = path.join(resolvedBaseUrl, finalAliasedPath);
 	}
+	return result;
+}
+/**
+* Reads raw tsconfig JSON to get `references` (which get-tsconfig strips out).
+*/
+function readRawTsconfigReferences(tsconfigPath) {
 	try {
-		const tsConfig = getTsconfigInfo(void 0, tsconfigPath);
-		const { paths = {}, baseUrl = "." } = tsConfig.compilerOptions || {};
-		const result = {};
-		const configDir = path.dirname(tsconfigPath);
-		const obj = Object.entries(paths);
-		for (const [alias, aliasPaths] of obj) for (const aliasedPath of aliasPaths) {
-			const resolvedBaseUrl = path.resolve(configDir, baseUrl);
-			const finalAlias = alias.slice(-1) === "*" ? alias.slice(0, -1) : alias;
-			const finalAliasedPath = aliasedPath.slice(-1) === "*" ? aliasedPath.slice(0, -1) : aliasedPath;
-			result[finalAlias || ""] = path.join(resolvedBaseUrl, finalAliasedPath);
-		}
-		if (tsConfig.references) for (const ref of tsConfig.references) {
-			const refAliases = getPathAliasesRecursive(resolveReferencePath(configDir, ref.path), visited);
-			for (const [alias, aliasPath] of Object.entries(refAliases)) if (!(alias in result)) result[alias] = aliasPath;
+		const stripped = fs.readFileSync(tsconfigPath, "utf-8").replace(/\\"|"(?:\\"|[^"])*"|(\/\/.*|\/\*[\s\S]*?\*\/)/g, (m, g) => g ? "" : m).replace(/,(?=\s*[}\]])/g, "");
+		return JSON.parse(stripped).references;
+	} catch {
+		return;
+	}
+}
+/**
+* Collect path aliases from tsconfig references recursively.
+*/
+function collectReferencesAliases(tsconfigPath, visited = /* @__PURE__ */ new Set()) {
+	const result = {};
+	const refs = readRawTsconfigReferences(tsconfigPath);
+	if (!refs) return result;
+	const configDir = path.dirname(tsconfigPath);
+	for (const ref of refs) {
+		const resolvedRef = path.resolve(configDir, ref.path);
+		const refTsconfigPath = resolvedRef.endsWith(".json") ? resolvedRef : path.join(resolvedRef, "tsconfig.json");
+		if (visited.has(refTsconfigPath)) continue;
+		visited.add(refTsconfigPath);
+		try {
+			mergeAliases(result, extractAliases({
+				path: refTsconfigPath,
+				config: parseTsconfig(refTsconfigPath)
+			}));
+		} catch {
+			continue;
 		}
-		return result;
-	} catch (error) {
-		console.warn(`Error parsing tsconfig at ${tsconfigPath}: ${error}`);
-		return {};
+		mergeAliases(result, collectReferencesAliases(refTsconfigPath, visited));
 	}
+	return result;
 }
 function getPathAliases(cwd) {
-	let tsConfigPath = path.join(cwd, "tsconfig.json");
-	if (!fs.existsSync(tsConfigPath)) tsConfigPath = path.join(cwd, "jsconfig.json");
-	if (!fs.existsSync(tsConfigPath)) return null;
+	const tsconfig = getTsconfig(cwd, fs.existsSync(path.join(cwd, "tsconfig.json")) ? "tsconfig.json" : "jsconfig.json");
+	if (!tsconfig) return null;
 	try {
-		const result = getPathAliasesRecursive(tsConfigPath);
+		const result = extractAliases(tsconfig);
+		mergeAliases(result, collectReferencesAliases(tsconfig.path));
 		addSvelteKitEnvModules(result);
 		addCloudflareModules(result);
 		return result;
@@ -1145,14 +1688,14 @@ function createMockAdapter$1(adapterId, dialect) {
 	};
 }
 async function generateAction(opts) {
-	const options = z$1.object({
-		cwd: z$1.string(),
-		config: z$1.string().optional(),
-		output: z$1.string().optional(),
-		adapter: z$1.string().optional(),
-		dialect: z$1.string().optional(),
-		y: z$1.boolean().optional(),
-		yes: z$1.boolean().optional()
+	const options = z.object({
+		cwd: z.string(),
+		config: z.string().optional(),
+		output: z.string().optional(),
+		adapter: z.string().optional(),
+		dialect: z.string().optional(),
+		y: z.boolean().optional(),
+		yes: z.boolean().optional()
 	}).parse(opts);
 	const cwd = path.resolve(options.cwd);
 	if (!existsSync(cwd)) {
@@ -2428,7 +2971,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "issuer",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -2440,7 +2983,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "skipVerificationOnEnable",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -2457,7 +3000,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "digits",
-							schema: z$1.coerce.number().positive().optional()
+							schema: z.coerce.number().positive().optional()
 						}
 					}, {
 						flag: "totp-otp-period",
@@ -2468,7 +3011,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "period",
-							schema: z$1.coerce.number().positive().optional()
+							schema: z.coerce.number().positive().optional()
 						}
 					}],
 					argument: {
@@ -2490,7 +3033,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "period",
-							schema: z$1.coerce.number().positive().optional()
+							schema: z.coerce.number().positive().optional()
 						}
 					}, {
 						flag: "otp-store-otp",
@@ -2515,7 +3058,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "storeOTP",
-							schema: z$1.enum([
+							schema: z.enum([
 								"plain",
 								"encrypted",
 								"hashed"
@@ -2540,7 +3083,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "amount",
-							schema: z$1.coerce.number().positive().optional()
+							schema: z.coerce.number().positive().optional()
 						}
 					}, {
 						flag: "backup-code-length",
@@ -2551,7 +3094,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "length",
-							schema: z$1.coerce.number().positive().optional()
+							schema: z.coerce.number().positive().optional()
 						}
 					}],
 					argument: {
@@ -2576,7 +3119,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "twoFactorTable",
-							schema: z$1.coerce.string().optional()
+							schema: z.coerce.string().optional()
 						}
 					}]
 				}
@@ -2610,7 +3153,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "maxUsernameLength",
-						schema: z$1.coerce.number().min(0).positive().optional()
+						schema: z.coerce.number().min(0).positive().optional()
 					}
 				},
 				{
@@ -2622,7 +3165,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "minUsernameLength",
-						schema: z$1.coerce.number().min(0).positive().optional()
+						schema: z.coerce.number().min(0).positive().optional()
 					}
 				},
 				{
@@ -2645,7 +3188,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "username",
-							schema: z$1.enum(["pre-normalization", "post-normalization"]).optional()
+							schema: z.enum(["pre-normalization", "post-normalization"]).optional()
 						}
 					}, {
 						flag: "username-validation-order-display-username",
@@ -2663,7 +3206,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "displayUsername",
-							schema: z$1.enum(["pre-normalization", "post-normalization"]).optional()
+							schema: z.enum(["pre-normalization", "post-normalization"]).optional()
 						}
 					}],
 					argument: {
@@ -2702,7 +3245,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "expiresIn",
-						schema: z$1.coerce.number().optional()
+						schema: z.coerce.number().optional()
 					}
 				},
 				{
@@ -2717,7 +3260,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "sendMagicLink",
-						schema: z$1.coerce.string()
+						schema: z.coerce.string()
 					}
 				},
 				{
@@ -2734,7 +3277,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "window",
-							schema: z$1.coerce.number().optional()
+							schema: z.coerce.number().optional()
 						}
 					}, {
 						flag: "magic-link-rate-limit-max",
@@ -2746,7 +3289,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "max",
-							schema: z$1.coerce.number().optional()
+							schema: z.coerce.number().optional()
 						}
 					}],
 					argument: {
@@ -2770,7 +3313,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "storeToken",
-						schema: z$1.enum(["plain", "hashed"]).optional()
+						schema: z.enum(["plain", "hashed"]).optional()
 					}
 				}
 			]
@@ -2806,7 +3349,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "sendVerificationOTP",
-						schema: z$1.coerce.string()
+						schema: z.coerce.string()
 					}
 				},
 				{
@@ -2819,7 +3362,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "otpLength",
-						schema: z$1.coerce.number().optional()
+						schema: z.coerce.number().optional()
 					}
 				},
 				{
@@ -2832,7 +3375,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "expiresIn",
-						schema: z$1.coerce.number().optional()
+						schema: z.coerce.number().optional()
 					}
 				},
 				{
@@ -2845,7 +3388,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "sendVerificationOnSignUp",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -2858,7 +3401,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "disableSignUp",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -2871,7 +3414,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "allowedAttempts",
-						schema: z$1.coerce.number().optional()
+						schema: z.coerce.number().optional()
 					}
 				},
 				{
@@ -2897,7 +3440,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "storeOTP",
-						schema: z$1.enum([
+						schema: z.enum([
 							"plain",
 							"encrypted",
 							"hashed"
@@ -2914,7 +3457,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "overrideDefaultEmailVerification",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				}
 			]
@@ -3041,7 +3584,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "defaultRole",
-					schema: z$1.coerce.string().optional()
+					schema: z.coerce.string().optional()
 				}
 			}, {
 				flag: "admin-roles",
@@ -3052,7 +3595,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "adminRoles",
-					schema: z$1.array(z$1.string()).optional()
+					schema: z.array(z.string()).optional()
 				}
 			}]
 		},
@@ -3084,7 +3627,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "apiKeyHeaders",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3097,7 +3640,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "defaultKeyLength",
-						schema: z$1.coerce.number().positive().optional()
+						schema: z.coerce.number().positive().optional()
 					}
 				},
 				{
@@ -3109,7 +3652,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "disableKeyHashing",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3121,7 +3664,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "enableMetadata",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3133,7 +3676,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "enableSessionForAPIKeys",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				}
 			]
@@ -3165,7 +3708,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "requireSignature",
-					schema: z$1.coerce.boolean().optional()
+					schema: z.coerce.boolean().optional()
 				}
 			}]
 		},
@@ -3206,7 +3749,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "provider",
-						schema: z$1.enum([
+						schema: z.enum([
 							"google-recaptcha",
 							"cloudflare-turnstile",
 							"hcaptcha",
@@ -3221,7 +3764,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "secretKey",
-						schema: z$1.coerce.string()
+						schema: z.coerce.string()
 					}
 				},
 				{
@@ -3232,7 +3775,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "siteKey",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3245,7 +3788,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "minScore",
-						schema: z$1.coerce.number().min(0).max(1).optional()
+						schema: z.coerce.number().min(0).max(1).optional()
 					}
 				}
 			]
@@ -3270,7 +3813,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "shouldMutateListDeviceSessionsEndpoint",
-					schema: z$1.coerce.boolean().optional()
+					schema: z.coerce.boolean().optional()
 				}
 			}]
 		},
@@ -3302,7 +3845,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "expiresIn",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3314,7 +3857,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "interval",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3327,7 +3870,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "deviceCodeLength",
-						schema: z$1.coerce.number().positive().optional()
+						schema: z.coerce.number().positive().optional()
 					}
 				},
 				{
@@ -3340,7 +3883,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "userCodeLength",
-						schema: z$1.coerce.number().positive().optional()
+						schema: z.coerce.number().positive().optional()
 					}
 				}
 			]
@@ -3371,7 +3914,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "customPasswordCompromisedMessage",
-					schema: z$1.coerce.string().optional()
+					schema: z.coerce.string().optional()
 				}
 			}]
 		},
@@ -3395,7 +3938,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "disableSettingJwtHeader",
-					schema: z$1.coerce.boolean().optional()
+					schema: z.coerce.boolean().optional()
 				}
 			}]
 		},
@@ -3427,7 +3970,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "cookieName",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3440,7 +3983,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "maxAge",
-						schema: z$1.coerce.number().positive().optional()
+						schema: z.coerce.number().positive().optional()
 					}
 				},
 				{
@@ -3452,7 +3995,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "storeInDatabase",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				}
 			]
@@ -3482,7 +4025,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "loginPage",
-					schema: z$1.coerce.string()
+					schema: z.coerce.string()
 				}
 			}, {
 				flag: "mcp-resource",
@@ -3492,7 +4035,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "resource",
-					schema: z$1.coerce.string().optional()
+					schema: z.coerce.string().optional()
 				}
 			}]
 		},
@@ -3517,7 +4060,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "maximumSessions",
-					schema: z$1.coerce.number().positive().optional()
+					schema: z.coerce.number().positive().optional()
 				}
 			}]
 		},
@@ -3547,7 +4090,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "currentURL",
-					schema: z$1.coerce.string().optional()
+					schema: z.coerce.string().optional()
 				}
 			}, {
 				flag: "oauth-proxy-production-url",
@@ -3557,7 +4100,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "productionURL",
-					schema: z$1.coerce.string().optional()
+					schema: z.coerce.string().optional()
 				}
 			}]
 		},
@@ -3581,7 +4124,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "disableSignup",
-					schema: z$1.coerce.boolean().optional()
+					schema: z.coerce.boolean().optional()
 				}
 			}, {
 				flag: "one-tap-client-id",
@@ -3591,7 +4134,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "clientId",
-					schema: z$1.coerce.string().optional()
+					schema: z.coerce.string().optional()
 				}
 			}]
 		},
@@ -3624,7 +4167,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "expiresIn",
-						schema: z$1.coerce.number().positive().optional()
+						schema: z.coerce.number().positive().optional()
 					}
 				},
 				{
@@ -3636,7 +4179,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "disableClientRequest",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3655,7 +4198,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "storeToken",
-						schema: z$1.enum(["plain", "hashed"]).optional()
+						schema: z.enum(["plain", "hashed"]).optional()
 					}
 				}
 			]
@@ -3688,7 +4231,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "path",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3700,7 +4243,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "disableDefaultReference",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3762,7 +4305,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "theme",
-						schema: z$1.enum([
+						schema: z.enum([
 							"alternate",
 							"default",
 							"moon",
@@ -3801,7 +4344,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "allowUserToCreateOrganization",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3813,7 +4356,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "creatorRole",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3826,7 +4369,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "membershipLimit",
-						schema: z$1.coerce.number().positive().optional()
+						schema: z.coerce.number().positive().optional()
 					}
 				}
 			]
@@ -3857,7 +4400,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "domain",
-						schema: z$1.coerce.string()
+						schema: z.coerce.string()
 					}
 				},
 				{
@@ -3868,7 +4411,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "emailDomainName",
-						schema: z$1.coerce.string().optional()
+						schema: z.coerce.string().optional()
 					}
 				},
 				{
@@ -3880,7 +4423,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "anonymous",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				}
 			]
@@ -3935,7 +4478,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "defaultOverrideUserInfo",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3948,7 +4491,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "disableImplicitSignUp",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3962,7 +4505,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "providersLimit",
-						schema: z$1.coerce.number().int().positive().optional()
+						schema: z.coerce.number().int().positive().optional()
 					}
 				},
 				{
@@ -3975,7 +4518,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "trustEmailVerified",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				},
 				{
@@ -3986,7 +4529,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "domainVerification",
-						schema: z$1.object({ enabled: z$1.coerce.boolean().optional() }).optional()
+						schema: z.object({ enabled: z.coerce.boolean().optional() }).optional()
 					},
 					isNestedObject: [{
 						flag: "sso-domain-verification-enabled",
@@ -3998,7 +4541,7 @@ const tempPluginsConfig = {
 						argument: {
 							index: 0,
 							isProperty: "enabled",
-							schema: z$1.coerce.boolean().optional()
+							schema: z.coerce.boolean().optional()
 						}
 					}]
 				}
@@ -4019,7 +4562,7 @@ const tempPluginsConfig = {
 				argument: {
 					index: 0,
 					isProperty: "domainVerification",
-					schema: z$1.object({ enabled: z$1.coerce.boolean().optional() }).optional()
+					schema: z.object({ enabled: z.coerce.boolean().optional() }).optional()
 				},
 				isNestedObject: [{
 					flag: "sso-client-domain-verification-enabled",
@@ -4031,7 +4574,7 @@ const tempPluginsConfig = {
 					argument: {
 						index: 0,
 						isProperty: "enabled",
-						schema: z$1.coerce.boolean().optional()
+						schema: z.coerce.boolean().optional()
 					}
 				}]
 			}]
@@ -6247,11 +6790,11 @@ const mcp = new Command("mcp").description("Add Better Auth MCP server to MCP Cl
 //#region src/commands/migrate.ts
 /** @internal */
 async function migrateAction(opts) {
-	const options = z$1.object({
-		cwd: z$1.string(),
-		config: z$1.string().optional(),
-		y: z$1.boolean().optional(),
-		yes: z$1.boolean().optional()
+	const options = z.object({
+		cwd: z.string(),
+		config: z.string().optional(),
+		y: z.boolean().optional(),
+		yes: z.boolean().optional()
 	}).parse(opts);
 	const cwd = path.resolve(options.cwd);
 	if (!existsSync(cwd)) {
@@ -6403,9 +6946,9 @@ function isBetterAuthPackage(name) {
 	return name === "better-auth" || name.startsWith("@better-auth/");
 }
 async function upgradeAction(opts) {
-	const options = z$1.object({
-		cwd: z$1.string(),
-		yes: z$1.boolean().optional()
+	const options = z.object({
+		cwd: z.string(),
+		yes: z.boolean().optional()
 	}).parse(opts);
 	const cwd = path.resolve(options.cwd);
 	if (!existsSync(cwd)) {
@@ -6514,7 +7057,7 @@ async function main() {
 		packageInfo = await getPackageInfo();
 		cliVersion = packageInfo.version || "1.1.2";
 	} catch {}
-	program.addCommand(init).addCommand(migrate).addCommand(generate).addCommand(generateSecret).addCommand(info).addCommand(login).addCommand(logout).addCommand(mcp).addCommand(upgrade).version(cliVersion).description("Better Auth CLI").action(() => program.help());
+	program.addCommand(ai).addCommand(init).addCommand(migrate).addCommand(generate).addCommand(generateSecret).addCommand(info).addCommand(login).addCommand(logout).addCommand(mcp).addCommand(upgrade).version(cliVersion).description("Better Auth CLI").action(() => program.help());
 	program.parse();
 }
 main().catch((error) => {