auth 1.7.0 → 1.7.2

package/dist/api.d.mts

@@ -7,6 +7,11 @@ interface SchemaGeneratorResult {
   fileName: string;
   overwrite?: boolean;
   append?: boolean;
+  /**
+   * Schema changes the generated code contains but no database can apply
+   * without corrupting the rows it already holds.
+   */
+  unsafeChanges?: string[];
 }
 interface SchemaGenerator {
   <Options extends BetterAuthOptions>(opts: {
@@ -26,11 +31,7 @@ declare const generateSchema: (opts: {
   adapter: DBAdapter$1;
   file?: string;
   options: BetterAuthOptions;
-}) => Promise<SchemaGeneratorResult | {
-  code: string;
-  fileName: string;
-  overwrite: boolean | undefined;
-}>;
+}) => Promise<SchemaGeneratorResult>;
 //#endregion
 //#region src/generators/drizzle.d.ts
 declare const generateDrizzleSchema: SchemaGenerator;

package/dist/api.mjs

@@ -321,11 +321,24 @@ function generateImport({ databaseType, tables, options, schemaName }) {
 }
 //#endregion
 //#region src/generators/kysely.ts
+function commentBanner(unsafeChanges) {
+	const rule = `-- ${"-".repeat(77)}`;
+	const lines = [
+		rule,
+		"-- DO NOT RUN THIS SCRIPT AS IT IS.",
+		"-- Applying it to a populated database corrupts the rows it touches:"
+	];
+	for (const change of unsafeChanges) lines.push("--", `-- ${change}`);
+	lines.push(rule, "");
+	return lines.join("\n");
+}
 const generateKyselySchema = async ({ options, file }) => {
-	const { compileMigrations } = await getMigrations(options);
+	const { compileMigrations, unsafeChanges } = await getMigrations(options, { throwOnUnsafe: false });
 	const migrations = await compileMigrations();
+	const code = migrations.trim() === ";" ? "" : migrations;
 	return {
-		code: migrations.trim() === ";" ? "" : migrations,
+		code: unsafeChanges.length ? `${commentBanner(unsafeChanges)}${code}` : code,
+		unsafeChanges,
 		fileName: file || `./better-auth_migrations/${(/* @__PURE__ */ new Date()).toISOString().replace(/:/g, "-")}.sql`
 	};
 };

package/dist/index.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { APIError, BetterAuthError } from "@better-auth/core/error";
 import { Command } from "commander";
 import { exec, execSync, spawn } from "node:child_process";
 import * as fs$2 from "node:fs";
@@ -10,7 +11,6 @@ import path, { join } from "node:path";
 import chalk from "chalk";
 import prompts from "prompts";
 import yoctoSpinner from "yocto-spinner";
-import { APIError, BetterAuthError } from "@better-auth/core/error";
 import { betterAuth } from "better-auth";
 import * as z from "zod";
 import babelPresetReact from "@babel/preset-react";
@@ -25,7 +25,7 @@ import { capitalizeFirstLetter, toSnakeCase } from "@better-auth/core/utils/stri
 import { initGetFieldName, initGetModelName } from "better-auth/adapters";
 import { getAuthTables } from "better-auth/db";
 import prettier, { format } from "prettier";
-import { getMigrations } from "better-auth/db/migration";
+import { UnsafeMigrationError, getMigrations } from "better-auth/db/migration";
 import { produceSchema } from "@mrleebo/prisma-ast";
 import Crypto from "node:crypto";
 import open from "open";
@@ -1667,11 +1667,24 @@ function generateImport({ databaseType, tables, options, schemaName }) {
 }
 //#endregion
 //#region src/generators/kysely.ts
+function commentBanner(unsafeChanges) {
+	const rule = `-- ${"-".repeat(77)}`;
+	const lines = [
+		rule,
+		"-- DO NOT RUN THIS SCRIPT AS IT IS.",
+		"-- Applying it to a populated database corrupts the rows it touches:"
+	];
+	for (const change of unsafeChanges) lines.push("--", `-- ${change}`);
+	lines.push(rule, "");
+	return lines.join("\n");
+}
 const generateKyselySchema = async ({ options, file }) => {
-	const { compileMigrations } = await getMigrations(options);
+	const { compileMigrations, unsafeChanges } = await getMigrations(options, { throwOnUnsafe: false });
 	const migrations = await compileMigrations();
+	const code = migrations.trim() === ";" ? "" : migrations;
 	return {
-		code: migrations.trim() === ";" ? "" : migrations,
+		code: unsafeChanges.length ? `${commentBanner(unsafeChanges)}${code}` : code,
+		unsafeChanges,
 		fileName: file || `./better-auth_migrations/${(/* @__PURE__ */ new Date()).toISOString().replace(/:/g, "-")}.sql`
 	};
 };
@@ -2278,6 +2291,11 @@ async function generateAction(opts) {
 		options: config
 	});
 	spinner.stop();
+	if (schema.unsafeChanges?.length) {
+		console.warn(chalk.red.bold(`⚠ ${schema.unsafeChanges.length} ${schema.unsafeChanges.length === 1 ? "change in this schema corrupts" : "changes in this schema corrupt"} a populated database.`));
+		for (const change of schema.unsafeChanges) console.warn(chalk.red(`-> ${change}`));
+		console.warn(chalk.red.bold("The generated script carries the same warning. Fix the reported columns before you run it."));
+	}
 	if (!schema.code) {
 		await removeGeneratedStub();
 		console.log("Your schema is already up to date.");
@@ -2955,7 +2973,7 @@ function installDependencies({ dependencies, packageManager, cwd, type = "prod",
 }
 //#endregion
 //#region src/version.ts
-const cliVersion = "1.7.0";
+const cliVersion = "1.7.2";
 //#endregion
 //#region src/commands/init/configs/frameworks.config.ts
 const FRAMEWORKS = [
@@ -4923,7 +4941,7 @@ const tempPluginsConfig = {
 				{
 					flag: "siwe-email-domain-name",
 					question: "What is the email domain name?",
-					description: "The email domain name for anonymous users.",
+					description: "A custom email domain for wallet-derived addresses.",
 					skip: "prompt",
 					argument: {
 						index: 0,
@@ -7334,7 +7352,27 @@ async function migrateAction(opts) {
 		process.exit(1);
 	}
 	const spinner = yoctoSpinner({ text: "preparing migration..." }).start();
-	const { toBeAdded, toBeAddedIndexes, toBeCreated, runMigrations } = await getMigrations(config);
+	let plan;
+	try {
+		plan = await getMigrations(config);
+	} catch (error) {
+		spinner.stop();
+		if (!(error instanceof UnsafeMigrationError)) throw error;
+		console.error(chalk.red("The migration was refused, and nothing ran."));
+		console.error(error.message);
+		console.error(`Run ${chalk.yellow("npx auth@latest generate")} to read the statements without executing them.`);
+		try {
+			await (await createTelemetry(config)).publish({
+				type: "cli_migrate",
+				payload: {
+					outcome: "unsafe_change",
+					config: await getTelemetryAuthConfig(config)
+				}
+			});
+		} catch {}
+		process.exit(1);
+	}
+	const { toBeAdded, toBeAddedIndexes, toBeCreated, runMigrations } = plan;
 	if (!toBeAdded.length && !toBeAddedIndexes.length && !toBeCreated.length) {
 		spinner.stop();
 		console.log("🚀 No migrations needed.");
@@ -7529,10 +7567,11 @@ process.on("SIGTERM", () => process.exit(0));
 async function main() {
 	const program = new Command("better-auth");
 	program.addCommand(ai).addCommand(createAdmin).addCommand(init).addCommand(migrate).addCommand(generate).addCommand(generateSecret).addCommand(info).addCommand(login).addCommand(logout).addCommand(mcp).addCommand(upgrade).version(cliVersion).description("Better Auth CLI").action(() => program.help());
-	program.parse();
+	await program.parseAsync();
 }
 main().catch((error) => {
-	console.error("Error running Better Auth CLI:", error);
+	if (error instanceof BetterAuthError) console.error(error.message);
+	else console.error("Error running Better Auth CLI:", error);
 	process.exit(1);
 });
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auth",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "description": "The CLI for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -64,9 +64,9 @@
     "semver": "^7.8.4",
     "yocto-spinner": "^1.2.0",
     "zod": "^4.3.6",
-    "@better-auth/core": "1.7.0",
-    "@better-auth/telemetry": "1.7.0",
-    "better-auth": "1.7.0"
+    "@better-auth/core": "1.7.2",
+    "@better-auth/telemetry": "1.7.2",
+    "better-auth": "1.7.2"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",
@@ -78,7 +78,7 @@
     "tsx": "^4.21.0",
     "type-fest": "^5.7.0",
     "typescript": "^6.0.3",
-    "@better-auth/passkey": "1.7.0"
+    "@better-auth/passkey": "1.7.2"
   },
   "scripts": {
     "build": "tsdown",