better-auth-studio 1.1.3-beta.5 → 1.1.3-beta.51

package/README.md

@@ -6,6 +6,10 @@
 
 A web-based studio interface for managing Better Auth applications. Better Auth Studio provides a comprehensive dashboard for managing users, organizations, teams, and more.
 
+## Demo Snapshot
+
+![Demo of Better Auth Studio](https://gk6bju9ndq.ufs.sh/f/M5pOhOFFvHQJcwmo00jXSlBtbRHTF15ujAQLPx3VpcKgMOz0)
+
 ## ✨ Try Better Auth Studio Demo
 
 You can try a live, demo version of Better Auth Studio here:
@@ -21,11 +25,11 @@ This online demo lets you explore the admin studio UI. Please note this is a tes
 
 ### Hosted Version
 
-For the hosted version, please join the waitlist: **[better-auth.build](https://better-auth.build)**
+For the hosted version: **[better-auth.build](https://better-auth.build)**
 
 ### Installation
 
-📖 **[Documentation](https://better-auth-studio.vercel.app)**
+📖 **[Documentation](https://better-auth.studio)**
 
 **Recommended: Install as a dev dependency** (for project-specific versions):
 
@@ -77,7 +81,7 @@ Before using Better Auth Studio, ensure you have:
 
 - **Node.js** (v18 or higher)
 - **A Better Auth project** with a valid `auth.ts` configuration file
-- **Database setup** (Prisma, Drizzle, or SQLite)
+- **Database setup** (Prisma, Drizzle, Kysely, or SQLite)
 
 ## 🔧 Configuration
 
@@ -87,9 +91,10 @@ Better Auth Studio automatically detects and works with:
 
 - **Prisma** (`prismaAdapter`)
 - **Drizzle** (`drizzleAdapter`)
+- **Kysely** (`database: { db, type }`)
 - **SQLite** (`new Database()` from better-sqlite3)
-- **PostgreSQL** (via Prisma or Drizzle)
-- **MySQL** (via Prisma or Drizzle)
+- **PostgreSQL** (via Prisma, Drizzle, or Kysely)
+- **MySQL** (via Prisma, Drizzle, or Kysely)
 
 ### Example Configuration Files
 
@@ -127,6 +132,31 @@ export const auth = betterAuth({
 });
 ```
 
+#### Kysely Setup
+
+```typescript
+// auth.ts
+import { betterAuth } from "better-auth";
+import { Kysely, PostgresDialect } from "kysely";
+import { Pool } from "pg";
+
+const db = new Kysely<any>({
+  dialect: new PostgresDialect({
+    pool: new Pool({
+      connectionString: process.env.DATABASE_URL,
+    }),
+  }),
+});
+
+export const auth = betterAuth({
+  database: {
+    db,
+    type: "postgres", // or "mysql", "sqlite", "mssql"
+  },
+  // ... other config
+});
+```
+
 #### SQLite Setup
 
 ```typescript
@@ -154,7 +184,7 @@ export const auth = betterAuth({
 - **Delete users** - Remove users from the system
 - **Bulk operations** - Seed multiple test users
 - **User details** - View user profiles, and accounts
-- **Last seen** - When events are enabled, the studio injects an optional `lastSeenAt` field on the user model and updates it on each sign-in or session creation. Run your database migration (e.g. `prisma migrate dev` or Drizzle push) to add the `lastSeenAt` column to the user table.
+- **Last seen** - When events are enabled, the studio injects an optional `lastSeenAt` field on the user model and updates it on each sign-in or session creation. Run your database migration (e.g. `prisma migrate dev`, Drizzle push, or a Kysely migration) to add the `lastSeenAt` column to the user table.
 
 ### 🏢 Organization Management
 
@@ -183,12 +213,14 @@ pnpx better-auth-studio start [options]
 
 **Options:**
 
-- `--port <number>` - Specify port (default: 3000)
+- `--port <number>` - Specify port (default: 3002)
 - `--host <string>` - Specify host (default: localhost)
 - `--no-open` - Don't automatically open browser
 - `--config <path>` - Path to auth config file (default: auto-detect)
 - `--watch` - Watch for changes in auth config file and reload server automatically
 
+`3002` is just the standalone Studio default so it does not clash with apps that already use `3000`. You can run Studio on `3000`, `4000`, or any other free port.
+
 **Examples:**
 
 ```bash
@@ -266,6 +298,62 @@ pnpm add better-auth-studio
 
 > **Note:** The CLI usage (standalone studio) can be installed as a dev dependency, but self-hosting requires it in `dependencies` for production deployments.
 
+### Docker (Standalone Self-Host)
+
+If you want to run Better Auth Studio in its own container, this repository includes a Docker setup for the standalone CLI server.
+
+This mode is useful when:
+
+- you want a separate admin container
+- your Better Auth app already lives in its own repository
+- you want Docker-managed `node_modules` and package-manager cache volumes
+
+> **Important:** The standalone container still needs your Better Auth project mounted into it, because Studio loads your real `auth.ts` and `studio.config.*` files at runtime.
+
+Build the image from this repository:
+
+```bash
+docker build -t better-auth-studio:self-host .
+```
+
+Run it with Docker Compose:
+
+```bash
+HOST_PROJECT_PATH=/absolute/path/to/your-better-auth-project \
+CONFIG_PATH=./auth.ts \
+docker compose -f docker/compose.yml up --build
+```
+
+If your auth config is not at the project root, pass it explicitly:
+
+```bash
+HOST_PROJECT_PATH=/absolute/path/to/your-better-auth-project \
+CONFIG_PATH=./src/lib/auth.ts \
+docker compose -f docker/compose.yml up --build
+```
+
+If you already used the older filename, `docker/docker-compose.self-host.yml` still works too.
+
+What the container does:
+
+- mounts your Better Auth project into `/workspace`
+- installs project dependencies into Docker volumes on first boot
+- starts `better-auth-studio start --host 0.0.0.0 --port 3002 --no-open`
+
+Useful environment variables:
+
+- `HOST_PROJECT_PATH` - absolute path to your Better Auth project on the host machine
+- `CONFIG_PATH` - optional auth config path inside the mounted project, for example `./src/lib/auth.ts`
+- `PORT` - studio port, defaults to `3002`
+- `WATCH` - set to `true` to enable watch mode
+- `AUTO_INSTALL` - set to `false` if your container/project already has dependencies installed
+- `PROJECT_INSTALL_CMD` - optional custom install command for non-standard setups
+- `GEO_DB_PATH` - optional GeoLite database path inside the mounted project
+
+If you change the Studio port, make sure your Better Auth config also trusts that origin when needed. The examples usually include both `http://localhost:3000` and `http://localhost:3002` for that reason.
+
+If you already embed Studio in your server with the framework adapters below, that remains the recommended production setup. The Docker flow is mainly for running the standalone Studio server in a containerized environment.
+
 ### Setup
 
 **Step 1: Initialize configuration**
@@ -290,6 +378,8 @@ const config: StudioConfig = {
   access: {
     roles: ["admin"],
     allowEmails: ["admin@example.com"],
+    allowIpAddresses: ["127.0.0.1", "::1", "192.168.*"],
+    blockIpAddresses: ["203.0.113.45"],
   },
 };
 
@@ -335,15 +425,17 @@ Access at `http://localhost:3000/api/studio`
 
 ### Configuration Options
 
-| Option               | Required | Description                                                                                                                                   |
-| -------------------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
-| `auth`               | Yes      | Your Better Auth instance                                                                                                                     |
-| `basePath`           | Yes      | URL path where studio is mounted                                                                                                              |
-| `access.allowEmails` | No       | Array of admin email addresses                                                                                                                |
-| `access.roles`       | No       | Array of allowed user roles                                                                                                                   |
-| `ipAddress`          | No       | IP geolocation for Events/Sessions: `provider` ("ipinfo" \| "ipapi"), `apiToken`, `baseUrl`, optional `endpoint` (ipinfo: "lite" \| "lookup") |
-| `lastSeenAt`         | No       | Enable last-seen tracking: `{ enabled: true, columnName?: string }`                                                                           |
-| `metadata`           | No       | Custom branding (title, theme)                                                                                                                |
+| Option                    | Required | Description                                                                                                                                   |
+| ------------------------- | -------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
+| `auth`                    | Yes      | Your Better Auth instance                                                                                                                     |
+| `basePath`                | Yes      | URL path where studio is mounted                                                                                                              |
+| `access.allowEmails`      | No       | Array of admin email addresses                                                                                                                |
+| `access.roles`            | No       | Array of allowed user roles                                                                                                                   |
+| `access.allowIpAddresses` | No       | IP allowlist for Studio requests. Supports exact IPs and wildcard patterns (example: `192.168.*`)                                             |
+| `access.blockIpAddresses` | No       | IP blocklist for Studio requests. Supports exact IPs and wildcard patterns                                                                    |
+| `ipAddress`               | No       | IP geolocation for Events/Sessions: `provider` ("ipinfo" \| "ipapi"), `apiToken`, `baseUrl`, optional `endpoint` (ipinfo: "lite" \| "lookup") |
+| `lastSeenAt`              | No       | Enable last-seen tracking: `{ enabled: true, columnName?: string }`                                                                           |
+| `metadata`                | No       | Custom branding (title, theme)                                                                                                                |
 
 ## 📝 Development
 

package/dist/adapters/astro.d.ts

@@ -19,4 +19,3 @@ import type { StudioConfig } from "../types/handler.js";
 export declare function betterAuthStudio(config: StudioConfig): (ctx: {
     request: Request;
 }) => Promise<Response>;
-//# sourceMappingURL=astro.d.ts.map

package/dist/adapters/astro.js

@@ -93,9 +93,12 @@ async function convertAstroToUniversal(ctx, config) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=astro.js.map

package/dist/adapters/elysia.d.ts

@@ -4,4 +4,3 @@ import type { StudioConfig } from "../types/handler.js";
  * Elysia adapter for Better Auth Studio
  */
 export declare function betterAuthStudio(config: StudioConfig): (context: Context) => Promise<any>;
-//# sourceMappingURL=elysia.d.ts.map

package/dist/adapters/elysia.js

@@ -70,38 +70,12 @@ async function convertElysiaToUniversal(context) {
     };
 }
 function sendElysiaResponse(context, universal) {
-    context.set.status = universal.status;
-    Object.entries(universal.headers).forEach(([key, value]) => {
-        context.set.headers[key] = value;
+    const headers = new Headers(universal.headers);
+    universal.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
+    return new Response(universal.body, {
+        status: universal.status,
+        headers,
     });
-    if (Buffer.isBuffer(universal.body)) {
-        return new Response(universal.body, {
-            status: universal.status,
-            headers: universal.headers,
-        });
-    }
-    else if (typeof universal.body === "string") {
-        const contentType = universal.headers["content-type"] || universal.headers["Content-Type"] || "";
-        if (contentType.includes("application/json")) {
-            try {
-                return JSON.parse(universal.body);
-            }
-            catch {
-                return universal.body;
-            }
-        }
-        else if (contentType.includes("text/html")) {
-            return new Response(universal.body, {
-                status: universal.status,
-                headers: universal.headers,
-            });
-        }
-        else {
-            return universal.body;
-        }
-    }
-    else {
-        return String(universal.body);
-    }
 }
-//# sourceMappingURL=elysia.js.map

package/dist/adapters/express.d.ts

@@ -4,4 +4,3 @@ import type { StudioConfig } from "../types/handler.js";
  * Express adapter for Better Auth Studio
  */
 export declare function betterAuthStudio(config: StudioConfig): ExpressRouter;
-//# sourceMappingURL=express.d.ts.map

package/dist/adapters/express.js

@@ -28,6 +28,7 @@ function convertExpressToUniversal(req) {
         url: req.originalUrl,
         method: req.method,
         headers: req.headers,
+        ip: req.ip,
         body: req.body,
     };
 }
@@ -36,6 +37,9 @@ function sendExpressResponse(res, universal) {
     Object.entries(universal.headers).forEach(([key, value]) => {
         res.setHeader(key, value);
     });
+    if (universal.setCookies?.length) {
+        res.setHeader("Set-Cookie", universal.setCookies);
+    }
     if (Buffer.isBuffer(universal.body)) {
         res.end(universal.body);
     }
@@ -43,4 +47,3 @@ function sendExpressResponse(res, universal) {
         res.send(universal.body);
     }
 }
-//# sourceMappingURL=express.js.map

package/dist/adapters/hono.d.ts

@@ -4,4 +4,3 @@ import type { StudioConfig } from "../types/handler.js";
  * Hono adapter for Better Auth Studio
  */
 export declare function betterAuthStudio(config: StudioConfig): (c: Context) => Promise<Response>;
-//# sourceMappingURL=hono.d.ts.map

package/dist/adapters/hono.js

@@ -53,32 +53,12 @@ async function convertHonoToUniversal(c) {
     };
 }
 function sendHonoResponse(c, universal) {
-    c.status(universal.status);
-    Object.entries(universal.headers).forEach(([key, value]) => {
-        c.header(key, value);
+    const headers = new Headers(universal.headers);
+    universal.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
+    return new Response(universal.body, {
+        status: universal.status,
+        headers,
     });
-    if (Buffer.isBuffer(universal.body)) {
-        return c.body(universal.body);
-    }
-    else if (typeof universal.body === "string") {
-        const contentType = universal.headers["content-type"] || universal.headers["Content-Type"] || "";
-        if (contentType.includes("application/json")) {
-            try {
-                return c.json(JSON.parse(universal.body));
-            }
-            catch {
-                return c.text(universal.body);
-            }
-        }
-        else if (contentType.includes("text/html")) {
-            return c.html(universal.body);
-        }
-        else {
-            return c.text(universal.body);
-        }
-    }
-    else {
-        return c.text(String(universal.body));
-    }
 }
-//# sourceMappingURL=hono.js.map

package/dist/adapters/nextjs.d.ts

@@ -1,3 +1,2 @@
 import type { StudioConfig } from "../types/handler.js";
 export declare function betterAuthStudio(config: StudioConfig): (request: Request) => Promise<Response>;
-//# sourceMappingURL=nextjs.d.ts.map

package/dist/adapters/nextjs.js

@@ -52,9 +52,12 @@ async function requestToUniversal(req) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=nextjs.js.map

package/dist/adapters/nuxt.d.ts

@@ -16,4 +16,3 @@ import type { StudioConfig } from "../types/handler.js";
  * auto-imports enabled for h3 utilities.
  */
 export declare function betterAuthStudio(config: StudioConfig): (event: any) => Promise<Response | any>;
-//# sourceMappingURL=nuxt.d.ts.map

package/dist/adapters/nuxt.js

@@ -112,9 +112,12 @@ function getRequestURL(event) {
 function universalToResponse(res) {
     // Simply return a Response object - Nuxt/h3 will handle it properly
     // Nuxt will handle client disconnections automatically
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=nuxt.js.map

package/dist/adapters/remix.d.ts

@@ -23,4 +23,3 @@ import type { StudioConfig } from "../types/handler.js";
 export declare function betterAuthStudio(config: StudioConfig): ({ request }: {
     request: Request;
 }) => Promise<Response>;
-//# sourceMappingURL=remix.d.ts.map

package/dist/adapters/remix.js

@@ -96,9 +96,12 @@ async function convertRemixToUniversal({ request }, config) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=remix.js.map

package/dist/adapters/solid-start.d.ts

@@ -27,4 +27,3 @@ type ApiEvent = {
  */
 export declare function betterAuthStudio(config: StudioConfig): (event: ApiEvent) => Promise<Response>;
 export {};
-//# sourceMappingURL=solid-start.d.ts.map

package/dist/adapters/solid-start.js

@@ -94,9 +94,12 @@ async function convertSolidStartToUniversal(event, config) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=solid-start.js.map

package/dist/adapters/svelte-kit.d.ts

@@ -33,4 +33,3 @@ import type { StudioConfig } from "../types/handler.js";
  * ```
  */
 export declare function betterAuthStudio(config: StudioConfig): (event: RequestEvent) => Promise<Response>;
-//# sourceMappingURL=svelte-kit.d.ts.map

package/dist/adapters/svelte-kit.js

@@ -106,9 +106,12 @@ async function convertSvelteKitToUniversal(event, config) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=svelte-kit.js.map

package/dist/adapters/tanstack-start.d.ts

@@ -29,4 +29,3 @@ type TanStackStartHandlerContext = {
  */
 export declare function betterAuthStudio(config: StudioConfig): ({ request }: TanStackStartHandlerContext) => Promise<Response>;
 export {};
-//# sourceMappingURL=tanstack-start.d.ts.map

package/dist/adapters/tanstack-start.js

@@ -100,9 +100,12 @@ async function convertTanStackStartToUniversal(request, config) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=tanstack-start.js.map

package/dist/add-svelte-kit-env-modules.d.ts

@@ -1,2 +1 @@
 export declare function addSvelteKitEnvModules(alias: Record<string, string>): void;
-//# sourceMappingURL=add-svelte-kit-env-modules.d.ts.map

package/dist/add-svelte-kit-env-modules.js

@@ -12,4 +12,3 @@ export function addSvelteKitEnvModules(alias) {
     alias["$app/types"] = "@sveltejs/kit";
     alias["$app/*"] = "@sveltejs/kit";
 }
-//# sourceMappingURL=add-svelte-kit-env-modules.js.map

package/dist/auth-adapter.d.ts

@@ -1,4 +1,4 @@
-import type { InternalAdapter } from "better-auth";
+import { type InternalAdapter } from "better-auth";
 type OptionalFields<T> = {
     [K in keyof T]?: T[K];
 };
@@ -8,6 +8,10 @@ export interface AuthAdapter extends UserInternalAdapter {
     createAccount: (data: any) => Promise<any>;
     createVerification: (data: any) => Promise<any>;
     createOrganization: (data: any) => Promise<any>;
+    count?: (options: {
+        model: string;
+        where?: any;
+    }) => Promise<number>;
     create?: (...args: any[]) => Promise<any>;
     update?: (...args: any[]) => Promise<any>;
     delete?: (...args: any[]) => Promise<any>;
@@ -34,4 +38,3 @@ export declare function createMockSession(adapter: AuthAdapter, userId: string,
 export declare function createMockAccount(adapter: AuthAdapter, userId: string, index: number, providerId?: string): Promise<any>;
 export declare function createMockVerification(adapter: AuthAdapter, _userId: string, index: number): Promise<any>;
 export {};
-//# sourceMappingURL=auth-adapter.d.ts.map

package/dist/auth-adapter.js

@@ -102,8 +102,14 @@ export async function getAuthAdapter(configPath) {
                         image: data.image || `https://api.dicebear.com/7.x/avataaars/svg?seed=${data.email}`,
                     },
                 });
-                const hashedPassword = await hashPassword(data.password);
                 if (data.password) {
+                    let hashedPassword = data.password;
+                    try {
+                        hashedPassword = await hashPassword(data.password);
+                    }
+                    catch (err) {
+                        console.log({ err });
+                    }
                     try {
                         await adapter.create({
                             model: "account",
@@ -117,7 +123,9 @@ export async function getAuthAdapter(configPath) {
                             },
                         });
                     }
-                    catch (_accountError) { }
+                    catch (_accountError) {
+                        console.log({ _accountError });
+                    }
                 }
                 return user;
             },
@@ -193,6 +201,25 @@ export async function getAuthAdapter(configPath) {
                     return [];
                 }
             },
+            count: async (options) => {
+                try {
+                    if (typeof adapter.count === "function") {
+                        return await adapter.count(options);
+                    }
+                    if (typeof adapter.findMany === "function") {
+                        const rows = await adapter.findMany({
+                            model: options.model,
+                            where: options.where,
+                            limit: 100000,
+                        });
+                        return Array.isArray(rows) ? rows.length : 0;
+                    }
+                    return 0;
+                }
+                catch (_error) {
+                    return 0;
+                }
+            },
             findMany: async (options) => {
                 try {
                     if (typeof adapter.findMany === "function") {
@@ -488,4 +515,3 @@ export async function createMockVerification(adapter, _userId, index) {
     };
     return await adapter.createVerification(verificationData);
 }
-//# sourceMappingURL=auth-adapter.js.map

package/dist/cli/commands/init.d.ts

@@ -1,4 +1,3 @@
 export declare function initCommand(options?: {
     apiDir?: string;
 }): Promise<void>;
-//# sourceMappingURL=init.d.ts.map

package/dist/cli/commands/init.js

@@ -252,4 +252,3 @@ function detectFramework() {
     catch { }
     return "unknown";
 }
-//# sourceMappingURL=init.js.map

package/dist/cli.d.ts

@@ -1,3 +1,2 @@
 #!/usr/bin/env node
 export {};
-//# sourceMappingURL=cli.d.ts.map

package/dist/cli.js

@@ -281,6 +281,12 @@ program
                 else if (content.includes("prismaAdapter")) {
                     databaseInfo = "Prisma";
                 }
+                else if (content.includes("kyselyAdapter") ||
+                    content.includes("Kysely") ||
+                    content.includes('from "kysely"') ||
+                    content.includes("from 'kysely'")) {
+                    databaseInfo = "Kysely";
+                }
                 else if (authConfig.database.adapter && authConfig.database.provider) {
                     const adapter = authConfig.database.adapter;
                     const adapterName = adapter.charAt(0).toUpperCase() + adapter.slice(1);
@@ -364,4 +370,3 @@ program
     }
 });
 program.parse();
-//# sourceMappingURL=cli.js.map

package/dist/config.d.ts

@@ -50,4 +50,3 @@ export declare function getConfig({ cwd, configPath, shouldThrowOnError, noCache
 }): Promise<any>;
 export { possiblePaths };
 export declare function findAuthConfig(configPath?: string): Promise<AuthConfig | null>;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.js

@@ -298,4 +298,3 @@ export async function findAuthConfig(configPath) {
         return null;
     }
 }
-//# sourceMappingURL=config.js.map

package/dist/core/handler.d.ts

@@ -9,4 +9,3 @@ export declare function initializeEventIngestionAndHooks(config: StudioConfig):
  */
 export declare function handleStudioRequest(request: UniversalRequest, config: StudioConfig): Promise<UniversalResponse>;
 export declare function getAuthAdapter(auth: any): Promise<any>;
-//# sourceMappingURL=handler.d.ts.map