better-auth-studio 1.1.3-beta.9 → 1.1.3

package/dist/adapters/solid-start.d.ts

@@ -27,4 +27,3 @@ type ApiEvent = {
  */
 export declare function betterAuthStudio(config: StudioConfig): (event: ApiEvent) => Promise<Response>;
 export {};
-//# sourceMappingURL=solid-start.d.ts.map

package/dist/adapters/solid-start.js

@@ -94,9 +94,12 @@ async function convertSolidStartToUniversal(event, config) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=solid-start.js.map

package/dist/adapters/svelte-kit.d.ts

@@ -33,4 +33,3 @@ import type { StudioConfig } from "../types/handler.js";
  * ```
  */
 export declare function betterAuthStudio(config: StudioConfig): (event: RequestEvent) => Promise<Response>;
-//# sourceMappingURL=svelte-kit.d.ts.map

package/dist/adapters/svelte-kit.js

@@ -106,9 +106,12 @@ async function convertSvelteKitToUniversal(event, config) {
     };
 }
 function universalToResponse(res) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
     return new Response(res.body, {
         status: res.status,
-        headers: res.headers,
+        headers,
     });
 }
-//# sourceMappingURL=svelte-kit.js.map

package/dist/adapters/tanstack-start.d.ts

@@ -29,4 +29,3 @@ type TanStackStartHandlerContext = {
  */
 export declare function betterAuthStudio(config: StudioConfig): ({ request }: TanStackStartHandlerContext) => Promise<Response>;
 export {};
-//# sourceMappingURL=tanstack-start.d.ts.map

package/dist/adapters/tanstack-start.js

@@ -1,5 +1,7 @@
 import { handleStudioRequest } from "../core/handler.js";
 import { injectEventHooks, injectLastSeenAtHooks } from "../utils/hook-injector.js";
+const STATIC_ASSET_QUERY_PARAM = "__better_auth_studio_asset";
+const STATIC_ASSET_PATH_PATTERN = /^\/(?:assets\/[^/?#]+|vite\.svg|favicon\.svg|logo\.png)$/;
 /**
  * TanStack Start adapter for Better Auth Studio
  *
@@ -35,7 +37,7 @@ export function betterAuthStudio(config) {
         try {
             const universalReq = await convertTanStackStartToUniversal(request, config);
             const universalRes = await handleStudioRequest(universalReq, config);
-            return universalToResponse(universalRes);
+            return universalToResponse(universalRes, config);
         }
         catch (error) {
             console.error("Studio handler error:", error);
@@ -87,11 +89,15 @@ async function convertTanStackStartToUniversal(request, config) {
     const basePath = config.basePath || "/api/studio";
     const normalizedBasePath = basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
     const url = new URL(request.url);
-    let path = url.pathname;
-    if (path.startsWith(normalizedBasePath)) {
+    const queryAssetPath = url.searchParams.get(STATIC_ASSET_QUERY_PARAM);
+    const acceptedQueryAssetPath = queryAssetPath && STATIC_ASSET_PATH_PATTERN.test(queryAssetPath) ? queryAssetPath : null;
+    let path = acceptedQueryAssetPath || url.pathname;
+    if (!acceptedQueryAssetPath && path.startsWith(normalizedBasePath)) {
         path = path.slice(normalizedBasePath.length) || "/";
     }
-    const pathWithQuery = path + url.search;
+    url.searchParams.delete(STATIC_ASSET_QUERY_PARAM);
+    const query = url.searchParams.toString();
+    const pathWithQuery = path + (query ? `?${query}` : "");
     return {
         url: pathWithQuery,
         method: method,
@@ -99,10 +105,32 @@ async function convertTanStackStartToUniversal(request, config) {
         body,
     };
 }
-function universalToResponse(res) {
-    return new Response(res.body, {
+function universalToResponse(res, config) {
+    const headers = new Headers(res.headers);
+    res.setCookies?.forEach((cookie) => {
+        headers.append("Set-Cookie", cookie);
+    });
+    let body = res.body;
+    if (typeof body === "string" &&
+        headers.get("Content-Type")?.toLowerCase().includes("text/html")) {
+        body = rewriteStaticAssetUrls(body, config.basePath || "/api/studio");
+    }
+    return new Response(body, {
         status: res.status,
-        headers: res.headers,
+        headers,
+    });
+}
+/**
+ * Nitro can treat nested URLs ending in .js/.css as public files before a
+ * TanStack Start splat route gets a chance to handle them. Keep Studio assets
+ * on the exact server-route URL and carry the requested file in the query.
+ */
+function rewriteStaticAssetUrls(html, basePath) {
+    const normalizedBasePath = basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
+    const escapedBasePath = normalizedBasePath.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const assetUrlPattern = new RegExp(`((?:href|src)=["'])${escapedBasePath}(/(?:assets/[^"'?#]+|vite\\.svg|favicon\\.svg|logo\\.png))(["'])`, "g");
+    return html.replace(assetUrlPattern, (_match, prefix, assetPath, suffix) => {
+        const query = new URLSearchParams({ [STATIC_ASSET_QUERY_PARAM]: assetPath });
+        return `${prefix}${normalizedBasePath}?${query.toString()}${suffix}`;
     });
 }
-//# sourceMappingURL=tanstack-start.js.map

package/dist/add-svelte-kit-env-modules.d.ts

@@ -1,2 +1 @@
 export declare function addSvelteKitEnvModules(alias: Record<string, string>): void;
-//# sourceMappingURL=add-svelte-kit-env-modules.d.ts.map

package/dist/add-svelte-kit-env-modules.js

@@ -12,4 +12,3 @@ export function addSvelteKitEnvModules(alias) {
     alias["$app/types"] = "@sveltejs/kit";
     alias["$app/*"] = "@sveltejs/kit";
 }
-//# sourceMappingURL=add-svelte-kit-env-modules.js.map

package/dist/auth-adapter.d.ts

@@ -1,4 +1,4 @@
-import type { InternalAdapter } from "better-auth";
+import { type InternalAdapter } from "better-auth";
 type OptionalFields<T> = {
     [K in keyof T]?: T[K];
 };
@@ -8,6 +8,10 @@ export interface AuthAdapter extends UserInternalAdapter {
     createAccount: (data: any) => Promise<any>;
     createVerification: (data: any) => Promise<any>;
     createOrganization: (data: any) => Promise<any>;
+    count?: (options: {
+        model: string;
+        where?: any;
+    }) => Promise<number>;
     create?: (...args: any[]) => Promise<any>;
     update?: (...args: any[]) => Promise<any>;
     delete?: (...args: any[]) => Promise<any>;
@@ -34,4 +38,3 @@ export declare function createMockSession(adapter: AuthAdapter, userId: string,
 export declare function createMockAccount(adapter: AuthAdapter, userId: string, index: number, providerId?: string): Promise<any>;
 export declare function createMockVerification(adapter: AuthAdapter, _userId: string, index: number): Promise<any>;
 export {};
-//# sourceMappingURL=auth-adapter.d.ts.map

package/dist/auth-adapter.js

@@ -102,8 +102,14 @@ export async function getAuthAdapter(configPath) {
                         image: data.image || `https://api.dicebear.com/7.x/avataaars/svg?seed=${data.email}`,
                     },
                 });
-                const hashedPassword = await hashPassword(data.password);
                 if (data.password) {
+                    let hashedPassword = data.password;
+                    try {
+                        hashedPassword = await hashPassword(data.password);
+                    }
+                    catch (err) {
+                        console.log({ err });
+                    }
                     try {
                         await adapter.create({
                             model: "account",
@@ -117,7 +123,9 @@ export async function getAuthAdapter(configPath) {
                             },
                         });
                     }
-                    catch (_accountError) { }
+                    catch (_accountError) {
+                        console.log({ _accountError });
+                    }
                 }
                 return user;
             },
@@ -193,6 +201,25 @@ export async function getAuthAdapter(configPath) {
                     return [];
                 }
             },
+            count: async (options) => {
+                try {
+                    if (typeof adapter.count === "function") {
+                        return await adapter.count(options);
+                    }
+                    if (typeof adapter.findMany === "function") {
+                        const rows = await adapter.findMany({
+                            model: options.model,
+                            where: options.where,
+                            limit: 100000,
+                        });
+                        return Array.isArray(rows) ? rows.length : 0;
+                    }
+                    return 0;
+                }
+                catch (_error) {
+                    return 0;
+                }
+            },
             findMany: async (options) => {
                 try {
                     if (typeof adapter.findMany === "function") {
@@ -416,15 +443,24 @@ function generateRandomIP() {
     const fourthOctet = Math.floor(Math.random() * 255) + 1;
     return `${range.min.split(".")[0]}.${secondOctet}.${thirdOctet}.${fourthOctet}`;
 }
+const SESSION_SEED_USER_AGENTS = [
+    "Mozilla/5.0 (iPhone; CPU iPhone OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1",
+    "Mozilla/5.0 (Linux; Android 15; Pixel 9 Pro Build/AP3A.241205.015) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Mobile Safari/537.36",
+    "Mozilla/5.0 (iPad; CPU OS 18_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Mobile/15E148 Safari/604.1",
+    "Mozilla/5.0 (Linux; Android 14; SM-X910 Build/UP1A.231005.007) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36",
+    "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0",
+    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36",
+];
 export async function createMockSession(adapter, userId, index) {
     // Generate a random IP address
     const ipAddress = generateRandomIP();
+    const userAgent = SESSION_SEED_USER_AGENTS[(index - 1) % SESSION_SEED_USER_AGENTS.length];
     const sessionData = {
         userId: userId,
         expiresAt: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000), // 7 days from now
         token: `session_token_${index}_${Date.now()}_${Math.random().toString(36).substring(2, 15)}`,
         ipAddress: ipAddress,
-        userAgent: `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36`,
+        userAgent,
         createdAt: new Date(),
         updatedAt: new Date(),
     };
@@ -488,4 +524,3 @@ export async function createMockVerification(adapter, _userId, index) {
     };
     return await adapter.createVerification(verificationData);
 }
-//# sourceMappingURL=auth-adapter.js.map

package/dist/cli/commands/init.d.ts

@@ -1,4 +1,3 @@
 export declare function initCommand(options?: {
     apiDir?: string;
 }): Promise<void>;
-//# sourceMappingURL=init.d.ts.map

package/dist/cli/commands/init.js

@@ -252,4 +252,3 @@ function detectFramework() {
     catch { }
     return "unknown";
 }
-//# sourceMappingURL=init.js.map

package/dist/cli.d.ts

@@ -1,3 +1,2 @@
 #!/usr/bin/env node
 export {};
-//# sourceMappingURL=cli.d.ts.map

package/dist/cli.js

@@ -281,6 +281,12 @@ program
                 else if (content.includes("prismaAdapter")) {
                     databaseInfo = "Prisma";
                 }
+                else if (content.includes("kyselyAdapter") ||
+                    content.includes("Kysely") ||
+                    content.includes('from "kysely"') ||
+                    content.includes("from 'kysely'")) {
+                    databaseInfo = "Kysely";
+                }
                 else if (authConfig.database.adapter && authConfig.database.provider) {
                     const adapter = authConfig.database.adapter;
                     const adapterName = adapter.charAt(0).toUpperCase() + adapter.slice(1);
@@ -364,4 +370,3 @@ program
     }
 });
 program.parse();
-//# sourceMappingURL=cli.js.map

package/dist/config.d.ts

@@ -50,4 +50,3 @@ export declare function getConfig({ cwd, configPath, shouldThrowOnError, noCache
 }): Promise<any>;
 export { possiblePaths };
 export declare function findAuthConfig(configPath?: string): Promise<AuthConfig | null>;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.js

@@ -298,4 +298,3 @@ export async function findAuthConfig(configPath) {
         return null;
     }
 }
-//# sourceMappingURL=config.js.map

package/dist/core/handler.d.ts

@@ -9,4 +9,3 @@ export declare function initializeEventIngestionAndHooks(config: StudioConfig):
  */
 export declare function handleStudioRequest(request: UniversalRequest, config: StudioConfig): Promise<UniversalResponse>;
 export declare function getAuthAdapter(auth: any): Promise<any>;
-//# sourceMappingURL=handler.d.ts.map

package/dist/core/handler.js

@@ -5,6 +5,7 @@ import { createClickHouseProvider, createHttpProvider, createNodeSqliteProvider,
 import { initializeEventIngestion, isEventIngestionInitialized } from "../utils/event-ingestion.js";
 import { injectEventHooks, injectLastSeenAtHooks } from "../utils/hook-injector.js";
 import { serveIndexHtml as getIndexHtml } from "../utils/html-injector.js";
+import { evaluateRequestAccess } from "../utils/access-rules.js";
 import { decryptSession, isSessionValid, STUDIO_COOKIE_NAME } from "../utils/session.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -32,6 +33,7 @@ export async function initializeEventIngestionAndHooks(config) {
                 case "postgres":
                 case "prisma":
                 case "drizzle":
+                case "kysely":
                     try {
                         provider = createPostgresProvider({
                             client: config.events.client,
@@ -132,10 +134,28 @@ export async function handleStudioRequest(request, config) {
         if (path === "" || path === "/") {
             path = "/";
         }
+        if (isSelfHosted) {
+            const accessDecision = evaluateRequestAccess({
+                accessConfig: config.access,
+                path,
+                method: request.method,
+                headers: request.headers,
+                ip: request.ip,
+            });
+            if (!accessDecision.allowed) {
+                return jsonResponse(403, {
+                    success: false,
+                    message: accessDecision.message,
+                    reason: accessDecision.reason,
+                    ...(accessDecision.ipAddress ? { ipAddress: accessDecision.ipAddress } : {}),
+                });
+            }
+        }
         if (path.startsWith("/assets/") ||
             path === "/vite.svg" ||
             path === "/favicon.svg" ||
-            path === "/logo.png") {
+            path === "/logo.png" ||
+            path === "/shaders.png") {
             return handleStaticFile(path, config);
         }
         if (path === "/") {
@@ -154,6 +174,16 @@ export async function handleStudioRequest(request, config) {
             }
             return await handleApiRoute(request, path, config);
         }
+        if (isSelfHosted && (path === "/auth" || path.startsWith("/auth/"))) {
+            const apiPath = "/api" + path;
+            if (isProtectedApiPath(apiPath)) {
+                const sessionResult = verifyStudioSession(request, config);
+                if (!sessionResult.valid) {
+                    return jsonResponse(401, { error: "Unauthorized", message: sessionResult.error });
+                }
+            }
+            return await handleApiRoute(request, apiPath, config);
+        }
         if (isSelfHosted) {
             const acceptHeader = request.headers["accept"] || request.headers["Accept"] || "";
             const wantsJson = acceptHeader.includes("application/json") ||
@@ -251,6 +281,7 @@ async function handleApiRoute(request, path, config) {
             path: path,
             method: request.method,
             headers: request.headers,
+            ip: request.ip,
             body: request.body,
             auth: config.auth,
             basePath: config.basePath || "/api/studio",
@@ -258,8 +289,9 @@ async function handleApiRoute(request, path, config) {
             studioConfig: config,
         });
         const headers = { "Content-Type": "application/json" };
+        const setCookies = [];
         if (result.cookies && result.cookies.length > 0) {
-            const cookieStrings = result.cookies.map((c) => {
+            setCookies.push(...result.cookies.map((c) => {
                 let cookie = `${c.name}=${c.value}`;
                 if (c.options.httpOnly)
                     cookie += "; HttpOnly";
@@ -272,12 +304,12 @@ async function handleApiRoute(request, path, config) {
                 if (c.options.path)
                     cookie += `; Path=${c.options.path}`;
                 return cookie;
-            });
-            headers["Set-Cookie"] = cookieStrings.join(", ");
+            }));
         }
         return {
             status: result.status,
             headers,
+            ...(setCookies.length > 0 ? { setCookies } : {}),
             body: JSON.stringify(result.data),
         };
     }
@@ -600,4 +632,3 @@ function getCacheControl(path) {
     }
     return "no-cache";
 }
-//# sourceMappingURL=handler.js.map

package/dist/data.d.ts

@@ -13,10 +13,17 @@ export interface User {
 export interface Session {
     id: string;
     userId: string;
-    expires: Date;
-    createdAt: Date;
-    userAgent?: string;
+    token?: string;
+    expiresAt?: Date | string;
+    expires?: Date | string;
+    createdAt: Date | string;
+    updatedAt?: Date | string;
+    userAgent?: string | null;
+    ipAddress?: string | null;
     ip?: string;
+    activeOrganizationId?: string;
+    activeTeamId?: string;
+    [key: string]: unknown;
 }
 export interface AuthStats {
     totalUsers: number;
@@ -35,4 +42,3 @@ export interface PaginatedResult<T> {
     totalPages: number;
 }
 export declare function getAuthData(_authConfig: AuthConfig, type?: "stats" | "users" | "sessions" | "providers" | "deleteUser" | "updateUser" | "analytics", options?: any, configPath?: string, preloadedAdapter?: any): Promise<any>;
-//# sourceMappingURL=data.d.ts.map

package/dist/data.js

@@ -126,17 +126,36 @@ async function getRealUsers(adapter, options) {
 async function getRealSessions(adapter, options) {
     const { page, limit } = options;
     try {
-        if (adapter.getSessions) {
-            const allSessions = await adapter.getSessions();
+        let allSessions = null;
+        let getSessionsError;
+        if (typeof adapter?.getSessions === "function") {
+            try {
+                const result = await adapter.getSessions();
+                if (Array.isArray(result)) {
+                    allSessions = result;
+                }
+            }
+            catch (error) {
+                getSessionsError = error;
+            }
+        }
+        if (allSessions === null && typeof adapter?.findMany === "function") {
+            allSessions = await adapter.findMany({ model: "session", limit: 100000 });
+        }
+        if (allSessions === null && getSessionsError) {
+            throw getSessionsError;
+        }
+        if (Array.isArray(allSessions)) {
+            const normalizedSessions = allSessions.map(normalizeSession);
             const startIndex = (page - 1) * limit;
             const endIndex = startIndex + limit;
-            const paginatedSessions = allSessions.slice(startIndex, endIndex);
+            const paginatedSessions = normalizedSessions.slice(startIndex, endIndex);
             return {
                 data: paginatedSessions,
-                total: allSessions.length,
+                total: normalizedSessions.length,
                 page,
                 limit,
-                totalPages: Math.ceil(allSessions.length / limit),
+                totalPages: Math.ceil(normalizedSessions.length / limit),
             };
         }
         return {
@@ -151,6 +170,22 @@ async function getRealSessions(adapter, options) {
         throw new Error(`Failed to get auth data: ${_error}`);
     }
 }
+function normalizeSession(rawSession) {
+    const session = rawSession && typeof rawSession === "object" ? rawSession : {};
+    return {
+        ...session,
+        id: session.id ?? session.session_id,
+        userId: session.userId ?? session.user_id,
+        token: session.token ?? session.session_token,
+        expiresAt: session.expiresAt ?? session.expires_at ?? session.expires,
+        createdAt: session.createdAt ?? session.created_at,
+        updatedAt: session.updatedAt ?? session.updated_at,
+        userAgent: session.userAgent ?? session.user_agent,
+        ipAddress: session.ipAddress ?? session.ip_address ?? session.ip,
+        activeOrganizationId: session.activeOrganizationId ?? session.active_organization_id ?? session.active_organization,
+        activeTeamId: session.activeTeamId ?? session.active_team_id ?? session.active_team,
+    };
+}
 async function getRealProviderStats(_adapter) {
     try {
         return [
@@ -594,4 +629,3 @@ async function getRealAnalytics(adapter, options) {
         };
     }
 }
-//# sourceMappingURL=data.js.map

package/dist/geo-service.d.ts

@@ -26,4 +26,3 @@ export declare function initializeGeoService(): Promise<void>;
  */
 export declare function resolveIPLocationAsync(ipAddress: string, ipConfig?: IpAddressProviderConfig | null): Promise<LocationData | null>;
 export declare function resolveIPLocation(ipAddress: string): LocationData | null;
-//# sourceMappingURL=geo-service.d.ts.map

package/dist/geo-service.js

@@ -321,4 +321,3 @@ function isIPInRange(ip, minIP, maxIP) {
     const maxNum = ipToNumber(maxIP);
     return ipNum >= minNum && ipNum <= maxNum;
 }
-//# sourceMappingURL=geo-service.js.map

package/dist/get-tsconfig-info.d.ts

@@ -10,4 +10,3 @@ export interface TsConfig {
     [key: string]: any;
 }
 export declare function getTsconfigInfo(cwd?: string, tsconfigPath?: string): TsConfig;
-//# sourceMappingURL=get-tsconfig-info.d.ts.map

package/dist/get-tsconfig-info.js

@@ -13,4 +13,3 @@ export function getTsconfigInfo(cwd, tsconfigPath) {
         return {};
     }
 }
-//# sourceMappingURL=get-tsconfig-info.js.map

package/dist/index.d.ts

@@ -7,4 +7,3 @@ export { defineStudioConfig, STUDIO_TOOL_IDS } from "./types/handler.js";
 export { injectLastSeenAtHooks } from "./utils/hook-injector.js";
 export { checkEventIngestionHealth, emitEvent, getEventIngestionProvider, getEventQueueSize, initializeEventIngestion, isEventIngestionInitialized, shutdownEventIngestion, } from "./utils/event-ingestion.js";
 import "./utils/server-init.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -5,4 +5,3 @@ export { defineStudioConfig, STUDIO_TOOL_IDS } from "./types/handler.js";
 export { injectLastSeenAtHooks } from "./utils/hook-injector.js";
 export { checkEventIngestionHealth, emitEvent, getEventIngestionProvider, getEventQueueSize, initializeEventIngestion, isEventIngestionInitialized, shutdownEventIngestion, } from "./utils/event-ingestion.js";
 import "./utils/server-init.js";
-//# sourceMappingURL=index.js.map

package/dist/providers/events/helpers.d.ts

@@ -1,9 +1,10 @@
 import type { AuthEvent, EventIngestionProvider } from "../../types/events.js";
+type PostgresProviderClientType = "postgres" | "prisma" | "drizzle" | "kysely";
 export declare function createPostgresProvider(options: {
     client: any;
     tableName?: string;
     schema?: string;
-    clientType?: "postgres" | "prisma" | "drizzle";
+    clientType?: PostgresProviderClientType;
 }): EventIngestionProvider;
 export declare function createSqliteProvider(options: {
     client: any;
@@ -33,4 +34,4 @@ export declare function createStorageProvider(options: {
     adapter: any;
     tableName?: string;
 }): EventIngestionProvider;
-//# sourceMappingURL=helpers.d.ts.map
+export {};