better-auth 1.3.9-beta.2 → 1.3.9-beta.4

package/dist/shared/{better-auth.CTMmErGI.d.cts → better-auth.BaMSx6K3.d.cts}

@@ -1,5 +1,4 @@
 import { L as LiteralString } from './better-auth.DTtXpZYr.cjs';
-import * as jose from 'jose';
 import * as z from 'zod/v4';
 
 interface OAuth2Tokens {
@@ -2579,7 +2578,7 @@ declare const cognito: (options: CognitoOptions) => {
     } | null>;
     options: CognitoOptions;
 };
-declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<Uint8Array<ArrayBufferLike> | jose.KeyLike>;
+declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
 
 interface AtlassianProfile {
     account_type?: string;
@@ -2741,7 +2740,7 @@ declare const apple: (options: AppleOptions) => {
     } | null>;
     options: AppleOptions;
 };
-declare const getApplePublicKey: (kid: string) => Promise<Uint8Array<ArrayBufferLike> | jose.KeyLike>;
+declare const getApplePublicKey: (kid: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
 
 declare const socialProviders: {
     apple: (options: AppleOptions) => {

package/dist/shared/{better-auth.DXKgbji-.mjs → better-auth.BduPtJy8.mjs}

@@ -1,5 +1,5 @@
 import { SqliteDialect, MysqlDialect, PostgresDialect, MssqlDialect, Kysely } from 'kysely';
-import { c as createAdapter } from './better-auth.BuBqXPUp.mjs';
+import { c as createAdapter } from './better-auth.DOXaXTC6.mjs';
 
 function getKyselyDatabaseType(db) {
   if (!db) {

package/dist/shared/{better-auth.Dc0nj0we.cjs → better-auth.BlsHS68J.cjs}

@@ -9,13 +9,12 @@ const base64 = require('@better-auth/utils/base64');
 const crypto_index = require('../crypto/index.cjs');
 const fetch = require('@better-fetch/fetch');
 const jose = require('jose');
-require('@noble/ciphers/chacha');
-require('@noble/ciphers/utils');
-require('@noble/ciphers/webcrypto');
-require('@noble/hashes/scrypt');
+require('@noble/ciphers/chacha.js');
+require('@noble/ciphers/utils.js');
+require('@noble/hashes/scrypt.js');
 require('@better-auth/utils');
 require('@better-auth/utils/hex');
-require('@noble/hashes/utils');
+require('@noble/hashes/utils.js');
 const random = require('./better-auth.CYeOI8C-.cjs');
 const url = require('./better-auth.DRmln2Nr.cjs');
 const cookies_index = require('./better-auth.D5q0JUiv.cjs');
@@ -4550,6 +4549,9 @@ const callbackOAuth = session.createAuthEndpoint(
         c.context.logger.error("Unable to link account - untrusted provider");
         return redirectOnError("unable_to_link_account");
       }
+      if (userInfo.email !== link.email && c.context.options.account?.accountLinking?.allowDifferentEmails !== true) {
+        return redirectOnError("email_doesn't_match");
+      }
       const existingAccount = await c.context.internalAdapter.findAccount(
         String(userInfo.id)
       );
@@ -5662,6 +5664,21 @@ const changeEmail = session.createAuthEndpoint(
                 }
               }
             }
+          },
+          "422": {
+            description: "Unprocessable Entity. Email already exists",
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    message: {
+                      type: "string"
+                    }
+                  }
+                }
+              }
+            }
           }
         }
       }

package/dist/shared/{better-auth.Dyb4JEgv.cjs → better-auth.C5ZbY8Lo.cjs}

@@ -8,23 +8,22 @@ const id = require('./better-auth.Bg6iw3ig.cjs');
 require('zod/v4');
 require('better-call');
 require('@better-auth/utils/hash');
-require('@noble/ciphers/chacha');
-require('@noble/ciphers/utils');
-require('@noble/ciphers/webcrypto');
+require('@noble/ciphers/chacha.js');
+require('@noble/ciphers/utils.js');
 require('@better-auth/utils/base64');
 require('jose');
-require('@noble/hashes/scrypt');
+require('@noble/hashes/scrypt.js');
 require('@better-auth/utils');
 require('@better-auth/utils/hex');
-require('@noble/hashes/utils');
+require('@noble/hashes/utils.js');
 require('./better-auth.CYeOI8C-.cjs');
 const logger = require('./better-auth.B3274wGK.cjs');
 require('./better-auth.B6fIklBU.cjs');
 require('@better-auth/utils/random');
 const index = require('./better-auth.ANpbi45u.cjs');
 const getTables = require('./better-auth.Byugpn9h.cjs');
-const kyselyAdapter = require('./better-auth.YWGwdADP.cjs');
-const memoryAdapter = require('./better-auth.aZPAhP-f.cjs');
+const kyselyAdapter = require('./better-auth.WyvofoOW.cjs');
+const memoryAdapter = require('./better-auth.QqWdVDmR.cjs');
 const kysely = require('kysely');
 
 function getWithHooks(adapter, ctx) {

package/dist/shared/{better-auth.XP_NDvic.mjs → better-auth.C7KUdiwV.mjs}

@@ -1,5 +1,5 @@
 import { ObjectId } from 'mongodb';
-import { c as createAdapter } from './better-auth.BuBqXPUp.mjs';
+import { c as createAdapter } from './better-auth.DOXaXTC6.mjs';
 
 const mongodbAdapter = (db, config) => {
   const getCustomIdGenerator = (options) => {

package/dist/shared/{better-auth.BvYLXwvp.cjs → better-auth.CMwM5enp.cjs}

@@ -196,6 +196,7 @@ async function getJwtToken(ctx, options) {
   return await signJWT(ctx, {
     options,
     payload: {
+      iat: Math.floor(Date.now() / 1e3),
       ...payload,
       sub: await options?.jwt?.getSubject?.(ctx.context.session) ?? ctx.context.session.user.id
     }

package/dist/shared/{better-auth.DtZRMuXL.cjs → better-auth.CRFFLEbh.cjs}

@@ -3,7 +3,7 @@
 const z = require('zod/v4');
 const jose = require('jose');
 const betterCall = require('better-call');
-require('./better-auth.Dc0nj0we.cjs');
+require('./better-auth.BlsHS68J.cjs');
 const session = require('./better-auth.CLv80Pwz.cjs');
 require('./better-auth.B6fIklBU.cjs');
 const base64 = require('@better-auth/utils/base64');
@@ -14,15 +14,14 @@ const cookies_index = require('./better-auth.D5q0JUiv.cjs');
 const schema$1 = require('./better-auth.gN3g-znU.cjs');
 const crypto_index = require('../crypto/index.cjs');
 const hash = require('@better-auth/utils/hash');
-require('@noble/ciphers/chacha');
-require('@noble/ciphers/utils');
-require('@noble/ciphers/webcrypto');
-require('@noble/hashes/scrypt');
+require('@noble/ciphers/chacha.js');
+require('@noble/ciphers/utils.js');
+require('@noble/hashes/scrypt.js');
 require('@better-auth/utils');
 require('@better-auth/utils/hex');
-require('@noble/hashes/utils');
+require('@noble/hashes/utils.js');
 const random = require('./better-auth.CYeOI8C-.cjs');
-const sign = require('./better-auth.BvYLXwvp.cjs');
+const sign = require('./better-auth.CMwM5enp.cjs');
 require('@better-auth/utils/random');
 require('kysely');
 

package/dist/shared/{better-auth.B3CPLvGC.mjs → better-auth.CSEecXfV.mjs}

@@ -7,13 +7,12 @@ import { base64Url, base64 } from '@better-auth/utils/base64';
 import { signJWT, symmetricEncrypt, symmetricDecrypt } from '../crypto/index.mjs';
 import { betterFetch } from '@better-fetch/fetch';
 import { jwtVerify, decodeJwt, decodeProtectedHeader, importJWK, createRemoteJWKSet } from 'jose';
-import '@noble/ciphers/chacha';
-import '@noble/ciphers/utils';
-import '@noble/ciphers/webcrypto';
-import '@noble/hashes/scrypt';
+import '@noble/ciphers/chacha.js';
+import '@noble/ciphers/utils.js';
+import '@noble/hashes/scrypt.js';
 import '@better-auth/utils';
 import '@better-auth/utils/hex';
-import '@noble/hashes/utils';
+import '@noble/hashes/utils.js';
 import { g as generateRandomString } from './better-auth.B4Qoxdgc.mjs';
 import { g as getOrigin, b as getHost, c as getProtocol } from './better-auth.CuS_eDdK.mjs';
 import { s as setSessionCookie, d as deleteSessionCookie } from './better-auth.UfVWArIB.mjs';
@@ -4534,6 +4533,9 @@ const callbackOAuth = createAuthEndpoint(
         c.context.logger.error("Unable to link account - untrusted provider");
         return redirectOnError("unable_to_link_account");
       }
+      if (userInfo.email !== link.email && c.context.options.account?.accountLinking?.allowDifferentEmails !== true) {
+        return redirectOnError("email_doesn't_match");
+      }
       const existingAccount = await c.context.internalAdapter.findAccount(
         String(userInfo.id)
       );
@@ -5646,6 +5648,21 @@ const changeEmail = createAuthEndpoint(
                 }
               }
             }
+          },
+          "422": {
+            description: "Unprocessable Entity. Email already exists",
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    message: {
+                      type: "string"
+                    }
+                  }
+                }
+              }
+            }
           }
         }
       }

package/dist/shared/{better-auth.DTV9hYzN.cjs → better-auth.CdLjcJ6z.cjs}

@@ -3,25 +3,24 @@
 const z = require('zod/v4');
 const betterCall = require('better-call');
 const session = require('./better-auth.CLv80Pwz.cjs');
-require('./better-auth.Dc0nj0we.cjs');
+require('./better-auth.BlsHS68J.cjs');
 require('./better-auth.B6fIklBU.cjs');
 const base64 = require('@better-auth/utils/base64');
 require('@better-auth/utils/hmac');
 require('./better-auth.B3274wGK.cjs');
 require('@better-auth/utils/binary');
 const schema = require('./better-auth.gN3g-znU.cjs');
-require('./better-auth.BWzwHY8m.cjs');
+require('./better-auth.DPsIzckY.cjs');
 require('../plugins/organization/access/index.cjs');
 require('@better-auth/utils/random');
 const hash = require('@better-auth/utils/hash');
-require('@noble/ciphers/chacha');
-require('@noble/ciphers/utils');
-require('@noble/ciphers/webcrypto');
+require('@noble/ciphers/chacha.js');
+require('@noble/ciphers/utils.js');
 require('jose');
-require('@noble/hashes/scrypt');
+require('@noble/hashes/scrypt.js');
 require('@better-auth/utils');
 require('@better-auth/utils/hex');
-require('@noble/hashes/utils');
+require('@noble/hashes/utils.js');
 const random = require('./better-auth.CYeOI8C-.cjs');
 require('kysely');
 require('@better-auth/utils/otp');
@@ -34,7 +33,7 @@ const getRequestIp = require('./better-auth.Cxlqz5AU.cjs');
 const parser = require('./better-auth.DhsGZ30Q.cjs');
 const json = require('./better-auth.vPQBmXQL.cjs');
 const plugins_access_index = require('../plugins/access/index.cjs');
-require('@noble/hashes/sha3');
+require('@noble/hashes/sha3.js');
 require('../plugins/device-authorization/index.cjs');
 
 function _interopNamespaceCompat(e) {

package/dist/shared/{better-auth.B8UjXTUa.mjs → better-auth.CtB1M_c7.mjs}

@@ -1,6 +1,6 @@
 import * as z from 'zod/v4';
 import { APIError } from 'better-call';
-import './better-auth.B3CPLvGC.mjs';
+import './better-auth.CSEecXfV.mjs';
 import { c as createAuthMiddleware, g as getSessionFromCtx, a as createAuthEndpoint } from './better-auth.DV5EHeYG.mjs';
 import { s as setSessionCookie, d as deleteSessionCookie } from './better-auth.UfVWArIB.mjs';
 import { m as mergeSchema } from './better-auth.Dcv8PS7T.mjs';

package/dist/shared/{better-auth.DFJOJkY1.cjs → better-auth.CtgUZb45.cjs}

@@ -3,7 +3,7 @@
 const betterCall = require('better-call');
 const z = require('zod/v4');
 const session = require('./better-auth.CLv80Pwz.cjs');
-require('./better-auth.Dc0nj0we.cjs');
+require('./better-auth.BlsHS68J.cjs');
 require('./better-auth.B6fIklBU.cjs');
 require('@better-auth/utils/base64');
 require('@better-auth/utils/hmac');
@@ -13,20 +13,19 @@ require('./better-auth.gN3g-znU.cjs');
 const date = require('./better-auth.C1hdVENX.cjs');
 const index = require('./better-auth.ANpbi45u.cjs');
 const parser = require('./better-auth.DhsGZ30Q.cjs');
-const schema = require('./better-auth.BWzwHY8m.cjs');
+const schema = require('./better-auth.DPsIzckY.cjs');
 const cookies_index = require('./better-auth.D5q0JUiv.cjs');
-const hasPermission = require('./better-auth.B1yOWNP8.cjs');
+const hasPermission = require('./better-auth.DEKJQy4E.cjs');
 const toZod = require('./better-auth.CpS2FLSa.cjs');
 require('@better-auth/utils/random');
 require('@better-auth/utils/hash');
-require('@noble/ciphers/chacha');
-require('@noble/ciphers/utils');
-require('@noble/ciphers/webcrypto');
+require('@noble/ciphers/chacha.js');
+require('@noble/ciphers/utils.js');
 require('jose');
-require('@noble/hashes/scrypt');
+require('@noble/hashes/scrypt.js');
 require('@better-auth/utils');
 require('@better-auth/utils/hex');
-require('@noble/hashes/utils');
+require('@noble/hashes/utils.js');
 require('./better-auth.CYeOI8C-.cjs');
 require('kysely');
 const plugins_organization_access_index = require('../plugins/organization/access/index.cjs');

package/dist/shared/{better-auth.3K3VNUn3.mjs → better-auth.D9PzlwY_.mjs}

@@ -1,7 +1,7 @@
 import * as z from 'zod/v4';
 import { SignJWT } from 'jose';
 import { APIError } from 'better-call';
-import './better-auth.B3CPLvGC.mjs';
+import './better-auth.CSEecXfV.mjs';
 import { g as getSessionFromCtx, a as createAuthEndpoint, c as createAuthMiddleware, s as sessionMiddleware } from './better-auth.DV5EHeYG.mjs';
 import './better-auth.CMQ3rA-I.mjs';
 import { base64Url, base64 } from '@better-auth/utils/base64';
@@ -12,15 +12,14 @@ import { p as parseSetCookieHeader } from './better-auth.UfVWArIB.mjs';
 import { m as mergeSchema } from './better-auth.Dcv8PS7T.mjs';
 import { symmetricEncrypt, symmetricDecrypt } from '../crypto/index.mjs';
 import { createHash } from '@better-auth/utils/hash';
-import '@noble/ciphers/chacha';
-import '@noble/ciphers/utils';
-import '@noble/ciphers/webcrypto';
-import '@noble/hashes/scrypt';
+import '@noble/ciphers/chacha.js';
+import '@noble/ciphers/utils.js';
+import '@noble/hashes/scrypt.js';
 import '@better-auth/utils';
 import '@better-auth/utils/hex';
-import '@noble/hashes/utils';
+import '@noble/hashes/utils.js';
 import { g as generateRandomString } from './better-auth.B4Qoxdgc.mjs';
-import { g as getJwtToken } from './better-auth.CY7-Inqt.mjs';
+import { g as getJwtToken } from './better-auth.DDuRjwGK.mjs';
 import '@better-auth/utils/random';
 import 'kysely';
 

package/dist/shared/{better-auth.CY7-Inqt.mjs → better-auth.DDuRjwGK.mjs}

@@ -194,6 +194,7 @@ async function getJwtToken(ctx, options) {
   return await signJWT(ctx, {
     options,
     payload: {
+      iat: Math.floor(Date.now() / 1e3),
       ...payload,
       sub: await options?.jwt?.getSubject?.(ctx.context.session) ?? ctx.context.session.user.id
     }

package/dist/shared/{better-auth.B1yOWNP8.cjs → better-auth.DEKJQy4E.cjs}

@@ -3,7 +3,7 @@
 const plugins_organization_access_index = require('../plugins/organization/access/index.cjs');
 const z = require('zod/v4');
 const betterCall = require('better-call');
-require('./better-auth.Dc0nj0we.cjs');
+require('./better-auth.BlsHS68J.cjs');
 require('./better-auth.CLv80Pwz.cjs');
 require('./better-auth.B6fIklBU.cjs');
 require('@better-auth/utils/base64');

package/dist/shared/{better-auth.DAUyNtx1.mjs → better-auth.DLsqH9Hw.mjs}

@@ -1,19 +1,18 @@
 import { checkEndpointConflicts, getEndpoints, router } from '../api/index.mjs';
 import { defu } from 'defu';
 import { hashToBase64, verifyPassword, hashPassword } from '../crypto/index.mjs';
-import { a as getAdapter, c as createInternalAdapter, e as getMigrations } from './better-auth.fBcUR9cm.mjs';
+import { a as getAdapter, c as createInternalAdapter, e as getMigrations } from './better-auth.DV0Lly8-.mjs';
 import { g as getAuthTables } from './better-auth.B_PTVODM.mjs';
 import 'zod/v4';
 import './better-auth.Dcv8PS7T.mjs';
 import { g as getCookies, c as createCookieGetter } from './better-auth.UfVWArIB.mjs';
 import { a as logger, c as createLogger } from './better-auth.BjBlybv-.mjs';
-import { U as socialProviders } from './better-auth.B3CPLvGC.mjs';
+import { U as socialProviders } from './better-auth.CSEecXfV.mjs';
 import { g as generateId } from './better-auth.BUPPRXfK.mjs';
 import 'better-call';
 import '@better-auth/utils/hash';
-import '@noble/ciphers/chacha';
-import '@noble/ciphers/utils';
-import '@noble/ciphers/webcrypto';
+import '@noble/ciphers/chacha.js';
+import '@noble/ciphers/utils.js';
 import '@better-auth/utils/base64';
 import 'jose';
 import './better-auth.B4Qoxdgc.mjs';
@@ -21,13 +20,13 @@ import { e as env, g as getEnvVar, i as isTest, c as getBooleanEnvVar, E as ENV,
 import { c as checkPassword } from './better-auth.YwDQhoPc.mjs';
 import { a as getBaseURL, g as getOrigin } from './better-auth.CuS_eDdK.mjs';
 import { B as BetterAuthError } from './better-auth.DdzSJf-n.mjs';
-import '@noble/hashes/scrypt';
+import '@noble/hashes/scrypt.js';
 import '@better-auth/utils';
 import '@better-auth/utils/hex';
-import '@noble/hashes/utils';
+import '@noble/hashes/utils.js';
 import { betterFetch } from '@better-fetch/fetch';
 import '@better-auth/utils/random';
-import { g as getKyselyDatabaseType } from './better-auth.DXKgbji-.mjs';
+import { g as getKyselyDatabaseType } from './better-auth.BduPtJy8.mjs';
 import { B as BASE_ERROR_CODES } from './better-auth.DV5EHeYG.mjs';
 
 const DEFAULT_SECRET = "better-auth-secret-123456789";

package/dist/shared/{better-auth.BuBqXPUp.mjs → better-auth.DOXaXTC6.mjs}

@@ -4,15 +4,14 @@ import { g as generateId } from './better-auth.BUPPRXfK.mjs';
 import 'zod/v4';
 import 'better-call';
 import '@better-auth/utils/hash';
-import '@noble/ciphers/chacha';
-import '@noble/ciphers/utils';
-import '@noble/ciphers/webcrypto';
+import '@noble/ciphers/chacha.js';
+import '@noble/ciphers/utils.js';
 import '@better-auth/utils/base64';
 import 'jose';
-import '@noble/hashes/scrypt';
+import '@noble/hashes/scrypt.js';
 import '@better-auth/utils';
 import '@better-auth/utils/hex';
-import '@noble/hashes/utils';
+import '@noble/hashes/utils.js';
 import './better-auth.B4Qoxdgc.mjs';
 import { a as logger } from './better-auth.BjBlybv-.mjs';
 

package/dist/shared/{better-auth.BWzwHY8m.cjs → better-auth.DPsIzckY.cjs}

@@ -2,7 +2,7 @@
 
 const session = require('./better-auth.CLv80Pwz.cjs');
 require('better-call');
-require('./better-auth.Dc0nj0we.cjs');
+require('./better-auth.BlsHS68J.cjs');
 const z = require('zod/v4');
 require('./better-auth.B6fIklBU.cjs');
 require('@better-auth/utils/base64');
@@ -12,14 +12,13 @@ require('@better-auth/utils/binary');
 require('./better-auth.gN3g-znU.cjs');
 const id = require('./better-auth.Bg6iw3ig.cjs');
 require('@better-auth/utils/hash');
-require('@noble/ciphers/chacha');
-require('@noble/ciphers/utils');
-require('@noble/ciphers/webcrypto');
+require('@noble/ciphers/chacha.js');
+require('@noble/ciphers/utils.js');
 require('jose');
-require('@noble/hashes/scrypt');
+require('@noble/hashes/scrypt.js');
 require('@better-auth/utils');
 require('@better-auth/utils/hex');
-require('@noble/hashes/utils');
+require('@noble/hashes/utils.js');
 require('./better-auth.CYeOI8C-.cjs');
 
 function _interopNamespaceCompat(e) {

package/dist/shared/{better-auth.DDDKwecE.mjs → better-auth.DQ6bmgix.mjs}

@@ -1,25 +1,24 @@
 import * as z from 'zod/v4';
 import { APIError } from 'better-call';
 import { a as createAuthEndpoint, g as getSessionFromCtx, s as sessionMiddleware, c as createAuthMiddleware } from './better-auth.DV5EHeYG.mjs';
-import './better-auth.B3CPLvGC.mjs';
+import './better-auth.CSEecXfV.mjs';
 import './better-auth.CMQ3rA-I.mjs';
 import { base64Url } from '@better-auth/utils/base64';
 import '@better-auth/utils/hmac';
 import './better-auth.BjBlybv-.mjs';
 import '@better-auth/utils/binary';
 import { m as mergeSchema } from './better-auth.Dcv8PS7T.mjs';
-import './better-auth.Ck4qhtF6.mjs';
+import './better-auth.5WTE-uUO.mjs';
 import '../plugins/organization/access/index.mjs';
 import '@better-auth/utils/random';
 import { createHash } from '@better-auth/utils/hash';
-import '@noble/ciphers/chacha';
-import '@noble/ciphers/utils';
-import '@noble/ciphers/webcrypto';
+import '@noble/ciphers/chacha.js';
+import '@noble/ciphers/utils.js';
 import 'jose';
-import '@noble/hashes/scrypt';
+import '@noble/hashes/scrypt.js';
 import '@better-auth/utils';
 import '@better-auth/utils/hex';
-import '@noble/hashes/utils';
+import '@noble/hashes/utils.js';
 import { g as generateRandomString } from './better-auth.B4Qoxdgc.mjs';
 import 'kysely';
 import '@better-auth/utils/otp';
@@ -32,7 +31,7 @@ import { g as getIp } from './better-auth.O2VtDkDK.mjs';
 import { p as parseJSON } from './better-auth.ffWeg50w.mjs';
 import { s as safeJSONParse } from './better-auth.BZZKN1g7.mjs';
 import { role } from '../plugins/access/index.mjs';
-import '@noble/hashes/sha3';
+import '@noble/hashes/sha3.js';
 import '../plugins/device-authorization/index.mjs';
 
 const apiKeySchema = ({

package/dist/shared/{better-auth.ChqAn6N0.d.mts → better-auth.DQLetyog.d.cts}

@@ -1,4 +1,4 @@
-import { G as GenericEndpointContext } from './better-auth.f-bUldRg.mjs';
+import { G as GenericEndpointContext } from './better-auth.6crrbXrP.cjs';
 
 declare function generateState(c: GenericEndpointContext, link?: {
     email: string;

package/dist/shared/{better-auth.ZUo2dMO3.d.mts → better-auth.DR57bygo.d.mts}

@@ -1,5 +1,4 @@
 import { L as LiteralString } from './better-auth.DTtXpZYr.mjs';
-import * as jose from 'jose';
 import * as z from 'zod/v4';
 
 interface OAuth2Tokens {
@@ -2579,7 +2578,7 @@ declare const cognito: (options: CognitoOptions) => {
     } | null>;
     options: CognitoOptions;
 };
-declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<Uint8Array<ArrayBufferLike> | jose.KeyLike>;
+declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
 
 interface AtlassianProfile {
     account_type?: string;
@@ -2741,7 +2740,7 @@ declare const apple: (options: AppleOptions) => {
     } | null>;
     options: AppleOptions;
 };
-declare const getApplePublicKey: (kid: string) => Promise<Uint8Array<ArrayBufferLike> | jose.KeyLike>;
+declare const getApplePublicKey: (kid: string) => Promise<CryptoKey | Uint8Array<ArrayBufferLike>>;
 
 declare const socialProviders: {
     apple: (options: AppleOptions) => {

package/dist/shared/{better-auth.fBcUR9cm.mjs → better-auth.DV0Lly8-.mjs}

@@ -6,23 +6,22 @@ import { g as generateId } from './better-auth.BUPPRXfK.mjs';
 import 'zod/v4';
 import 'better-call';
 import '@better-auth/utils/hash';
-import '@noble/ciphers/chacha';
-import '@noble/ciphers/utils';
-import '@noble/ciphers/webcrypto';
+import '@noble/ciphers/chacha.js';
+import '@noble/ciphers/utils.js';
 import '@better-auth/utils/base64';
 import 'jose';
-import '@noble/hashes/scrypt';
+import '@noble/hashes/scrypt.js';
 import '@better-auth/utils';
 import '@better-auth/utils/hex';
-import '@noble/hashes/utils';
+import '@noble/hashes/utils.js';
 import './better-auth.B4Qoxdgc.mjs';
 import { a as logger, c as createLogger } from './better-auth.BjBlybv-.mjs';
 import './better-auth.CMQ3rA-I.mjs';
 import '@better-auth/utils/random';
 import { B as BetterAuthError } from './better-auth.DdzSJf-n.mjs';
 import { g as getAuthTables } from './better-auth.B_PTVODM.mjs';
-import { c as createKyselyAdapter, k as kyselyAdapter } from './better-auth.DXKgbji-.mjs';
-import { m as memoryAdapter } from './better-auth.gF8vGD5L.mjs';
+import { c as createKyselyAdapter, k as kyselyAdapter } from './better-auth.BduPtJy8.mjs';
+import { m as memoryAdapter } from './better-auth.7ZeACU2v.mjs';
 import { sql } from 'kysely';
 
 function getWithHooks(adapter, ctx) {

package/dist/shared/{better-auth.WOu5GuAp.d.ts → better-auth.DtrrQDoO.d.ts}

@@ -1,4 +1,4 @@
-import { G as GenericEndpointContext, I as InferOptionSchema, H as HookEndpointContext, h as AuthContext } from './better-auth.DU2vRHKI.js';
+import { G as GenericEndpointContext, I as InferOptionSchema, H as HookEndpointContext, h as AuthContext } from './better-auth.S3lnSz8Y.js';
 import { Statements } from '../plugins/access/index.js';
 import * as zod_v4_core from 'zod/v4/core';
 import * as zod from 'zod';
@@ -184,8 +184,8 @@ declare const apiKeySchema: ({ timeWindow, rateLimitMax, }: {
                 required: false;
                 input: true;
                 transform: {
-                    input(value: string | number | boolean | Date | string[] | number[] | null | undefined): string;
-                    output(value: string | number | boolean | Date | string[] | number[] | null | undefined): any;
+                    input(value: string | number | boolean | string[] | Date | number[] | null | undefined): string;
+                    output(value: string | number | boolean | string[] | Date | number[] | null | undefined): any;
                 };
             };
         };
@@ -1894,8 +1894,8 @@ declare const apiKey: (options?: ApiKeyOptions) => {
                     required: false;
                     input: true;
                     transform: {
-                        input(value: string | number | boolean | Date | string[] | number[] | null | undefined): string;
-                        output(value: string | number | boolean | Date | string[] | number[] | null | undefined): any;
+                        input(value: string | number | boolean | string[] | Date | number[] | null | undefined): string;
+                        output(value: string | number | boolean | string[] | Date | number[] | null | undefined): any;
                     };
                 };
             };

package/dist/shared/{better-auth.aZPAhP-f.cjs → better-auth.QqWdVDmR.cjs}

@@ -4,18 +4,17 @@ require('@better-auth/utils/random');
 require('zod/v4');
 require('better-call');
 require('@better-auth/utils/hash');
-require('@noble/ciphers/chacha');
-require('@noble/ciphers/utils');
-require('@noble/ciphers/webcrypto');
+require('@noble/ciphers/chacha.js');
+require('@noble/ciphers/utils.js');
 require('@better-auth/utils/base64');
 require('jose');
-require('@noble/hashes/scrypt');
+require('@noble/hashes/scrypt.js');
 require('@better-auth/utils');
 require('@better-auth/utils/hex');
-require('@noble/hashes/utils');
+require('@noble/hashes/utils.js');
 require('./better-auth.CYeOI8C-.cjs');
 const logger = require('./better-auth.B3274wGK.cjs');
-const index = require('./better-auth.C9jfJUDF.cjs');
+const index = require('./better-auth.Szg-8evr.cjs');
 
 const memoryAdapter = (db, config) => index.createAdapter({
   config: {