better-auth 1.6.22 → 1.6.24

package/dist/api/routes/session.mjs

@@ -35,6 +35,8 @@ const getSession = () => createAuthEndpoint("/get-session", {
 		} }
 	} }
 }, async (ctx) => {
+	ctx.setHeader("cache-control", "no-store");
+	ctx.setHeader("pragma", "no-cache");
 	const deferSessionRefresh = ctx.context.options.session?.deferSessionRefresh;
 	const isPostRequest = ctx.method === "POST";
 	if (isPostRequest && !deferSessionRefresh) throw APIError.from("METHOD_NOT_ALLOWED", BASE_ERROR_CODES.METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED);
@@ -291,8 +293,10 @@ const getSessionFromCtx = async (ctx, config) => {
 		return null;
 	}
 	if (session.headers) session.headers.forEach((value, key) => {
+		const lowerKey = key.toLowerCase();
+		if (lowerKey === "cache-control" || lowerKey === "pragma") return;
 		if (!ctx.context.responseHeaders) ctx.context.responseHeaders = new Headers({ [key]: value });
-		else if (key.toLowerCase() === "set-cookie") ctx.context.responseHeaders.append(key, value);
+		else if (lowerKey === "set-cookie") ctx.context.responseHeaders.append(key, value);
 		else ctx.context.responseHeaders.set(key, value);
 	});
 	ctx.context.session = session.response;

package/dist/api/routes/sign-in.d.mts

@@ -1,8 +1,6 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { User } from "@better-auth/core/db";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/sign-in.d.ts
 declare const socialSignInBodySchema: z.ZodObject<{
   callbackURL: z.ZodOptional<z.ZodString>;
@@ -29,7 +27,7 @@ declare const socialSignInBodySchema: z.ZodObject<{
   loginHint: z.ZodOptional<z.ZodString>;
   additionalData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, z.core.$strip>;
-declare const signInSocial: <O extends BetterAuthOptions>() => better_call0.StrictEndpoint<"/sign-in/social", {
+declare const signInSocial: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-in/social", {
   method: "POST";
   operationId: string;
   body: z.ZodObject<{
@@ -110,10 +108,10 @@ declare const signInSocial: <O extends BetterAuthOptions>() => better_call0.Stri
   url: undefined;
   user: User<O["user"], O["plugins"]>;
 }>;
-declare const signInEmail: <O extends BetterAuthOptions>() => better_call0.StrictEndpoint<"/sign-in/email", {
+declare const signInEmail: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-in/email", {
   method: "POST";
   operationId: string;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
   cloneRequest: true;
   body: z.ZodObject<{
     email: z.ZodString;

package/dist/api/routes/sign-in.mjs

@@ -5,6 +5,7 @@ import { getAwaitableValue } from "../../context/helpers.mjs";
 import { missingEmailLogMessage } from "../../oauth2/errors.mjs";
 import { handleOAuthUserInfo } from "../../oauth2/link-account.mjs";
 import { generateState } from "../../oauth2/state.mjs";
+import { safeCloneRequest } from "../../utils/request.mjs";
 import { createEmailVerificationToken } from "./email-verification.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { SocialProviderListEnum } from "@better-auth/core/social-providers";
@@ -12,17 +13,71 @@ import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
 //#region src/api/routes/sign-in.ts
 const socialSignInBodySchema = z.object({
+	/**
+	* Callback URL to redirect to after the user
+	* has signed in.
+	*/
 	callbackURL: z.string().meta({ description: "Callback URL to redirect to after the user has signed in" }).optional(),
+	/**
+	* callback url to redirect if the user is newly registered.
+	*
+	* useful if you have different routes for existing users and new users
+	*/
 	newUserCallbackURL: z.string().optional(),
+	/**
+	* Callback url to redirect to if an error happens
+	*
+	* If it's initiated from the client sdk this defaults to
+	* the current url.
+	*/
 	errorCallbackURL: z.string().meta({ description: "Callback URL to redirect to if an error happens" }).optional(),
+	/**
+	* OAuth2 provider to use`
+	*/
 	provider: SocialProviderListEnum,
+	/**
+	* Disable automatic redirection to the provider
+	*
+	* This is useful if you want to handle the redirection
+	* yourself like in a popup or a different tab.
+	*/
 	disableRedirect: z.boolean().meta({ description: "Disable automatic redirection to the provider. Useful for handling the redirection yourself" }).optional(),
+	/**
+	* ID token from the provider
+	*
+	* This is used to sign in the user
+	* if the user is already signed in with the
+	* provider in the frontend.
+	*
+	* Only applicable if the provider supports
+	* it. Currently only `apple` and `google` is
+	* supported out of the box.
+	*/
 	idToken: z.optional(z.object({
+		/**
+		* ID token from the provider
+		*/
 		token: z.string().meta({ description: "ID token from the provider" }),
+		/**
+		* The nonce used to generate the token
+		*/
 		nonce: z.string().meta({ description: "Nonce used to generate the token" }).optional(),
+		/**
+		* Access token from the provider
+		*/
 		accessToken: z.string().meta({ description: "Access token from the provider" }).optional(),
+		/**
+		* Refresh token from the provider
+		*/
 		refreshToken: z.string().meta({ description: "Refresh token from the provider" }).optional(),
+		/**
+		* Expiry date of the token
+		*/
 		expiresAt: z.number().meta({ description: "Expiry date of the token" }).optional(),
+		/**
+		* The user object from the provider.
+		* This is only available for some providers like Apple.
+		*/
 		user: z.object({
 			name: z.object({
 				firstName: z.string().optional(),
@@ -32,8 +87,21 @@ const socialSignInBodySchema = z.object({
 		}).meta({ description: "The user object from the provider. Only available for some providers like Apple." }).optional()
 	})),
 	scopes: z.array(z.string()).meta({ description: "Array of scopes to request from the provider. This will override the default scopes passed." }).optional(),
+	/**
+	* Explicitly request sign-up
+	*
+	* Should be used to allow sign up when
+	* disableImplicitSignUp for this provider is
+	* true
+	*/
 	requestSignUp: z.boolean().meta({ description: "Explicitly request sign-up. Useful when disableImplicitSignUp is true for this provider" }).optional(),
+	/**
+	* The login hint to use for the authorization code request
+	*/
 	loginHint: z.string().meta({ description: "The login hint to use for the authorization code request" }).optional(),
+	/**
+	* Additional data to be passed through the OAuth flow
+	*/
 	additionalData: z.record(z.string(), z.any()).optional().meta({ description: "Additional data to be passed through the OAuth flow" })
 });
 const signInSocial = () => createAuthEndpoint("/sign-in/social", {
@@ -79,7 +147,7 @@ const signInSocial = () => createAuthEndpoint("/sign-in/social", {
 			throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.ID_TOKEN_NOT_SUPPORTED);
 		}
 		const { token, nonce } = c.body.idToken;
-		if (!await provider.verifyIdToken(token, nonce)) {
+		if (!await provider.verifyIdToken(token, nonce, c)) {
 			c.context.logger.warn("Invalid id token", { provider: c.body.provider });
 			throw APIError.from("UNAUTHORIZED", BASE_ERROR_CODES.INVALID_TOKEN);
 		}
@@ -146,9 +214,23 @@ const signInEmail = () => createAuthEndpoint("/sign-in/email", {
 	use: [formCsrfMiddleware],
 	cloneRequest: true,
 	body: z.object({
+		/**
+		* Email of the user
+		*/
 		email: z.string().meta({ description: "Email of the user" }),
+		/**
+		* Password of the user
+		*/
 		password: z.string().meta({ description: "Password of the user" }),
+		/**
+		* Callback URL to use as a redirect for email
+		* verification and for possible redirects
+		*/
 		callbackURL: z.string().meta({ description: "Callback URL to use as a redirect for email verification" }).optional(),
+		/**
+		* If this is false, the session will not be remembered
+		* @default true
+		*/
 		rememberMe: z.boolean().meta({ description: "If this is false, the session will not be remembered. Default is `true`." }).default(true).optional()
 	}),
 	metadata: {
@@ -237,7 +319,7 @@ const signInEmail = () => createAuthEndpoint("/sign-in/email", {
 				user: user.user,
 				url,
 				token
-			}, ctx.request?.clone()));
+			}, safeCloneRequest(ctx.request)));
 		}
 		throw APIError.from("FORBIDDEN", BASE_ERROR_CODES.EMAIL_NOT_VERIFIED);
 	}

package/dist/api/routes/sign-out.d.mts

@@ -1,7 +1,5 @@
-import * as better_call0 from "better-call";
-
 //#region src/api/routes/sign-out.d.ts
-declare const signOut: better_call0.StrictEndpoint<"/sign-out", {
+declare const signOut: import("better-call").StrictEndpoint<"/sign-out", {
   method: "POST";
   operationId: string;
   requireHeaders: true;

package/dist/api/routes/sign-up.d.mts

@@ -1,13 +1,12 @@
 import { AdditionalUserFieldsInput, User } from "../../types/models.mjs";
+import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/sign-up.d.ts
-declare const signUpEmail: <O extends BetterAuthOptions>() => better_call0.StrictEndpoint<"/sign-up/email", {
+declare const signUpEmail: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-up/email", {
   method: "POST";
   operationId: string;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
   body: z.ZodIntersection<z.ZodObject<{
     name: z.ZodString;
     email: z.ZodEmail;

package/dist/api/routes/sign-up.mjs

@@ -2,6 +2,7 @@ import { isAPIError } from "../../utils/is-api-error.mjs";
 import { formCsrfMiddleware } from "../middlewares/origin-check.mjs";
 import { buildSyntheticUserOutput, parseUserInput, parseUserOutput } from "../../db/schema.mjs";
 import { setSessionCookie } from "../../cookies/index.mjs";
+import { safeCloneRequest } from "../../utils/request.mjs";
 import { createEmailVerificationToken } from "./email-verification.mjs";
 import { runWithTransaction } from "@better-auth/core/context";
 import { isDevelopment } from "@better-auth/core/env";
@@ -171,7 +172,7 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 				* between existing and non-existing emails.
 				*/
 				await ctx.context.password.hash(password);
-				if (ctx.context.options.emailAndPassword?.onExistingUserSignUp) await ctx.context.runInBackgroundOrAwait(ctx.context.options.emailAndPassword.onExistingUserSignUp({ user: dbUser.user }, ctx.request?.clone()));
+				if (ctx.context.options.emailAndPassword?.onExistingUserSignUp) await ctx.context.runInBackgroundOrAwait(ctx.context.options.emailAndPassword.onExistingUserSignUp({ user: dbUser.user }, safeCloneRequest(ctx.request)));
 				const now = /* @__PURE__ */ new Date();
 				const generatedId = ctx.context.generateId({ model: "user" }) || generateId();
 				const coreFields = {
@@ -246,7 +247,7 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 				user: createdUser,
 				url,
 				token
-			}, ctx.request?.clone()));
+			}, safeCloneRequest(ctx.request)));
 		}
 		if (shouldSkipAutoSignIn) return ctx.json({
 			token: null,

package/dist/api/routes/update-session.d.mts

@@ -1,14 +1,13 @@
 import { AdditionalSessionFieldsInput } from "../../types/models.mjs";
+import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/update-session.d.ts
-declare const updateSession: <O extends BetterAuthOptions>() => better_call0.StrictEndpoint<"/update-session", {
+declare const updateSession: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/update-session", {
   method: "POST";
   operationId: string;
   body: z.ZodRecord<z.ZodString, z.ZodAny>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;

package/dist/api/routes/update-user.d.mts

@@ -1,14 +1,13 @@
 import { AdditionalUserFieldsInput } from "../../types/models.mjs";
+import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/api/routes/update-user.d.ts
-declare const updateUser: <O extends BetterAuthOptions>() => better_call0.StrictEndpoint<"/update-user", {
+declare const updateUser: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/update-user", {
   method: "POST";
   operationId: string;
   body: z.ZodRecord<z.ZodString, z.ZodAny>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -84,7 +83,7 @@ declare const updateUser: <O extends BetterAuthOptions>() => better_call0.Strict
 }, {
   status: boolean;
 }>;
-declare const changePassword: better_call0.StrictEndpoint<"/change-password", {
+declare const changePassword: import("better-call").StrictEndpoint<"/change-password", {
   method: "POST";
   operationId: string;
   body: z.ZodObject<{
@@ -92,7 +91,7 @@ declare const changePassword: better_call0.StrictEndpoint<"/change-password", {
     currentPassword: z.ZodString;
     revokeOtherSessions: z.ZodOptional<z.ZodBoolean>;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -200,12 +199,12 @@ declare const changePassword: better_call0.StrictEndpoint<"/change-password", {
     image?: string | null | undefined;
   };
 }>;
-declare const setPassword: better_call0.StrictEndpoint<string, {
+declare const setPassword: import("better-call").StrictEndpoint<string, {
   method: "POST";
   body: z.ZodObject<{
     newPassword: z.ZodString;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -231,9 +230,9 @@ declare const setPassword: better_call0.StrictEndpoint<string, {
 }, {
   status: boolean;
 }>;
-declare const deleteUser: better_call0.StrictEndpoint<"/delete-user", {
+declare const deleteUser: import("better-call").StrictEndpoint<"/delete-user", {
   method: "POST";
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -318,13 +317,13 @@ declare const deleteUser: better_call0.StrictEndpoint<"/delete-user", {
   success: boolean;
   message: string;
 }>;
-declare const deleteUserCallback: better_call0.StrictEndpoint<"/delete-user/callback", {
+declare const deleteUserCallback: import("better-call").StrictEndpoint<"/delete-user/callback", {
   method: "GET";
   query: z.ZodObject<{
     token: z.ZodString;
     callbackURL: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>)[];
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
   metadata: {
     openapi: {
       description: string;
@@ -358,13 +357,13 @@ declare const deleteUserCallback: better_call0.StrictEndpoint<"/delete-user/call
   success: boolean;
   message: string;
 }>;
-declare const changeEmail: better_call0.StrictEndpoint<"/change-email", {
+declare const changeEmail: import("better-call").StrictEndpoint<"/change-email", {
   method: "POST";
   body: z.ZodObject<{
     newEmail: z.ZodEmail;
     callbackURL: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
-  use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;

package/dist/api/routes/update-user.mjs

@@ -76,8 +76,18 @@ const changePassword = createAuthEndpoint("/change-password", {
 	method: "POST",
 	operationId: "changePassword",
 	body: z.object({
+		/**
+		* The new password to set
+		*/
 		newPassword: z.string().meta({ description: "The new password to set" }),
+		/**
+		* The current password of the user
+		*/
 		currentPassword: z.string().meta({ description: "The current password is required" }),
+		/**
+		* revoke all sessions that are not the
+		* current one logged in by the user
+		*/
 		revokeOtherSessions: z.boolean().meta({ description: "Must be a boolean value" }).optional()
 	}),
 	use: [sensitiveSessionMiddleware],
@@ -184,7 +194,11 @@ const changePassword = createAuthEndpoint("/change-password", {
 });
 const setPassword = createAuthEndpoint.serverOnly({
 	method: "POST",
-	body: z.object({ newPassword: z.string().meta({ description: "The new password to set is required" }) }),
+	body: z.object({ 
+	/**
+	* The new password to set
+	*/
+newPassword: z.string().meta({ description: "The new password to set is required" }) }),
 	use: [sensitiveSessionMiddleware]
 }, async (ctx) => {
 	const { newPassword } = ctx.body;
@@ -216,8 +230,19 @@ const deleteUser = createAuthEndpoint("/delete-user", {
 	method: "POST",
 	use: [sensitiveSessionMiddleware],
 	body: z.object({
+		/**
+		* The callback URL to redirect to after the user is deleted
+		* this is only used on delete user callback
+		*/
 		callbackURL: z.string().meta({ description: "The callback URL to redirect to after the user is deleted" }).optional(),
+		/**
+		* The password of the user. If the password isn't provided, session freshness
+		* will be checked.
+		*/
 		password: z.string().meta({ description: "The password of the user is required to delete the user" }).optional(),
+		/**
+		* The token to delete the user. If the token is provided, the user will be deleted
+		*/
 		token: z.string().meta({ description: "The token to delete the user is required" }).optional()
 	}),
 	metadata: { openapi: {

package/dist/auth/full.d.mts

@@ -1,6 +1,6 @@
 import { Auth } from "../types/auth.mjs";
+import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-
 //#region src/auth/full.d.ts
 /**
  * Better Auth initializer for full mode (with Kysely)

package/dist/auth/minimal.d.mts

@@ -1,6 +1,6 @@
 import { Auth } from "../types/auth.mjs";
+import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-
 //#region src/auth/minimal.d.ts
 /**
  * Better Auth initializer for minimal mode (without Kysely)

package/dist/client/config.d.mts

@@ -1,7 +1,5 @@
 import { BetterAuthClientOptions, ClientAtomListener } from "@better-auth/core";
 import { WritableAtom } from "nanostores";
-import * as _better_fetch_fetch0 from "@better-fetch/fetch";
-
 //#region src/client/config.d.ts
 declare const getClientConfig: (options?: BetterAuthClientOptions | undefined, loadEnv?: boolean | undefined) => {
   readonly baseURL: string;
@@ -9,21 +7,21 @@ declare const getClientConfig: (options?: BetterAuthClientOptions | undefined, l
   pluginsAtoms: Record<string, WritableAtom<any>>;
   pluginPathMethods: Record<string, "GET" | "POST">;
   atomListeners: ClientAtomListener[];
-  $fetch: _better_fetch_fetch0.BetterFetch<{
-    plugins: (_better_fetch_fetch0.BetterFetchPlugin<Record<string, any>> | {
+  $fetch: import("@better-fetch/fetch").BetterFetch<{
+    plugins: (import("@better-fetch/fetch").BetterFetchPlugin<Record<string, any>> | {
       id: string;
       name: string;
       hooks: {
-        onSuccess(context: _better_fetch_fetch0.SuccessContext<any>): void;
+        onSuccess(context: import("@better-fetch/fetch").SuccessContext<any>): void;
       };
     } | {
       id: string;
       name: string;
       hooks: {
-        onSuccess: ((context: _better_fetch_fetch0.SuccessContext<any>) => Promise<void> | void) | undefined;
-        onError: ((context: _better_fetch_fetch0.ErrorContext) => Promise<void> | void) | undefined;
-        onRequest: (<T extends Record<string, any>>(context: _better_fetch_fetch0.RequestContext<T>) => Promise<_better_fetch_fetch0.RequestContext | void> | _better_fetch_fetch0.RequestContext | void) | undefined;
-        onResponse: ((context: _better_fetch_fetch0.ResponseContext) => Promise<Response | void | _better_fetch_fetch0.ResponseContext> | Response | _better_fetch_fetch0.ResponseContext | void) | undefined;
+        onSuccess: ((context: import("@better-fetch/fetch").SuccessContext<any>) => Promise<void> | void) | undefined;
+        onError: ((context: import("@better-fetch/fetch").ErrorContext) => Promise<void> | void) | undefined;
+        onRequest: (<T extends Record<string, any>>(context: import("@better-fetch/fetch").RequestContext<T>) => Promise<import("@better-fetch/fetch").RequestContext | void> | import("@better-fetch/fetch").RequestContext | void) | undefined;
+        onResponse: ((context: import("@better-fetch/fetch").ResponseContext) => Promise<Response | void | import("@better-fetch/fetch").ResponseContext> | Response | import("@better-fetch/fetch").ResponseContext | void) | undefined;
       };
     })[];
     priority?: RequestPriority | undefined;
@@ -38,12 +36,12 @@ declare const getClientConfig: (options?: BetterAuthClientOptions | undefined, l
     referrerPolicy?: ReferrerPolicy | undefined;
     signal?: (AbortSignal | null) | undefined;
     window?: null | undefined;
-    onRetry?: ((response: _better_fetch_fetch0.ResponseContext) => Promise<void> | void) | undefined;
+    onRetry?: ((response: import("@better-fetch/fetch").ResponseContext) => Promise<void> | void) | undefined;
     hookOptions?: {
       cloneResponse?: boolean;
     } | undefined;
     timeout?: number | undefined;
-    customFetchImpl: _better_fetch_fetch0.FetchEsque;
+    customFetchImpl: import("@better-fetch/fetch").FetchEsque;
     baseURL: string;
     throw?: boolean | undefined;
     auth?: ({
@@ -69,10 +67,10 @@ declare const getClientConfig: (options?: BetterAuthClientOptions | undefined, l
     params?: any;
     duplex?: "full" | "half" | undefined;
     jsonParser: (text: string) => Promise<any> | any;
-    retry?: _better_fetch_fetch0.RetryOptions | undefined;
+    retry?: import("@better-fetch/fetch").RetryOptions | undefined;
     retryAttempt?: number | undefined;
-    output?: (_better_fetch_fetch0.StandardSchemaV1 | typeof Blob | typeof File) | undefined;
-    errorSchema?: _better_fetch_fetch0.StandardSchemaV1 | undefined;
+    output?: (import("@better-fetch/fetch").StandardSchemaV1 | typeof Blob | typeof File) | undefined;
+    errorSchema?: import("@better-fetch/fetch").StandardSchemaV1 | undefined;
     disableValidation?: boolean | undefined;
     disableSignal?: boolean | undefined;
   }, unknown, unknown, {}>;

package/dist/client/config.mjs

@@ -2,7 +2,7 @@ import { getBaseURL } from "../utils/url.mjs";
 import { parseJSON } from "./parser.mjs";
 import { redirectPlugin } from "./fetch-plugins.mjs";
 import { getSessionAtom } from "./session-atom.mjs";
-import { defu } from "defu";
+import { defu as defu$1 } from "defu";
 import { createFetch } from "@better-fetch/fetch";
 //#region src/client/config.ts
 const resolvePublicAuthUrl = (basePath) => {
@@ -88,7 +88,7 @@ const getClientConfig = (options, loadEnv) => {
 		},
 		atoms: pluginsAtoms
 	};
-	for (const plugin of plugins) if (plugin.getActions) pluginsActions = defu(plugin.getActions?.($fetch, $store, options) ?? {}, pluginsActions);
+	for (const plugin of plugins) if (plugin.getActions) pluginsActions = defu$1(plugin.getActions?.($fetch, $store, options) ?? {}, pluginsActions);
 	return {
 		get baseURL() {
 			return baseURL;

package/dist/client/equality.d.mts

@@ -1,5 +1,4 @@
 import { Store, StoreValue } from "nanostores";
-
 //#region src/client/equality.d.ts
 /**
  * Deep structural equality for JSON-serializable values.

package/dist/client/index.d.mts

@@ -11,17 +11,18 @@ import { SessionRefreshOptions, createSessionRefreshManager } from "./session-re
 import { AuthClient, createAuthClient } from "./vanilla.mjs";
 import { AccessControl, ArrayElement, ExactRoleStatements, Role, RoleAuthorizeRequest, RoleInput, RoleStatements, Statements, SubArray, Subset } from "../plugins/access/types.mjs";
 import { AuthorizeResponse, createAccessControl, role } from "../plugins/access/access.mjs";
+import "../plugins/access/index.mjs";
 import { OrganizationOptions } from "../plugins/organization/types.mjs";
 import { InferInvitation, InferMember, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferTeam, Invitation, InvitationInput, InvitationStatus, Member, MemberInput, Organization, OrganizationInput, OrganizationRole, OrganizationSchema, Team, TeamInput, TeamMember, TeamMemberInput, defaultRolesSchema, invitationSchema, invitationStatus, memberSchema, organizationRoleSchema, organizationSchema, roleSchema, teamMemberSchema, teamSchema } from "../plugins/organization/schema.mjs";
 import { getOrgAdapter } from "../plugins/organization/adapter.mjs";
 import { hasPermission } from "../plugins/organization/has-permission.mjs";
 import { DefaultOrganizationPlugin, DynamicAccessControlEndpoints, OrganizationCreator, OrganizationEndpoints, OrganizationPlugin, TeamEndpoints, organization, parseRoles } from "../plugins/organization/organization.mjs";
+import "../plugins/organization/index.mjs";
 import { BetterAuthOptions, BetterAuthPlugin } from "@better-auth/core";
 import { DBPrimitive } from "@better-auth/core/db";
-export * from "@better-auth/core/db";
-export * from "nanostores";
-export * from "@better-fetch/fetch";
-
+export type * from "@better-auth/core/db";
+export type * from "nanostores";
+export type * from "@better-fetch/fetch";
 //#region src/client/index.d.ts
 declare const InferPlugin: <T extends BetterAuthPlugin>() => {
   id: "infer-server-plugin";
@@ -32,4 +33,4 @@ declare function InferAuth<O extends {
   options: BetterAuthOptions;
 }>(): O["options"];
 //#endregion
-export { AccessControl, ArrayElement, AuthClient, AuthQueryAtom, AuthQueryState, AuthorizeResponse, BetterAuthClientOptions, BetterAuthClientPlugin, BroadcastChannel, BroadcastListener, BroadcastMessage, CamelCase, ClientAtomListener, ClientStore, type DBPrimitive, DefaultOrganizationPlugin, DynamicAccessControlEndpoints, ExactRoleStatements, ExtractPluginField, type FocusListener, type FocusManager, HasRequiredKeys, InferActions, InferAdditionalFromClient, InferAuth, InferClientAPI, InferCtx, InferErrorCodes, InferInvitation, InferMember, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferPlugin, InferPluginFieldFromTuple, InferRoute, InferRoutes, InferSessionFromClient, InferSessionUpdateCtx, InferSignUpEmailCtx, InferTeam, InferUserFromClient, InferUserUpdateCtx, Invitation, InvitationInput, InvitationStatus, IsAny, IsSignal, Member, MemberInput, MergeRoutes, type OnlineListener, type OnlineManager, Organization, OrganizationCreator, OrganizationEndpoints, OrganizationInput, OrganizationOptions, OrganizationPlugin, OrganizationRole, OrganizationSchema, OverrideMerge, PathToObject, Prettify, PrettifyDeep, ProxyRequest, RequiredKeysOf, Role, RoleAuthorizeRequest, RoleInput, RoleStatements, SessionQueryParams, SessionRefreshOptions, Statements, StripEmptyObjects, SubArray, Subset, Team, TeamEndpoints, TeamInput, TeamMember, TeamMemberInput, type UnionToIntersection, createAccessControl, createAuthClient, createSessionRefreshManager, defaultRolesSchema, getGlobalBroadcastChannel, getOrgAdapter, hasPermission, invitationSchema, invitationStatus, isJsonEqual, kBroadcastChannel, kFocusManager, kOnlineManager, memberSchema, organization, organizationRoleSchema, organizationSchema, parseJSON, parseRoles, role, roleSchema, teamMemberSchema, teamSchema, useAuthQuery, withEquality };
+export { type AccessControl, type ArrayElement, AuthClient, AuthQueryAtom, AuthQueryState, type AuthorizeResponse, type BetterAuthClientOptions, type BetterAuthClientPlugin, BroadcastChannel, BroadcastListener, BroadcastMessage, type CamelCase, type ClientAtomListener, type ClientStore, type DBPrimitive, type DefaultOrganizationPlugin, type DynamicAccessControlEndpoints, type ExactRoleStatements, type ExtractPluginField, type FocusListener, type FocusManager, type HasRequiredKeys, InferActions, InferAdditionalFromClient, InferAuth, InferClientAPI, type InferCtx, InferErrorCodes, type InferInvitation, type InferMember, type InferOrganization, type InferOrganizationRolesFromOption, type InferOrganizationZodRolesFromOption, InferPlugin, type InferPluginFieldFromTuple, type InferRoute, type InferRoutes, InferSessionFromClient, type InferSessionUpdateCtx, type InferSignUpEmailCtx, type InferTeam, InferUserFromClient, type InferUserUpdateCtx, type Invitation, type InvitationInput, type InvitationStatus, type IsAny, IsSignal, type Member, type MemberInput, type MergeRoutes, type OnlineListener, type OnlineManager, type Organization, type OrganizationCreator, type OrganizationEndpoints, type OrganizationInput, type OrganizationOptions, type OrganizationPlugin, type OrganizationRole, type OrganizationSchema, type OverrideMerge, type PathToObject, type Prettify, type PrettifyDeep, type ProxyRequest, type RequiredKeysOf, type Role, type RoleAuthorizeRequest, type RoleInput, type RoleStatements, SessionQueryParams, SessionRefreshOptions, type Statements, type StripEmptyObjects, type SubArray, type Subset, type Team, type TeamEndpoints, type TeamInput, type TeamMember, type TeamMemberInput, type UnionToIntersection, type createAccessControl, createAuthClient, createSessionRefreshManager, type defaultRolesSchema, getGlobalBroadcastChannel, type getOrgAdapter, type hasPermission, type invitationSchema, type invitationStatus, isJsonEqual, kBroadcastChannel, kFocusManager, kOnlineManager, type memberSchema, type organization, type organizationRoleSchema, type organizationSchema, parseJSON, type parseRoles, type role, type roleSchema, type teamMemberSchema, type teamSchema, useAuthQuery, withEquality };

package/dist/client/lynx/index.d.mts

@@ -5,15 +5,14 @@ import { useStore } from "./lynx-store.mjs";
 import { BetterAuthClientOptions } from "@better-auth/core";
 import { BASE_ERROR_CODES } from "@better-auth/core/error";
 import { BetterFetchError, BetterFetchResponse } from "@better-fetch/fetch";
-export * from "nanostores";
-export * from "@better-fetch/fetch";
-
+export type * from "nanostores";
+export type * from "@better-fetch/fetch";
 //#region src/client/lynx/index.d.ts
 type InferResolvedHooks<O extends BetterAuthClientOptions> = O extends {
   plugins: Array<infer Plugin>;
 } ? UnionToIntersection<Plugin extends {
   getAtoms?: infer GetAtoms;
-} ? GetAtoms extends ((fetch: any) => infer Atoms) ? Atoms extends Record<string, any> ? { [key in keyof Atoms as IsSignal<key> extends true ? never : key extends string ? `use${Capitalize<key>}` : never]: () => ReturnType<Atoms[key]["get"]> } : {} : {} : {}> : {};
+} ? GetAtoms extends ((fetch: any) => infer Atoms) ? Atoms extends Record<string, any> ? { [key in keyof Atoms as IsSignal<key> extends true ? never : key extends string ? `use${Capitalize<key>}` : never]: () => ReturnType<Atoms[key]["get"]>; } : {} : {} : {}> : {};
 type ClientConfig = ReturnType<typeof getClientConfig>;
 type ClientSession<Option extends BetterAuthClientOptions> = InferClientAPI<Option> extends {
   getSession: () => Promise<infer Res>;
@@ -39,4 +38,4 @@ type LynxAuthClient<Option extends BetterAuthClientOptions> = UnionToIntersectio
 };
 declare function createAuthClient<Option extends BetterAuthClientOptions>(options?: Option | undefined): LynxAuthClient<Option>;
 //#endregion
-export { ExtractPluginField, HasRequiredKeys, InferPluginFieldFromTuple, IsAny, LynxAuthClient, OverrideMerge, Prettify, PrettifyDeep, RequiredKeysOf, StripEmptyObjects, type UnionToIntersection, createAuthClient, useStore };
+export { type ExtractPluginField, type HasRequiredKeys, type InferPluginFieldFromTuple, type IsAny, LynxAuthClient, type OverrideMerge, type Prettify, type PrettifyDeep, type RequiredKeysOf, type StripEmptyObjects, type UnionToIntersection, createAuthClient, useStore };

package/dist/client/lynx/lynx-store.d.mts

@@ -1,6 +1,5 @@
 import { Store, StoreValue } from "nanostores";
 import { DependencyList } from "@lynx-js/react";
-
 //#region src/client/lynx/lynx-store.d.ts
 type StoreKeys<T> = T extends {
   setKey: (k: infer K, v: any) => unknown;
@@ -43,4 +42,4 @@ interface UseStoreOptions<SomeStore> {
  */
 declare function useStore<SomeStore extends Store>(store: SomeStore, options?: UseStoreOptions<SomeStore>): StoreValue<SomeStore>;
 //#endregion
-export { useStore };
+export { UseStoreOptions, useStore };

package/dist/client/parser.d.mts

@@ -1,8 +1,12 @@
 //#region src/client/parser.d.ts
 type ParseOptions = {
-  /** Throw errors instead of returning the original value */strict?: boolean | undefined; /** Log warnings when suspicious patterns are detected */
-  warnings?: boolean | undefined; /** Custom reviver function */
-  reviver?: ((key: string, value: any) => any) | undefined; /** Automatically convert ISO date strings to Date objects */
+  /** Throw errors instead of returning the original value */
+  strict?: boolean | undefined;
+  /** Log warnings when suspicious patterns are detected */
+  warnings?: boolean | undefined;
+  /** Custom reviver function */
+  reviver?: ((key: string, value: any) => any) | undefined;
+  /** Automatically convert ISO date strings to Date objects */
   parseDates?: boolean | undefined;
 };
 declare function parseJSON<T = unknown>(value: unknown, options?: ParseOptions): T;