better-auth 1.6.22 → 1.6.24

package/dist/plugins/email-otp/index.d.mts

@@ -1,11 +1,4 @@
 import { EmailOTPOptions } from "./types.mjs";
-import * as _better_auth_core0 from "@better-auth/core";
-import * as _better_auth_core_db0 from "@better-auth/core/db";
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as better_call0 from "better-call";
-import * as zod from "zod";
-import * as zod_v4_core0 from "zod/v4/core";
-
 //#region src/plugins/email-otp/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -17,11 +10,11 @@ declare module "@better-auth/core" {
 declare const emailOTP: (options: EmailOTPOptions) => {
   id: "email-otp";
   version: string;
-  init(ctx: _better_auth_core0.AuthContext): {
+  init(ctx: import("@better-auth/core").AuthContext): {
     options: {
       emailVerification: {
         sendVerificationEmail(data: {
-          user: _better_auth_core_db0.User;
+          user: import("@better-auth/core/db").User;
           url: string;
           token: string;
         }, request: Request | undefined): Promise<void>;
@@ -29,17 +22,18 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     };
   } | undefined;
   endpoints: {
-    sendVerificationOTP: better_call0.StrictEndpoint<"/email-otp/send-verification-otp", {
+    sendVerificationOTP: import("better-call").StrictEndpoint<"/email-otp/send-verification-otp", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-      }, zod_v4_core0.$strip>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -66,17 +60,17 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    createVerificationOTP: better_call0.StrictEndpoint<string, {
+    createVerificationOTP: import("better-call").StrictEndpoint<string, {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-      }, zod_v4_core0.$strip>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -96,17 +90,17 @@ declare const emailOTP: (options: EmailOTPOptions) => {
         };
       };
     }, string>;
-    getVerificationOTP: better_call0.StrictEndpoint<string, {
+    getVerificationOTP: import("better-call").StrictEndpoint<string, {
       method: "GET";
-      query: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      query: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-      }, zod_v4_core0.$strip>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -138,18 +132,18 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     } | {
       otp: string;
     }>;
-    checkVerificationOTP: better_call0.StrictEndpoint<"/email-otp/check-verification-otp", {
+    checkVerificationOTP: import("better-call").StrictEndpoint<"/email-otp/check-verification-otp", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-        otp: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+        otp: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -176,12 +170,12 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    verifyEmailOTP: better_call0.StrictEndpoint<"/email-otp/verify-email", {
+    verifyEmailOTP: import("better-call").StrictEndpoint<"/email-otp/verify-email", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        otp: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        otp: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           description: string;
@@ -240,14 +234,14 @@ declare const emailOTP: (options: EmailOTPOptions) => {
         image?: string | null | undefined;
       } & Record<string, any>;
     }>;
-    signInEmailOTP: better_call0.StrictEndpoint<"/sign-in/email-otp", {
+    signInEmailOTP: import("better-call").StrictEndpoint<"/sign-in/email-otp", {
       method: "POST";
-      body: zod.ZodIntersection<zod.ZodObject<{
-        email: zod.ZodString;
-        otp: zod.ZodString;
-        name: zod.ZodOptional<zod.ZodString>;
-        image: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>, zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+      body: import("zod").ZodIntersection<import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        otp: import("zod").ZodString;
+        name: import("zod").ZodOptional<import("zod").ZodString>;
+        image: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
       metadata: {
         openapi: {
           operationId: string;
@@ -288,11 +282,11 @@ declare const emailOTP: (options: EmailOTPOptions) => {
         image?: string | null | undefined;
       };
     }>;
-    requestPasswordResetEmailOTP: better_call0.StrictEndpoint<"/email-otp/request-password-reset", {
+    requestPasswordResetEmailOTP: import("better-call").StrictEndpoint<"/email-otp/request-password-reset", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -320,11 +314,11 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    forgetPasswordEmailOTP: better_call0.StrictEndpoint<"/forget-password/email-otp", {
+    forgetPasswordEmailOTP: import("better-call").StrictEndpoint<"/forget-password/email-otp", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -352,13 +346,13 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    resetPasswordEmailOTP: better_call0.StrictEndpoint<"/email-otp/reset-password", {
+    resetPasswordEmailOTP: import("better-call").StrictEndpoint<"/email-otp/reset-password", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        otp: zod.ZodString;
-        password: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        otp: import("zod").ZodString;
+        password: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -385,13 +379,13 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    requestEmailChangeEmailOTP: better_call0.StrictEndpoint<"/email-otp/request-email-change", {
+    requestEmailChangeEmailOTP: import("better-call").StrictEndpoint<"/email-otp/request-email-change", {
       method: "POST";
-      body: zod.ZodObject<{
-        newEmail: zod.ZodString;
-        otp: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>;
-      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+      body: import("zod").ZodObject<{
+        newEmail: import("zod").ZodString;
+        otp: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>;
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -440,13 +434,13 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    changeEmailEmailOTP: better_call0.StrictEndpoint<"/email-otp/change-email", {
+    changeEmailEmailOTP: import("better-call").StrictEndpoint<"/email-otp/change-email", {
       method: "POST";
-      body: zod.ZodObject<{
-        newEmail: zod.ZodString;
-        otp: zod.ZodString;
-      }, zod_v4_core0.$strip>;
-      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+      body: import("zod").ZodObject<{
+        newEmail: import("zod").ZodString;
+        otp: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -498,8 +492,8 @@ declare const emailOTP: (options: EmailOTPOptions) => {
   };
   hooks: {
     after: {
-      matcher(context: _better_auth_core0.HookEndpointContext): boolean;
-      handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
     }[];
   };
   rateLimit: ({
@@ -541,9 +535,9 @@ declare const emailOTP: (options: EmailOTPOptions) => {
   })[];
   options: EmailOTPOptions;
   $ERROR_CODES: {
-    OTP_EXPIRED: _better_auth_core_utils_error_codes0.RawError<"OTP_EXPIRED">;
-    INVALID_OTP: _better_auth_core_utils_error_codes0.RawError<"INVALID_OTP">;
-    TOO_MANY_ATTEMPTS: _better_auth_core_utils_error_codes0.RawError<"TOO_MANY_ATTEMPTS">;
+    OTP_EXPIRED: import("@better-auth/core/utils/error-codes").RawError<"OTP_EXPIRED">;
+    INVALID_OTP: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OTP">;
+    TOO_MANY_ATTEMPTS: import("@better-auth/core/utils/error-codes").RawError<"TOO_MANY_ATTEMPTS">;
   };
 };
 //#endregion

package/dist/plugins/email-otp/routes.mjs

@@ -1,3 +1,4 @@
+import { formCsrfMiddleware } from "../../api/middlewares/origin-check.mjs";
 import { parseUserInput, parseUserOutput } from "../../db/schema.mjs";
 import { getDate } from "../../utils/date.mjs";
 import { generateRandomString } from "../../crypto/random.mjs";
@@ -72,6 +73,7 @@ const sendVerificationOTPBodySchema = z.object({
 */
 const sendVerificationOTP = (opts) => createAuthEndpoint("/email-otp/send-verification-otp", {
 	method: "POST",
+	use: [formCsrfMiddleware],
 	body: sendVerificationOTPBodySchema,
 	metadata: { openapi: {
 		operationId: "sendEmailVerificationOTP",

package/dist/plugins/email-otp/types.d.mts

@@ -1,5 +1,4 @@
 import { GenericEndpointContext } from "@better-auth/core";
-
 //#region src/plugins/email-otp/types.d.ts
 interface EmailOTPOptions {
   /**

package/dist/plugins/generic-oauth/client.d.mts

@@ -8,25 +8,25 @@ import { MicrosoftEntraIdOptions, microsoftEntraId } from "./providers/microsoft
 import { OktaOptions, okta } from "./providers/okta.mjs";
 import { PatreonOptions, patreon } from "./providers/patreon.mjs";
 import { SlackOptions, slack } from "./providers/slack.mjs";
+import { YandexOptions, yandex } from "./providers/yandex.mjs";
+import "./providers/index.mjs";
 import { BaseOAuthProviderOptions, genericOAuth } from "./index.mjs";
 import { GENERIC_OAUTH_ERROR_CODES } from "./error-codes.mjs";
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/generic-oauth/client.d.ts
 declare const genericOAuthClient: () => {
   id: "generic-oauth-client";
   version: string;
   $InferServerPlugin: ReturnType<typeof genericOAuth>;
   $ERROR_CODES: {
-    INVALID_OAUTH_CONFIGURATION: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIGURATION">;
-    TOKEN_URL_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"TOKEN_URL_NOT_FOUND">;
-    PROVIDER_CONFIG_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_CONFIG_NOT_FOUND">;
-    PROVIDER_ID_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_ID_REQUIRED">;
-    INVALID_OAUTH_CONFIG: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIG">;
-    SESSION_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"SESSION_REQUIRED">;
-    ISSUER_MISMATCH: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISMATCH">;
-    ISSUER_MISSING: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISSING">;
+    INVALID_OAUTH_CONFIGURATION: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIGURATION">;
+    TOKEN_URL_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"TOKEN_URL_NOT_FOUND">;
+    PROVIDER_CONFIG_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_CONFIG_NOT_FOUND">;
+    PROVIDER_ID_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_ID_REQUIRED">;
+    INVALID_OAUTH_CONFIG: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIG">;
+    SESSION_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"SESSION_REQUIRED">;
+    ISSUER_MISMATCH: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISMATCH">;
+    ISSUER_MISSING: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISSING">;
   };
 };
 //#endregion
-export { genericOAuthClient };
+export { type Auth0Options, type BaseOAuthProviderOptions, GENERIC_OAUTH_ERROR_CODES, type GenericOAuthConfig, type GenericOAuthOptions, type GumroadOptions, type HubSpotOptions, type KeycloakOptions, type LineOptions, type MicrosoftEntraIdOptions, type OktaOptions, type PatreonOptions, type SlackOptions, type YandexOptions, type auth0, genericOAuthClient, type gumroad, type hubspot, type keycloak, type line, type microsoftEntraId, type okta, type patreon, type slack, type yandex };

package/dist/plugins/generic-oauth/client.mjs

@@ -10,4 +10,4 @@ const genericOAuthClient = () => {
 	};
 };
 //#endregion
-export { genericOAuthClient };
+export { GENERIC_OAUTH_ERROR_CODES, genericOAuthClient };

package/dist/plugins/generic-oauth/error-codes.d.mts

@@ -1,15 +1,13 @@
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/generic-oauth/error-codes.d.ts
 declare const GENERIC_OAUTH_ERROR_CODES: {
-  INVALID_OAUTH_CONFIGURATION: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIGURATION">;
-  TOKEN_URL_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"TOKEN_URL_NOT_FOUND">;
-  PROVIDER_CONFIG_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_CONFIG_NOT_FOUND">;
-  PROVIDER_ID_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_ID_REQUIRED">;
-  INVALID_OAUTH_CONFIG: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIG">;
-  SESSION_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"SESSION_REQUIRED">;
-  ISSUER_MISMATCH: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISMATCH">;
-  ISSUER_MISSING: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISSING">;
+  INVALID_OAUTH_CONFIGURATION: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIGURATION">;
+  TOKEN_URL_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"TOKEN_URL_NOT_FOUND">;
+  PROVIDER_CONFIG_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_CONFIG_NOT_FOUND">;
+  PROVIDER_ID_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_ID_REQUIRED">;
+  INVALID_OAUTH_CONFIG: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIG">;
+  SESSION_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"SESSION_REQUIRED">;
+  ISSUER_MISMATCH: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISMATCH">;
+  ISSUER_MISSING: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISSING">;
 };
 //#endregion
 export { GENERIC_OAUTH_ERROR_CODES };

package/dist/plugins/generic-oauth/index.d.mts

@@ -8,14 +8,10 @@ import { MicrosoftEntraIdOptions, microsoftEntraId } from "./providers/microsoft
 import { OktaOptions, okta } from "./providers/okta.mjs";
 import { PatreonOptions, patreon } from "./providers/patreon.mjs";
 import { SlackOptions, slack } from "./providers/slack.mjs";
+import { YandexOptions, yandex } from "./providers/yandex.mjs";
+import "./providers/index.mjs";
 import { AuthContext } from "@better-auth/core";
-import * as _better_auth_core_oauth20 from "@better-auth/core/oauth2";
 import { OAuthProvider } from "@better-auth/core/oauth2";
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as better_call0 from "better-call";
-import * as zod from "zod";
-import * as zod_v4_core0 from "zod/v4/core";
-
 //#region src/plugins/generic-oauth/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -29,7 +25,8 @@ declare module "@better-auth/core" {
  * Extracts common fields from GenericOAuthConfig and makes clientSecret required.
  */
 type BaseOAuthProviderOptions = Omit<Pick<GenericOAuthConfig, "clientId" | "clientSecret" | "scopes" | "redirectURI" | "pkce" | "disableImplicitSignUp" | "disableSignUp" | "overrideUserInfo">, "clientSecret"> & {
-  /** OAuth client secret (required for provider options) */clientSecret: string;
+  /** OAuth client secret (required for provider options) */
+  clientSecret: string;
 };
 /**
  * A generic OAuth plugin that can be used to add OAuth support to any provider
@@ -39,22 +36,22 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
   version: string;
   init: (ctx: AuthContext) => {
     context: {
-      socialProviders: OAuthProvider<Record<string, any>, Partial<_better_auth_core_oauth20.ProviderOptions<any>>>[];
+      socialProviders: OAuthProvider<Record<string, any>, Partial<import("@better-auth/core/oauth2").ProviderOptions<any>>>[];
     };
   };
   endpoints: {
-    signInWithOAuth2: better_call0.StrictEndpoint<"/sign-in/oauth2", {
+    signInWithOAuth2: import("better-call").StrictEndpoint<"/sign-in/oauth2", {
       method: "POST";
-      body: zod.ZodObject<{
-        providerId: zod.ZodString;
-        callbackURL: zod.ZodOptional<zod.ZodString>;
-        errorCallbackURL: zod.ZodOptional<zod.ZodString>;
-        newUserCallbackURL: zod.ZodOptional<zod.ZodString>;
-        disableRedirect: zod.ZodOptional<zod.ZodBoolean>;
-        scopes: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
-        requestSignUp: zod.ZodOptional<zod.ZodBoolean>;
-        additionalData: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        providerId: import("zod").ZodString;
+        callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        newUserCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        disableRedirect: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        requestSignUp: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        additionalData: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           description: string;
@@ -84,15 +81,15 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
       url: string;
       redirect: boolean;
     }>;
-    oAuth2Callback: better_call0.StrictEndpoint<"/oauth2/callback/:providerId", {
+    oAuth2Callback: import("better-call").StrictEndpoint<"/oauth2/callback/:providerId", {
       method: "GET";
-      query: zod.ZodObject<{
-        code: zod.ZodOptional<zod.ZodString>;
-        error: zod.ZodOptional<zod.ZodString>;
-        error_description: zod.ZodOptional<zod.ZodString>;
-        state: zod.ZodOptional<zod.ZodString>;
-        iss: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>;
+      query: import("zod").ZodObject<{
+        code: import("zod").ZodOptional<import("zod").ZodString>;
+        error: import("zod").ZodOptional<import("zod").ZodString>;
+        error_description: import("zod").ZodOptional<import("zod").ZodString>;
+        state: import("zod").ZodOptional<import("zod").ZodString>;
+        iss: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         allowedMediaTypes: string[];
         openapi: {
@@ -118,15 +115,15 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
         scope: "server";
       };
     }, never>;
-    oAuth2LinkAccount: better_call0.StrictEndpoint<"/oauth2/link", {
+    oAuth2LinkAccount: import("better-call").StrictEndpoint<"/oauth2/link", {
       method: "POST";
-      body: zod.ZodObject<{
-        providerId: zod.ZodString;
-        callbackURL: zod.ZodString;
-        scopes: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
-        errorCallbackURL: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>;
-      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+      body: import("zod").ZodObject<{
+        providerId: import("zod").ZodString;
+        callbackURL: import("zod").ZodString;
+        scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>;
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -186,15 +183,15 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
   };
   options: GenericOAuthOptions;
   $ERROR_CODES: {
-    INVALID_OAUTH_CONFIGURATION: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIGURATION">;
-    TOKEN_URL_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"TOKEN_URL_NOT_FOUND">;
-    PROVIDER_CONFIG_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_CONFIG_NOT_FOUND">;
-    PROVIDER_ID_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_ID_REQUIRED">;
-    INVALID_OAUTH_CONFIG: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIG">;
-    SESSION_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"SESSION_REQUIRED">;
-    ISSUER_MISMATCH: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISMATCH">;
-    ISSUER_MISSING: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISSING">;
+    INVALID_OAUTH_CONFIGURATION: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIGURATION">;
+    TOKEN_URL_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"TOKEN_URL_NOT_FOUND">;
+    PROVIDER_CONFIG_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_CONFIG_NOT_FOUND">;
+    PROVIDER_ID_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_ID_REQUIRED">;
+    INVALID_OAUTH_CONFIG: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIG">;
+    SESSION_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"SESSION_REQUIRED">;
+    ISSUER_MISMATCH: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISMATCH">;
+    ISSUER_MISSING: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISSING">;
   };
 };
 //#endregion
-export { Auth0Options, BaseOAuthProviderOptions, type GenericOAuthConfig, type GenericOAuthOptions, GumroadOptions, HubSpotOptions, KeycloakOptions, LineOptions, MicrosoftEntraIdOptions, OktaOptions, PatreonOptions, SlackOptions, auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack };
+export { type Auth0Options, BaseOAuthProviderOptions, type GenericOAuthConfig, type GenericOAuthOptions, type GumroadOptions, type HubSpotOptions, type KeycloakOptions, type LineOptions, type MicrosoftEntraIdOptions, type OktaOptions, type PatreonOptions, type SlackOptions, type YandexOptions, auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack, yandex };

package/dist/plugins/generic-oauth/index.mjs

@@ -10,6 +10,7 @@ import { microsoftEntraId } from "./providers/microsoft-entra-id.mjs";
 import { okta } from "./providers/okta.mjs";
 import { patreon } from "./providers/patreon.mjs";
 import { slack } from "./providers/slack.mjs";
+import { yandex } from "./providers/yandex.mjs";
 import { APIError } from "@better-auth/core/error";
 import { applyDefaultAccessTokenExpiry, createAuthorizationURL, refreshAccessToken, validateAuthorizationCode } from "@better-auth/core/oauth2";
 import { betterFetch } from "@better-fetch/fetch";
@@ -145,4 +146,4 @@ const genericOAuth = (options) => {
 	};
 };
 //#endregion
-export { auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack };
+export { auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack, yandex };

package/dist/plugins/generic-oauth/providers/auth0.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/auth0.d.ts
 interface Auth0Options extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/gumroad.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/gumroad.d.ts
 interface GumroadOptions extends BaseOAuthProviderOptions {}
 /**

package/dist/plugins/generic-oauth/providers/hubspot.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/hubspot.d.ts
 interface HubSpotOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/index.d.mts

@@ -6,4 +6,6 @@ import { LineOptions, line } from "./line.mjs";
 import { MicrosoftEntraIdOptions, microsoftEntraId } from "./microsoft-entra-id.mjs";
 import { OktaOptions, okta } from "./okta.mjs";
 import { PatreonOptions, patreon } from "./patreon.mjs";
-import { SlackOptions, slack } from "./slack.mjs";
+import { SlackOptions, slack } from "./slack.mjs";
+import { YandexOptions, yandex } from "./yandex.mjs";
+export { type Auth0Options, type GumroadOptions, type HubSpotOptions, type KeycloakOptions, type LineOptions, type MicrosoftEntraIdOptions, type OktaOptions, type PatreonOptions, type SlackOptions, type YandexOptions, auth0, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack, yandex };

package/dist/plugins/generic-oauth/providers/keycloak.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/keycloak.d.ts
 interface KeycloakOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/line.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/line.d.ts
 interface LineOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/microsoft-entra-id.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/microsoft-entra-id.d.ts
 interface MicrosoftEntraIdOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/okta.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/okta.d.ts
 interface OktaOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/patreon.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/patreon.d.ts
 interface PatreonOptions extends BaseOAuthProviderOptions {}
 /**

package/dist/plugins/generic-oauth/providers/slack.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/slack.d.ts
 interface SlackOptions extends BaseOAuthProviderOptions {}
 /**

package/dist/plugins/generic-oauth/providers/yandex.d.mts

@@ -0,0 +1,28 @@
+import { GenericOAuthConfig } from "../types.mjs";
+import { BaseOAuthProviderOptions } from "../index.mjs";
+//#region src/plugins/generic-oauth/providers/yandex.d.ts
+interface YandexOptions extends BaseOAuthProviderOptions {}
+/**
+ * Yandex OAuth provider helper
+ *
+ * @example
+ * ```ts
+ * import { genericOAuth, yandex } from "better-auth/plugins/generic-oauth";
+ *
+ * export const auth = betterAuth({
+ *   plugins: [
+ *     genericOAuth({
+ *       config: [
+ *         yandex({
+ *           clientId: process.env.YANDEX_CLIENT_ID,
+ *           clientSecret: process.env.YANDEX_CLIENT_SECRET,
+ *         }),
+ *       ],
+ *     }),
+ *   ],
+ * });
+ * ```
+ */
+declare function yandex(options: YandexOptions): GenericOAuthConfig;
+//#endregion
+export { YandexOptions, yandex };