better-auth 1.6.23 → 1.6.24

package/dist/plugins/email-otp/index.d.mts

@@ -1,11 +1,4 @@
 import { EmailOTPOptions } from "./types.mjs";
-import * as _better_auth_core0 from "@better-auth/core";
-import * as _better_auth_core_db0 from "@better-auth/core/db";
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as better_call0 from "better-call";
-import * as zod from "zod";
-import * as zod_v4_core0 from "zod/v4/core";
-
 //#region src/plugins/email-otp/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -17,11 +10,11 @@ declare module "@better-auth/core" {
 declare const emailOTP: (options: EmailOTPOptions) => {
   id: "email-otp";
   version: string;
-  init(ctx: _better_auth_core0.AuthContext): {
+  init(ctx: import("@better-auth/core").AuthContext): {
     options: {
       emailVerification: {
         sendVerificationEmail(data: {
-          user: _better_auth_core_db0.User;
+          user: import("@better-auth/core/db").User;
           url: string;
           token: string;
         }, request: Request | undefined): Promise<void>;
@@ -29,17 +22,18 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     };
   } | undefined;
   endpoints: {
-    sendVerificationOTP: better_call0.StrictEndpoint<"/email-otp/send-verification-otp", {
+    sendVerificationOTP: import("better-call").StrictEndpoint<"/email-otp/send-verification-otp", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-      }, zod_v4_core0.$strip>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -66,17 +60,17 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    createVerificationOTP: better_call0.StrictEndpoint<string, {
+    createVerificationOTP: import("better-call").StrictEndpoint<string, {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-      }, zod_v4_core0.$strip>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -96,17 +90,17 @@ declare const emailOTP: (options: EmailOTPOptions) => {
         };
       };
     }, string>;
-    getVerificationOTP: better_call0.StrictEndpoint<string, {
+    getVerificationOTP: import("better-call").StrictEndpoint<string, {
       method: "GET";
-      query: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      query: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-      }, zod_v4_core0.$strip>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -138,18 +132,18 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     } | {
       otp: string;
     }>;
-    checkVerificationOTP: better_call0.StrictEndpoint<"/email-otp/check-verification-otp", {
+    checkVerificationOTP: import("better-call").StrictEndpoint<"/email-otp/check-verification-otp", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        type: zod.ZodEnum<{
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        type: import("zod").ZodEnum<{
           "sign-in": "sign-in";
           "change-email": "change-email";
           "email-verification": "email-verification";
           "forget-password": "forget-password";
         }>;
-        otp: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+        otp: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -176,12 +170,12 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    verifyEmailOTP: better_call0.StrictEndpoint<"/email-otp/verify-email", {
+    verifyEmailOTP: import("better-call").StrictEndpoint<"/email-otp/verify-email", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        otp: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        otp: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           description: string;
@@ -240,14 +234,14 @@ declare const emailOTP: (options: EmailOTPOptions) => {
         image?: string | null | undefined;
       } & Record<string, any>;
     }>;
-    signInEmailOTP: better_call0.StrictEndpoint<"/sign-in/email-otp", {
+    signInEmailOTP: import("better-call").StrictEndpoint<"/sign-in/email-otp", {
       method: "POST";
-      body: zod.ZodIntersection<zod.ZodObject<{
-        email: zod.ZodString;
-        otp: zod.ZodString;
-        name: zod.ZodOptional<zod.ZodString>;
-        image: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>, zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+      body: import("zod").ZodIntersection<import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        otp: import("zod").ZodString;
+        name: import("zod").ZodOptional<import("zod").ZodString>;
+        image: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
       metadata: {
         openapi: {
           operationId: string;
@@ -288,11 +282,11 @@ declare const emailOTP: (options: EmailOTPOptions) => {
         image?: string | null | undefined;
       };
     }>;
-    requestPasswordResetEmailOTP: better_call0.StrictEndpoint<"/email-otp/request-password-reset", {
+    requestPasswordResetEmailOTP: import("better-call").StrictEndpoint<"/email-otp/request-password-reset", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -320,11 +314,11 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    forgetPasswordEmailOTP: better_call0.StrictEndpoint<"/forget-password/email-otp", {
+    forgetPasswordEmailOTP: import("better-call").StrictEndpoint<"/forget-password/email-otp", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -352,13 +346,13 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    resetPasswordEmailOTP: better_call0.StrictEndpoint<"/email-otp/reset-password", {
+    resetPasswordEmailOTP: import("better-call").StrictEndpoint<"/email-otp/reset-password", {
       method: "POST";
-      body: zod.ZodObject<{
-        email: zod.ZodString;
-        otp: zod.ZodString;
-        password: zod.ZodString;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        email: import("zod").ZodString;
+        otp: import("zod").ZodString;
+        password: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           operationId: string;
@@ -385,13 +379,13 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    requestEmailChangeEmailOTP: better_call0.StrictEndpoint<"/email-otp/request-email-change", {
+    requestEmailChangeEmailOTP: import("better-call").StrictEndpoint<"/email-otp/request-email-change", {
       method: "POST";
-      body: zod.ZodObject<{
-        newEmail: zod.ZodString;
-        otp: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>;
-      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+      body: import("zod").ZodObject<{
+        newEmail: import("zod").ZodString;
+        otp: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>;
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -440,13 +434,13 @@ declare const emailOTP: (options: EmailOTPOptions) => {
     }, {
       success: boolean;
     }>;
-    changeEmailEmailOTP: better_call0.StrictEndpoint<"/email-otp/change-email", {
+    changeEmailEmailOTP: import("better-call").StrictEndpoint<"/email-otp/change-email", {
       method: "POST";
-      body: zod.ZodObject<{
-        newEmail: zod.ZodString;
-        otp: zod.ZodString;
-      }, zod_v4_core0.$strip>;
-      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+      body: import("zod").ZodObject<{
+        newEmail: import("zod").ZodString;
+        otp: import("zod").ZodString;
+      }, import("zod/v4/core").$strip>;
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -498,8 +492,8 @@ declare const emailOTP: (options: EmailOTPOptions) => {
   };
   hooks: {
     after: {
-      matcher(context: _better_auth_core0.HookEndpointContext): boolean;
-      handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
     }[];
   };
   rateLimit: ({
@@ -541,9 +535,9 @@ declare const emailOTP: (options: EmailOTPOptions) => {
   })[];
   options: EmailOTPOptions;
   $ERROR_CODES: {
-    OTP_EXPIRED: _better_auth_core_utils_error_codes0.RawError<"OTP_EXPIRED">;
-    INVALID_OTP: _better_auth_core_utils_error_codes0.RawError<"INVALID_OTP">;
-    TOO_MANY_ATTEMPTS: _better_auth_core_utils_error_codes0.RawError<"TOO_MANY_ATTEMPTS">;
+    OTP_EXPIRED: import("@better-auth/core/utils/error-codes").RawError<"OTP_EXPIRED">;
+    INVALID_OTP: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OTP">;
+    TOO_MANY_ATTEMPTS: import("@better-auth/core/utils/error-codes").RawError<"TOO_MANY_ATTEMPTS">;
   };
 };
 //#endregion

package/dist/plugins/email-otp/routes.mjs

@@ -1,3 +1,4 @@
+import { formCsrfMiddleware } from "../../api/middlewares/origin-check.mjs";
 import { parseUserInput, parseUserOutput } from "../../db/schema.mjs";
 import { getDate } from "../../utils/date.mjs";
 import { generateRandomString } from "../../crypto/random.mjs";
@@ -72,6 +73,7 @@ const sendVerificationOTPBodySchema = z.object({
 */
 const sendVerificationOTP = (opts) => createAuthEndpoint("/email-otp/send-verification-otp", {
 	method: "POST",
+	use: [formCsrfMiddleware],
 	body: sendVerificationOTPBodySchema,
 	metadata: { openapi: {
 		operationId: "sendEmailVerificationOTP",

package/dist/plugins/email-otp/types.d.mts

@@ -1,5 +1,4 @@
 import { GenericEndpointContext } from "@better-auth/core";
-
 //#region src/plugins/email-otp/types.d.ts
 interface EmailOTPOptions {
   /**

package/dist/plugins/generic-oauth/client.d.mts

@@ -9,25 +9,24 @@ import { OktaOptions, okta } from "./providers/okta.mjs";
 import { PatreonOptions, patreon } from "./providers/patreon.mjs";
 import { SlackOptions, slack } from "./providers/slack.mjs";
 import { YandexOptions, yandex } from "./providers/yandex.mjs";
+import "./providers/index.mjs";
 import { BaseOAuthProviderOptions, genericOAuth } from "./index.mjs";
 import { GENERIC_OAUTH_ERROR_CODES } from "./error-codes.mjs";
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/generic-oauth/client.d.ts
 declare const genericOAuthClient: () => {
   id: "generic-oauth-client";
   version: string;
   $InferServerPlugin: ReturnType<typeof genericOAuth>;
   $ERROR_CODES: {
-    INVALID_OAUTH_CONFIGURATION: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIGURATION">;
-    TOKEN_URL_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"TOKEN_URL_NOT_FOUND">;
-    PROVIDER_CONFIG_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_CONFIG_NOT_FOUND">;
-    PROVIDER_ID_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_ID_REQUIRED">;
-    INVALID_OAUTH_CONFIG: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIG">;
-    SESSION_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"SESSION_REQUIRED">;
-    ISSUER_MISMATCH: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISMATCH">;
-    ISSUER_MISSING: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISSING">;
+    INVALID_OAUTH_CONFIGURATION: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIGURATION">;
+    TOKEN_URL_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"TOKEN_URL_NOT_FOUND">;
+    PROVIDER_CONFIG_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_CONFIG_NOT_FOUND">;
+    PROVIDER_ID_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_ID_REQUIRED">;
+    INVALID_OAUTH_CONFIG: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIG">;
+    SESSION_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"SESSION_REQUIRED">;
+    ISSUER_MISMATCH: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISMATCH">;
+    ISSUER_MISSING: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISSING">;
   };
 };
 //#endregion
-export { genericOAuthClient };
+export { type Auth0Options, type BaseOAuthProviderOptions, GENERIC_OAUTH_ERROR_CODES, type GenericOAuthConfig, type GenericOAuthOptions, type GumroadOptions, type HubSpotOptions, type KeycloakOptions, type LineOptions, type MicrosoftEntraIdOptions, type OktaOptions, type PatreonOptions, type SlackOptions, type YandexOptions, type auth0, genericOAuthClient, type gumroad, type hubspot, type keycloak, type line, type microsoftEntraId, type okta, type patreon, type slack, type yandex };

package/dist/plugins/generic-oauth/client.mjs

@@ -10,4 +10,4 @@ const genericOAuthClient = () => {
 	};
 };
 //#endregion
-export { genericOAuthClient };
+export { GENERIC_OAUTH_ERROR_CODES, genericOAuthClient };

package/dist/plugins/generic-oauth/error-codes.d.mts

@@ -1,15 +1,13 @@
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/generic-oauth/error-codes.d.ts
 declare const GENERIC_OAUTH_ERROR_CODES: {
-  INVALID_OAUTH_CONFIGURATION: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIGURATION">;
-  TOKEN_URL_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"TOKEN_URL_NOT_FOUND">;
-  PROVIDER_CONFIG_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_CONFIG_NOT_FOUND">;
-  PROVIDER_ID_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_ID_REQUIRED">;
-  INVALID_OAUTH_CONFIG: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIG">;
-  SESSION_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"SESSION_REQUIRED">;
-  ISSUER_MISMATCH: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISMATCH">;
-  ISSUER_MISSING: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISSING">;
+  INVALID_OAUTH_CONFIGURATION: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIGURATION">;
+  TOKEN_URL_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"TOKEN_URL_NOT_FOUND">;
+  PROVIDER_CONFIG_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_CONFIG_NOT_FOUND">;
+  PROVIDER_ID_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_ID_REQUIRED">;
+  INVALID_OAUTH_CONFIG: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIG">;
+  SESSION_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"SESSION_REQUIRED">;
+  ISSUER_MISMATCH: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISMATCH">;
+  ISSUER_MISSING: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISSING">;
 };
 //#endregion
 export { GENERIC_OAUTH_ERROR_CODES };

package/dist/plugins/generic-oauth/index.d.mts

@@ -9,14 +9,9 @@ import { OktaOptions, okta } from "./providers/okta.mjs";
 import { PatreonOptions, patreon } from "./providers/patreon.mjs";
 import { SlackOptions, slack } from "./providers/slack.mjs";
 import { YandexOptions, yandex } from "./providers/yandex.mjs";
+import "./providers/index.mjs";
 import { AuthContext } from "@better-auth/core";
-import * as _better_auth_core_oauth20 from "@better-auth/core/oauth2";
 import { OAuthProvider } from "@better-auth/core/oauth2";
-import * as _better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as better_call0 from "better-call";
-import * as zod from "zod";
-import * as zod_v4_core0 from "zod/v4/core";
-
 //#region src/plugins/generic-oauth/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -30,7 +25,8 @@ declare module "@better-auth/core" {
  * Extracts common fields from GenericOAuthConfig and makes clientSecret required.
  */
 type BaseOAuthProviderOptions = Omit<Pick<GenericOAuthConfig, "clientId" | "clientSecret" | "scopes" | "redirectURI" | "pkce" | "disableImplicitSignUp" | "disableSignUp" | "overrideUserInfo">, "clientSecret"> & {
-  /** OAuth client secret (required for provider options) */clientSecret: string;
+  /** OAuth client secret (required for provider options) */
+  clientSecret: string;
 };
 /**
  * A generic OAuth plugin that can be used to add OAuth support to any provider
@@ -40,22 +36,22 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
   version: string;
   init: (ctx: AuthContext) => {
     context: {
-      socialProviders: OAuthProvider<Record<string, any>, Partial<_better_auth_core_oauth20.ProviderOptions<any>>>[];
+      socialProviders: OAuthProvider<Record<string, any>, Partial<import("@better-auth/core/oauth2").ProviderOptions<any>>>[];
     };
   };
   endpoints: {
-    signInWithOAuth2: better_call0.StrictEndpoint<"/sign-in/oauth2", {
+    signInWithOAuth2: import("better-call").StrictEndpoint<"/sign-in/oauth2", {
       method: "POST";
-      body: zod.ZodObject<{
-        providerId: zod.ZodString;
-        callbackURL: zod.ZodOptional<zod.ZodString>;
-        errorCallbackURL: zod.ZodOptional<zod.ZodString>;
-        newUserCallbackURL: zod.ZodOptional<zod.ZodString>;
-        disableRedirect: zod.ZodOptional<zod.ZodBoolean>;
-        scopes: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
-        requestSignUp: zod.ZodOptional<zod.ZodBoolean>;
-        additionalData: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
-      }, zod_v4_core0.$strip>;
+      body: import("zod").ZodObject<{
+        providerId: import("zod").ZodString;
+        callbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        newUserCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+        disableRedirect: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        requestSignUp: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        additionalData: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodAny>>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         openapi: {
           description: string;
@@ -85,15 +81,15 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
       url: string;
       redirect: boolean;
     }>;
-    oAuth2Callback: better_call0.StrictEndpoint<"/oauth2/callback/:providerId", {
+    oAuth2Callback: import("better-call").StrictEndpoint<"/oauth2/callback/:providerId", {
       method: "GET";
-      query: zod.ZodObject<{
-        code: zod.ZodOptional<zod.ZodString>;
-        error: zod.ZodOptional<zod.ZodString>;
-        error_description: zod.ZodOptional<zod.ZodString>;
-        state: zod.ZodOptional<zod.ZodString>;
-        iss: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>;
+      query: import("zod").ZodObject<{
+        code: import("zod").ZodOptional<import("zod").ZodString>;
+        error: import("zod").ZodOptional<import("zod").ZodString>;
+        error_description: import("zod").ZodOptional<import("zod").ZodString>;
+        state: import("zod").ZodOptional<import("zod").ZodString>;
+        iss: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>;
       metadata: {
         allowedMediaTypes: string[];
         openapi: {
@@ -119,15 +115,15 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
         scope: "server";
       };
     }, never>;
-    oAuth2LinkAccount: better_call0.StrictEndpoint<"/oauth2/link", {
+    oAuth2LinkAccount: import("better-call").StrictEndpoint<"/oauth2/link", {
       method: "POST";
-      body: zod.ZodObject<{
-        providerId: zod.ZodString;
-        callbackURL: zod.ZodString;
-        scopes: zod.ZodOptional<zod.ZodArray<zod.ZodString>>;
-        errorCallbackURL: zod.ZodOptional<zod.ZodString>;
-      }, zod_v4_core0.$strip>;
-      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+      body: import("zod").ZodObject<{
+        providerId: import("zod").ZodString;
+        callbackURL: import("zod").ZodString;
+        scopes: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        errorCallbackURL: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>;
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -187,15 +183,15 @@ declare const genericOAuth: (options: GenericOAuthOptions) => {
   };
   options: GenericOAuthOptions;
   $ERROR_CODES: {
-    INVALID_OAUTH_CONFIGURATION: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIGURATION">;
-    TOKEN_URL_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"TOKEN_URL_NOT_FOUND">;
-    PROVIDER_CONFIG_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_CONFIG_NOT_FOUND">;
-    PROVIDER_ID_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"PROVIDER_ID_REQUIRED">;
-    INVALID_OAUTH_CONFIG: _better_auth_core_utils_error_codes0.RawError<"INVALID_OAUTH_CONFIG">;
-    SESSION_REQUIRED: _better_auth_core_utils_error_codes0.RawError<"SESSION_REQUIRED">;
-    ISSUER_MISMATCH: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISMATCH">;
-    ISSUER_MISSING: _better_auth_core_utils_error_codes0.RawError<"ISSUER_MISSING">;
+    INVALID_OAUTH_CONFIGURATION: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIGURATION">;
+    TOKEN_URL_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"TOKEN_URL_NOT_FOUND">;
+    PROVIDER_CONFIG_NOT_FOUND: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_CONFIG_NOT_FOUND">;
+    PROVIDER_ID_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"PROVIDER_ID_REQUIRED">;
+    INVALID_OAUTH_CONFIG: import("@better-auth/core/utils/error-codes").RawError<"INVALID_OAUTH_CONFIG">;
+    SESSION_REQUIRED: import("@better-auth/core/utils/error-codes").RawError<"SESSION_REQUIRED">;
+    ISSUER_MISMATCH: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISMATCH">;
+    ISSUER_MISSING: import("@better-auth/core/utils/error-codes").RawError<"ISSUER_MISSING">;
   };
 };
 //#endregion
-export { Auth0Options, BaseOAuthProviderOptions, type GenericOAuthConfig, type GenericOAuthOptions, GumroadOptions, HubSpotOptions, KeycloakOptions, LineOptions, MicrosoftEntraIdOptions, OktaOptions, PatreonOptions, SlackOptions, YandexOptions, auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack, yandex };
+export { type Auth0Options, BaseOAuthProviderOptions, type GenericOAuthConfig, type GenericOAuthOptions, type GumroadOptions, type HubSpotOptions, type KeycloakOptions, type LineOptions, type MicrosoftEntraIdOptions, type OktaOptions, type PatreonOptions, type SlackOptions, type YandexOptions, auth0, genericOAuth, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack, yandex };

package/dist/plugins/generic-oauth/providers/auth0.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/auth0.d.ts
 interface Auth0Options extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/gumroad.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/gumroad.d.ts
 interface GumroadOptions extends BaseOAuthProviderOptions {}
 /**

package/dist/plugins/generic-oauth/providers/hubspot.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/hubspot.d.ts
 interface HubSpotOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/index.d.mts

@@ -7,4 +7,5 @@ import { MicrosoftEntraIdOptions, microsoftEntraId } from "./microsoft-entra-id.
 import { OktaOptions, okta } from "./okta.mjs";
 import { PatreonOptions, patreon } from "./patreon.mjs";
 import { SlackOptions, slack } from "./slack.mjs";
-import { YandexOptions, yandex } from "./yandex.mjs";
+import { YandexOptions, yandex } from "./yandex.mjs";
+export { type Auth0Options, type GumroadOptions, type HubSpotOptions, type KeycloakOptions, type LineOptions, type MicrosoftEntraIdOptions, type OktaOptions, type PatreonOptions, type SlackOptions, type YandexOptions, auth0, gumroad, hubspot, keycloak, line, microsoftEntraId, okta, patreon, slack, yandex };

package/dist/plugins/generic-oauth/providers/keycloak.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/keycloak.d.ts
 interface KeycloakOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/line.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/line.d.ts
 interface LineOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/microsoft-entra-id.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/microsoft-entra-id.d.ts
 interface MicrosoftEntraIdOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/okta.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/okta.d.ts
 interface OktaOptions extends BaseOAuthProviderOptions {
   /**

package/dist/plugins/generic-oauth/providers/patreon.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/patreon.d.ts
 interface PatreonOptions extends BaseOAuthProviderOptions {}
 /**

package/dist/plugins/generic-oauth/providers/slack.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/slack.d.ts
 interface SlackOptions extends BaseOAuthProviderOptions {}
 /**

package/dist/plugins/generic-oauth/providers/yandex.d.mts

@@ -1,6 +1,5 @@
 import { GenericOAuthConfig } from "../types.mjs";
 import { BaseOAuthProviderOptions } from "../index.mjs";
-
 //#region src/plugins/generic-oauth/providers/yandex.d.ts
 interface YandexOptions extends BaseOAuthProviderOptions {}
 /**

package/dist/plugins/generic-oauth/routes.mjs

@@ -26,6 +26,9 @@ const signInWithOAuth2BodySchema = z.object({
 	disableRedirect: z.boolean().meta({ description: "Disable redirect" }).optional(),
 	scopes: z.array(z.string()).meta({ description: "Scopes to be passed to the provider authorization request." }).optional(),
 	requestSignUp: z.boolean().meta({ description: "Explicitly request sign-up. Useful when disableImplicitSignUp is true for this provider. Eg: false" }).optional(),
+	/**
+	* Any additional data to pass through the oauth flow.
+	*/
 	additionalData: z.record(z.string(), z.any()).optional()
 });
 /**
@@ -299,8 +302,19 @@ const oAuth2Callback = (options) => createAuthEndpoint("/oauth2/callback/:provid
 });
 const OAuth2LinkAccountBodySchema = z.object({
 	providerId: z.string(),
+	/**
+	* Callback URL to redirect to after the user has signed in.
+	*/
 	callbackURL: z.string(),
+	/**
+	* Additional scopes to request when linking the account.
+	* This is useful for requesting additional permissions when
+	* linking a social account compared to the initial authentication.
+	*/
 	scopes: z.array(z.string()).meta({ description: "Additional scopes to request when linking the account" }).optional(),
+	/**
+	* The URL to redirect to if there is an error during the link process.
+	*/
 	errorCallbackURL: z.string().meta({ description: "The URL to redirect to if there is an error during the link process" }).optional()
 });
 /**