better-auth 1.6.26 → 1.6.28

package/dist/plugins/haveibeenpwned/index.d.mts

@@ -1,3 +1,6 @@
+import * as _$_better_auth_core0 from "@better-auth/core";
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
+
 //#region src/plugins/haveibeenpwned/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -27,7 +30,7 @@ interface HaveIBeenPwnedOptions {
 declare const haveIBeenPwned: (options?: HaveIBeenPwnedOptions | undefined) => {
   id: "have-i-been-pwned";
   version: string;
-  init(ctx: import("@better-auth/core").AuthContext): {
+  init(ctx: _$_better_auth_core0.AuthContext): {
     context: {
       password: {
         hash(password: string): Promise<string>;
@@ -39,13 +42,13 @@ declare const haveIBeenPwned: (options?: HaveIBeenPwnedOptions | undefined) => {
           minPasswordLength: number;
           maxPasswordLength: number;
         };
-        checkPassword: (userId: string, ctx: import("@better-auth/core").GenericEndpointContext<import("@better-auth/core").BetterAuthOptions>) => Promise<boolean>;
+        checkPassword: (userId: string, ctx: _$_better_auth_core0.GenericEndpointContext<_$_better_auth_core0.BetterAuthOptions>) => Promise<boolean>;
       };
     };
   };
   options: HaveIBeenPwnedOptions | undefined;
   $ERROR_CODES: {
-    PASSWORD_COMPROMISED: import("@better-auth/core/utils/error-codes").RawError<"PASSWORD_COMPROMISED">;
+    PASSWORD_COMPROMISED: _$_better_auth_core_utils_error_codes0.RawError<"PASSWORD_COMPROMISED">;
   };
 };
 //#endregion

package/dist/plugins/index.d.mts

@@ -2,13 +2,11 @@ import { InferOptionSchema, InferPluginContext, InferPluginErrorCodes, InferPlug
 import { HIDE_METADATA } from "../utils/hide-metadata.mjs";
 import { AccessControl, ArrayElement, ExactRoleStatements, Role, RoleAuthorizeRequest, RoleInput, RoleStatements, Statements, SubArray, Subset } from "./access/types.mjs";
 import { AuthorizeResponse, createAccessControl, role } from "./access/access.mjs";
-import "./access/index.mjs";
 import { OrganizationOptions } from "./organization/types.mjs";
 import { InferInvitation, InferMember, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferTeam, Invitation, InvitationInput, InvitationStatus, Member, MemberInput, Organization, OrganizationInput, OrganizationRole, OrganizationSchema, Team, TeamInput, TeamMember, TeamMemberInput, defaultRolesSchema, invitationSchema, invitationStatus, memberSchema, organizationRoleSchema, organizationSchema, roleSchema, teamMemberSchema, teamSchema } from "./organization/schema.mjs";
 import { getOrgAdapter } from "./organization/adapter.mjs";
 import { AdminOptions, InferAdminRolesFromOption, SessionWithImpersonatedBy, UserWithRole } from "./admin/types.mjs";
 import { admin } from "./admin/admin.mjs";
-import "./admin/index.mjs";
 import { AnonymousOptions, AnonymousSession, UserWithAnonymous } from "./anonymous/types.mjs";
 import { anonymous } from "./anonymous/index.mjs";
 import { BearerOptions, bearer } from "./bearer/index.mjs";
@@ -69,5 +67,4 @@ import { USERNAME_ERROR_CODES } from "./username/error-codes.mjs";
 import { UsernameOptions, username } from "./username/index.mjs";
 import { hasPermission } from "./organization/has-permission.mjs";
 import { DefaultOrganizationPlugin, DynamicAccessControlEndpoints, OrganizationCreator, OrganizationEndpoints, OrganizationPlugin, TeamEndpoints, organization, parseRoles } from "./organization/organization.mjs";
-import "./organization/index.mjs";
-export { AccessControl, type AdminOptions, type AnonymousOptions, type AnonymousSession, ArrayElement, type Auth0Options, type AuthorizationQuery, AuthorizeResponse, type BackupCodeOptions, type BaseCaptchaOptions, BaseOAuthProviderOptions, BearerOptions, type CaptchaFoxOptions, type CaptchaOptions, type Client, type CloudflareTurnstileOptions, type CodeVerificationValue, CustomSessionPluginOptions, DefaultOrganizationPlugin, DeviceAuthorizationOptions, DynamicAccessControlEndpoints, MULTI_SESSION_ERROR_CODES as ERROR_CODES, type EmailOTPOptions, ExactRoleStatements, type FieldSchema, type GenericOAuthConfig, type GenericOAuthOptions, type GoogleRecaptchaOptions, type GumroadOptions, type HCaptchaOptions, HIDE_METADATA, HaveIBeenPwnedOptions, type HubSpotOptions, type InferAdminRolesFromOption, type InferInvitation, type InferMember, InferOptionSchema, type InferOrganization, type InferOrganizationRolesFromOption, type InferOrganizationZodRolesFromOption, InferPluginContext, InferPluginErrorCodes, InferPluginIDs, type InferTeam, type Invitation, type InvitationInput, type InvitationStatus, type JWKOptions, type JWSAlgorithms, type Jwk, type JwtOptions, type KeycloakOptions, LastLoginMethodOptions, type LineOptions, type LoginResult, MagicLinkOptions, type Member, type MemberInput, type MicrosoftEntraIdOptions, MultiSessionConfig, OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_ERROR_CODES, OAUTH_POPUP_MESSAGE_TYPE, OAUTH_POPUP_SCRIPT_CSP_HASH, type OAuthAccessToken, type OAuthPopupData, type OAuthPopupMessage, OAuthProxyOptions, type OIDCMetadata, type OIDCOptions, type OTPOptions, type OktaOptions, OneTapOptions, OneTimeTokenOptions, type OpenAPIModelSchema, OpenAPIOptions, type OpenAPIParameter, type OpenAPISchema, type Organization, OrganizationCreator, OrganizationEndpoints, type OrganizationInput, type OrganizationOptions, OrganizationPlugin, type OrganizationRole, type OrganizationSchema, POPUP_MARKER_COOKIE, type Path, type PatreonOptions, type PhoneNumberOptions, type Provider, Role, RoleAuthorizeRequest, RoleInput, RoleStatements, SIWEPluginOptions, type SessionWithImpersonatedBy, type SlackOptions, Statements, SubArray, Subset, type TOTPOptions, TWO_FACTOR_ERROR_CODES, type Team, TeamEndpoints, type TeamInput, type TeamMember, type TeamMemberInput, type TestCookie, type TestHelpers, type TestUtilsOptions, type TimeString, type TokenBody, TwoFactorOptions, TwoFactorProvider, TwoFactorTable, USERNAME_ERROR_CODES, type UserWithAnonymous, type UserWithPhoneNumber, type UserWithRole, UserWithTwoFactor, UsernameOptions, type YandexOptions, admin, anonymous, auth0, type backupCode2fa, bearer, captcha, createAccessControl, createJwk, customSession, type defaultRolesSchema, deviceAuthorization, deviceAuthorizationOptionsSchema, emailOTP, type encodeBackupCodes, type generateBackupCodes, generateExportedKeyPair, type generator, genericOAuth, type getBackupCodes, getClient, getJwtToken, getMCPProtectedResourceMetadata, getMCPProviderMetadata, getMetadata, getOrgAdapter, gumroad, hasPermission, haveIBeenPwned, hubspot, type invitationSchema, type invitationStatus, jwt, keycloak, lastLoginMethod, line, magicLink, mcp, type memberSchema, microsoftEntraId, type ms, multiSession, oAuthDiscoveryMetadata, oAuthProtectedResourceMetadata, oAuthProxy, oauthPopup, oidcProvider, okta, oneTap, oneTimeToken, openAPI, organization, type organizationRoleSchema, type organizationSchema, type otp2fa, parseRoles, patreon, phoneNumber, role, type roleSchema, type sec, signJWT, siwe, slack, type teamMemberSchema, type teamSchema, testUtils, toExpJWT, type totp2fa, twoFactor, twoFactorClient, username, type verifyBackupCode, verifyJWT, withMcpAuth, yandex };
+export { AccessControl, AdminOptions, AnonymousOptions, AnonymousSession, ArrayElement, Auth0Options, AuthorizationQuery, AuthorizeResponse, BackupCodeOptions, BaseCaptchaOptions, BaseOAuthProviderOptions, BearerOptions, CaptchaFoxOptions, CaptchaOptions, Client, CloudflareTurnstileOptions, CodeVerificationValue, CustomSessionPluginOptions, DefaultOrganizationPlugin, DeviceAuthorizationOptions, DynamicAccessControlEndpoints, MULTI_SESSION_ERROR_CODES as ERROR_CODES, EmailOTPOptions, ExactRoleStatements, FieldSchema, GenericOAuthConfig, GenericOAuthOptions, GoogleRecaptchaOptions, GumroadOptions, HCaptchaOptions, HIDE_METADATA, HaveIBeenPwnedOptions, HubSpotOptions, InferAdminRolesFromOption, InferInvitation, InferMember, InferOptionSchema, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferPluginContext, InferPluginErrorCodes, InferPluginIDs, InferTeam, Invitation, InvitationInput, InvitationStatus, JWKOptions, JWSAlgorithms, Jwk, JwtOptions, KeycloakOptions, LastLoginMethodOptions, LineOptions, LoginResult, MagicLinkOptions, Member, MemberInput, MicrosoftEntraIdOptions, MultiSessionConfig, OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_ERROR_CODES, OAUTH_POPUP_MESSAGE_TYPE, OAUTH_POPUP_SCRIPT_CSP_HASH, OAuthAccessToken, OAuthPopupData, OAuthPopupMessage, OAuthProxyOptions, OIDCMetadata, OIDCOptions, OTPOptions, OktaOptions, OneTapOptions, OneTimeTokenOptions, OpenAPIModelSchema, OpenAPIOptions, OpenAPIParameter, OpenAPISchema, Organization, OrganizationCreator, OrganizationEndpoints, OrganizationInput, OrganizationOptions, OrganizationPlugin, OrganizationRole, OrganizationSchema, POPUP_MARKER_COOKIE, Path, PatreonOptions, PhoneNumberOptions, Provider, Role, RoleAuthorizeRequest, RoleInput, RoleStatements, SIWEPluginOptions, SessionWithImpersonatedBy, SlackOptions, Statements, SubArray, Subset, TOTPOptions, TWO_FACTOR_ERROR_CODES, Team, TeamEndpoints, TeamInput, TeamMember, TeamMemberInput, TestCookie, TestHelpers, TestUtilsOptions, TimeString, TokenBody, TwoFactorOptions, TwoFactorProvider, TwoFactorTable, USERNAME_ERROR_CODES, UserWithAnonymous, UserWithPhoneNumber, UserWithRole, UserWithTwoFactor, UsernameOptions, YandexOptions, admin, anonymous, auth0, backupCode2fa, bearer, captcha, createAccessControl, createJwk, customSession, defaultRolesSchema, deviceAuthorization, deviceAuthorizationOptionsSchema, emailOTP, encodeBackupCodes, generateBackupCodes, generateExportedKeyPair, generator, genericOAuth, getBackupCodes, getClient, getJwtToken, getMCPProtectedResourceMetadata, getMCPProviderMetadata, getMetadata, getOrgAdapter, gumroad, hasPermission, haveIBeenPwned, hubspot, invitationSchema, invitationStatus, jwt, keycloak, lastLoginMethod, line, magicLink, mcp, memberSchema, microsoftEntraId, ms, multiSession, oAuthDiscoveryMetadata, oAuthProtectedResourceMetadata, oAuthProxy, oauthPopup, oidcProvider, okta, oneTap, oneTimeToken, openAPI, organization, organizationRoleSchema, organizationSchema, otp2fa, parseRoles, patreon, phoneNumber, role, roleSchema, sec, signJWT, siwe, slack, teamMemberSchema, teamSchema, testUtils, toExpJWT, totp2fa, twoFactor, twoFactorClient, username, verifyBackupCode, verifyJWT, withMcpAuth, yandex };

package/dist/plugins/jwt/client.d.mts

@@ -3,6 +3,7 @@ import { jwt } from "./index.mjs";
 import { BetterAuthClientOptions, ClientFetchOption, ClientStore } from "@better-auth/core";
 import { JSONWebKeySet } from "jose";
 import { BetterFetch } from "@better-fetch/fetch";
+
 //#region src/plugins/jwt/client.d.ts
 interface JwtClientOptions {
   jwks?: {
@@ -37,4 +38,4 @@ declare const jwtClient: (options?: JwtClientOptions) => {
   };
 };
 //#endregion
-export { type JWKOptions, type JWSAlgorithms, type Jwk, type JwtOptions, jwtClient };
+export { jwtClient };

package/dist/plugins/jwt/index.d.mts

@@ -2,8 +2,11 @@ import { JWKOptions, JWSAlgorithms, Jwk, JwtOptions } from "./types.mjs";
 import { getJwtToken, signJWT } from "./sign.mjs";
 import { createJwk, generateExportedKeyPair, toExpJWT } from "./utils.mjs";
 import { verifyJWT } from "./verify.mjs";
+import * as _$_better_auth_core0 from "@better-auth/core";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
 import { JSONWebKeySet, JWTPayload } from "jose";
+
 //#region src/plugins/jwt/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -17,7 +20,7 @@ declare const jwt: <O extends JwtOptions>(options?: O) => {
   version: string;
   options: NoInfer<O>;
   endpoints: {
-    getJwks: import("better-call").StrictEndpoint<string, {
+    getJwks: _$better_call0.StrictEndpoint<string, {
       method: "GET";
       metadata: {
         openapi: {
@@ -94,10 +97,10 @@ declare const jwt: <O extends JwtOptions>(options?: O) => {
         };
       };
     }, JSONWebKeySet>;
-    getToken: import("better-call").StrictEndpoint<"/token", {
+    getToken: _$better_call0.StrictEndpoint<"/token", {
       method: "GET";
       requireHeaders: true;
-      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -119,7 +122,7 @@ declare const jwt: <O extends JwtOptions>(options?: O) => {
             image?: string | null | undefined;
           };
         };
-      }>)[];
+      }>>[];
       metadata: {
         openapi: {
           operationId: string;
@@ -146,7 +149,7 @@ declare const jwt: <O extends JwtOptions>(options?: O) => {
     }, {
       token: string;
     }>;
-    signJWT: import("better-call").StrictEndpoint<string, {
+    signJWT: _$better_call0.StrictEndpoint<string, {
       method: "POST";
       metadata: {
         $Infer: {
@@ -163,7 +166,7 @@ declare const jwt: <O extends JwtOptions>(options?: O) => {
     }, {
       token: string;
     }>;
-    verifyJWT: import("better-call").StrictEndpoint<string, {
+    verifyJWT: _$better_call0.StrictEndpoint<string, {
       method: "POST";
       metadata: {
         $Infer: {
@@ -190,8 +193,8 @@ declare const jwt: <O extends JwtOptions>(options?: O) => {
   };
   hooks: {
     after: {
-      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
-      handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+      matcher(context: _$_better_auth_core0.HookEndpointContext): boolean;
+      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
     }[];
   };
   schema: {
@@ -218,4 +221,4 @@ declare const jwt: <O extends JwtOptions>(options?: O) => {
   };
 };
 //#endregion
-export { type JWKOptions, type JWSAlgorithms, type Jwk, type JwtOptions, createJwk, generateExportedKeyPair, getJwtToken, jwt, signJWT, toExpJWT, verifyJWT };
+export { JWKOptions, JWSAlgorithms, Jwk, JwtOptions, createJwk, generateExportedKeyPair, getJwtToken, jwt, signJWT, toExpJWT, verifyJWT };

package/dist/plugins/jwt/sign.d.mts

@@ -1,5 +1,6 @@
 import { JwtOptions } from "./types.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
+
 //#region src/plugins/jwt/sign.d.ts
 type JWTPayloadWithOptional = {
   /**
@@ -43,8 +44,7 @@ type JWTPayloadWithOptional = {
    *
    * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 RFC7519#section-4.1.6}
    */
-  iat?: number | undefined;
-  /** Any other JWT Claim Set member. */
+  iat?: number | undefined; /** Any other JWT Claim Set member. */
   [propName: string]: unknown | undefined;
 };
 declare function signJWT(ctx: GenericEndpointContext, config: {

package/dist/plugins/jwt/types.d.mts

@@ -1,9 +1,9 @@
 import { Session, User } from "../../types/models.mjs";
 import { InferOptionSchema } from "../../types/plugins.mjs";
-import "../../types/index.mjs";
 import { schema } from "./schema.mjs";
 import { Awaitable, GenericEndpointContext } from "@better-auth/core";
 import { JWTPayload } from "jose";
+
 //#region src/plugins/jwt/types.d.ts
 interface JwtOptions {
   jwks?: {

package/dist/plugins/jwt/utils.d.mts

@@ -1,5 +1,7 @@
 import { Jwk, JwtOptions } from "./types.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
+import * as _$jose from "jose";
+
 //#region src/plugins/jwt/utils.d.ts
 /**
  * Converts an expirationTime to ISO seconds expiration time (the format of JWT exp)
@@ -12,8 +14,8 @@ import { GenericEndpointContext } from "@better-auth/core";
  */
 declare function toExpJWT(expirationTime: number | Date | string, iat: number): number;
 declare function generateExportedKeyPair(options?: JwtOptions | undefined): Promise<{
-  publicWebKey: import("jose").JWK;
-  privateWebKey: import("jose").JWK;
+  publicWebKey: _$jose.JWK;
+  privateWebKey: _$jose.JWK;
   alg: "EdDSA" | "ES256" | "ES512" | "PS256" | "RS256";
   cfg: {
     crv?: "Ed25519" | undefined;

package/dist/plugins/jwt/verify.d.mts

@@ -1,5 +1,6 @@
 import { JwtOptions } from "./types.mjs";
 import { JWTPayload } from "jose";
+
 //#region src/plugins/jwt/verify.d.ts
 /**
  * Verify a JWT token using the JWKS public keys

package/dist/plugins/last-login-method/index.d.mts

@@ -1,4 +1,7 @@
+import * as _$_better_auth_core0 from "@better-auth/core";
 import { GenericEndpointContext } from "@better-auth/core";
+import * as _$better_call0 from "better-call";
+
 //#region src/plugins/last-login-method/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -57,7 +60,7 @@ interface LastLoginMethodOptions {
 declare const lastLoginMethod: <O extends LastLoginMethodOptions>(userConfig?: O | undefined) => {
   id: "last-login-method";
   version: string;
-  init(ctx: import("@better-auth/core").AuthContext): {
+  init(ctx: _$_better_auth_core0.AuthContext): {
     options: {
       databaseHooks: {
         user: {
@@ -72,7 +75,7 @@ declare const lastLoginMethod: <O extends LastLoginMethodOptions>(userConfig?: O
               image?: string | null | undefined;
             } & Record<string, unknown>, context: GenericEndpointContext | null): Promise<{
               data: {
-                lastLoginMethod: any;
+                lastLoginMethod: string;
                 id: string;
                 createdAt: Date;
                 updatedAt: Date;
@@ -104,7 +107,7 @@ declare const lastLoginMethod: <O extends LastLoginMethodOptions>(userConfig?: O
   hooks: {
     after: {
       matcher(): true;
-      handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
     }[];
   };
   schema: O["storeInDatabase"] extends true ? {

package/dist/plugins/magic-link/client.d.mts

@@ -1,4 +1,5 @@
 import { magicLink } from "./index.mjs";
+
 //#region src/plugins/magic-link/client.d.ts
 declare const magicLinkClient: () => {
   id: "magic-link";

package/dist/plugins/magic-link/index.d.mts

@@ -1,5 +1,7 @@
 import { Awaitable, GenericEndpointContext } from "@better-auth/core";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/plugins/magic-link/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -88,10 +90,10 @@ declare const magicLink: (options: MagicLinkOptions) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/sign-in#api-method-sign-in-magic-link)
      */
-    signInMagicLink: import("better-call").StrictEndpoint<"/sign-in/magic-link", {
+    signInMagicLink: _$better_call0.StrictEndpoint<"/sign-in/magic-link", {
       method: "POST";
       requireHeaders: true;
-      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
       body: z.ZodObject<{
         email: z.ZodEmail;
         name: z.ZodOptional<z.ZodString>;
@@ -141,7 +143,7 @@ declare const magicLink: (options: MagicLinkOptions) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/magic-link#api-method-magic-link-verify)
      */
-    magicLinkVerify: import("better-call").StrictEndpoint<"/magic-link/verify", {
+    magicLinkVerify: _$better_call0.StrictEndpoint<"/magic-link/verify", {
       method: "GET";
       query: z.ZodObject<{
         token: z.ZodString;
@@ -149,7 +151,7 @@ declare const magicLink: (options: MagicLinkOptions) => {
         errorCallbackURL: z.ZodOptional<z.ZodString>;
         newUserCallbackURL: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
       requireHeaders: true;
       metadata: {
         openapi: {

package/dist/plugins/mcp/client/adapters.d.mts

@@ -1,4 +1,5 @@
 import { McpAuthClient, McpAuthClientOptions, McpSession } from "./index.mjs";
+
 //#region src/plugins/mcp/client/adapters.d.ts
 interface HonoContext {
   req: {

package/dist/plugins/mcp/client/index.mjs

@@ -102,8 +102,7 @@ function createMcpAuthClient(options) {
 			});
 			const authHeader = req.headers.get("Authorization");
 			if (!authHeader || !authHeader.startsWith("Bearer ")) return make401Response(authURL, options.resource, corsHeaders);
-			const token = authHeader.slice(7);
-			const session = await verifyToken(token);
+			const session = await verifyToken(authHeader.slice(7));
 			if (!session) return make401Response(authURL, options.resource, corsHeaders);
 			return fn(req, session);
 		};
@@ -155,8 +154,7 @@ function createMcpAuthClient(options) {
 				send401Node(res, makeWWWAuthenticate(authURL, options.resource), "Unauthorized: Authentication required", corsHeaders);
 				return;
 			}
-			const token = authHeader.slice(7);
-			const session = await verifyToken(token);
+			const session = await verifyToken(authHeader.slice(7));
 			if (!session) {
 				send401Node(res, makeWWWAuthenticate(authURL, options.resource), "Invalid or expired token", corsHeaders);
 				return;

package/dist/plugins/mcp/index.d.mts

@@ -1,7 +1,8 @@
 import { OAuthAccessToken, OIDCMetadata, OIDCOptions } from "../oidc-provider/types.mjs";
-import "../oidc-provider/index.mjs";
 import { BetterAuthOptions, GenericEndpointContext } from "@better-auth/core";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/plugins/mcp/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -30,18 +31,18 @@ declare const mcp: (options: MCPOptions) => {
   hooks: {
     after: {
       matcher(): true;
-      handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
     }[];
   };
   endpoints: {
-    oAuthConsent: import("better-call").StrictEndpoint<"/oauth2/consent", {
+    oAuthConsent: _$better_call0.StrictEndpoint<"/oauth2/consent", {
       method: "POST";
       operationId: string;
       body: z.ZodObject<{
         accept: z.ZodBoolean;
         consent_code: z.ZodOptional<z.ZodNullable<z.ZodOptional<z.ZodString>>>;
       }, z.core.$strip>;
-      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -63,7 +64,7 @@ declare const mcp: (options: MCPOptions) => {
             image?: string | null | undefined;
           };
         };
-      }>)[];
+      }>>[];
       metadata: {
         openapi: {
           description: string;
@@ -113,13 +114,13 @@ declare const mcp: (options: MCPOptions) => {
     }, {
       redirectURI: string;
     }>;
-    getMcpOAuthConfig: import("better-call").StrictEndpoint<"/.well-known/oauth-authorization-server", {
+    getMcpOAuthConfig: _$better_call0.StrictEndpoint<"/.well-known/oauth-authorization-server", {
       method: "GET";
       metadata: {
         readonly scope: "server";
       };
     }, OIDCMetadata | null>;
-    getMCPProtectedResource: import("better-call").StrictEndpoint<"/.well-known/oauth-protected-resource", {
+    getMCPProtectedResource: _$better_call0.StrictEndpoint<"/.well-known/oauth-protected-resource", {
       method: "GET";
       metadata: {
         readonly scope: "server";
@@ -132,7 +133,7 @@ declare const mcp: (options: MCPOptions) => {
       bearer_methods_supported: string[];
       resource_signing_alg_values_supported: string[];
     }>;
-    mcpOAuthAuthorize: import("better-call").StrictEndpoint<"/mcp/authorize", {
+    mcpOAuthAuthorize: _$better_call0.StrictEndpoint<"/mcp/authorize", {
       method: "GET";
       query: z.ZodRecord<z.ZodString, z.ZodAny>;
       metadata: {
@@ -155,7 +156,7 @@ declare const mcp: (options: MCPOptions) => {
         };
       };
     }, void>;
-    mcpOAuthToken: import("better-call").StrictEndpoint<"/mcp/token", {
+    mcpOAuthToken: _$better_call0.StrictEndpoint<"/mcp/token", {
       method: "POST";
       body: z.ZodRecord<z.ZodAny, z.ZodAny>;
       metadata: {
@@ -176,7 +177,7 @@ declare const mcp: (options: MCPOptions) => {
       scope: string;
       id_token: string | undefined;
     }>;
-    registerMcpClient: import("better-call").StrictEndpoint<"/mcp/register", {
+    registerMcpClient: _$better_call0.StrictEndpoint<"/mcp/register", {
       method: "POST";
       body: z.ZodObject<{
         redirect_uris: z.ZodArray<z.ZodString>;
@@ -294,7 +295,7 @@ declare const mcp: (options: MCPOptions) => {
         };
       };
     }, Response>;
-    getMcpSession: import("better-call").StrictEndpoint<"/mcp/get-session", {
+    getMcpSession: _$better_call0.StrictEndpoint<"/mcp/get-session", {
       method: "GET";
       requireHeaders: true;
     }, OAuthAccessToken | null>;

package/dist/plugins/multi-session/client.d.mts

@@ -1,5 +1,7 @@
 import { MULTI_SESSION_ERROR_CODES } from "./error-codes.mjs";
 import { MultiSessionConfig, multiSession } from "./index.mjs";
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
+
 //#region src/plugins/multi-session/client.d.ts
 declare const multiSessionClient: () => {
   id: "multi-session";
@@ -10,8 +12,8 @@ declare const multiSessionClient: () => {
     signal: "$sessionSignal";
   }[];
   $ERROR_CODES: {
-    INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
+    INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
   };
 };
 //#endregion
-export { MULTI_SESSION_ERROR_CODES, type MultiSessionConfig, multiSessionClient };
+export { multiSessionClient };

package/dist/plugins/multi-session/client.mjs

@@ -16,4 +16,4 @@ const multiSessionClient = () => {
 	};
 };
 //#endregion
-export { MULTI_SESSION_ERROR_CODES, multiSessionClient };
+export { multiSessionClient };

package/dist/plugins/multi-session/error-codes.d.mts

@@ -1,6 +1,8 @@
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
+
 //#region src/plugins/multi-session/error-codes.d.ts
 declare const MULTI_SESSION_ERROR_CODES: {
-  INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
+  INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
 };
 //#endregion
 export { MULTI_SESSION_ERROR_CODES };

package/dist/plugins/multi-session/index.d.mts

@@ -1,5 +1,9 @@
 import { MULTI_SESSION_ERROR_CODES } from "./error-codes.mjs";
+import * as _$_better_auth_core0 from "@better-auth/core";
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/plugins/multi-session/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -35,7 +39,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-list-device-sessions)
      */
-    listDeviceSessions: import("better-call").StrictEndpoint<"/multi-session/list-device-sessions", {
+    listDeviceSessions: _$better_call0.StrictEndpoint<"/multi-session/list-device-sessions", {
       method: "GET";
       requireHeaders: true;
     }, {
@@ -74,7 +78,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-set-active)
      */
-    setActiveSession: import("better-call").StrictEndpoint<"/multi-session/set-active", {
+    setActiveSession: _$better_call0.StrictEndpoint<"/multi-session/set-active", {
       method: "POST";
       body: z.ZodObject<{
         sessionToken: z.ZodString;
@@ -138,13 +142,13 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-revoke)
      */
-    revokeDeviceSession: import("better-call").StrictEndpoint<"/multi-session/revoke", {
+    revokeDeviceSession: _$better_call0.StrictEndpoint<"/multi-session/revoke", {
       method: "POST";
       body: z.ZodObject<{
         sessionToken: z.ZodString;
       }, z.core.$strip>;
       requireHeaders: true;
-      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -166,7 +170,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
             image?: string | null | undefined;
           };
         };
-      }>)[];
+      }>>[];
       metadata: {
         openapi: {
           description: string;
@@ -195,13 +199,13 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
   };
   hooks: {
     after: {
-      matcher: (context: import("@better-auth/core").HookEndpointContext) => boolean;
-      handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+      matcher: (context: _$_better_auth_core0.HookEndpointContext) => boolean;
+      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
     }[];
   };
   options: MultiSessionConfig | undefined;
   $ERROR_CODES: {
-    INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
+    INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
   };
 };
 //#endregion

package/dist/plugins/oauth-popup/client.d.mts

@@ -2,7 +2,9 @@ import { POPUP_TOKEN_STORAGE_KEY } from "./constants.mjs";
 import { OAUTH_POPUP_ERROR_CODES } from "./error-codes.mjs";
 import { oauthPopup } from "./index.mjs";
 import { BetterAuthClientOptions, ClientStore } from "@better-auth/core";
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
 import { BetterFetch, BetterFetchPlugin } from "@better-fetch/fetch";
+
 //#region src/plugins/oauth-popup/client.d.ts
 /** Inputs for `authClient.signIn.popup`; mirror the redirect sign-in. */
 interface SignInPopupOptions {
@@ -50,7 +52,11 @@ interface SignInPopupDeps {
  * page to post the session token back, stores it for the bearer fetch plugin,
  * and refreshes the reactive session.
  */
-declare function createSignInPopup({ $fetch, options, notifySessionSignal }: SignInPopupDeps): (opts: SignInPopupOptions) => Promise<SignInPopupResult>;
+declare function createSignInPopup({
+  $fetch,
+  options,
+  notifySessionSignal
+}: SignInPopupDeps): (opts: SignInPopupOptions) => Promise<SignInPopupResult>;
 /**
  * Client plugin for popup OAuth sign-in. Adds `authClient.signIn.popup`. Pair
  * with the server `oauthPopup` and `bearer` plugins.
@@ -60,10 +66,10 @@ declare const oauthPopupClient: () => {
   version: string;
   $InferServerPlugin: ReturnType<typeof oauthPopup>;
   $ERROR_CODES: {
-    POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
-    POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
-    POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
-    POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
+    POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
+    POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
+    POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
+    POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
   };
   fetchPlugins: BetterFetchPlugin[];
   getActions: ($fetch: BetterFetch, $store: ClientStore, options: BetterAuthClientOptions | undefined) => {
@@ -73,4 +79,4 @@ declare const oauthPopupClient: () => {
   };
 };
 //#endregion
-export { OAUTH_POPUP_ERROR_CODES, POPUP_TOKEN_STORAGE_KEY, SignInPopupOptions, SignInPopupResult, createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };
+export { SignInPopupOptions, SignInPopupResult, createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };

package/dist/plugins/oauth-popup/client.mjs

@@ -74,12 +74,10 @@ function popupError(code, status) {
 	};
 }
 function centeredFeatures() {
-	const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;
-	const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;
-	return `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},menubar=no,toolbar=no`;
+	return `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${window.screenX + (window.outerWidth - POPUP_WIDTH) / 2},top=${window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2},menubar=no,toolbar=no`;
 }
 function randomNonce() {
-	const bytes = /* @__PURE__ */ new Uint8Array(16);
+	const bytes = new Uint8Array(16);
 	crypto.getRandomValues(bytes);
 	return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
@@ -202,4 +200,4 @@ const oauthPopupClient = () => {
 	};
 };
 //#endregion
-export { OAUTH_POPUP_ERROR_CODES, POPUP_TOKEN_STORAGE_KEY, createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };
+export { createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };

package/dist/plugins/oauth-popup/error-codes.d.mts

@@ -1,9 +1,11 @@
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
+
 //#region src/plugins/oauth-popup/error-codes.d.ts
 declare const OAUTH_POPUP_ERROR_CODES: {
-  POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
-  POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
-  POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
-  POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
+  POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
+  POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
+  POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
+  POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
 };
 //#endregion
 export { OAUTH_POPUP_ERROR_CODES };