better-auth 1.6.26 → 1.6.28

package/dist/api/middlewares/authorization.d.mts

@@ -1,3 +1,5 @@
+import * as _$better_call0 from "better-call";
+
 //#region src/api/middlewares/authorization.d.ts
 /**
  * Middleware that verifies the authenticated user owns a resource.
@@ -12,13 +14,9 @@
  * so the handler can use it without a redundant DB query.
  */
 declare function requireResourceOwnership(config: {
-  /** Database model name (e.g., "passkey", "apiKey") */
-  model: string;
-  /** Request parameter name containing the resource ID */
-  idParam: string;
-  /** Where to find the ID: "body" or "query" */
-  idSource: "body" | "query";
-  /** Field on the resource that holds the owner's user ID. Default: "userId" */
+  /** Database model name (e.g., "passkey", "apiKey") */model: string; /** Request parameter name containing the resource ID */
+  idParam: string; /** Where to find the ID: "body" or "query" */
+  idSource: "body" | "query"; /** Field on the resource that holds the owner's user ID. Default: "userId" */
   ownerField?: string;
   /**
    * Custom error to throw when the resource is not found.
@@ -43,9 +41,9 @@ declare function requireResourceOwnership(config: {
    * @default "FORBIDDEN" (403)
    */
   forbiddenStatus?: "FORBIDDEN" | "UNAUTHORIZED";
-}): (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+}): _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
   verifiedResource: {};
-}>;
+}>>;
 /**
  * Middleware that verifies the authenticated user is a member of a
  * specific organization with one of the allowed roles.
@@ -57,17 +55,15 @@ declare function requireResourceOwnership(config: {
  * The verified member is returned on `ctx.context.verifiedMember`.
  */
 declare function requireOrgRole(config: {
-  /** Request parameter name containing the organization ID */
-  orgIdParam: string;
-  /** Where to find the org ID: "body" or "query" */
+  /** Request parameter name containing the organization ID */orgIdParam: string; /** Where to find the org ID: "body" or "query" */
   orgIdSource: "body" | "query";
   /**
    * Roles that are authorized to proceed. If omitted or empty,
    * any org membership is sufficient.
    */
   allowedRoles?: string[];
-}): (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+}): _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
   verifiedMember: {};
-}>;
+}>>;
 //#endregion
 export { requireOrgRole, requireResourceOwnership };

package/dist/api/middlewares/authorization.mjs

@@ -69,8 +69,7 @@ function requireOrgRole(config) {
 		});
 		if (!member) throw new APIError("FORBIDDEN", { message: "Not a member of this organization" });
 		if (config.allowedRoles?.length) {
-			const rawRole = member.role ?? "";
-			if (!parseMemberRoles(rawRole).some((role) => config.allowedRoles.includes(role))) throw new APIError("FORBIDDEN", { message: "Insufficient role for this operation" });
+			if (!parseMemberRoles(member.role ?? "").some((role) => config.allowedRoles.includes(role))) throw new APIError("FORBIDDEN", { message: "Insufficient role for this operation" });
 		}
 		return { verifiedMember: member };
 	});

package/dist/api/middlewares/index.d.mts

@@ -1,3 +1,2 @@
 import { requireOrgRole, requireResourceOwnership } from "./authorization.mjs";
-import { formCsrfMiddleware, originCheck, originCheckMiddleware } from "./origin-check.mjs";
-export { formCsrfMiddleware, originCheck, originCheckMiddleware, requireOrgRole, requireResourceOwnership };
+import { formCsrfMiddleware, originCheck, originCheckMiddleware } from "./origin-check.mjs";

package/dist/api/middlewares/origin-check.d.mts

@@ -1,15 +1,17 @@
 import { GenericEndpointContext } from "@better-auth/core";
+import * as _$better_call0 from "better-call";
+
 //#region src/api/middlewares/origin-check.d.ts
 /**
  * A middleware to validate callbackURL and origin against trustedOrigins.
  * Also handles CSRF protection using Fetch Metadata for first-login scenarios.
  */
-declare const originCheckMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
-declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+declare const originCheckMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+declare const originCheck: (getValue: (ctx: GenericEndpointContext) => string | string[]) => _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
 /**
  * Middleware for CSRF protection using Fetch Metadata headers.
  * This prevents cross-site navigation login attacks while supporting progressive enhancement.
  */
-declare const formCsrfMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+declare const formCsrfMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
 //#endregion
 export { formCsrfMiddleware, originCheck, originCheckMiddleware };

package/dist/api/routes/account.d.mts

@@ -1,8 +1,11 @@
+import * as _$_better_auth_core_oauth20 from "@better-auth/core/oauth2";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/api/routes/account.d.ts
-declare const listUserAccounts: import("better-call").StrictEndpoint<"/list-accounts", {
+declare const listUserAccounts: _$better_call0.StrictEndpoint<"/list-accounts", {
   method: "GET";
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -24,7 +27,7 @@ declare const listUserAccounts: import("better-call").StrictEndpoint<"/list-acco
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
   metadata: {
     openapi: {
       operationId: string;
@@ -84,7 +87,7 @@ declare const listUserAccounts: import("better-call").StrictEndpoint<"/list-acco
   providerId: string;
   accountId: string;
 }[]>;
-declare const linkSocialAccount: import("better-call").StrictEndpoint<"/link-social", {
+declare const linkSocialAccount: _$better_call0.StrictEndpoint<"/link-social", {
   method: "POST";
   requireHeaders: true;
   body: z.ZodObject<{
@@ -103,7 +106,7 @@ declare const linkSocialAccount: import("better-call").StrictEndpoint<"/link-soc
     disableRedirect: z.ZodOptional<z.ZodBoolean>;
     additionalData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
   }, z.core.$strip>;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -125,7 +128,7 @@ declare const linkSocialAccount: import("better-call").StrictEndpoint<"/link-soc
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
   metadata: {
     openapi: {
       description: string;
@@ -162,13 +165,13 @@ declare const linkSocialAccount: import("better-call").StrictEndpoint<"/link-soc
   url: string;
   redirect: boolean;
 }>;
-declare const unlinkAccount: import("better-call").StrictEndpoint<"/unlink-account", {
+declare const unlinkAccount: _$better_call0.StrictEndpoint<"/unlink-account", {
   method: "POST";
   body: z.ZodObject<{
     providerId: z.ZodString;
     accountId: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -190,7 +193,7 @@ declare const unlinkAccount: import("better-call").StrictEndpoint<"/unlink-accou
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
   metadata: {
     openapi: {
       description: string;
@@ -216,7 +219,7 @@ declare const unlinkAccount: import("better-call").StrictEndpoint<"/unlink-accou
 }, {
   status: boolean;
 }>;
-declare const getAccessToken: import("better-call").StrictEndpoint<"/get-access-token", {
+declare const getAccessToken: _$better_call0.StrictEndpoint<"/get-access-token", {
   method: "POST";
   body: z.ZodObject<{
     providerId: z.ZodString;
@@ -264,7 +267,7 @@ declare const getAccessToken: import("better-call").StrictEndpoint<"/get-access-
   scopes: string[];
   idToken: string | undefined;
 }>;
-declare const refreshToken: import("better-call").StrictEndpoint<"/refresh-token", {
+declare const refreshToken: _$better_call0.StrictEndpoint<"/refresh-token", {
   method: "POST";
   body: z.ZodObject<{
     providerId: z.ZodString;
@@ -323,7 +326,7 @@ declare const refreshToken: import("better-call").StrictEndpoint<"/refresh-token
   providerId: string;
   accountId: string;
 }>;
-declare const accountInfo: import("better-call").StrictEndpoint<"/account-info", {
+declare const accountInfo: _$better_call0.StrictEndpoint<"/account-info", {
   method: "GET";
   metadata: {
     openapi: {
@@ -378,7 +381,7 @@ declare const accountInfo: import("better-call").StrictEndpoint<"/account-info",
     userId: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>>;
 }, {
-  user: import("@better-auth/core/oauth2").OAuth2UserInfo;
+  user: _$_better_auth_core_oauth20.OAuth2UserInfo;
   data: Record<string, any>;
 } | null>;
 //#endregion

package/dist/api/routes/callback.d.mts

@@ -1,6 +1,8 @@
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/api/routes/callback.d.ts
-declare const callbackOAuth: import("better-call").StrictEndpoint<"/callback/:id", {
+declare const callbackOAuth: _$better_call0.StrictEndpoint<"/callback/:id", {
   method: ("GET" | "POST")[];
   operationId: string;
   body: z.ZodOptional<z.ZodObject<{

package/dist/api/routes/email-verification.d.mts

@@ -1,26 +1,30 @@
 import { User } from "../../types/models.mjs";
-import "../../types/index.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/api/routes/email-verification.d.ts
 declare function createEmailVerificationToken(secret: string, email: string,
 /**
  * The email to update from
  */
+
 updateTo?: string | undefined,
 /**
  * The time in seconds for the token to expire
  */
+
 expiresIn?: number,
 /**
  * Extra payload to include in the token
  */
+
 extraPayload?: Record<string, any>): Promise<string>;
 /**
  * A function to send a verification email to the user
  */
 declare function sendVerificationEmailFn(ctx: GenericEndpointContext, user: User): Promise<void>;
-declare const sendVerificationEmail: import("better-call").StrictEndpoint<"/send-verification-email", {
+declare const sendVerificationEmail: _$better_call0.StrictEndpoint<"/send-verification-email", {
   method: "POST";
   operationId: string;
   cloneRequest: true;
@@ -96,14 +100,14 @@ declare const sendVerificationEmail: import("better-call").StrictEndpoint<"/send
 }, {
   status: boolean;
 }>;
-declare const verifyEmail: import("better-call").StrictEndpoint<"/verify-email", {
+declare const verifyEmail: _$better_call0.StrictEndpoint<"/verify-email", {
   method: "GET";
   operationId: string;
   query: z.ZodObject<{
     token: z.ZodString;
     callbackURL: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
   metadata: {
     openapi: {
       description: string;

package/dist/api/routes/error.d.mts

@@ -1,5 +1,7 @@
+import * as _$better_call0 from "better-call";
+
 //#region src/api/routes/error.d.ts
-declare const error: import("better-call").StrictEndpoint<"/error", {
+declare const error: _$better_call0.StrictEndpoint<"/error", {
   method: "GET";
   metadata: {
     openapi: {

package/dist/api/routes/index.d.mts

@@ -9,5 +9,4 @@ import { signInEmail, signInSocial } from "./sign-in.mjs";
 import { signOut } from "./sign-out.mjs";
 import { signUpEmail } from "./sign-up.mjs";
 import { updateSession } from "./update-session.mjs";
-import { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser } from "./update-user.mjs";
-export { accountInfo, callbackOAuth, changeEmail, changePassword, createEmailVerificationToken, deleteUser, deleteUserCallback, error, freshSessionMiddleware, getAccessToken, getAuthoritativeSessionFromCtx, getSession, getSessionFromCtx, isStateful, linkSocialAccount, listSessions, listUserAccounts, ok, refreshToken, requestOnlySessionMiddleware, requestPasswordReset, requestPasswordResetCallback, resetPassword, revokeOtherSessions, revokeSession, revokeSessions, sendVerificationEmail, sendVerificationEmailFn, sensitiveSessionMiddleware, sessionMiddleware, setPassword, signInEmail, signInSocial, signOut, signUpEmail, unlinkAccount, updateSession, updateUser, verifyEmail, verifyPassword };
+import { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser } from "./update-user.mjs";

package/dist/api/routes/ok.d.mts

@@ -1,5 +1,7 @@
+import * as _$better_call0 from "better-call";
+
 //#region src/api/routes/ok.d.ts
-declare const ok: import("better-call").StrictEndpoint<"/ok", {
+declare const ok: _$better_call0.StrictEndpoint<"/ok", {
   method: "GET";
   metadata: {
     openapi: {

package/dist/api/routes/password.d.mts

@@ -1,6 +1,8 @@
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/api/routes/password.d.ts
-declare const requestPasswordReset: import("better-call").StrictEndpoint<"/request-password-reset", {
+declare const requestPasswordReset: _$better_call0.StrictEndpoint<"/request-password-reset", {
   method: "POST";
   body: z.ZodObject<{
     email: z.ZodEmail;
@@ -32,18 +34,18 @@ declare const requestPasswordReset: import("better-call").StrictEndpoint<"/reque
       };
     };
   };
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
 }, {
   status: boolean;
   message: string;
 }>;
-declare const requestPasswordResetCallback: import("better-call").StrictEndpoint<"/reset-password/:token", {
+declare const requestPasswordResetCallback: _$better_call0.StrictEndpoint<"/reset-password/:token", {
   method: "GET";
   operationId: string;
   query: z.ZodObject<{
     callbackURL: z.ZodString;
   }, z.core.$strip>;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
   metadata: {
     openapi: {
       operationId: string;
@@ -85,7 +87,7 @@ declare const requestPasswordResetCallback: import("better-call").StrictEndpoint
     };
   };
 }, never>;
-declare const resetPassword: import("better-call").StrictEndpoint<"/reset-password", {
+declare const resetPassword: _$better_call0.StrictEndpoint<"/reset-password", {
   method: "POST";
   operationId: string;
   query: z.ZodOptional<z.ZodObject<{
@@ -121,7 +123,7 @@ declare const resetPassword: import("better-call").StrictEndpoint<"/reset-passwo
 }, {
   status: boolean;
 }>;
-declare const verifyPassword: import("better-call").StrictEndpoint<"/verify-password", {
+declare const verifyPassword: _$better_call0.StrictEndpoint<"/verify-password", {
   method: "POST";
   body: z.ZodObject<{
     password: z.ZodString;
@@ -150,7 +152,7 @@ declare const verifyPassword: import("better-call").StrictEndpoint<"/verify-pass
       };
     };
   };
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -172,7 +174,7 @@ declare const verifyPassword: import("better-call").StrictEndpoint<"/verify-pass
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
 }, {
   status: boolean;
 }>;

package/dist/api/routes/session.d.mts

@@ -1,10 +1,12 @@
-import { Prettify } from "../../types/helper.mjs";
-import { Session, User } from "../../types/models.mjs";
-import "../../types/index.mjs";
+import { Prettify as Prettify$1 } from "../../types/helper.mjs";
+import { Session as Session$1, User as User$1 } from "../../types/models.mjs";
 import { BetterAuthOptions, GenericEndpointContext } from "@better-auth/core";
+import * as _$_better_auth_core_db0 from "@better-auth/core/db";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/api/routes/session.d.ts
-declare const getSession: <Option extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/get-session", {
+declare const getSession: <Option extends BetterAuthOptions>() => _$better_call0.StrictEndpoint<"/get-session", {
   method: ("GET" | "POST")[];
   operationId: string;
   query: z.ZodOptional<z.ZodObject<{
@@ -40,8 +42,8 @@ declare const getSession: <Option extends BetterAuthOptions>() => import("better
     };
   };
 }, {
-  session: Session<Option["session"], Option["plugins"]>;
-  user: User<Option["user"], Option["plugins"]>;
+  session: Session$1<Option["session"], Option["plugins"]>;
+  user: User$1<Option["user"], Option["plugins"]>;
 } | null>;
 /**
  * Whether the deployment keeps sessions in a durable server-side store
@@ -58,8 +60,8 @@ declare const getSessionFromCtx: <U extends Record<string, any> = Record<string,
   disableCookieCache?: boolean;
   disableRefresh?: boolean;
 } | undefined) => Promise<{
-  session: S & Session;
-  user: U & User;
+  session: S & Session$1;
+  user: U & User$1;
 } | null>;
 /**
  * Reads the session from the source that can authorize sensitive work.
@@ -92,7 +94,7 @@ declare const getAuthoritativeSessionFromCtx: <U extends Record<string, any> = R
 /**
  * The middleware forces the endpoint to require a valid session.
  */
-declare const sessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+declare const sessionMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -114,12 +116,12 @@ declare const sessionMiddleware: (inputContext: import("better-call").Middleware
       image?: string | null | undefined;
     };
   };
-}>;
+}>>;
 /**
  * This middleware forces the endpoint to require a valid authoritative session.
  * This should be used for sensitive operations like password changes, account deletion, etc.
  */
-declare const sensitiveSessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+declare const sensitiveSessionMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -141,12 +143,12 @@ declare const sensitiveSessionMiddleware: (inputContext: import("better-call").M
       image?: string | null | undefined;
     };
   };
-}>;
+}>>;
 /**
  * This middleware allows you to call the endpoint on the client if session is valid.
  * However, if called on the server, no session is required.
  */
-declare const requestOnlySessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+declare const requestOnlySessionMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -168,7 +170,7 @@ declare const requestOnlySessionMiddleware: (inputContext: import("better-call")
       image?: string | null | undefined;
     };
   } | null;
-}>;
+}>>;
 /**
  * This middleware forces the endpoint to require a valid session,
  * as well as making sure the session is fresh before proceeding.
@@ -176,7 +178,7 @@ declare const requestOnlySessionMiddleware: (inputContext: import("better-call")
  * Session freshness check will be skipped if the session config's freshAge
  * is set to 0
  */
-declare const freshSessionMiddleware: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+declare const freshSessionMiddleware: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
   session: {
     session: Record<string, any> & {
       id: string;
@@ -198,14 +200,14 @@ declare const freshSessionMiddleware: (inputContext: import("better-call").Middl
       image?: string | null | undefined;
     };
   };
-}>;
+}>>;
 /**
  * user active sessions list
  */
-declare const listSessions: <Option extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/list-sessions", {
+declare const listSessions: <Option extends BetterAuthOptions>() => _$better_call0.StrictEndpoint<"/list-sessions", {
   method: "GET";
   operationId: string;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -227,7 +229,7 @@ declare const listSessions: <Option extends BetterAuthOptions>() => import("bett
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
   requireHeaders: true;
   metadata: {
     openapi: {
@@ -250,7 +252,7 @@ declare const listSessions: <Option extends BetterAuthOptions>() => import("bett
       };
     };
   };
-}, Prettify<{
+}, Prettify$1<{
   id: string;
   createdAt: Date;
   updatedAt: Date;
@@ -259,16 +261,16 @@ declare const listSessions: <Option extends BetterAuthOptions>() => import("bett
   token: string;
   ipAddress?: string | null | undefined;
   userAgent?: string | null | undefined;
-} & import("@better-auth/core/db").InferDBFieldsFromOptions<Option["session"]> & import("@better-auth/core/db").InferDBFieldsFromPlugins<"session", Option["plugins"]> extends (infer T) ? { [K in keyof T]: T[K]; } : never>[]>;
+} & _$_better_auth_core_db0.InferDBFieldsFromOptions<Option["session"]> & _$_better_auth_core_db0.InferDBFieldsFromPlugins<"session", Option["plugins"]> extends infer T ? { [K in keyof T]: T[K] } : never>[]>;
 /**
  * revoke a single session
  */
-declare const revokeSession: import("better-call").StrictEndpoint<"/revoke-session", {
+declare const revokeSession: _$better_call0.StrictEndpoint<"/revoke-session", {
   method: "POST";
   body: z.ZodObject<{
     token: z.ZodString;
   }, z.core.$strip>;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -290,7 +292,7 @@ declare const revokeSession: import("better-call").StrictEndpoint<"/revoke-sessi
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
   requireHeaders: true;
   metadata: {
     openapi: {
@@ -338,9 +340,9 @@ declare const revokeSession: import("better-call").StrictEndpoint<"/revoke-sessi
 /**
  * revoke all user sessions
  */
-declare const revokeSessions: import("better-call").StrictEndpoint<"/revoke-sessions", {
+declare const revokeSessions: _$better_call0.StrictEndpoint<"/revoke-sessions", {
   method: "POST";
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -362,7 +364,7 @@ declare const revokeSessions: import("better-call").StrictEndpoint<"/revoke-sess
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
   requireHeaders: true;
   metadata: {
     openapi: {
@@ -391,10 +393,10 @@ declare const revokeSessions: import("better-call").StrictEndpoint<"/revoke-sess
 }, {
   status: boolean;
 }>;
-declare const revokeOtherSessions: import("better-call").StrictEndpoint<"/revoke-other-sessions", {
+declare const revokeOtherSessions: _$better_call0.StrictEndpoint<"/revoke-other-sessions", {
   method: "POST";
   requireHeaders: true;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
     session: {
       session: Record<string, any> & {
         id: string;
@@ -416,7 +418,7 @@ declare const revokeOtherSessions: import("better-call").StrictEndpoint<"/revoke
         image?: string | null | undefined;
       };
     };
-  }>)[];
+  }>>[];
   metadata: {
     openapi: {
       description: string;

package/dist/api/routes/session.mjs

@@ -295,9 +295,8 @@ const getSessionFromCtx = async (ctx, config) => {
 	if (session.headers) session.headers.forEach((value, key) => {
 		const lowerKey = key.toLowerCase();
 		if (lowerKey === "cache-control" || lowerKey === "pragma") return;
-		if (!ctx.context.responseHeaders) ctx.context.responseHeaders = new Headers({ [key]: value });
-		else if (lowerKey === "set-cookie") ctx.context.responseHeaders.append(key, value);
-		else ctx.context.responseHeaders.set(key, value);
+		if (lowerKey === "set-cookie") ctx.responseHeaders.append(key, value);
+		else ctx.responseHeaders.set(key, value);
 	});
 	ctx.context.session = session.response;
 	return session.response;

package/dist/api/routes/sign-in.d.mts

@@ -1,6 +1,8 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { User } from "@better-auth/core/db";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/api/routes/sign-in.d.ts
 declare const socialSignInBodySchema: z.ZodObject<{
   callbackURL: z.ZodOptional<z.ZodString>;
@@ -27,7 +29,7 @@ declare const socialSignInBodySchema: z.ZodObject<{
   loginHint: z.ZodOptional<z.ZodString>;
   additionalData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
 }, z.core.$strip>;
-declare const signInSocial: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-in/social", {
+declare const signInSocial: <O extends BetterAuthOptions>() => _$better_call0.StrictEndpoint<"/sign-in/social", {
   method: "POST";
   operationId: string;
   body: z.ZodObject<{
@@ -108,10 +110,10 @@ declare const signInSocial: <O extends BetterAuthOptions>() => import("better-ca
   url: undefined;
   user: User<O["user"], O["plugins"]>;
 }>;
-declare const signInEmail: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-in/email", {
+declare const signInEmail: <O extends BetterAuthOptions>() => _$better_call0.StrictEndpoint<"/sign-in/email", {
   method: "POST";
   operationId: string;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
   cloneRequest: true;
   body: z.ZodObject<{
     email: z.ZodString;

package/dist/api/routes/sign-out.d.mts

@@ -1,5 +1,7 @@
+import * as _$better_call0 from "better-call";
+
 //#region src/api/routes/sign-out.d.ts
-declare const signOut: import("better-call").StrictEndpoint<"/sign-out", {
+declare const signOut: _$better_call0.StrictEndpoint<"/sign-out", {
   method: "POST";
   operationId: string;
   requireHeaders: true;

package/dist/api/routes/sign-up.d.mts

@@ -1,12 +1,13 @@
 import { AdditionalUserFieldsInput, User } from "../../types/models.mjs";
-import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
+import * as _$better_call0 from "better-call";
 import * as z from "zod";
+
 //#region src/api/routes/sign-up.d.ts
-declare const signUpEmail: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-up/email", {
+declare const signUpEmail: <O extends BetterAuthOptions>() => _$better_call0.StrictEndpoint<"/sign-up/email", {
   method: "POST";
   operationId: string;
-  use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>)[];
+  use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
   body: z.ZodIntersection<z.ZodObject<{
     name: z.ZodString;
     email: z.ZodEmail;