better-auth 1.7.12 → 1.7.14

package/dist/plugins/multi-session/error-codes.d.mts

@@ -1,8 +1,5 @@
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/multi-session/error-codes.d.ts
-declare const MULTI_SESSION_ERROR_CODES: {
-  INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
+export declare const MULTI_SESSION_ERROR_CODES: {
+  INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
 };
-//#endregion
-export { MULTI_SESSION_ERROR_CODES };
+//#endregion

package/dist/plugins/multi-session/index.d.mts

@@ -1,9 +1,5 @@
 import { MULTI_SESSION_ERROR_CODES } from "./error-codes.mjs";
-import * as _$_better_auth_core0 from "@better-auth/core";
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/multi-session/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -12,7 +8,7 @@ declare module "@better-auth/core" {
     };
   }
 }
-interface MultiSessionConfig {
+export interface MultiSessionConfig {
   /**
    * The maximum number of sessions a user can have
    * at a time
@@ -20,7 +16,7 @@ interface MultiSessionConfig {
    */
   maximumSessions?: number | undefined;
 }
-declare const multiSession: (options?: MultiSessionConfig | undefined) => {
+export declare const multiSession: (options?: MultiSessionConfig | undefined) => {
   id: "multi-session";
   version: string;
   endpoints: {
@@ -39,7 +35,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-list-device-sessions)
      */
-    listDeviceSessions: _$better_call0.StrictEndpoint<"/multi-session/list-device-sessions", {
+    listDeviceSessions: import("better-call").StrictEndpoint<"/multi-session/list-device-sessions", {
       method: "GET";
       requireHeaders: true;
     }, {
@@ -78,7 +74,7 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-set-active)
      */
-    setActiveSession: _$better_call0.StrictEndpoint<"/multi-session/set-active", {
+    setActiveSession: import("better-call").StrictEndpoint<"/multi-session/set-active", {
       method: "POST";
       body: z.ZodObject<{
         sessionToken: z.ZodString;
@@ -142,13 +138,13 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/multi-session#api-method-multi-session-revoke)
      */
-    revokeDeviceSession: _$better_call0.StrictEndpoint<"/multi-session/revoke", {
+    revokeDeviceSession: import("better-call").StrictEndpoint<"/multi-session/revoke", {
       method: "POST";
       body: z.ZodObject<{
         sessionToken: z.ZodString;
       }, z.core.$strip>;
       requireHeaders: true;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<{
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -199,14 +195,14 @@ declare const multiSession: (options?: MultiSessionConfig | undefined) => {
   };
   hooks: {
     after: {
-      matcher: (context: _$_better_auth_core0.HookEndpointContext) => boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher: (context: import("@better-auth/core").HookEndpointContext) => boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
   options: MultiSessionConfig | undefined;
   $ERROR_CODES: {
-    INVALID_SESSION_TOKEN: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_SESSION_TOKEN">;
+    INVALID_SESSION_TOKEN: import("@better-auth/core/utils/error-codes").RawError<"INVALID_SESSION_TOKEN">;
   };
 };
 //#endregion
-export { MULTI_SESSION_ERROR_CODES as ERROR_CODES, MultiSessionConfig, multiSession };
+export { MULTI_SESSION_ERROR_CODES as ERROR_CODES };

package/dist/plugins/oauth-popup/client.d.mts

@@ -2,12 +2,10 @@ import { POPUP_TOKEN_STORAGE_KEY } from "./constants.mjs";
 import { OAUTH_POPUP_ERROR_CODES } from "./error-codes.mjs";
 import { oauthPopup } from "./index.mjs";
 import { BetterAuthClientOptions, ClientStore } from "@better-auth/core";
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
 import { BetterFetch, BetterFetchPlugin } from "@better-fetch/fetch";
-
 //#region src/plugins/oauth-popup/client.d.ts
 /** Inputs for `authClient.signIn.popup`; mirror the redirect sign-in. */
-interface SignInPopupOptions {
+export interface SignInPopupOptions {
   /** Built-in social provider id (e.g. `"google"`). */
   provider?: string;
   /** Generic OAuth provider id (registered via `genericOAuth`). */
@@ -23,7 +21,7 @@ interface SignInPopupOptions {
   /** How long (ms) to wait for the popup to complete. Default 5 minutes. */
   timeoutMs?: number;
 }
-interface SignInPopupResult {
+export interface SignInPopupResult {
   data: {
     success: boolean;
   } | null;
@@ -34,12 +32,12 @@ interface SignInPopupResult {
   } | null;
 }
 /** Reads the stored popup token (browser-only; null otherwise). */
-declare function getStoredPopupToken(): string | null;
+export declare function getStoredPopupToken(): string | null;
 /**
  * Attaches the popup token as a bearer header when embedded (where the cookie is
  * partitioned), and clears it once the session ends so it can't be reused.
  */
-declare const popupBearerFetchPlugin: BetterFetchPlugin;
+export declare const popupBearerFetchPlugin: BetterFetchPlugin;
 interface SignInPopupDeps {
   $fetch: BetterFetch;
   options?: BetterAuthClientOptions | undefined;
@@ -52,24 +50,20 @@ interface SignInPopupDeps {
  * page to post the session token back, stores it for the bearer fetch plugin,
  * and refreshes the reactive session.
  */
-declare function createSignInPopup({
-  $fetch,
-  options,
-  notifySessionSignal
-}: SignInPopupDeps): (opts: SignInPopupOptions) => Promise<SignInPopupResult>;
+export declare function createSignInPopup({ $fetch, options, notifySessionSignal }: SignInPopupDeps): (opts: SignInPopupOptions) => Promise<SignInPopupResult>;
 /**
  * Client plugin for popup OAuth sign-in. Adds `authClient.signIn.popup`. Pair
  * with the server `oauthPopup` and `bearer` plugins.
  */
-declare const oauthPopupClient: () => {
+export declare const oauthPopupClient: () => {
   id: "oauth-popup";
   version: string;
   $InferServerPlugin: ReturnType<typeof oauthPopup>;
   $ERROR_CODES: {
-    POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
-    POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
-    POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
-    POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
+    POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
+    POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
+    POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
+    POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
   };
   fetchPlugins: BetterFetchPlugin[];
   getActions: ($fetch: BetterFetch, $store: ClientStore, options: BetterAuthClientOptions | undefined) => {
@@ -79,4 +73,4 @@ declare const oauthPopupClient: () => {
   };
 };
 //#endregion
-export { SignInPopupOptions, SignInPopupResult, createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };
+export { OAUTH_POPUP_ERROR_CODES, POPUP_TOKEN_STORAGE_KEY };

package/dist/plugins/oauth-popup/client.mjs

@@ -7,7 +7,7 @@ const POPUP_NAME = "better-auth-oauth";
 const POPUP_WIDTH = 500;
 const POPUP_HEIGHT = 600;
 const CLOSED_POLL_MS = 500;
-const DEFAULT_TIMEOUT_MS = 300 * 1e3;
+const DEFAULT_TIMEOUT_MS = 3e5;
 /** True when embedded cross-origin, where the cookie may be partitioned. */
 function isEmbedded() {
 	if (typeof window === "undefined" || window.self === window.top) return false;
@@ -74,10 +74,12 @@ function popupError(code, status) {
 	};
 }
 function centeredFeatures() {
-	return `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${window.screenX + (window.outerWidth - POPUP_WIDTH) / 2},top=${window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2},menubar=no,toolbar=no`;
+	const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;
+	const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;
+	return `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},menubar=no,toolbar=no`;
 }
 function randomNonce() {
-	const bytes = new Uint8Array(16);
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
 	crypto.getRandomValues(bytes);
 	return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
@@ -200,4 +202,4 @@ const oauthPopupClient = () => {
 	};
 };
 //#endregion
-export { createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };
+export { OAUTH_POPUP_ERROR_CODES, POPUP_TOKEN_STORAGE_KEY, createSignInPopup, getStoredPopupToken, oauthPopupClient, popupBearerFetchPlugin };

package/dist/plugins/oauth-popup/constants.d.mts

@@ -1,11 +1,10 @@
 //#region src/plugins/oauth-popup/constants.d.ts
 /** postMessage `type` the completion page posts to its opener. */
-declare const OAUTH_POPUP_MESSAGE_TYPE = "better-auth:oauth-popup";
+export declare const OAUTH_POPUP_MESSAGE_TYPE = "better-auth:oauth-popup";
 /** DOM id of the inert JSON data block the completion page reads. */
-declare const OAUTH_POPUP_DATA_ELEMENT_ID = "better-auth-oauth-popup";
+export declare const OAUTH_POPUP_DATA_ELEMENT_ID = "better-auth-oauth-popup";
 /** Signed cookie carrying the opener origin/nonce from sign-in to callback. */
-declare const POPUP_MARKER_COOKIE = "oauth_popup";
+export declare const POPUP_MARKER_COOKIE = "oauth_popup";
 /** localStorage key the popup session token is persisted under. */
-declare const POPUP_TOKEN_STORAGE_KEY = "better-auth.popup_token";
-//#endregion
-export { OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_MESSAGE_TYPE, POPUP_MARKER_COOKIE, POPUP_TOKEN_STORAGE_KEY };
+export declare const POPUP_TOKEN_STORAGE_KEY = "better-auth.popup_token";
+//#endregion

package/dist/plugins/oauth-popup/error-codes.d.mts

@@ -1,11 +1,8 @@
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-
 //#region src/plugins/oauth-popup/error-codes.d.ts
-declare const OAUTH_POPUP_ERROR_CODES: {
-  POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
-  POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
-  POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
-  POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
+export declare const OAUTH_POPUP_ERROR_CODES: {
+  POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
+  POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
+  POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
+  POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
 };
-//#endregion
-export { OAUTH_POPUP_ERROR_CODES };
+//#endregion

package/dist/plugins/oauth-popup/index.d.mts

@@ -1,11 +1,7 @@
 import { OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_MESSAGE_TYPE, POPUP_MARKER_COOKIE } from "./constants.mjs";
 import { OAUTH_POPUP_ERROR_CODES } from "./error-codes.mjs";
 import { OAuthPopupData, OAuthPopupMessage } from "./types.mjs";
-import * as _$_better_auth_core0 from "@better-auth/core";
-import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/oauth-popup/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -17,28 +13,28 @@ declare module "@better-auth/core" {
 /**
  * The completion-page script.
  */
-declare const OAUTH_POPUP_COMPLETE_SCRIPT: string;
+export declare const OAUTH_POPUP_COMPLETE_SCRIPT: string;
 /**
  * sha256 of `OAUTH_POPUP_COMPLETE_SCRIPT`, pinned in the completion CSP.
  */
-declare const OAUTH_POPUP_SCRIPT_CSP_HASH = "sha256-tIo2K8VBC9SnhvdZ+9GsGkQoZm+jm/JcxL+d+i8b8KQ=";
+export declare const OAUTH_POPUP_SCRIPT_CSP_HASH = "sha256-tIo2K8VBC9SnhvdZ+9GsGkQoZm+jm/JcxL+d+i8b8KQ=";
 /**
  * Server plugin for popup-based OAuth. `signIn.popup` navigates the popup to
  * `/oauth-popup/start`; on the OAuth callback this plugin swaps the redirect for
  * a page that posts the session token (or error) back to the opener. Pair with
  * the `bearer` plugin and `oauthPopupClient`.
  */
-declare const oauthPopup: () => {
+export declare const oauthPopup: () => {
   id: "oauth-popup";
   version: string;
   $ERROR_CODES: {
-    POPUP_SIGN_IN_FAILED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_SIGN_IN_FAILED">;
-    POPUP_BLOCKED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_BLOCKED">;
-    POPUP_CLOSED: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_CLOSED">;
-    POPUP_TIMEOUT: _$_better_auth_core_utils_error_codes0.RawError<"POPUP_TIMEOUT">;
+    POPUP_SIGN_IN_FAILED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_SIGN_IN_FAILED">;
+    POPUP_BLOCKED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_BLOCKED">;
+    POPUP_CLOSED: import("@better-auth/core/utils/error-codes").RawError<"POPUP_CLOSED">;
+    POPUP_TIMEOUT: import("@better-auth/core/utils/error-codes").RawError<"POPUP_TIMEOUT">;
   };
   endpoints: {
-    oauthPopupStart: _$better_call0.StrictEndpoint<"/oauth-popup/start", {
+    oauthPopupStart: import("better-call").StrictEndpoint<"/oauth-popup/start", {
       method: "GET";
       query: z.ZodObject<{
         provider: z.ZodString;
@@ -58,10 +54,10 @@ declare const oauthPopup: () => {
   };
   hooks: {
     after: {
-      matcher(context: _$_better_auth_core0.HookEndpointContext): boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
 };
 //#endregion
-export { OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_SCRIPT_CSP_HASH, oauthPopup };
+export { OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_ERROR_CODES, OAUTH_POPUP_MESSAGE_TYPE, type OAuthPopupData, type OAuthPopupMessage, POPUP_MARKER_COOKIE };

package/dist/plugins/oauth-popup/index.mjs

@@ -65,15 +65,16 @@ function renderCompletion(c, popupOrigin, message) {
 		warnedMissingBearer = true;
 		c.context.logger.warn("OAuth popup hands the session token back via postMessage, but the `bearer` plugin is not registered, so an embedded (cross-site iframe) app cannot authenticate with it. Add bearer() to your auth `plugins`.");
 	}
+	const data = {
+		type: OAUTH_POPUP_MESSAGE_TYPE,
+		targetOrigin: popupOrigin,
+		...message
+	};
 	const html = `<!doctype html>
 <html>
 <head><meta charset="utf-8"><title>Completing sign-in</title></head>
 <body>
-<script type="application/json" id="${OAUTH_POPUP_DATA_ELEMENT_ID}">${inlineJSON({
-		type: OAUTH_POPUP_MESSAGE_TYPE,
-		targetOrigin: popupOrigin,
-		...message
-	})}<\/script>
+<script type="application/json" id="${OAUTH_POPUP_DATA_ELEMENT_ID}">${inlineJSON(data)}<\/script>
 <script>${OAUTH_POPUP_COMPLETE_SCRIPT}<\/script>
 </body>
 </html>`;
@@ -143,7 +144,7 @@ const oauthPopupStart = createAuthEndpoint("/oauth-popup/start", {
 			errorURL: c.query.errorCallbackURL,
 			newUserURL: c.query.newUserCallbackURL,
 			requestSignUp: c.query.requestSignUp === "true" ? true : void 0,
-			expiresAt: Date.now() + 600 * 1e3
+			expiresAt: Date.now() + 6e5
 		};
 		await setOAuthState(stateData);
 		const { state } = await generateGenericState(c, stateData);
@@ -229,4 +230,4 @@ const oauthPopup = () => {
 	};
 };
 //#endregion
-export { OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_SCRIPT_CSP_HASH, oauthPopup };
+export { OAUTH_POPUP_COMPLETE_SCRIPT, OAUTH_POPUP_DATA_ELEMENT_ID, OAUTH_POPUP_ERROR_CODES, OAUTH_POPUP_MESSAGE_TYPE, OAUTH_POPUP_SCRIPT_CSP_HASH, POPUP_MARKER_COOKIE, oauthPopup };

package/dist/plugins/oauth-popup/types.d.mts

@@ -1,8 +1,7 @@
 import { OAUTH_POPUP_MESSAGE_TYPE } from "./constants.mjs";
-
 //#region src/plugins/oauth-popup/types.d.ts
 /** OAuth error relayed to the opener when the flow fails. */
-interface OAuthPopupError {
+export interface OAuthPopupError {
   code: string;
   description?: string;
 }
@@ -10,7 +9,7 @@ interface OAuthPopupError {
  * Message the completion page posts to its opener — success carries the token,
  * failure carries the error.
  */
-interface OAuthPopupMessage {
+export interface OAuthPopupMessage {
   type: typeof OAUTH_POPUP_MESSAGE_TYPE;
   /** Echoes the request nonce so the opener can correlate the handoff. */
   nonce: string;
@@ -22,9 +21,8 @@ interface OAuthPopupMessage {
   error?: OAuthPopupError;
 }
 /** Payload embedded in the completion page's data block. */
-interface OAuthPopupData extends OAuthPopupMessage {
+export interface OAuthPopupData extends OAuthPopupMessage {
   /** Exact origin the message is posted to (the trusted popup opener). */
   targetOrigin: string;
 }
-//#endregion
-export { OAuthPopupData, OAuthPopupMessage };
+//#endregion

package/dist/plugins/oauth-proxy/index.d.mts

@@ -1,8 +1,5 @@
-import * as _$_better_auth_core0 from "@better-auth/core";
 import { SecretConfig } from "@better-auth/core";
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/oauth-proxy/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -11,7 +8,7 @@ declare module "@better-auth/core" {
     };
   }
 }
-interface OAuthProxyOptions {
+export interface OAuthProxyOptions {
   /**
    * The current URL of the application.
    * The plugin will attempt to infer the current URL from your environment
@@ -52,7 +49,7 @@ interface OAuthProxyOptions {
    */
   secret?: string | SecretConfig | undefined;
 }
-declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
+export declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
   id: "oauth-proxy";
   version: string;
   options: NoInfer<O>;
@@ -61,14 +58,14 @@ declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
      * @deprecated OAuth proxy callbacks now use `/callback/:id/oauth-proxy`.
      * This endpoint will be removed in the next minor release.
      */
-    oAuthProxy: _$better_call0.StrictEndpoint<"/oauth-proxy-callback", {
+    oAuthProxy: import("better-call").StrictEndpoint<"/oauth-proxy-callback", {
       method: "GET";
       operationId: string;
       query: z.ZodObject<{
         callbackURL: z.ZodString;
         profile: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
       metadata: {
         openapi: {
           operationId: string;
@@ -101,14 +98,14 @@ declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
         };
       };
     }, never>;
-    oAuthProxyCompletion: _$better_call0.StrictEndpoint<"/callback/:id/oauth-proxy", {
+    oAuthProxyCompletion: import("better-call").StrictEndpoint<"/callback/:id/oauth-proxy", {
       method: "GET";
       operationId: string;
       query: z.ZodObject<{
         callbackURL: z.ZodString;
         profile: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>;
-      use: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>[];
+      use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>[];
       metadata: {
         scope: "http";
       };
@@ -116,14 +113,13 @@ declare const oAuthProxy: <O extends OAuthProxyOptions>(opts?: O) => {
   };
   hooks: {
     before: {
-      matcher(context: _$_better_auth_core0.HookEndpointContext): boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
     after: {
-      matcher(context: _$_better_auth_core0.HookEndpointContext): boolean;
-      handler: _$better_call0.Middleware<_$better_call0.MiddlewareOptions, (inputContext: _$better_call0.MiddlewareInputContext<_$better_call0.MiddlewareOptions>) => Promise<void>>;
+      matcher(context: import("@better-auth/core").HookEndpointContext): boolean;
+      handler: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>>;
     }[];
   };
 };
-//#endregion
-export { OAuthProxyOptions, oAuthProxy };
+//#endregion

package/dist/plugins/oauth-proxy/index.mjs

@@ -14,7 +14,7 @@ import { PACKAGE_VERSION } from "../../version.mjs";
 import { parseJSON } from "../../client/parser.mjs";
 import { checkSkipProxy, resolveCurrentURL, stripTrailingSlash } from "./utils.mjs";
 import { accountSchema, userSchema } from "@better-auth/core/db";
-import { defu } from "defu";
+import { defu as defu$1 } from "defu";
 import { createAuthEndpoint, createAuthMiddleware } from "@better-auth/core/api";
 import * as z from "zod";
 //#region src/plugins/oauth-proxy/index.ts
@@ -220,15 +220,16 @@ const oAuthProxy = (opts) => {
 					return context.path === "/callback/:id";
 				},
 				handler: createAuthMiddleware(async (ctx) => {
-					const callbackParams = defu(ctx.query, ctx.body);
+					const callbackParams = defu$1(ctx.query, ctx.body);
 					const state = callbackParams.state;
 					if (!state || typeof state !== "string") return;
 					let statePackage;
 					try {
-						statePackage = parseJSON(await symmetricDecrypt({
+						const decryptedPackage = await symmetricDecrypt({
 							key: getEncryptionKey(ctx, "oauth-proxy-package"),
 							data: state
-						}));
+						});
+						statePackage = parseJSON(decryptedPackage);
 					} catch {
 						ctx.context.logger.debug("OAuth proxy: could not decrypt state package, falling back to regular callback");
 						return;
@@ -245,10 +246,11 @@ const oAuthProxy = (opts) => {
 					const { code, error, user: userData, iss, device_id: deviceId } = query.data;
 					let stateData;
 					try {
-						stateData = parseJSON(await symmetricDecrypt({
+						const decryptedState = await symmetricDecrypt({
 							key: getEncryptionKey(ctx, "oauth-proxy-state"),
 							data: statePackage.stateCookie
-						}));
+						});
+						stateData = parseJSON(decryptedState);
 					} catch (e) {
 						ctx.context.logger.error("Failed to decrypt OAuth proxy state cookie:", e);
 						return;
@@ -377,7 +379,8 @@ const oAuthProxy = (opts) => {
 				handler: createAuthMiddleware(async (ctx) => {
 					const location = ctx.context.responseHeaders?.get("location");
 					if (!location?.includes("/oauth-proxy?callbackURL") && !location?.includes("/oauth-proxy-callback?callbackURL") || !location.startsWith("http")) return;
-					const productionOrigin = getOrigin(opts?.productionURL || (typeof ctx.context.options.baseURL === "string" ? ctx.context.options.baseURL : void 0) || ctx.context.baseURL);
+					const productionURL = opts?.productionURL || (typeof ctx.context.options.baseURL === "string" ? ctx.context.options.baseURL : void 0) || ctx.context.baseURL;
+					const productionOrigin = getOrigin(productionURL);
 					const locationURL = new URL(location);
 					if (locationURL.origin === productionOrigin) {
 						const newLocation = locationURL.searchParams.get("callbackURL");

package/dist/plugins/one-tap/client.d.mts

@@ -1,14 +1,12 @@
 import { BetterAuthClientOptions, ClientFetchOption, ClientStore } from "@better-auth/core";
-import * as _$_better_fetch_fetch0 from "@better-fetch/fetch";
 import { BetterFetch } from "@better-fetch/fetch";
-
 //#region src/plugins/one-tap/client.d.ts
 declare global {
   interface Window {
     googleScriptInitialized?: boolean | undefined;
   }
 }
-interface GsiButtonConfiguration {
+export interface GsiButtonConfiguration {
   /**
    * The button type: icon, or standard button.
    */
@@ -69,7 +67,7 @@ interface GsiButtonConfiguration {
    */
   state?: string;
 }
-interface GoogleOneTapOptions {
+export interface GoogleOneTapOptions {
   /**
    * Google client ID
    */
@@ -129,7 +127,7 @@ interface GoogleOneTapOptions {
     fedCM?: boolean | undefined;
   } | undefined;
 }
-interface GoogleOneTapActionOptions extends Omit<GoogleOneTapOptions, "clientId" | "promptOptions"> {
+export interface GoogleOneTapActionOptions extends Omit<GoogleOneTapOptions, "clientId" | "promptOptions"> {
   fetchOptions?: ClientFetchOption | undefined;
   /**
    * Callback URL.
@@ -157,14 +155,14 @@ interface GoogleOneTapActionOptions extends Omit<GoogleOneTapOptions, "clientId"
     config?: GsiButtonConfiguration | undefined;
   } | undefined;
 }
-declare const oneTapClient: (options: GoogleOneTapOptions) => {
+export declare const oneTapClient: (options: GoogleOneTapOptions) => {
   id: "one-tap";
   version: string;
   fetchPlugins: {
     id: string;
     name: string;
     hooks: {
-      onResponse(ctx: _$_better_fetch_fetch0.ResponseContext): Promise<void>;
+      onResponse(ctx: import("@better-fetch/fetch").ResponseContext): Promise<void>;
     };
   }[];
   getActions: ($fetch: BetterFetch, _$store: ClientStore, _options: BetterAuthClientOptions | undefined) => {
@@ -172,5 +170,4 @@ declare const oneTapClient: (options: GoogleOneTapOptions) => {
   };
   getAtoms($fetch: BetterFetch): {};
 };
-//#endregion
-export { GoogleOneTapActionOptions, GoogleOneTapOptions, GsiButtonConfiguration, oneTapClient };
+//#endregion

package/dist/plugins/one-tap/index.d.mts

@@ -1,6 +1,4 @@
-import * as _$better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/one-tap/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -9,7 +7,7 @@ declare module "@better-auth/core" {
     };
   }
 }
-interface OneTapOptions {
+export interface OneTapOptions {
   /**
    * Disable the signup flow
    *
@@ -24,11 +22,11 @@ interface OneTapOptions {
    */
   clientId?: string | undefined;
 }
-declare const oneTap: (options?: OneTapOptions | undefined) => {
+export declare const oneTap: (options?: OneTapOptions | undefined) => {
   id: "one-tap";
   version: string;
   endpoints: {
-    oneTapCallback: _$better_call0.StrictEndpoint<"/one-tap/callback", {
+    oneTapCallback: import("better-call").StrictEndpoint<"/one-tap/callback", {
       method: "POST";
       body: z.ZodObject<{
         idToken: z.ZodString;
@@ -78,5 +76,4 @@ declare const oneTap: (options?: OneTapOptions | undefined) => {
   };
   options: OneTapOptions | undefined;
 };
-//#endregion
-export { OneTapOptions, oneTap };
+//#endregion

package/dist/plugins/one-time-token/client.d.mts

@@ -1,10 +1,9 @@
 import { OneTimeTokenOptions, oneTimeToken } from "./index.mjs";
-
 //#region src/plugins/one-time-token/client.d.ts
-declare const oneTimeTokenClient: () => {
+export declare const oneTimeTokenClient: () => {
   id: "one-time-token";
   version: string;
   $InferServerPlugin: ReturnType<typeof oneTimeToken>;
 };
 //#endregion
-export { oneTimeTokenClient };
+export type { OneTimeTokenOptions };