better-auth 1.7.20 → 1.7.22

package/dist/api/routes/sign-out.d.mts

@@ -1,5 +1,4 @@
 import * as z from "zod";
-//#region src/api/routes/sign-out.d.ts
 export declare const signOut: import("better-call").StrictEndpoint<"/sign-out", {
   method: "POST";
   body: z.ZodOptional<z.ZodObject<{
@@ -44,5 +43,4 @@ export declare const signOut: import("better-call").StrictEndpoint<"/sign-out",
   success: boolean;
   url: string | undefined;
   redirect: boolean | undefined;
-}>;
-//#endregion
+}>;

package/dist/api/routes/sign-out.mjs

@@ -1,7 +1,7 @@
 import { deleteSessionCookie } from "../../cookies/index.mjs";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/sign-out.ts
+// src/api/routes/sign-out.ts
 const signOutBodySchema = z.object({
 	callbackURL: z.string().meta({ description: "The URL to redirect to after provider logout" }).optional(),
 	disableRedirect: z.boolean().meta({ description: "Return the provider logout URL without redirecting" }).optional(),
@@ -92,5 +92,4 @@ const signOut = createAuthEndpoint("/sign-out", {
 	}
 	return ctx.json(signOutResponse());
 });
-//#endregion
 export { signOut };

package/dist/api/routes/sign-up.d.mts

@@ -2,7 +2,6 @@ import { AdditionalUserFieldsInput, User } from "../../types/models.mjs";
 import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import * as z from "zod";
-//#region src/api/routes/sign-up.d.ts
 export declare const signUpEmail: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-up/email", {
   method: "POST";
   operationId: string;
@@ -153,5 +152,4 @@ export declare const signUpEmail: <O extends BetterAuthOptions>() => import("bet
 } | {
   token: string;
   user: User<O["user"], O["plugins"]>;
-}>;
-//#endregion
+}>;

package/dist/api/routes/sign-up.mjs

@@ -1,17 +1,17 @@
-import { isAPIError } from "../../utils/is-api-error.mjs";
-import { formCsrfMiddleware } from "../middlewares/origin-check.mjs";
-import { buildSyntheticUserOutput, parseUserInput, parseUserOutput } from "../../db/schema.mjs";
 import { setSessionCookie } from "../../cookies/index.mjs";
+import { buildSyntheticUserOutput, parseUserInput, parseUserOutput } from "../../db/schema.mjs";
+import { isAPIError } from "../../utils/is-api-error.mjs";
+import { assertPasswordNotTooLong, assertPasswordNotTooShort } from "../../utils/password.mjs";
 import { safeCloneRequest } from "../../utils/request.mjs";
+import { formCsrfMiddleware } from "../middlewares/origin-check.mjs";
 import { createEmailVerificationToken } from "./email-verification.mjs";
-import { assertPasswordNotTooLong, assertPasswordNotTooShort } from "../../utils/password.mjs";
-import { runWithTransaction } from "@better-auth/core/context";
+import { queueAfterTransactionHook, runWithTransaction } from "@better-auth/core/context";
 import { isDevelopment } from "@better-auth/core/env";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { generateId } from "@better-auth/core/utils/id";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/sign-up.ts
+// src/api/routes/sign-up.ts
 const signUpEmailBodySchema = z.object({
 	name: z.string(),
 	email: z.email(),
@@ -198,7 +198,13 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 				* between existing and non-existing emails.
 				*/
 				await ctx.context.password.hash(password);
-				if (ctx.context.options.emailAndPassword?.onExistingUserSignUp) await ctx.context.runInBackgroundOrAwait(ctx.context.options.emailAndPassword.onExistingUserSignUp({ user: dbUser.user }, safeCloneRequest(ctx.request)));
+				const onExistingUserSignUp = ctx.context.options.emailAndPassword?.onExistingUserSignUp;
+				if (onExistingUserSignUp) {
+					const request = safeCloneRequest(ctx.request);
+					await queueAfterTransactionHook(async () => {
+						await ctx.context.runInBackgroundOrAwait(onExistingUserSignUp({ user: dbUser.user }, request));
+					}, { onError: (error) => ctx.context.logger.error("Failed to run onExistingUserSignUp after sign-up", error) });
+				}
 				return buildGenericDuplicateResponse();
 			}
 			throw APIError.from("UNPROCESSABLE_ENTITY", BASE_ERROR_CODES.USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL);
@@ -238,15 +244,20 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 			accountId: createdUser.id,
 			password: hash
 		});
-		if (ctx.context.options.emailVerification?.sendOnSignUp ?? ctx.context.options.emailAndPassword.requireEmailVerification) {
-			const token = await createEmailVerificationToken(ctx.context.secret, createdUser.email, void 0, ctx.context.options.emailVerification?.expiresIn, { userId: createdUser.id });
+		const shouldSendVerificationEmail = ctx.context.options.emailVerification?.sendOnSignUp ?? ctx.context.options.emailAndPassword.requireEmailVerification;
+		const sendVerificationEmail = ctx.context.options.emailVerification?.sendVerificationEmail;
+		if (shouldSendVerificationEmail && sendVerificationEmail) {
 			const callbackURL = body.callbackURL ? encodeURIComponent(body.callbackURL) : encodeURIComponent("/");
-			const url = `${ctx.context.baseURL}/verify-email?token=${token}&callbackURL=${callbackURL}`;
-			if (ctx.context.options.emailVerification?.sendVerificationEmail) await ctx.context.runInBackgroundOrAwait(ctx.context.options.emailVerification.sendVerificationEmail({
-				user: createdUser,
-				url,
-				token
-			}, safeCloneRequest(ctx.request)));
+			const request = safeCloneRequest(ctx.request);
+			await queueAfterTransactionHook(async () => {
+				const token = await createEmailVerificationToken(ctx.context.secret, createdUser.email, void 0, ctx.context.options.emailVerification?.expiresIn, { userId: createdUser.id });
+				const url = `${ctx.context.baseURL}/verify-email?token=${token}&callbackURL=${callbackURL}`;
+				await ctx.context.runInBackgroundOrAwait(sendVerificationEmail({
+					user: createdUser,
+					url,
+					token
+				}, request));
+			}, { onError: (error) => ctx.context.logger.error("Failed to send the sign-up verification email", error) });
 		}
 		if (shouldSkipAutoSignIn) return ctx.json({
 			token: null,
@@ -264,5 +275,4 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 		});
 	});
 });
-//#endregion
 export { signUpEmail };

package/dist/api/routes/update-session.d.mts

@@ -2,7 +2,6 @@ import { AdditionalSessionFieldsInput } from "../../types/models.mjs";
 import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import * as z from "zod";
-//#region src/api/routes/update-session.d.ts
 export declare const updateSession: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/update-session", {
   method: "POST";
   operationId: string;
@@ -68,5 +67,4 @@ export declare const updateSession: <O extends BetterAuthOptions>() => import("b
     ipAddress?: string | null | undefined;
     userAgent?: string | null | undefined;
   };
-}>;
-//#endregion
+}>;

package/dist/api/routes/update-session.mjs

@@ -1,10 +1,10 @@
-import { parseSessionInput, parseSessionOutput } from "../../db/schema.mjs";
 import { deleteSessionCookie, setSessionCookie } from "../../cookies/index.mjs";
+import { parseSessionInput, parseSessionOutput } from "../../db/schema.mjs";
 import { isStateful, sessionMiddleware } from "./session.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/update-session.ts
+// src/api/routes/update-session.ts
 const updateSessionBodySchema = z.record(z.string().meta({ description: "Field name must be a string" }), z.any());
 const updateSession = () => createAuthEndpoint("/update-session", {
 	method: "POST",
@@ -53,5 +53,4 @@ const updateSession = () => createAuthEndpoint("/update-session", {
 	});
 	return ctx.json({ session: parseSessionOutput(ctx.context.options, newSession) });
 });
-//#endregion
 export { updateSession };

package/dist/api/routes/update-user.d.mts

@@ -2,7 +2,6 @@ import { AdditionalUserFieldsInput } from "../../types/models.mjs";
 import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import * as z from "zod";
-//#region src/api/routes/update-user.d.ts
 export declare const updateUser: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/update-user", {
   method: "POST";
   operationId: string;
@@ -422,5 +421,4 @@ export declare const changeEmail: import("better-call").StrictEndpoint<"/change-
   };
 }, {
   status: boolean;
-}>;
-//#endregion
+}>;

package/dist/api/routes/update-user.mjs

@@ -1,15 +1,15 @@
-import { originCheck } from "../middlewares/origin-check.mjs";
-import { parseUserInput, parseUserOutput } from "../../db/schema.mjs";
-import { generateRandomString } from "../../crypto/random.mjs";
 import { deleteSessionCookie, setSessionCookie } from "../../cookies/index.mjs";
-import { getSessionFromCtx, isStateful, sensitiveSessionMiddleware, sessionMiddleware } from "./session.mjs";
-import { createEmailVerificationToken } from "./email-verification.mjs";
+import { generateRandomString } from "../../crypto/random.mjs";
+import { parseUserInput, parseUserOutput } from "../../db/schema.mjs";
 import { assertPasswordNotTooLong, assertPasswordNotTooShort } from "../../utils/password.mjs";
+import { originCheck } from "../middlewares/origin-check.mjs";
+import { createEmailVerificationToken } from "./email-verification.mjs";
+import { getSessionFromCtx, isStateful, sensitiveSessionMiddleware, sessionMiddleware } from "./session.mjs";
 import { runWithTransaction } from "@better-auth/core/context";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/update-user.ts
+// src/api/routes/update-user.ts
 const updateUserBodySchema = z.record(z.string().meta({ description: "Field name must be a string" }), z.any());
 const updateUser = () => createAuthEndpoint("/update-user", {
 	method: "POST",
@@ -221,6 +221,28 @@ newPassword: z.string().meta({ description: "The new password to set is required
 	}
 	throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.PASSWORD_ALREADY_SET);
 });
+/**
+* Deletes the signed-in user and expires the session cookies on the
+* caller's response.
+*/
+async function deleteCurrentUser(ctx, user) {
+	const beforeDelete = ctx.context.options.user?.deleteUser?.beforeDelete;
+	if (beforeDelete) await beforeDelete(user, ctx.request);
+	await ctx.context.internalAdapter.deleteUser(user.id);
+	await ctx.context.internalAdapter.deleteUserSessions(user.id);
+	deleteSessionCookie(ctx);
+	const afterDelete = ctx.context.options.user?.deleteUser?.afterDelete;
+	if (afterDelete) await afterDelete(user, ctx.request);
+}
+/**
+* Consumes a delete-account token issued to `user` and deletes the user.
+* Runs on the caller's context so the expired cookies reach its response.
+*/
+async function deleteUserWithToken(ctx, user, token) {
+	const verification = await ctx.context.internalAdapter.consumeVerificationValue(`delete-account-${token}`);
+	if (!verification || verification.value !== user.id) throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.INVALID_TOKEN);
+	await deleteCurrentUser(ctx, user);
+}
 const deleteUser = createAuthEndpoint("/delete-user", {
 	method: "POST",
 	use: [sensitiveSessionMiddleware],
@@ -295,10 +317,7 @@ const deleteUser = createAuthEndpoint("/delete-user", {
 		})) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.INVALID_PASSWORD);
 	}
 	if (ctx.body.token) {
-		await deleteUserCallback({
-			...ctx,
-			query: { token: ctx.body.token }
-		});
+		await deleteUserWithToken(ctx, session.user, ctx.body.token);
 		return ctx.json({
 			success: true,
 			message: "User deleted"
@@ -327,13 +346,7 @@ const deleteUser = createAuthEndpoint("/delete-user", {
 		const freshAge = ctx.context.sessionConfig.freshAge * 1e3;
 		if (Date.now() - createdAt >= freshAge) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.SESSION_EXPIRED);
 	}
-	const beforeDelete = ctx.context.options.user.deleteUser?.beforeDelete;
-	if (beforeDelete) await beforeDelete(session.user, ctx.request);
-	await ctx.context.internalAdapter.deleteUser(session.user.id);
-	await ctx.context.internalAdapter.deleteUserSessions(session.user.id);
-	deleteSessionCookie(ctx);
-	const afterDelete = ctx.context.options.user.deleteUser?.afterDelete;
-	if (afterDelete) await afterDelete(session.user, ctx.request);
+	await deleteCurrentUser(ctx, session.user);
 	return ctx.json({
 		success: true,
 		message: "User deleted"
@@ -377,16 +390,7 @@ const deleteUserCallback = createAuthEndpoint("/delete-user/callback", {
 	}
 	const session = await getSessionFromCtx(ctx, { disableCookieCache: isStateful(ctx) });
 	if (!session) throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.FAILED_TO_GET_USER_INFO);
-	const token = await ctx.context.internalAdapter.consumeVerificationValue(`delete-account-${ctx.query.token}`);
-	if (!token || token.value !== session.user.id) throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.INVALID_TOKEN);
-	const beforeDelete = ctx.context.options.user.deleteUser?.beforeDelete;
-	if (beforeDelete) await beforeDelete(session.user, ctx.request);
-	await ctx.context.internalAdapter.deleteUser(session.user.id);
-	await ctx.context.internalAdapter.deleteUserSessions(session.user.id);
-	await ctx.context.internalAdapter.deleteAccounts(session.user.id);
-	deleteSessionCookie(ctx);
-	const afterDelete = ctx.context.options.user.deleteUser?.afterDelete;
-	if (afterDelete) await afterDelete(session.user, ctx.request);
+	await deleteUserWithToken(ctx, session.user, ctx.query.token);
 	if (ctx.query.callbackURL) throw ctx.redirect(ctx.query.callbackURL || "/");
 	return ctx.json({
 		success: true,
@@ -516,5 +520,4 @@ const changeEmail = createAuthEndpoint("/change-email", {
 	}, ctx.request));
 	return ctx.json({ status: true });
 });
-//#endregion
 export { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser };

package/dist/api/state/oauth.d.mts

@@ -1,4 +1,3 @@
-//#region src/api/state/oauth.d.ts
 type OAuthState = {
   callbackURL: string;
   codeVerifier: string;
@@ -46,5 +45,4 @@ declare const getOAuthState: <T extends Record<string, unknown> = Record<string,
  * stored as `unknown`, so narrow their shape when reading them back.
  */
 declare const addOAuthServerContext: (values: Record<string, unknown>) => Promise<void>;
-//#endregion
 export { addOAuthServerContext, getOAuthState };

package/dist/api/state/oauth.mjs

@@ -1,5 +1,5 @@
 import { defineRequestState } from "@better-auth/core/context";
-//#region src/api/state/oauth.ts
+// src/api/state/oauth.ts
 const { get: getRawOAuthState, set: setOAuthState } = defineRequestState(() => null);
 /**
 * Reads the OAuth state for the current request. During a callback it holds the
@@ -35,5 +35,4 @@ const addOAuthServerContext = async (values) => {
 		...values
 	});
 };
-//#endregion
 export { addOAuthServerContext, getOAuthServerContext, getOAuthState, setOAuthState };

package/dist/api/state/session-source.d.mts

@@ -1,4 +1,3 @@
-//#region src/api/state/session-source.d.ts
 /**
  * Marks the request session with `token` as built without a session-store
  * row. Checks that re-read the store to catch a concurrent revocation skip
@@ -6,5 +5,4 @@
  *
  * @internal Shared by Better Auth packages; not a supported public API.
  */
-export declare function markSessionOutsideStore(token: string): Promise<void>;
-//#endregion
+export declare function markSessionOutsideStore(token: string): Promise<void>;

package/dist/api/state/session-source.mjs

@@ -1,5 +1,5 @@
 import { defineRequestState } from "@better-auth/core/context";
-//#region src/api/state/session-source.ts
+// src/api/state/session-source.ts
 /**
 * Tokens of request sessions that a plugin built without a session-store
 * row, such as one authenticated by an API key on every request.
@@ -24,5 +24,4 @@ async function markSessionOutsideStore(token) {
 async function isSessionOutsideStore(token) {
 	return (await getTokensOutsideStore().catch(() => null))?.has(token) ?? false;
 }
-//#endregion
 export { isSessionOutsideStore, markSessionOutsideStore };

package/dist/api/state/should-session-refresh.d.mts

@@ -1,4 +1,3 @@
-//#region src/api/state/should-session-refresh.d.ts
 /**
  * State for skipping session refresh
  *
@@ -8,5 +7,4 @@
  * data stored in cookies.
  */
 declare const getShouldSkipSessionRefresh: () => Promise<boolean | null>, setShouldSkipSessionRefresh: (value: boolean | null) => Promise<void>;
-//#endregion
 export { getShouldSkipSessionRefresh, setShouldSkipSessionRefresh };

package/dist/api/state/should-session-refresh.mjs

@@ -1,5 +1,5 @@
 import { defineRequestState } from "@better-auth/core/context";
-//#region src/api/state/should-session-refresh.ts
+// src/api/state/should-session-refresh.ts
 /**
 * State for skipping session refresh
 *
@@ -9,5 +9,4 @@ import { defineRequestState } from "@better-auth/core/context";
 * data stored in cookies.
 */
 const { get: getShouldSkipSessionRefresh, set: setShouldSkipSessionRefresh } = defineRequestState(() => false);
-//#endregion
 export { getShouldSkipSessionRefresh, setShouldSkipSessionRefresh };

package/dist/api/to-auth-endpoints.mjs

@@ -1,9 +1,9 @@
-import { isDynamicBaseURLConfig, isRequestLike } from "../utils/url.mjs";
 import { pickSource, resolveDynamicTrustedProxyHeaders, resolveRequestContext } from "../context/helpers.mjs";
+import { isDynamicBaseURLConfig, isRequestLike } from "../utils/url.mjs";
 import { dispatchAuthEndpoint, getOperationId } from "./dispatch.mjs";
 import { hasRequestState, runWithRequestState } from "@better-auth/core/context";
 import { APIError, BetterAuthError } from "@better-auth/core/error";
-//#region src/api/to-auth-endpoints.ts
+// src/api/to-auth-endpoints.ts
 /**
 * Resolves the per-call `AuthContext` for endpoints with a dynamic `baseURL`.
 *
@@ -56,5 +56,4 @@ function toAuthEndpoints(endpoints, ctx) {
 	}
 	return api;
 }
-//#endregion
 export { toAuthEndpoints };

package/dist/auth/base.mjs

@@ -1,10 +1,9 @@
-import { getBaseURL, getOrigin, isDynamicBaseURLConfig } from "../utils/url.mjs";
-import { getTrustedOrigins, getTrustedProviders, resolveDynamicTrustedProxyHeaders, resolveRequestContext } from "../context/helpers.mjs";
 import { getEndpoints, router } from "../api/index.mjs";
+import { getTrustedOrigins, getTrustedProviders, resolveDynamicTrustedProxyHeaders, resolveRequestContext } from "../context/helpers.mjs";
+import { getBaseURL, getOrigin, isDynamicBaseURLConfig } from "../utils/url.mjs";
 import { runWithAdapter } from "@better-auth/core/context";
 import { BASE_ERROR_CODES, BetterAuthError } from "@better-auth/core/error";
-import { SchemaMismatchError } from "@better-auth/core/db/internal";
-//#region src/auth/base.ts
+// src/auth/base.ts
 const createBetterAuth = (options, initFn) => {
 	const authContext = initFn(options).then((ctx) => {
 		const validateSchema = ctx.options.advanced?.database?.validateSchema;
@@ -12,10 +11,6 @@ const createBetterAuth = (options, initFn) => {
 			const level = validateSchema === true ? "warn" : "debug";
 			ctx.logger[level](`Schema validation is not available for adapter "${ctx.adapter.id}". Skipping schema validation. Database operations will proceed normally.`);
 		}
-		const pendingSchemaCheck = ctx.checkSchema?.();
-		if (pendingSchemaCheck) pendingSchemaCheck.catch((error) => {
-			ctx.logger.error(error instanceof SchemaMismatchError ? error.message : "Could not validate the database schema. Check your database connection.");
-		});
 		return ctx;
 	});
 	const { api } = getEndpoints(authContext, options);
@@ -62,5 +57,4 @@ const createBetterAuth = (options, initFn) => {
 		}
 	};
 };
-//#endregion
 export { createBetterAuth };

package/dist/auth/full.d.mts

@@ -1,7 +1,6 @@
 import { Auth } from "../types/auth.mjs";
 import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-//#region src/auth/full.d.ts
 /**
  * Better Auth initializer for full mode (with Kysely)
  *
@@ -23,5 +22,4 @@ import { BetterAuthOptions } from "@better-auth/core";
  *	  database: drizzleAdapter(db, { provider: "pg" }),
  * });
  */
-export declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;
-//#endregion
+export declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;

package/dist/auth/full.mjs

@@ -1,6 +1,6 @@
 import { init } from "../context/init.mjs";
 import { createBetterAuth } from "./base.mjs";
-//#region src/auth/full.ts
+// src/auth/full.ts
 /**
 * Better Auth initializer for full mode (with Kysely)
 *
@@ -25,5 +25,4 @@ import { createBetterAuth } from "./base.mjs";
 const betterAuth = (options) => {
 	return createBetterAuth(options, init);
 };
-//#endregion
 export { betterAuth };

package/dist/auth/minimal.d.mts

@@ -1,10 +1,8 @@
 import { Auth } from "../types/auth.mjs";
 import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-//#region src/auth/minimal.d.ts
 /**
  * Better Auth initializer for minimal mode (without Kysely)
  */
 export declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;
-//#endregion
 export type { BetterAuthOptions };

package/dist/auth/minimal.mjs

@@ -1,11 +1,10 @@
-import { createBetterAuth } from "./base.mjs";
 import { initMinimal } from "../context/init-minimal.mjs";
-//#region src/auth/minimal.ts
+import { createBetterAuth } from "./base.mjs";
+// src/auth/minimal.ts
 /**
 * Better Auth initializer for minimal mode (without Kysely)
 */
 const betterAuth = (options) => {
 	return createBetterAuth(options, initMinimal);
 };
-//#endregion
 export { betterAuth };

package/dist/auth/trusted-origins.mjs

@@ -1,7 +1,7 @@
-import { wildcardMatch } from "../utils/wildcard.mjs";
 import { getHost, getOrigin, getProtocol } from "../utils/url.mjs";
+import { wildcardMatch } from "../utils/wildcard.mjs";
 import * as z from "zod";
-//#region src/auth/trusted-origins.ts
+// src/auth/trusted-origins.ts
 const CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f-\u009f]/;
 const RELATIVE_URL_PARSER_ORIGIN = "https://better-auth.invalid";
 const ENCODED_PATH_SEPARATOR_PATTERN = /%2[fF]|%5[cC]/;
@@ -127,5 +127,4 @@ const matchesOriginPattern = (url, pattern, settings) => {
 	if (!parsedPattern.path) return true;
 	return parsed.path === parsedPattern.path || parsed.path.startsWith(`${parsedPattern.path}/`);
 };
-//#endregion
 export { matchesOriginPattern };

package/dist/client/broadcast-channel.d.mts

@@ -1,4 +1,3 @@
-//#region src/client/broadcast-channel.d.ts
 export interface BroadcastMessage {
   event?: "session" | undefined;
   data?: {
@@ -14,5 +13,4 @@ export interface BroadcastChannel {
   subscribe(listener: BroadcastListener): () => void;
   setup(): () => void;
 }
-export declare function getGlobalBroadcastChannel(name?: string): BroadcastChannel;
-//#endregion
+export declare function getGlobalBroadcastChannel(name?: string): BroadcastChannel;

package/dist/client/broadcast-channel.mjs

@@ -1,4 +1,4 @@
-//#region src/client/broadcast-channel.ts
+// src/client/broadcast-channel.ts
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -24,15 +24,16 @@ var WindowBroadcastChannel = class {
 	}
 	setup() {
 		if (typeof window === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const target = window;
 		const handler = (event) => {
 			if (event.key !== this.name) return;
 			const message = JSON.parse(event.newValue ?? "{}");
 			if (message?.event !== "session" || !message?.data) return;
 			this.listeners.forEach((listener) => listener(message));
 		};
-		window.addEventListener("storage", handler);
+		target.addEventListener("storage", handler);
 		return () => {
-			window.removeEventListener("storage", handler);
+			target.removeEventListener("storage", handler);
 		};
 	}
 };
@@ -40,5 +41,4 @@ function getGlobalBroadcastChannel(name = "better-auth.message") {
 	if (!globalThis[kBroadcastChannel]) globalThis[kBroadcastChannel] = new WindowBroadcastChannel(name);
 	return globalThis[kBroadcastChannel];
 }
-//#endregion
 export { getGlobalBroadcastChannel, kBroadcastChannel };

package/dist/client/config.d.mts

@@ -1,7 +1,6 @@
 import { SessionData } from "./session-atom.mjs";
 import { BetterAuthClientOptions, ClientAtomListener } from "@better-auth/core";
 import { WritableAtom } from "nanostores";
-//#region src/client/config.d.ts
 export declare const getClientConfig: (options?: BetterAuthClientOptions | undefined, loadEnv?: boolean | undefined) => {
   readonly baseURL: string;
   pluginsActions: Record<string, any>;
@@ -82,5 +81,4 @@ export declare const getClientConfig: (options?: BetterAuthClientOptions | undef
     listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
     atoms: Record<string, WritableAtom<any>>;
   };
-};
-//#endregion
+};

package/dist/client/config.mjs

@@ -1,10 +1,10 @@
 import { getBaseURL } from "../utils/url.mjs";
-import { parseJSON } from "./parser.mjs";
 import { redirectPlugin } from "./fetch-plugins.mjs";
+import { parseJSON } from "./parser.mjs";
 import { getSessionAtom, hydrateSessionAtom } from "./session-atom.mjs";
 import { defu as defu$1 } from "defu";
 import { createFetch } from "@better-fetch/fetch";
-//#region src/client/config.ts
+// src/client/config.ts
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -108,5 +108,4 @@ const getClientConfig = (options, loadEnv) => {
 		$store
 	};
 };
-//#endregion
 export { getClientConfig, matchesSessionSignal };

package/dist/client/equality.d.mts

@@ -1,5 +1,4 @@
 import { Store, StoreValue } from "nanostores";
-//#region src/client/equality.d.ts
 /**
  * Deep structural equality for JSON-serializable values.
  * Handles: primitives, null, arrays, and plain objects.
@@ -13,5 +12,4 @@ export declare function isJsonEqual(a: unknown, b: unknown): boolean;
  *
  * Returns the unsubscribe function from `onSet`.
  */
-export declare function withEquality<S extends Store>(store: S, isEqual: (a: StoreValue<S>, b: StoreValue<S>) => boolean): () => void;
-//#endregion
+export declare function withEquality<S extends Store>(store: S, isEqual: (a: StoreValue<S>, b: StoreValue<S>) => boolean): () => void;

package/dist/client/equality.mjs

@@ -1,5 +1,5 @@
 import { onSet } from "nanostores";
-//#region src/client/equality.ts
+// src/client/equality.ts
 function isPlainObject(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -38,5 +38,4 @@ function withEquality(store, isEqual) {
 		if (isEqual(store.value, newValue)) abort();
 	});
 }
-//#endregion
 export { isJsonEqual, withEquality };

package/dist/client/fetch-plugins.mjs

@@ -1,5 +1,5 @@
 import { isSafeUrlScheme } from "@better-auth/core/utils/url";
-//#region src/client/fetch-plugins.ts
+// src/client/fetch-plugins.ts
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -13,5 +13,4 @@ const redirectPlugin = {
 		}
 	} }
 };
-//#endregion
 export { redirectPlugin };

package/dist/client/focus-manager.d.mts

@@ -1,9 +1,7 @@
-//#region src/client/focus-manager.d.ts
 export type FocusListener = (focused: boolean) => void;
 export declare const kFocusManager: unique symbol;
 export interface FocusManager {
   setFocused(focused: boolean): void;
   subscribe(listener: FocusListener): () => void;
   setup(): () => void;
-}
-//#endregion
+}

package/dist/client/focus-manager.mjs

@@ -1,4 +1,4 @@
-//#region src/client/focus-manager.ts
+// src/client/focus-manager.ts
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -13,12 +13,13 @@ var WindowFocusManager = class {
 	}
 	setup() {
 		if (typeof window === "undefined" || typeof document === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const target = document;
 		const visibilityHandler = () => {
 			if (document.visibilityState === "visible") this.setFocused(true);
 		};
-		document.addEventListener("visibilitychange", visibilityHandler, false);
+		target.addEventListener("visibilitychange", visibilityHandler, false);
 		return () => {
-			document.removeEventListener("visibilitychange", visibilityHandler, false);
+			target.removeEventListener("visibilitychange", visibilityHandler, false);
 		};
 	}
 };
@@ -26,5 +27,4 @@ function getGlobalFocusManager() {
 	if (!globalThis[kFocusManager]) globalThis[kFocusManager] = new WindowFocusManager();
 	return globalThis[kFocusManager];
 }
-//#endregion
 export { getGlobalFocusManager, kFocusManager };