better-auth 1.7.20 → 1.7.22

package/dist/client/vanilla.mjs

@@ -1,7 +1,7 @@
 import { getClientConfig } from "./config.mjs";
 import { createDynamicPathProxy } from "./proxy.mjs";
 import { capitalizeFirstLetter } from "@better-auth/core/utils/string";
-//#region src/client/vanilla.ts
+// src/client/vanilla.ts
 function createAuthClient(options) {
 	const { pluginPathMethods, pluginsActions, pluginsAtoms, hydrateSession, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
@@ -15,5 +15,4 @@ function createAuthClient(options) {
 	};
 	return createDynamicPathProxy(routes, $fetch, pluginPathMethods, pluginsAtoms, atomListeners);
 }
-//#endregion
 export { createAuthClient };

package/dist/client/vue/index.d.mts

@@ -1,13 +1,12 @@
 import { ExtractPluginField, HasRequiredKeys, InferPluginFieldFromTuple, IsAny, OverrideMerge, Prettify, PrettifyDeep, RequiredKeysOf, StripEmptyObjects, UnionToIntersection } from "../../types/helper.mjs";
-import { InferActions, InferClientAPI, InferErrorCodes, IsSignal, SessionQueryParams } from "../types.mjs";
 import { getClientConfig } from "../config.mjs";
+import { InferActions, InferClientAPI, InferErrorCodes, IsSignal, SessionQueryParams } from "../types.mjs";
 import { BetterAuthClientOptions } from "@better-auth/core";
 import { BASE_ERROR_CODES } from "@better-auth/core/error";
 import { BetterFetchError, BetterFetchResponse } from "@better-fetch/fetch";
 import { DeepReadonly, Ref, WatchSource } from "vue";
 export type * from "nanostores";
 export type * from "@better-fetch/fetch";
-//#region src/client/vue/index.d.ts
 type InferResolvedHooks<O extends BetterAuthClientOptions> = O extends {
   plugins: Array<infer Plugin>;
 } ? UnionToIntersection<Plugin extends {
@@ -62,5 +61,4 @@ export type VueAuthClient<Option extends BetterAuthClientOptions> = UnionToInter
   $ERROR_CODES: PrettifyDeep<InferErrorCodes<Option> & typeof BASE_ERROR_CODES>;
 };
 export declare function createAuthClient<Option extends BetterAuthClientOptions>(options?: Option | undefined): VueAuthClient<Option>;
-//#endregion
 export type { ExtractPluginField, HasRequiredKeys, InferPluginFieldFromTuple, IsAny, OverrideMerge, Prettify, PrettifyDeep, RequiredKeysOf, StripEmptyObjects, UnionToIntersection };

package/dist/client/vue/index.mjs

@@ -3,7 +3,7 @@ import { getClientConfig } from "../config.mjs";
 import { createDynamicPathProxy } from "../proxy.mjs";
 import { useStore } from "./vue-store.mjs";
 import { capitalizeFirstLetter } from "@better-auth/core/utils/string";
-//#region src/client/vue/index.ts
+// src/client/vue/index.ts
 function getAtomKey(str) {
 	return `use${capitalizeFirstLetter(str)}`;
 }
@@ -57,5 +57,4 @@ function createAuthClient(options) {
 	};
 	return createDynamicPathProxy(routes, $fetch, pluginPathMethods, pluginsAtoms, atomListeners);
 }
-//#endregion
 export { createAuthClient };

package/dist/client/vue/vue-store.mjs

@@ -1,5 +1,5 @@
 import { getCurrentInstance, getCurrentScope, onScopeDispose, readonly, shallowRef } from "vue";
-//#region src/client/vue/vue-store.ts
+// src/client/vue/vue-store.ts
 function registerStore(store) {
 	const instance = getCurrentInstance();
 	if (instance && instance.proxy) {
@@ -19,5 +19,4 @@ function useStore(store) {
 	}
 	return state;
 }
-//#endregion
 export { useStore };

package/dist/context/create-context.mjs

@@ -1,15 +1,15 @@
-import { getBaseURL, isDynamicBaseURLConfig } from "../utils/url.mjs";
+import { checkEndpointConflicts } from "../api/index.mjs";
 import { matchesOriginPattern } from "../auth/trusted-origins.mjs";
-import { hasServerSessionStore } from "./store-capabilities.mjs";
-import { isPromise } from "../utils/is-promise.mjs";
-import { hashPassword, verifyPassword } from "../crypto/password.mjs";
 import { createCookieGetter, getCookies } from "../cookies/index.mjs";
+import { hashPassword, verifyPassword } from "../crypto/password.mjs";
 import { createInternalAdapter } from "../db/internal-adapter.mjs";
-import { getInternalPlugins, getTrustedOrigins, getTrustedProviders, runPluginInit } from "./helpers.mjs";
-import { checkPassword } from "../utils/password.mjs";
-import { checkEndpointConflicts } from "../api/index.mjs";
 import { DEFAULT_SECRET } from "../utils/constants.mjs";
+import { isPromise } from "../utils/is-promise.mjs";
+import { checkPassword } from "../utils/password.mjs";
+import { getBaseURL, isDynamicBaseURLConfig } from "../utils/url.mjs";
+import { getInternalPlugins, getTrustedOrigins, getTrustedProviders, runPluginInit } from "./helpers.mjs";
 import { buildSecretConfig, parseSecretsEnv, validateSecretsArray } from "./secret-utils.mjs";
+import { hasServerSessionStore } from "./store-capabilities.mjs";
 import { getBetterAuthVersion } from "@better-auth/core/context";
 import { getAuthTables } from "@better-auth/core/db";
 import { createLogger, env, isProduction, isTest } from "@better-auth/core/env";
@@ -20,7 +20,7 @@ import { socialProviders } from "@better-auth/core/social-providers";
 import { findInvalidTrustedProxies } from "@better-auth/core/utils/ip";
 import { createTelemetry } from "@better-auth/telemetry";
 import defu from "defu";
-//#region src/context/create-context.ts
+// src/context/create-context.ts
 /**
 * Estimates the entropy of a string in bits.
 * This is a simple approximation that helps detect low-entropy secrets.
@@ -232,5 +232,4 @@ Most of the features of Better Auth will not work correctly.`);
 	ctx.explicitSchemaCheck = schemaCheckFor(ctx.adapter);
 	return ctx;
 }
-//#endregion
 export { createAuthContext };

package/dist/context/helpers.mjs

@@ -1,12 +1,12 @@
-import { getBaseURL, getOrigin, isDynamicBaseURLConfig, isRequestLike, resolveBaseURL } from "../utils/url.mjs";
-import { isPromise } from "../utils/is-promise.mjs";
 import { createCookieGetter, getCookies } from "../cookies/index.mjs";
 import { createInternalAdapter } from "../db/internal-adapter.mjs";
+import { isPromise } from "../utils/is-promise.mjs";
+import { getBaseURL, getOrigin, isDynamicBaseURLConfig, isRequestLike, resolveBaseURL } from "../utils/url.mjs";
 import { env } from "@better-auth/core/env";
 import { BetterAuthError } from "@better-auth/core/error";
 import { defu as defu$1 } from "defu";
 import { isLoopbackHost } from "@better-auth/core/utils/host";
-//#region src/context/helpers.ts
+// src/context/helpers.ts
 async function runPluginInit(context) {
 	let options = context.options;
 	const plugins = options.plugins || [];
@@ -156,5 +156,4 @@ async function getTrustedProviders(options, request) {
 	if (Array.isArray(trustedProviders)) return trustedProviders.filter((v) => Boolean(v));
 	return (await trustedProviders(request) ?? []).filter((v) => Boolean(v));
 }
-//#endregion
 export { getAwaitableValue, getInternalPlugins, getTrustedOrigins, getTrustedProviders, pickSource, resolveDynamicTrustedProxyHeaders, resolveRequestContext, runPluginInit };

package/dist/context/init-minimal.mjs

@@ -1,7 +1,7 @@
 import { getBaseAdapter } from "../db/adapter-base.mjs";
 import { createAuthContext } from "./create-context.mjs";
 import { BetterAuthError } from "@better-auth/core/error";
-//#region src/context/init-minimal.ts
+// src/context/init-minimal.ts
 const initMinimal = async (options) => {
 	const adapter = await getBaseAdapter(options, async () => {
 		throw new BetterAuthError("Direct database connection requires Kysely. Please use `better-auth` instead of `better-auth/minimal`, or provide an adapter (drizzleAdapter, prismaAdapter, etc.)");
@@ -13,5 +13,4 @@ const initMinimal = async (options) => {
 	};
 	return ctx;
 };
-//#endregion
 export { initMinimal };

package/dist/context/init.mjs

@@ -3,7 +3,7 @@ import { getMigrations } from "../db/get-migration.mjs";
 import { createAuthContext } from "./create-context.mjs";
 import { BetterAuthError } from "@better-auth/core/error";
 import { getKyselyDatabaseType } from "@better-auth/kysely-adapter";
-//#region src/context/init.ts
+// src/context/init.ts
 const init = async (options) => {
 	const adapter = await getAdapter(options);
 	const getDatabaseType = (database) => getKyselyDatabaseType(database) || "unknown";
@@ -15,5 +15,4 @@ const init = async (options) => {
 	};
 	return ctx;
 };
-//#endregion
 export { init };

package/dist/context/secret-utils.mjs

@@ -1,6 +1,6 @@
 import "../utils/constants.mjs";
 import { BetterAuthError } from "@better-auth/core/error";
-//#region src/context/secret-utils.ts
+// src/context/secret-utils.ts
 /**
 * Estimates the entropy of a string in bits.
 * This is a simple approximation that helps detect low-entropy secrets.
@@ -49,5 +49,4 @@ function buildSecretConfig(secrets, legacySecret) {
 		legacySecret: legacySecret && legacySecret !== "better-auth-secret-12345678901234567890" ? legacySecret : void 0
 	};
 }
-//#endregion
 export { buildSecretConfig, parseSecretsEnv, validateSecretsArray };

package/dist/context/store-capabilities.mjs

@@ -1,4 +1,4 @@
-//#region src/context/store-capabilities.ts
+// src/context/store-capabilities.ts
 function hasServerSessionStore(options) {
 	return !!options.database || !!options.secondaryStorage;
 }
@@ -8,5 +8,4 @@ function hasServerAccountStore(options) {
 function shouldBindAccountCookieToSessionUser(options) {
 	return hasServerAccountStore(options);
 }
-//#endregion
 export { hasServerSessionStore, shouldBindAccountCookieToSessionUser };

package/dist/cookies/cache.mjs

@@ -2,7 +2,7 @@ import { sessionSchema, userSchema } from "@better-auth/core/db";
 import { logger } from "@better-auth/core/env";
 import { safeJSONParse } from "@better-auth/core/utils/json";
 import * as z from "zod";
-//#region src/cookies/cache.ts
+// src/cookies/cache.ts
 const cookieCachePayloadSchema = z.looseObject({
 	session: sessionSchema.loose(),
 	user: userSchema.loose(),
@@ -29,5 +29,4 @@ function parseCompactCookieCache(value) {
 	const result = compactCookieCacheSchema.safeParse(value);
 	return result.success ? result.data : null;
 }
-//#endregion
 export { parseCompactCookieCache, parseCookieCachePayload };

package/dist/cookies/cookie-utils.d.mts

@@ -1,4 +1,3 @@
-//#region src/cookies/cookie-utils.d.ts
 export interface CookieAttributes {
   value: string;
   "max-age"?: number | undefined;
@@ -68,5 +67,4 @@ export declare function applySetCookies(target: Headers, setCookieValues: Iterab
 export declare function setCookieToHeader(headers: Headers): (context: {
   response: Response;
 }) => void;
-//#endregion
 export {};

package/dist/cookies/cookie-utils.mjs

@@ -1,4 +1,4 @@
-//#region src/cookies/cookie-utils.ts
+// src/cookies/cookie-utils.ts
 function tryDecode(str) {
 	if (str.indexOf("%") === -1) return str;
 	try {
@@ -197,5 +197,4 @@ function setCookieToHeader(headers) {
 		applySetCookies(headers, [setCookieHeader]);
 	};
 }
-//#endregion
 export { HOST_COOKIE_PREFIX, SECURE_COOKIE_PREFIX, applySetCookies, cookieNameRegex, parseCookies, parseSetCookieHeader, setCookieToHeader, setRequestCookie, splitSetCookieHeader, stripSecureCookiePrefix, toCookieOptions };

package/dist/cookies/index.d.mts

@@ -5,7 +5,6 @@ import { createSessionStore, getAccountCookie, getChunkedCookie, setAccountCooki
 import { Awaitable, BetterAuthCookie, BetterAuthCookies, BetterAuthOptions, CookieCachePayload, GenericEndpointContext } from "@better-auth/core";
 import { CookieOptions } from "better-call";
 import { JSONWebKeySet } from "jose";
-//#region src/cookies/index.d.ts
 export declare function createCookieGetter(options: BetterAuthOptions): (cookieName: string, overrideAttributes?: Partial<CookieOptions>) => {
   name: string;
   attributes: {
@@ -119,5 +118,4 @@ export declare const getCookieCache: <S extends CookieCachePayload = CookieCache
   } | undefined;
   version?: CookieCacheVersion;
 } | undefined) => Promise<S | null>;
-//#endregion
 export { CookieAttributes, HOST_COOKIE_PREFIX, SECURE_COOKIE_PREFIX, applySetCookies, cookieNameRegex, createSessionStore, getAccountCookie, getChunkedCookie, parseCookies, parseSetCookieHeader, setAccountCookie, setCookieToHeader, setRequestCookie, splitSetCookieHeader, stripSecureCookiePrefix, toCookieOptions };

package/dist/cookies/index.mjs

@@ -1,10 +1,10 @@
-import { isDynamicBaseURLConfig } from "../utils/url.mjs";
 import { shouldBindAccountCookieToSessionUser } from "../context/store-capabilities.mjs";
 import { signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT } from "../crypto/jwt.mjs";
 import { parseUserOutput } from "../db/schema.mjs";
 import { getDate } from "../utils/date.mjs";
 import { isPromise } from "../utils/is-promise.mjs";
 import { sec } from "../utils/time.mjs";
+import { isDynamicBaseURLConfig } from "../utils/url.mjs";
 import { parseCompactCookieCache, parseCookieCachePayload } from "./cache.mjs";
 import { HOST_COOKIE_PREFIX, SECURE_COOKIE_PREFIX, applySetCookies, cookieNameRegex, parseCookies, parseSetCookieHeader, setCookieToHeader, setRequestCookie, splitSetCookieHeader, stripSecureCookiePrefix, toCookieOptions } from "./cookie-utils.mjs";
 import { verifySessionCookieJwtWithJwks } from "./jwt.mjs";
@@ -16,7 +16,7 @@ import { filterOutputFields } from "@better-auth/core/utils/db";
 import { base64Url } from "@better-auth/utils/base64";
 import { binary } from "@better-auth/utils/binary";
 import { createHMAC } from "@better-auth/utils/hmac";
-//#region src/cookies/index.ts
+// src/cookies/index.ts
 function createCookieGetter(options) {
 	const baseURLString = typeof options.baseURL === "string" ? options.baseURL : void 0;
 	const dynamicProtocol = typeof options.baseURL === "object" && options.baseURL !== null ? options.baseURL.protocol : void 0;
@@ -351,5 +351,4 @@ const getCookieCache = async (request, config) => {
 	}
 	return null;
 };
-//#endregion
 export { HOST_COOKIE_PREFIX, SECURE_COOKIE_PREFIX, applySetCookies, cookieNameRegex, createCookieGetter, createSessionStore, decodeCookieCache, deleteSessionCookie, expireCookie, getAccountCookie, getChunkedCookie, getCookieCache, getCookies, getSessionCookie, parseCookies, parseSetCookieHeader, setAccountCookie, setCookieCache, setCookieToHeader, setRequestCookie, setSessionCookie, splitSetCookieHeader, stripSecureCookiePrefix, toCookieOptions };

package/dist/cookies/jwt.mjs

@@ -1,6 +1,6 @@
 import { parseCookieCachePayload } from "./cache.mjs";
 import { decodeProtectedHeader, importJWK, jwtVerify } from "jose";
-//#region src/cookies/jwt.ts
+// src/cookies/jwt.ts
 const SESSION_COOKIE_JWT_TYPE = "better-auth.session-cache+jwt";
 const SESSION_COOKIE_JWT_AUDIENCE = "better-auth:session-cache";
 const SESSION_COOKIE_JWT_ISSUER = "better-auth:session-cache";
@@ -41,5 +41,4 @@ async function verifySessionCookieJwtWithJwks(token, jwks, options) {
 		return null;
 	}
 }
-//#endregion
 export { SESSION_COOKIE_JWT_AUDIENCE, SESSION_COOKIE_JWT_ISSUER, SESSION_COOKIE_JWT_TYPE, getSessionCookieJwtVerifyOptions, parseSessionCookieJwtPayload, verifySessionCookieJwtWithJwks };

package/dist/cookies/session-store.d.mts

@@ -1,7 +1,6 @@
 import { GenericEndpointContext } from "@better-auth/core";
 import { CookieOptions } from "better-call";
 import "zod";
-//#region src/cookies/session-store.d.ts
 interface Cookie {
   name: string;
   value: string;
@@ -29,5 +28,4 @@ export declare function getAccountCookie(c: GenericEndpointContext): Promise<{
   scope?: string | null | undefined;
   password?: string | null | undefined;
 } | null>;
-//#endregion
 export {};

package/dist/cookies/session-store.mjs

@@ -3,7 +3,7 @@ import { parseCookies } from "./cookie-utils.mjs";
 import { safeJSONParse } from "@better-auth/core/utils/json";
 import { serializeCookie } from "better-call";
 import * as z from "zod";
-//#region src/cookies/session-store.ts
+// src/cookies/session-store.ts
 /**
 * Per-cookie byte ceiling.
 * Safari's ~4093 floor is the lowest among browsers.
@@ -180,5 +180,4 @@ const getSessionQuerySchema = z.optional(z.object({
 	disableCookieCache: z.coerce.boolean().meta({ description: "Disable cookie cache and fetch session from database" }).optional(),
 	disableRefresh: z.coerce.boolean().meta({ description: "Disable session refresh. Useful for checking session status, without updating the session" }).optional()
 }));
-//#endregion
 export { createAccountStore, createSessionStore, getAccountCookie, getChunkedCookie, getSessionQuerySchema, setAccountCookie };

package/dist/crypto/buffer.d.mts

@@ -1,6 +1,4 @@
-//#region src/crypto/buffer.d.ts
 /**
  * Compare two buffers in constant time.
  */
-export declare function constantTimeEqual(a: ArrayBuffer | Uint8Array | string, b: ArrayBuffer | Uint8Array | string): boolean;
-//#endregion
+export declare function constantTimeEqual(a: ArrayBuffer | Uint8Array | string, b: ArrayBuffer | Uint8Array | string): boolean;

package/dist/crypto/buffer.mjs

@@ -1,4 +1,4 @@
-//#region src/crypto/buffer.ts
+// src/crypto/buffer.ts
 /**
 * Compare two buffers in constant time.
 */
@@ -12,5 +12,4 @@ function constantTimeEqual(a, b) {
 	for (let i = 0; i < length; i++) c |= (i < aBuffer.length ? aBuffer[i] : 0) ^ (i < bBuffer.length ? bBuffer[i] : 0);
 	return c === 0;
 }
-//#endregion
 export { constantTimeEqual };

package/dist/crypto/index.d.mts

@@ -3,7 +3,6 @@ import { signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT } from "./jw
 import { hashPassword, verifyPassword } from "./password.mjs";
 import { generateRandomString } from "./random.mjs";
 import { SecretConfig } from "@better-auth/core";
-//#region src/crypto/index.d.ts
 export declare function parseEnvelope(data: string): {
   version: number;
   ciphertext: string;
@@ -21,5 +20,4 @@ export type SymmetricDecryptOptions = {
 export declare const symmetricDecrypt: ({ key, data }: SymmetricDecryptOptions) => Promise<string>;
 export declare const getCryptoKey: (secret: string | BufferSource) => Promise<CryptoKey>;
 export declare const makeSignature: (value: string, secret: string | BufferSource) => Promise<string>;
-//#endregion
 export { type SecretConfig, constantTimeEqual, generateRandomString, hashPassword, signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT, verifyPassword };

package/dist/crypto/index.mjs

@@ -1,12 +1,12 @@
-import { signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT } from "./jwt.mjs";
 import { constantTimeEqual } from "./buffer.mjs";
+import { signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT } from "./jwt.mjs";
 import { hashPassword, verifyPassword } from "./password.mjs";
 import { generateRandomString } from "./random.mjs";
 import { getWebcryptoSubtle } from "@better-auth/utils";
 import { createHash } from "@better-auth/utils/hash";
 import { xchacha20poly1305 } from "@noble/ciphers/chacha.js";
 import { bytesToHex, hexToBytes, managedNonce, utf8ToBytes } from "@noble/ciphers/utils.js";
-//#region src/crypto/index.ts
+// src/crypto/index.ts
 const algorithm = {
 	name: "HMAC",
 	hash: "SHA-256"
@@ -66,5 +66,4 @@ const makeSignature = async (value, secret) => {
 	const signature = await getWebcryptoSubtle().sign(algorithm.name, key, new TextEncoder().encode(value));
 	return btoa(String.fromCharCode(...new Uint8Array(signature)));
 };
-//#endregion
 export { constantTimeEqual, formatEnvelope, generateRandomString, getCryptoKey, hashPassword, makeSignature, parseEnvelope, signJWT, symmetricDecodeJWT, symmetricDecrypt, symmetricEncodeJWT, symmetricEncrypt, verifyJWT, verifyPassword };

package/dist/crypto/jwt.d.mts

@@ -1,7 +1,5 @@
 import { SecretConfig } from "./index.mjs";
-//#region src/crypto/jwt.d.ts
 export declare function signJWT(payload: any, secret: string, expiresIn?: number): Promise<string>;
 export declare function verifyJWT<T = any>(token: string, secret: string): Promise<T | null>;
 export declare function symmetricEncodeJWT<T extends Record<string, any>>(payload: T, secret: string | SecretConfig, salt: string, expiresIn?: number): Promise<string>;
-export declare function symmetricDecodeJWT<T = any>(token: string, secret: string | SecretConfig, salt: string): Promise<T | null>;
-//#endregion
+export declare function symmetricDecodeJWT<T = any>(token: string, secret: string | SecretConfig, salt: string): Promise<T | null>;

package/dist/crypto/jwt.mjs

@@ -1,7 +1,7 @@
 import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256 } from "@noble/hashes/sha2.js";
 import { EncryptJWT, SignJWT, base64url, calculateJwkThumbprint, decodeProtectedHeader, jwtDecrypt, jwtVerify } from "jose";
-//#region src/crypto/jwt.ts
+// src/crypto/jwt.ts
 async function signJWT(payload, secret, expiresIn = 3600) {
 	return await new SignJWT(payload).setProtectedHeader({ alg: "HS256" }).setIssuedAt().setExpirationTime(Math.floor(Date.now() / 1e3) + expiresIn).sign(new TextEncoder().encode(secret));
 }
@@ -138,5 +138,4 @@ async function symmetricDecodeJWT(token, secret, salt) {
 		return null;
 	}
 }
-//#endregion
 export { signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT };

package/dist/crypto/password.d.mts

@@ -1,9 +1,7 @@
 import { hashPassword } from "@better-auth/utils/password";
-//#region src/crypto/password.d.ts
 declare const hashPassword$1: typeof hashPassword;
 declare const verifyPassword$1: ({ hash, password }: {
   hash: string;
   password: string;
 }) => Promise<boolean>;
-//#endregion
 export { hashPassword$1 as hashPassword, verifyPassword$1 as verifyPassword };

package/dist/crypto/password.mjs

@@ -1,5 +1,5 @@
 import { hashPassword, verifyPassword } from "@better-auth/utils/password";
-//#region src/crypto/password.ts
+// src/crypto/password.ts
 /**
 * `@better-auth/utils/password` uses the "node" export condition in package.json
 * to automatically pick the right implementation:
@@ -10,5 +10,4 @@ const hashPassword$1 = hashPassword;
 const verifyPassword$1 = async ({ hash, password }) => {
 	return verifyPassword(hash, password);
 };
-//#endregion
 export { hashPassword$1 as hashPassword, verifyPassword$1 as verifyPassword };

package/dist/crypto/purpose.mjs

@@ -1,7 +1,7 @@
 import { hkdf } from "@noble/hashes/hkdf.js";
 import { sha256 } from "@noble/hashes/sha2.js";
 import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils.js";
-//#region src/crypto/purpose.ts
+// src/crypto/purpose.ts
 const salt = utf8ToBytes("better-auth:oauth-encryption:v1");
 function deriveSecret(secret, purpose) {
 	return bytesToHex(hkdf(sha256, utf8ToBytes(secret), salt, utf8ToBytes(`better-auth:${purpose}:v1`), 32));
@@ -15,5 +15,4 @@ function derivePurposeKey(secret, purpose) {
 		...secret.legacySecret && { legacySecret: deriveSecret(secret.legacySecret, purpose) }
 	};
 }
-//#endregion
 export { derivePurposeKey };

package/dist/crypto/random.d.mts

@@ -1,3 +1 @@
-//#region src/crypto/random.d.ts
-export declare const generateRandomString: <SubA extends "a-z" | "A-Z" | "0-9" | "-_">(length: number, ...alphabets: SubA[]) => string;
-//#endregion
+export declare const generateRandomString: <SubA extends "a-z" | "A-Z" | "0-9" | "-_">(length: number, ...alphabets: SubA[]) => string;

package/dist/crypto/random.mjs

@@ -1,5 +1,4 @@
 import { createRandomStringGenerator } from "@better-auth/utils/random";
-//#region src/crypto/random.ts
+// src/crypto/random.ts
 const generateRandomString = createRandomStringGenerator("a-z", "0-9", "A-Z", "-_");
-//#endregion
 export { generateRandomString };

package/dist/db/adapter-base.d.mts

@@ -1,5 +1,3 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { DBAdapter } from "@better-auth/core/db/adapter";
-//#region src/db/adapter-base.d.ts
-export declare function getBaseAdapter(options: BetterAuthOptions, handleDirectDatabase: (options: BetterAuthOptions) => Promise<DBAdapter<BetterAuthOptions>>): Promise<DBAdapter<BetterAuthOptions>>;
-//#endregion
+export declare function getBaseAdapter(options: BetterAuthOptions, handleDirectDatabase: (options: BetterAuthOptions) => Promise<DBAdapter<BetterAuthOptions>>): Promise<DBAdapter<BetterAuthOptions>>;

package/dist/db/adapter-base.mjs

@@ -1,6 +1,6 @@
 import { getAuthTables } from "@better-auth/core/db";
 import { logger } from "@better-auth/core/env";
-//#region src/db/adapter-base.ts
+// src/db/adapter-base.ts
 async function getBaseAdapter(options, handleDirectDatabase) {
 	let adapter;
 	if (!options.database) {
@@ -21,5 +21,4 @@ async function getBaseAdapter(options, handleDirectDatabase) {
 	}
 	return adapter;
 }
-//#endregion
 export { getBaseAdapter };

package/dist/db/adapter-kysely.d.mts

@@ -1,5 +1,3 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { DBAdapter } from "@better-auth/core/db/adapter";
-//#region src/db/adapter-kysely.d.ts
-export declare function getAdapter(options: BetterAuthOptions): Promise<DBAdapter<BetterAuthOptions>>;
-//#endregion
+export declare function getAdapter(options: BetterAuthOptions): Promise<DBAdapter<BetterAuthOptions>>;

package/dist/db/adapter-kysely.mjs

@@ -1,6 +1,6 @@
 import { getBaseAdapter } from "./adapter-base.mjs";
 import { BetterAuthError } from "@better-auth/core/error";
-//#region src/db/adapter-kysely.ts
+// src/db/adapter-kysely.ts
 async function getAdapter(options) {
 	return getBaseAdapter(options, async (opts) => {
 		const { createKyselyAdapter, kyselyAdapter } = await import("../adapters/kysely-adapter/index.mjs");
@@ -13,5 +13,4 @@ async function getAdapter(options) {
 		})(opts);
 	});
 }
-//#endregion
 export { getAdapter };

package/dist/db/field-converter.d.mts

@@ -1,5 +1,3 @@
 import { DBFieldAttribute } from "@better-auth/core/db";
-//#region src/db/field-converter.d.ts
 export declare function convertToDB<T extends Record<string, any>>(fields: Record<string, DBFieldAttribute>, values: T): T;
-export declare function convertFromDB<T extends Record<string, any>>(fields: Record<string, DBFieldAttribute>, values: T | null): T | null;
-//#endregion
+export declare function convertFromDB<T extends Record<string, any>>(fields: Record<string, DBFieldAttribute>, values: T | null): T | null;

package/dist/db/field-converter.mjs

@@ -1,4 +1,4 @@
-//#region src/db/field-converter.ts
+// src/db/field-converter.ts
 function convertToDB(fields, values) {
 	const result = values.id ? { id: values.id } : {};
 	for (const key in fields) {
@@ -15,5 +15,4 @@ function convertFromDB(fields, values) {
 	for (const [key, value] of Object.entries(fields)) result[key] = values[value.fieldName || key];
 	return result;
 }
-//#endregion
 export { convertFromDB, convertToDB };

package/dist/db/field.d.mts

@@ -1,5 +1,4 @@
 import { DBFieldAttribute, InferDBValueType } from "@better-auth/core/db";
-//#region src/db/field.d.ts
 export type InferFieldsOutput<Fields extends Record<string, DBFieldAttribute>> = Fields extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? key : never : key]: InferFieldOutput<Fields[key]>; } & { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? never : key : never]?: InferFieldOutput<Fields[key]> | null; } : never;
 /**
  * For client will add "?" on optional fields
@@ -36,5 +35,4 @@ export type InferAdditionalFieldsFromPluginOptions<SchemaName extends string, Op
 type RemoveFieldsWithInputFalse<T extends Record<string, DBFieldAttribute>> = { [K in keyof T as T[K]["input"] extends false ? never : K]: T[K]; };
 export type RemoveFieldsWithReturnedFalse<T extends Record<string, DBFieldAttribute>> = { [K in keyof T as T[K]["returned"] extends false ? never : K]: T[K]; };
 type InferFieldInput<T extends DBFieldAttribute> = InferDBValueType<T["type"]>;
-//#endregion
 export {};

package/dist/db/get-migration.d.mts

@@ -3,7 +3,6 @@ import { DBFieldAttribute, DBFieldType } from "@better-auth/core/db";
 import { BetterAuthError } from "@better-auth/core/error";
 import { KyselyDatabaseType } from "@better-auth/kysely-adapter";
 import { ResolvedDBTableIndex } from "@better-auth/core/db/internal";
-//#region src/db/get-migration.d.ts
 /**
  * Thrown when {@link getMigrations} refuses to add a required column with no
  * default value to a populated table. Distinct from the plain
@@ -48,5 +47,4 @@ export declare function getMigrations(config: BetterAuthOptions, { throwOnUnsafe
   schemaProblems: string[];
   runMigrations: () => Promise<void>;
   compileMigrations: () => Promise<string>;
-}>;
-//#endregion
+}>;

package/dist/db/get-migration.mjs

@@ -1,11 +1,11 @@
 import { buildSchema } from "./get-schema.mjs";
 import { createLogger } from "@better-auth/core/env";
 import { BetterAuthError } from "@better-auth/core/error";
-import { createKyselyAdapter, getMssqlSchema, getPostgresSchema, toIntrospectedTables, toPhysicalSchema } from "@better-auth/kysely-adapter";
+import { createKyselyAdapter, getMssqlSchema, getPostgresSchema, introspectPostgresTables, toIntrospectedTables, toPhysicalSchema } from "@better-auth/kysely-adapter";
 import { initGetFieldName, initGetModelName } from "@better-auth/core/db/adapter";
 import { diffSchema, formatSchemaFinding, getDatabaseFieldIndexName, getDatabaseIndexStringLength, getPortableDatabaseIdentifierKey, invalidateSchemaChecks } from "@better-auth/core/db/internal";
 import { sql } from "kysely";
-//#region src/db/get-migration.ts
+// src/db/get-migration.ts
 const map = {
 	postgres: {
 		string: [
@@ -354,9 +354,8 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 		logger.error("Only kysely adapter is supported for migrations. You can use `generate` command to generate the schema, if you're using a different adapter.");
 		process.exit(1);
 	}
-	const allTableMetadata = await db.introspection.getTables();
 	let target;
-	let tableMetadata = allTableMetadata;
+	let tableMetadata;
 	switch (dbType) {
 		case "postgres": {
 			const schema = schemaName ?? await getPostgresSchema(db);
@@ -373,11 +372,7 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 			} catch (error) {
 				logger.debug(`Could not verify schema existence: ${error instanceof Error ? error.message : String(error)}`);
 			}
-			/**
-			* Kysely 0.28 does not expose `isForeign`, while 0.29 adds foreign table metadata.
-			* @see https://github.com/kysely-org/kysely/pull/1494
-			*/
-			tableMetadata = allTableMetadata.filter((table) => table.schema === schema && !table.isView && !("isForeign" in table && table.isForeign));
+			tableMetadata = (await introspectPostgresTables(db, [schema])).filter((table) => !table.isView && !table.isForeign);
 			logger.debug(`Found ${tableMetadata.length} table(s) in schema '${schema}': ${tableMetadata.map((table) => table.name).join(", ") || "(none)"}`);
 			break;
 		}
@@ -388,15 +383,18 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 				schema
 			};
 			logger.debug(`SQL Server migration: Using schema '${schema}' (from the current user's default schema)`);
-			tableMetadata = allTableMetadata.filter((table) => table.schema === schema);
+			tableMetadata = (await db.introspection.getTables()).filter((table) => table.schema === schema);
 			break;
 		}
 		case "mysql":
 			target = { type: "mysql" };
+			tableMetadata = await db.introspection.getTables();
 			break;
-		case "sqlite": target = { type: "sqlite" };
+		case "sqlite":
+			target = { type: "sqlite" };
+			tableMetadata = await db.introspection.getTables();
 	}
-	const databaseIndexMap = await getDatabaseIndexMap(db, target, allTableMetadata.map((table) => table.name), introspectIndexes);
+	const databaseIndexMap = await getDatabaseIndexMap(db, target, tableMetadata.map((table) => table.name), introspectIndexes);
 	const databaseColumnBounds = await getDatabaseColumnBounds(db, target);
 	const schemaProblems = diffSchema(toPhysicalSchema(db, betterAuthSchema), toIntrospectedTables(tableMetadata)).filter((finding) => finding.kind === "unexpected-required-column").map((finding) => formatSchemaFinding(finding, "database"));
 	const toBeCreated = [];
@@ -684,5 +682,4 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 		compileMigrations
 	};
 }
-//#endregion
 export { UnsafeMigrationError, getMigrations, matchType };

package/dist/db/get-schema.d.mts

@@ -1,11 +1,9 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { DBFieldAttribute } from "@better-auth/core/db";
 import { ResolvedDBTableIndex } from "@better-auth/core/db/internal";
-//#region src/db/get-schema.d.ts
 export declare function getSchema(config: BetterAuthOptions): Record<string, {
   fields: Record<string, DBFieldAttribute>;
   indexes?: readonly ResolvedDBTableIndex[] | undefined;
   order: number;
   disableMigrations?: boolean | undefined;
-}>;
-//#endregion
+}>;