better-auth 1.7.21 → 1.7.23

package/dist/api/routes/sign-out.d.mts

@@ -1,5 +1,4 @@
 import * as z from "zod";
-//#region src/api/routes/sign-out.d.ts
 export declare const signOut: import("better-call").StrictEndpoint<"/sign-out", {
   method: "POST";
   body: z.ZodOptional<z.ZodObject<{
@@ -44,5 +43,4 @@ export declare const signOut: import("better-call").StrictEndpoint<"/sign-out",
   success: boolean;
   url: string | undefined;
   redirect: boolean | undefined;
-}>;
-//#endregion
+}>;

package/dist/api/routes/sign-out.mjs

@@ -1,7 +1,7 @@
 import { deleteSessionCookie } from "../../cookies/index.mjs";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/sign-out.ts
+// src/api/routes/sign-out.ts
 const signOutBodySchema = z.object({
 	callbackURL: z.string().meta({ description: "The URL to redirect to after provider logout" }).optional(),
 	disableRedirect: z.boolean().meta({ description: "Return the provider logout URL without redirecting" }).optional(),
@@ -92,5 +92,4 @@ const signOut = createAuthEndpoint("/sign-out", {
 	}
 	return ctx.json(signOutResponse());
 });
-//#endregion
 export { signOut };

package/dist/api/routes/sign-up.d.mts

@@ -2,7 +2,6 @@ import { AdditionalUserFieldsInput, User } from "../../types/models.mjs";
 import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import * as z from "zod";
-//#region src/api/routes/sign-up.d.ts
 export declare const signUpEmail: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/sign-up/email", {
   method: "POST";
   operationId: string;
@@ -153,5 +152,4 @@ export declare const signUpEmail: <O extends BetterAuthOptions>() => import("bet
 } | {
   token: string;
   user: User<O["user"], O["plugins"]>;
-}>;
-//#endregion
+}>;

package/dist/api/routes/sign-up.mjs

@@ -1,17 +1,17 @@
-import { isAPIError } from "../../utils/is-api-error.mjs";
-import { formCsrfMiddleware } from "../middlewares/origin-check.mjs";
-import { buildSyntheticUserOutput, parseUserInput, parseUserOutput } from "../../db/schema.mjs";
 import { setSessionCookie } from "../../cookies/index.mjs";
+import { buildSyntheticUserOutput, parseUserInput, parseUserOutput } from "../../db/schema.mjs";
+import { isAPIError } from "../../utils/is-api-error.mjs";
+import { assertPasswordNotTooLong, assertPasswordNotTooShort } from "../../utils/password.mjs";
 import { safeCloneRequest } from "../../utils/request.mjs";
+import { formCsrfMiddleware } from "../middlewares/origin-check.mjs";
 import { createEmailVerificationToken } from "./email-verification.mjs";
-import { assertPasswordNotTooLong, assertPasswordNotTooShort } from "../../utils/password.mjs";
 import { queueAfterTransactionHook, runWithTransaction } from "@better-auth/core/context";
 import { isDevelopment } from "@better-auth/core/env";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { generateId } from "@better-auth/core/utils/id";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/sign-up.ts
+// src/api/routes/sign-up.ts
 const signUpEmailBodySchema = z.object({
 	name: z.string(),
 	email: z.email(),
@@ -275,5 +275,4 @@ const signUpEmail = () => createAuthEndpoint("/sign-up/email", {
 		});
 	});
 });
-//#endregion
 export { signUpEmail };

package/dist/api/routes/update-session.d.mts

@@ -2,7 +2,6 @@ import { AdditionalSessionFieldsInput } from "../../types/models.mjs";
 import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import * as z from "zod";
-//#region src/api/routes/update-session.d.ts
 export declare const updateSession: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/update-session", {
   method: "POST";
   operationId: string;
@@ -68,5 +67,4 @@ export declare const updateSession: <O extends BetterAuthOptions>() => import("b
     ipAddress?: string | null | undefined;
     userAgent?: string | null | undefined;
   };
-}>;
-//#endregion
+}>;

package/dist/api/routes/update-session.mjs

@@ -1,10 +1,10 @@
-import { parseSessionInput, parseSessionOutput } from "../../db/schema.mjs";
 import { deleteSessionCookie, setSessionCookie } from "../../cookies/index.mjs";
+import { parseSessionInput, parseSessionOutput } from "../../db/schema.mjs";
 import { isStateful, sessionMiddleware } from "./session.mjs";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/update-session.ts
+// src/api/routes/update-session.ts
 const updateSessionBodySchema = z.record(z.string().meta({ description: "Field name must be a string" }), z.any());
 const updateSession = () => createAuthEndpoint("/update-session", {
 	method: "POST",
@@ -53,5 +53,4 @@ const updateSession = () => createAuthEndpoint("/update-session", {
 	});
 	return ctx.json({ session: parseSessionOutput(ctx.context.options, newSession) });
 });
-//#endregion
 export { updateSession };

package/dist/api/routes/update-user.d.mts

@@ -2,7 +2,6 @@ import { AdditionalUserFieldsInput } from "../../types/models.mjs";
 import "../../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import * as z from "zod";
-//#region src/api/routes/update-user.d.ts
 export declare const updateUser: <O extends BetterAuthOptions>() => import("better-call").StrictEndpoint<"/update-user", {
   method: "POST";
   operationId: string;
@@ -422,5 +421,4 @@ export declare const changeEmail: import("better-call").StrictEndpoint<"/change-
   };
 }, {
   status: boolean;
-}>;
-//#endregion
+}>;

package/dist/api/routes/update-user.mjs

@@ -1,15 +1,15 @@
-import { originCheck } from "../middlewares/origin-check.mjs";
-import { parseUserInput, parseUserOutput } from "../../db/schema.mjs";
-import { generateRandomString } from "../../crypto/random.mjs";
 import { deleteSessionCookie, setSessionCookie } from "../../cookies/index.mjs";
-import { getSessionFromCtx, isStateful, sensitiveSessionMiddleware, sessionMiddleware } from "./session.mjs";
-import { createEmailVerificationToken } from "./email-verification.mjs";
+import { generateRandomString } from "../../crypto/random.mjs";
+import { parseUserInput, parseUserOutput } from "../../db/schema.mjs";
 import { assertPasswordNotTooLong, assertPasswordNotTooShort } from "../../utils/password.mjs";
+import { originCheck } from "../middlewares/origin-check.mjs";
+import { createEmailVerificationToken } from "./email-verification.mjs";
+import { getSessionFromCtx, isStateful, sensitiveSessionMiddleware, sessionMiddleware } from "./session.mjs";
 import { runWithTransaction } from "@better-auth/core/context";
 import { APIError, BASE_ERROR_CODES } from "@better-auth/core/error";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import * as z from "zod";
-//#region src/api/routes/update-user.ts
+// src/api/routes/update-user.ts
 const updateUserBodySchema = z.record(z.string().meta({ description: "Field name must be a string" }), z.any());
 const updateUser = () => createAuthEndpoint("/update-user", {
 	method: "POST",
@@ -221,6 +221,28 @@ newPassword: z.string().meta({ description: "The new password to set is required
 	}
 	throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.PASSWORD_ALREADY_SET);
 });
+/**
+* Deletes the signed-in user and expires the session cookies on the
+* caller's response.
+*/
+async function deleteCurrentUser(ctx, user) {
+	const beforeDelete = ctx.context.options.user?.deleteUser?.beforeDelete;
+	if (beforeDelete) await beforeDelete(user, ctx.request);
+	await ctx.context.internalAdapter.deleteUser(user.id);
+	await ctx.context.internalAdapter.deleteUserSessions(user.id);
+	deleteSessionCookie(ctx);
+	const afterDelete = ctx.context.options.user?.deleteUser?.afterDelete;
+	if (afterDelete) await afterDelete(user, ctx.request);
+}
+/**
+* Consumes a delete-account token issued to `user` and deletes the user.
+* Runs on the caller's context so the expired cookies reach its response.
+*/
+async function deleteUserWithToken(ctx, user, token) {
+	const verification = await ctx.context.internalAdapter.consumeVerificationValue(`delete-account-${token}`);
+	if (!verification || verification.value !== user.id) throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.INVALID_TOKEN);
+	await deleteCurrentUser(ctx, user);
+}
 const deleteUser = createAuthEndpoint("/delete-user", {
 	method: "POST",
 	use: [sensitiveSessionMiddleware],
@@ -295,10 +317,7 @@ const deleteUser = createAuthEndpoint("/delete-user", {
 		})) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.INVALID_PASSWORD);
 	}
 	if (ctx.body.token) {
-		await deleteUserCallback({
-			...ctx,
-			query: { token: ctx.body.token }
-		});
+		await deleteUserWithToken(ctx, session.user, ctx.body.token);
 		return ctx.json({
 			success: true,
 			message: "User deleted"
@@ -327,13 +346,7 @@ const deleteUser = createAuthEndpoint("/delete-user", {
 		const freshAge = ctx.context.sessionConfig.freshAge * 1e3;
 		if (Date.now() - createdAt >= freshAge) throw APIError.from("BAD_REQUEST", BASE_ERROR_CODES.SESSION_EXPIRED);
 	}
-	const beforeDelete = ctx.context.options.user.deleteUser?.beforeDelete;
-	if (beforeDelete) await beforeDelete(session.user, ctx.request);
-	await ctx.context.internalAdapter.deleteUser(session.user.id);
-	await ctx.context.internalAdapter.deleteUserSessions(session.user.id);
-	deleteSessionCookie(ctx);
-	const afterDelete = ctx.context.options.user.deleteUser?.afterDelete;
-	if (afterDelete) await afterDelete(session.user, ctx.request);
+	await deleteCurrentUser(ctx, session.user);
 	return ctx.json({
 		success: true,
 		message: "User deleted"
@@ -377,16 +390,7 @@ const deleteUserCallback = createAuthEndpoint("/delete-user/callback", {
 	}
 	const session = await getSessionFromCtx(ctx, { disableCookieCache: isStateful(ctx) });
 	if (!session) throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.FAILED_TO_GET_USER_INFO);
-	const token = await ctx.context.internalAdapter.consumeVerificationValue(`delete-account-${ctx.query.token}`);
-	if (!token || token.value !== session.user.id) throw APIError.from("NOT_FOUND", BASE_ERROR_CODES.INVALID_TOKEN);
-	const beforeDelete = ctx.context.options.user.deleteUser?.beforeDelete;
-	if (beforeDelete) await beforeDelete(session.user, ctx.request);
-	await ctx.context.internalAdapter.deleteUser(session.user.id);
-	await ctx.context.internalAdapter.deleteUserSessions(session.user.id);
-	await ctx.context.internalAdapter.deleteAccounts(session.user.id);
-	deleteSessionCookie(ctx);
-	const afterDelete = ctx.context.options.user.deleteUser?.afterDelete;
-	if (afterDelete) await afterDelete(session.user, ctx.request);
+	await deleteUserWithToken(ctx, session.user, ctx.query.token);
 	if (ctx.query.callbackURL) throw ctx.redirect(ctx.query.callbackURL || "/");
 	return ctx.json({
 		success: true,
@@ -516,5 +520,4 @@ const changeEmail = createAuthEndpoint("/change-email", {
 	}, ctx.request));
 	return ctx.json({ status: true });
 });
-//#endregion
 export { changeEmail, changePassword, deleteUser, deleteUserCallback, setPassword, updateUser };

package/dist/api/state/oauth.d.mts

@@ -1,4 +1,3 @@
-//#region src/api/state/oauth.d.ts
 type OAuthState = {
   callbackURL: string;
   codeVerifier: string;
@@ -46,5 +45,4 @@ declare const getOAuthState: <T extends Record<string, unknown> = Record<string,
  * stored as `unknown`, so narrow their shape when reading them back.
  */
 declare const addOAuthServerContext: (values: Record<string, unknown>) => Promise<void>;
-//#endregion
 export { addOAuthServerContext, getOAuthState };

package/dist/api/state/oauth.mjs

@@ -1,5 +1,5 @@
 import { defineRequestState } from "@better-auth/core/context";
-//#region src/api/state/oauth.ts
+// src/api/state/oauth.ts
 const { get: getRawOAuthState, set: setOAuthState } = defineRequestState(() => null);
 /**
 * Reads the OAuth state for the current request. During a callback it holds the
@@ -35,5 +35,4 @@ const addOAuthServerContext = async (values) => {
 		...values
 	});
 };
-//#endregion
 export { addOAuthServerContext, getOAuthServerContext, getOAuthState, setOAuthState };

package/dist/api/state/session-source.d.mts

@@ -1,4 +1,3 @@
-//#region src/api/state/session-source.d.ts
 /**
  * Marks the request session with `token` as built without a session-store
  * row. Checks that re-read the store to catch a concurrent revocation skip
@@ -6,5 +5,4 @@
  *
  * @internal Shared by Better Auth packages; not a supported public API.
  */
-export declare function markSessionOutsideStore(token: string): Promise<void>;
-//#endregion
+export declare function markSessionOutsideStore(token: string): Promise<void>;

package/dist/api/state/session-source.mjs

@@ -1,5 +1,5 @@
 import { defineRequestState } from "@better-auth/core/context";
-//#region src/api/state/session-source.ts
+// src/api/state/session-source.ts
 /**
 * Tokens of request sessions that a plugin built without a session-store
 * row, such as one authenticated by an API key on every request.
@@ -24,5 +24,4 @@ async function markSessionOutsideStore(token) {
 async function isSessionOutsideStore(token) {
 	return (await getTokensOutsideStore().catch(() => null))?.has(token) ?? false;
 }
-//#endregion
 export { isSessionOutsideStore, markSessionOutsideStore };

package/dist/api/state/should-session-refresh.d.mts

@@ -1,4 +1,3 @@
-//#region src/api/state/should-session-refresh.d.ts
 /**
  * State for skipping session refresh
  *
@@ -8,5 +7,4 @@
  * data stored in cookies.
  */
 declare const getShouldSkipSessionRefresh: () => Promise<boolean | null>, setShouldSkipSessionRefresh: (value: boolean | null) => Promise<void>;
-//#endregion
 export { getShouldSkipSessionRefresh, setShouldSkipSessionRefresh };

package/dist/api/state/should-session-refresh.mjs

@@ -1,5 +1,5 @@
 import { defineRequestState } from "@better-auth/core/context";
-//#region src/api/state/should-session-refresh.ts
+// src/api/state/should-session-refresh.ts
 /**
 * State for skipping session refresh
 *
@@ -9,5 +9,4 @@ import { defineRequestState } from "@better-auth/core/context";
 * data stored in cookies.
 */
 const { get: getShouldSkipSessionRefresh, set: setShouldSkipSessionRefresh } = defineRequestState(() => false);
-//#endregion
 export { getShouldSkipSessionRefresh, setShouldSkipSessionRefresh };

package/dist/api/to-auth-endpoints.mjs

@@ -1,9 +1,9 @@
-import { isDynamicBaseURLConfig, isRequestLike } from "../utils/url.mjs";
 import { pickSource, resolveDynamicTrustedProxyHeaders, resolveRequestContext } from "../context/helpers.mjs";
+import { isDynamicBaseURLConfig, isRequestLike } from "../utils/url.mjs";
 import { dispatchAuthEndpoint, getOperationId } from "./dispatch.mjs";
 import { hasRequestState, runWithRequestState } from "@better-auth/core/context";
 import { APIError, BetterAuthError } from "@better-auth/core/error";
-//#region src/api/to-auth-endpoints.ts
+// src/api/to-auth-endpoints.ts
 /**
 * Resolves the per-call `AuthContext` for endpoints with a dynamic `baseURL`.
 *
@@ -56,5 +56,4 @@ function toAuthEndpoints(endpoints, ctx) {
 	}
 	return api;
 }
-//#endregion
 export { toAuthEndpoints };

package/dist/auth/base.mjs

@@ -1,10 +1,9 @@
-import { getBaseURL, getOrigin, isDynamicBaseURLConfig } from "../utils/url.mjs";
-import { getTrustedOrigins, getTrustedProviders, resolveDynamicTrustedProxyHeaders, resolveRequestContext } from "../context/helpers.mjs";
 import { getEndpoints, router } from "../api/index.mjs";
+import { getTrustedOrigins, getTrustedProviders, resolveDynamicTrustedProxyHeaders, resolveRequestContext } from "../context/helpers.mjs";
+import { getBaseURL, getOrigin, isDynamicBaseURLConfig } from "../utils/url.mjs";
 import { runWithAdapter } from "@better-auth/core/context";
 import { BASE_ERROR_CODES, BetterAuthError } from "@better-auth/core/error";
-import { SchemaMismatchError } from "@better-auth/core/db/internal";
-//#region src/auth/base.ts
+// src/auth/base.ts
 const createBetterAuth = (options, initFn) => {
 	const authContext = initFn(options).then((ctx) => {
 		const validateSchema = ctx.options.advanced?.database?.validateSchema;
@@ -12,10 +11,6 @@ const createBetterAuth = (options, initFn) => {
 			const level = validateSchema === true ? "warn" : "debug";
 			ctx.logger[level](`Schema validation is not available for adapter "${ctx.adapter.id}". Skipping schema validation. Database operations will proceed normally.`);
 		}
-		const pendingSchemaCheck = ctx.checkSchema?.();
-		if (pendingSchemaCheck) pendingSchemaCheck.catch((error) => {
-			ctx.logger.error(error instanceof SchemaMismatchError ? error.message : "Could not validate the database schema. Check your database connection.");
-		});
 		return ctx;
 	});
 	const { api } = getEndpoints(authContext, options);
@@ -62,5 +57,4 @@ const createBetterAuth = (options, initFn) => {
 		}
 	};
 };
-//#endregion
 export { createBetterAuth };

package/dist/auth/full.d.mts

@@ -1,7 +1,6 @@
 import { Auth } from "../types/auth.mjs";
 import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-//#region src/auth/full.d.ts
 /**
  * Better Auth initializer for full mode (with Kysely)
  *
@@ -23,5 +22,4 @@ import { BetterAuthOptions } from "@better-auth/core";
  *	  database: drizzleAdapter(db, { provider: "pg" }),
  * });
  */
-export declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;
-//#endregion
+export declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;

package/dist/auth/full.mjs

@@ -1,6 +1,6 @@
 import { init } from "../context/init.mjs";
 import { createBetterAuth } from "./base.mjs";
-//#region src/auth/full.ts
+// src/auth/full.ts
 /**
 * Better Auth initializer for full mode (with Kysely)
 *
@@ -25,5 +25,4 @@ import { createBetterAuth } from "./base.mjs";
 const betterAuth = (options) => {
 	return createBetterAuth(options, init);
 };
-//#endregion
 export { betterAuth };

package/dist/auth/minimal.d.mts

@@ -1,10 +1,8 @@
 import { Auth } from "../types/auth.mjs";
 import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
-//#region src/auth/minimal.d.ts
 /**
  * Better Auth initializer for minimal mode (without Kysely)
  */
 export declare const betterAuth: <Options extends BetterAuthOptions>(options: Options & {}) => Auth<Options>;
-//#endregion
 export type { BetterAuthOptions };

package/dist/auth/minimal.mjs

@@ -1,11 +1,10 @@
-import { createBetterAuth } from "./base.mjs";
 import { initMinimal } from "../context/init-minimal.mjs";
-//#region src/auth/minimal.ts
+import { createBetterAuth } from "./base.mjs";
+// src/auth/minimal.ts
 /**
 * Better Auth initializer for minimal mode (without Kysely)
 */
 const betterAuth = (options) => {
 	return createBetterAuth(options, initMinimal);
 };
-//#endregion
 export { betterAuth };

package/dist/auth/trusted-origins.mjs

@@ -1,7 +1,7 @@
-import { wildcardMatch } from "../utils/wildcard.mjs";
 import { getHost, getOrigin, getProtocol } from "../utils/url.mjs";
+import { wildcardMatch } from "../utils/wildcard.mjs";
 import * as z from "zod";
-//#region src/auth/trusted-origins.ts
+// src/auth/trusted-origins.ts
 const CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f-\u009f]/;
 const RELATIVE_URL_PARSER_ORIGIN = "https://better-auth.invalid";
 const ENCODED_PATH_SEPARATOR_PATTERN = /%2[fF]|%5[cC]/;
@@ -127,5 +127,4 @@ const matchesOriginPattern = (url, pattern, settings) => {
 	if (!parsedPattern.path) return true;
 	return parsed.path === parsedPattern.path || parsed.path.startsWith(`${parsedPattern.path}/`);
 };
-//#endregion
 export { matchesOriginPattern };

package/dist/client/broadcast-channel.d.mts

@@ -1,4 +1,3 @@
-//#region src/client/broadcast-channel.d.ts
 export interface BroadcastMessage {
   event?: "session" | undefined;
   data?: {
@@ -14,5 +13,4 @@ export interface BroadcastChannel {
   subscribe(listener: BroadcastListener): () => void;
   setup(): () => void;
 }
-export declare function getGlobalBroadcastChannel(name?: string): BroadcastChannel;
-//#endregion
+export declare function getGlobalBroadcastChannel(name?: string): BroadcastChannel;

package/dist/client/broadcast-channel.mjs

@@ -1,4 +1,4 @@
-//#region src/client/broadcast-channel.ts
+// src/client/broadcast-channel.ts
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -24,15 +24,16 @@ var WindowBroadcastChannel = class {
 	}
 	setup() {
 		if (typeof window === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const target = window;
 		const handler = (event) => {
 			if (event.key !== this.name) return;
 			const message = JSON.parse(event.newValue ?? "{}");
 			if (message?.event !== "session" || !message?.data) return;
 			this.listeners.forEach((listener) => listener(message));
 		};
-		window.addEventListener("storage", handler);
+		target.addEventListener("storage", handler);
 		return () => {
-			window.removeEventListener("storage", handler);
+			target.removeEventListener("storage", handler);
 		};
 	}
 };
@@ -40,5 +41,4 @@ function getGlobalBroadcastChannel(name = "better-auth.message") {
 	if (!globalThis[kBroadcastChannel]) globalThis[kBroadcastChannel] = new WindowBroadcastChannel(name);
 	return globalThis[kBroadcastChannel];
 }
-//#endregion
 export { getGlobalBroadcastChannel, kBroadcastChannel };

package/dist/client/config.d.mts

@@ -1,7 +1,6 @@
 import { SessionData } from "./session-atom.mjs";
 import { BetterAuthClientOptions, ClientAtomListener } from "@better-auth/core";
 import { WritableAtom } from "nanostores";
-//#region src/client/config.d.ts
 export declare const getClientConfig: (options?: BetterAuthClientOptions | undefined, loadEnv?: boolean | undefined) => {
   readonly baseURL: string;
   pluginsActions: Record<string, any>;
@@ -82,5 +81,4 @@ export declare const getClientConfig: (options?: BetterAuthClientOptions | undef
     listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
     atoms: Record<string, WritableAtom<any>>;
   };
-};
-//#endregion
+};

package/dist/client/config.mjs

@@ -1,10 +1,10 @@
 import { getBaseURL } from "../utils/url.mjs";
-import { parseJSON } from "./parser.mjs";
 import { redirectPlugin } from "./fetch-plugins.mjs";
+import { parseJSON } from "./parser.mjs";
 import { getSessionAtom, hydrateSessionAtom } from "./session-atom.mjs";
 import { defu as defu$1 } from "defu";
 import { createFetch } from "@better-fetch/fetch";
-//#region src/client/config.ts
+// src/client/config.ts
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -108,5 +108,4 @@ const getClientConfig = (options, loadEnv) => {
 		$store
 	};
 };
-//#endregion
 export { getClientConfig, matchesSessionSignal };

package/dist/client/equality.d.mts

@@ -1,5 +1,4 @@
 import { Store, StoreValue } from "nanostores";
-//#region src/client/equality.d.ts
 /**
  * Deep structural equality for JSON-serializable values.
  * Handles: primitives, null, arrays, and plain objects.
@@ -13,5 +12,4 @@ export declare function isJsonEqual(a: unknown, b: unknown): boolean;
  *
  * Returns the unsubscribe function from `onSet`.
  */
-export declare function withEquality<S extends Store>(store: S, isEqual: (a: StoreValue<S>, b: StoreValue<S>) => boolean): () => void;
-//#endregion
+export declare function withEquality<S extends Store>(store: S, isEqual: (a: StoreValue<S>, b: StoreValue<S>) => boolean): () => void;

package/dist/client/equality.mjs

@@ -1,5 +1,5 @@
 import { onSet } from "nanostores";
-//#region src/client/equality.ts
+// src/client/equality.ts
 function isPlainObject(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -38,5 +38,4 @@ function withEquality(store, isEqual) {
 		if (isEqual(store.value, newValue)) abort();
 	});
 }
-//#endregion
 export { isJsonEqual, withEquality };

package/dist/client/fetch-plugins.mjs

@@ -1,5 +1,5 @@
 import { isSafeUrlScheme } from "@better-auth/core/utils/url";
-//#region src/client/fetch-plugins.ts
+// src/client/fetch-plugins.ts
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -13,5 +13,4 @@ const redirectPlugin = {
 		}
 	} }
 };
-//#endregion
 export { redirectPlugin };

package/dist/client/focus-manager.d.mts

@@ -1,9 +1,7 @@
-//#region src/client/focus-manager.d.ts
 export type FocusListener = (focused: boolean) => void;
 export declare const kFocusManager: unique symbol;
 export interface FocusManager {
   setFocused(focused: boolean): void;
   subscribe(listener: FocusListener): () => void;
   setup(): () => void;
-}
-//#endregion
+}

package/dist/client/focus-manager.mjs

@@ -1,4 +1,4 @@
-//#region src/client/focus-manager.ts
+// src/client/focus-manager.ts
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -13,12 +13,13 @@ var WindowFocusManager = class {
 	}
 	setup() {
 		if (typeof window === "undefined" || typeof document === "undefined" || typeof window.addEventListener === "undefined") return () => {};
+		const target = document;
 		const visibilityHandler = () => {
 			if (document.visibilityState === "visible") this.setFocused(true);
 		};
-		document.addEventListener("visibilitychange", visibilityHandler, false);
+		target.addEventListener("visibilitychange", visibilityHandler, false);
 		return () => {
-			document.removeEventListener("visibilitychange", visibilityHandler, false);
+			target.removeEventListener("visibilitychange", visibilityHandler, false);
 		};
 	}
 };
@@ -26,5 +27,4 @@ function getGlobalFocusManager() {
 	if (!globalThis[kFocusManager]) globalThis[kFocusManager] = new WindowFocusManager();
 	return globalThis[kFocusManager];
 }
-//#endregion
 export { getGlobalFocusManager, kFocusManager };

package/dist/client/index.d.mts

@@ -1,6 +1,3 @@
-import { ExtractPluginField, HasRequiredKeys, InferPluginFieldFromTuple, IsAny, OverrideMerge, Prettify, PrettifyDeep, RequiredKeysOf, StripEmptyObjects, UnionToIntersection } from "../types/helper.mjs";
-import { CamelCase, InferCtx, InferRoute, InferRoutes, InferSessionUpdateCtx, InferSignUpEmailCtx, InferUserUpdateCtx, MergeRoutes, PathToObject, ProxyRequest } from "./path-to-object.mjs";
-import { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientStore, InferActions, InferAdditionalFromClient, InferClientAPI, InferErrorCodes, InferSessionFromClient, InferUserFromClient, IsSignal, SessionQueryParams } from "./types.mjs";
 import { BroadcastChannel, BroadcastListener, BroadcastMessage, getGlobalBroadcastChannel, kBroadcastChannel } from "./broadcast-channel.mjs";
 import { isJsonEqual, withEquality } from "./equality.mjs";
 import { FocusListener, FocusManager, kFocusManager } from "./focus-manager.mjs";
@@ -8,23 +5,25 @@ import { OnlineListener, OnlineManager, kOnlineManager } from "./online-manager.
 import { parseJSON } from "./parser.mjs";
 import { AuthQueryAtom, AuthQueryState, useAuthQuery } from "./query.mjs";
 import { SessionRefreshOptions, createSessionRefreshManager } from "./session-refresh.mjs";
+import { BetterAuthClientOptions, BetterAuthClientPlugin, ClientAtomListener, ClientStore, InferActions, InferAdditionalFromClient, InferClientAPI, InferErrorCodes, InferSessionFromClient, InferUserFromClient, IsSignal, SessionQueryParams } from "./types.mjs";
 import { AuthClient, createAuthClient } from "./vanilla.mjs";
+import "../plugins/access/index.mjs";
+import "../plugins/organization/index.mjs";
 import { AccessControl, ArrayElement, ExactRoleStatements, Role, RoleAuthorizeRequest, RoleInput, RoleStatements, Statements, SubArray, Subset } from "../plugins/access/types.mjs";
 import { AuthorizeResponse, createAccessControl, role } from "../plugins/access/access.mjs";
-import "../plugins/access/index.mjs";
+import { ExtractPluginField, HasRequiredKeys, InferPluginFieldFromTuple, IsAny, OverrideMerge, Prettify, PrettifyDeep, RequiredKeysOf, StripEmptyObjects, UnionToIntersection } from "../types/helper.mjs";
 import { OrganizationOptions } from "../plugins/organization/types.mjs";
 import { InferInvitation, InferMember, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferTeam, Invitation, InvitationInput, InvitationStatus, Member, MemberInput, Organization, OrganizationInput, OrganizationRole, OrganizationSchema, Team, TeamInput, TeamMember, TeamMemberInput, defaultRolesSchema, invitationSchema, invitationStatus, memberSchema, organizationRoleSchema, organizationSchema, roleSchema, teamMemberSchema, teamSchema } from "../plugins/organization/schema.mjs";
 import { getOrgAdapter } from "../plugins/organization/adapter.mjs";
 import { hasPermission } from "../plugins/organization/has-permission.mjs";
 import { parseRoles } from "../plugins/organization/roles.mjs";
 import { DefaultOrganizationPlugin, DynamicAccessControlEndpoints, OrganizationCreator, OrganizationEndpoints, OrganizationPlugin, TeamEndpoints, organization } from "../plugins/organization/organization.mjs";
-import "../plugins/organization/index.mjs";
+import { CamelCase, InferCtx, InferRoute, InferRoutes, InferSessionUpdateCtx, InferSignUpEmailCtx, InferUserUpdateCtx, MergeRoutes, PathToObject, ProxyRequest } from "./path-to-object.mjs";
 import { BetterAuthOptions, BetterAuthPlugin } from "@better-auth/core";
 import { DBPrimitive } from "@better-auth/core/db";
 export type * from "@better-auth/core/db";
 export type * from "nanostores";
 export type * from "@better-fetch/fetch";
-//#region src/client/index.d.ts
 export declare const InferPlugin: <T extends BetterAuthPlugin>() => {
   id: "infer-server-plugin";
   version: string;
@@ -33,5 +32,4 @@ export declare const InferPlugin: <T extends BetterAuthPlugin>() => {
 export declare function InferAuth<O extends {
   options: BetterAuthOptions;
 }>(): O["options"];
-//#endregion
 export { type AccessControl, type ArrayElement, AuthClient, AuthQueryAtom, AuthQueryState, type AuthorizeResponse, type BetterAuthClientOptions, type BetterAuthClientPlugin, BroadcastChannel, BroadcastListener, BroadcastMessage, type CamelCase, type ClientAtomListener, type ClientStore, type DBPrimitive, type DefaultOrganizationPlugin, type DynamicAccessControlEndpoints, type ExactRoleStatements, type ExtractPluginField, type FocusListener, type FocusManager, type HasRequiredKeys, InferActions, InferAdditionalFromClient, InferClientAPI, type InferCtx, InferErrorCodes, type InferInvitation, type InferMember, type InferOrganization, type InferOrganizationRolesFromOption, type InferOrganizationZodRolesFromOption, type InferPluginFieldFromTuple, type InferRoute, type InferRoutes, InferSessionFromClient, type InferSessionUpdateCtx, type InferSignUpEmailCtx, type InferTeam, InferUserFromClient, type InferUserUpdateCtx, type Invitation, type InvitationInput, type InvitationStatus, type IsAny, IsSignal, type Member, type MemberInput, type MergeRoutes, type OnlineListener, type OnlineManager, type Organization, type OrganizationCreator, type OrganizationEndpoints, type OrganizationInput, type OrganizationOptions, type OrganizationPlugin, type OrganizationRole, type OrganizationSchema, type OverrideMerge, type PathToObject, type Prettify, type PrettifyDeep, type ProxyRequest, type RequiredKeysOf, type Role, type RoleAuthorizeRequest, type RoleInput, type RoleStatements, SessionQueryParams, SessionRefreshOptions, type Statements, type StripEmptyObjects, type SubArray, type Subset, type Team, type TeamEndpoints, type TeamInput, type TeamMember, type TeamMemberInput, type UnionToIntersection, type createAccessControl, createAuthClient, createSessionRefreshManager, type defaultRolesSchema, getGlobalBroadcastChannel, type getOrgAdapter, type hasPermission, type invitationSchema, type invitationStatus, isJsonEqual, kBroadcastChannel, kFocusManager, kOnlineManager, type memberSchema, type organization, type organizationRoleSchema, type organizationSchema, parseJSON, type parseRoles, type role, type roleSchema, type teamMemberSchema, type teamSchema, useAuthQuery, withEquality };