better-auth 1.8.0-beta.2 → 1.8.0-beta.4

package/dist/crypto/index.d.mts

@@ -3,30 +3,23 @@ import { signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT } from "./jw
 import { hashPassword, verifyPassword } from "./password.mjs";
 import { generateRandomString } from "./random.mjs";
 import { SecretConfig } from "@better-auth/core";
-
 //#region src/crypto/index.d.ts
-declare function parseEnvelope(data: string): {
+export declare function parseEnvelope(data: string): {
   version: number;
   ciphertext: string;
 } | null;
-declare function formatEnvelope(version: number, ciphertext: string): string;
-type SymmetricEncryptOptions = {
+export declare function formatEnvelope(version: number, ciphertext: string): string;
+export type SymmetricEncryptOptions = {
   key: string | SecretConfig;
   data: string;
 };
-declare const symmetricEncrypt: ({
-  key,
-  data
-}: SymmetricEncryptOptions) => Promise<string>;
-type SymmetricDecryptOptions = {
+export declare const symmetricEncrypt: ({ key, data }: SymmetricEncryptOptions) => Promise<string>;
+export type SymmetricDecryptOptions = {
   key: string | SecretConfig;
   data: string;
 };
-declare const symmetricDecrypt: ({
-  key,
-  data
-}: SymmetricDecryptOptions) => Promise<string>;
-declare const getCryptoKey: (secret: string | BufferSource) => Promise<CryptoKey>;
-declare const makeSignature: (value: string, secret: string | BufferSource) => Promise<string>;
+export declare const symmetricDecrypt: ({ key, data }: SymmetricDecryptOptions) => Promise<string>;
+export declare const getCryptoKey: (secret: string | BufferSource) => Promise<CryptoKey>;
+export declare const makeSignature: (value: string, secret: string | BufferSource) => Promise<string>;
 //#endregion
-export { type SecretConfig, SymmetricDecryptOptions, SymmetricEncryptOptions, constantTimeEqual, formatEnvelope, generateRandomString, getCryptoKey, hashPassword, makeSignature, parseEnvelope, signJWT, symmetricDecodeJWT, symmetricDecrypt, symmetricEncodeJWT, symmetricEncrypt, verifyJWT, verifyPassword };
+export { type SecretConfig, constantTimeEqual, generateRandomString, hashPassword, signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT, verifyPassword };

package/dist/crypto/index.mjs

@@ -30,7 +30,8 @@ function formatEnvelope(version, ciphertext) {
 async function rawEncrypt(secret, data) {
 	const keyAsBytes = await createHash("SHA-256").digest(secret);
 	const dataAsBytes = utf8ToBytes(data);
-	return bytesToHex(managedNonce(xchacha20poly1305)(new Uint8Array(keyAsBytes)).encrypt(dataAsBytes));
+	const chacha = managedNonce(xchacha20poly1305)(new Uint8Array(keyAsBytes));
+	return bytesToHex(chacha.encrypt(dataAsBytes));
 }
 async function rawDecrypt(secret, hex) {
 	const keyAsBytes = await createHash("SHA-256").digest(secret);

package/dist/crypto/jwt.d.mts

@@ -1,9 +1,7 @@
 import { SecretConfig } from "./index.mjs";
-
 //#region src/crypto/jwt.d.ts
-declare function signJWT(payload: any, secret: string, expiresIn?: number): Promise<string>;
-declare function verifyJWT<T = any>(token: string, secret: string): Promise<T | null>;
-declare function symmetricEncodeJWT<T extends Record<string, any>>(payload: T, secret: string | SecretConfig, salt: string, expiresIn?: number): Promise<string>;
-declare function symmetricDecodeJWT<T = any>(token: string, secret: string | SecretConfig, salt: string): Promise<T | null>;
-//#endregion
-export { signJWT, symmetricDecodeJWT, symmetricEncodeJWT, verifyJWT };
+export declare function signJWT(payload: any, secret: string, expiresIn?: number): Promise<string>;
+export declare function verifyJWT<T = any>(token: string, secret: string): Promise<T | null>;
+export declare function symmetricEncodeJWT<T extends Record<string, any>>(payload: T, secret: string | SecretConfig, salt: string, expiresIn?: number): Promise<string>;
+export declare function symmetricDecodeJWT<T = any>(token: string, secret: string | SecretConfig, salt: string): Promise<T | null>;
+//#endregion

package/dist/crypto/jwt.mjs

@@ -129,7 +129,8 @@ async function symmetricDecodeJWT(token, secret, salt) {
 		if (secrets.length <= 1) return null;
 		for (let i = 1; i < secrets.length; i++) try {
 			const s = secrets[i];
-			const { payload } = await jwtDecrypt(token, deriveEncryptionSecret(s.value, salt), jwtDecryptOpts);
+			const encryptionSecret = deriveEncryptionSecret(s.value, salt);
+			const { payload } = await jwtDecrypt(token, encryptionSecret, jwtDecryptOpts);
 			return payload;
 		} catch {
 			continue;

package/dist/crypto/password.d.mts

@@ -1,11 +1,7 @@
 import { hashPassword } from "@better-auth/utils/password";
-
 //#region src/crypto/password.d.ts
 declare const hashPassword$1: typeof hashPassword;
-declare const verifyPassword$1: ({
-  hash,
-  password
-}: {
+declare const verifyPassword$1: ({ hash, password }: {
   hash: string;
   password: string;
 }) => Promise<boolean>;

package/dist/crypto/random.d.mts

@@ -1,4 +1,3 @@
 //#region src/crypto/random.d.ts
-declare const generateRandomString: <SubA extends "a-z" | "A-Z" | "0-9" | "-_">(length: number, ...alphabets: SubA[]) => string;
-//#endregion
-export { generateRandomString };
+export declare const generateRandomString: <SubA extends "a-z" | "A-Z" | "0-9" | "-_">(length: number, ...alphabets: SubA[]) => string;
+//#endregion

package/dist/db/adapter-base.d.mts

@@ -1,7 +1,5 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { DBAdapter } from "@better-auth/core/db/adapter";
-
 //#region src/db/adapter-base.d.ts
-declare function getBaseAdapter(options: BetterAuthOptions, handleDirectDatabase: (options: BetterAuthOptions) => Promise<DBAdapter<BetterAuthOptions>>): Promise<DBAdapter<BetterAuthOptions>>;
-//#endregion
-export { getBaseAdapter };
+export declare function getBaseAdapter(options: BetterAuthOptions, handleDirectDatabase: (options: BetterAuthOptions) => Promise<DBAdapter<BetterAuthOptions>>): Promise<DBAdapter<BetterAuthOptions>>;
+//#endregion

package/dist/db/adapter-kysely.d.mts

@@ -1,7 +1,5 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { DBAdapter } from "@better-auth/core/db/adapter";
-
 //#region src/db/adapter-kysely.d.ts
-declare function getAdapter(options: BetterAuthOptions): Promise<DBAdapter<BetterAuthOptions>>;
-//#endregion
-export { getAdapter };
+export declare function getAdapter(options: BetterAuthOptions): Promise<DBAdapter<BetterAuthOptions>>;
+//#endregion

package/dist/db/field-converter.d.mts

@@ -1,7 +1,5 @@
 import { DBFieldAttribute } from "@better-auth/core/db";
-
 //#region src/db/field-converter.d.ts
-declare function convertToDB<T extends Record<string, any>>(fields: Record<string, DBFieldAttribute>, values: T): T;
-declare function convertFromDB<T extends Record<string, any>>(fields: Record<string, DBFieldAttribute>, values: T | null): T | null;
-//#endregion
-export { convertFromDB, convertToDB };
+export declare function convertToDB<T extends Record<string, any>>(fields: Record<string, DBFieldAttribute>, values: T): T;
+export declare function convertFromDB<T extends Record<string, any>>(fields: Record<string, DBFieldAttribute>, values: T | null): T | null;
+//#endregion

package/dist/db/field.d.mts

@@ -1,22 +1,21 @@
 import { DBFieldAttribute, InferDBValueType } from "@better-auth/core/db";
-
 //#region src/db/field.d.ts
-type InferFieldsOutput<Fields extends Record<string, DBFieldAttribute>> = Fields extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? key : never : key]: InferFieldOutput<Fields[key]> } & { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? never : key : never]?: InferFieldOutput<Fields[key]> | null } : never;
+export type InferFieldsOutput<Fields extends Record<string, DBFieldAttribute>> = Fields extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? key : never : key]: InferFieldOutput<Fields[key]>; } & { [key in Key as Fields[key]["returned"] extends false ? never : Fields[key]["required"] extends false ? Fields[key]["defaultValue"] extends boolean | string | number | Date ? never : key : never]?: InferFieldOutput<Fields[key]> | null; } : never;
 /**
  * For client will add "?" on optional fields
  */
-type InferFieldsInputClient<Fields extends Record<string, DBFieldAttribute>> = Fields extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Fields[key]["required"] extends false ? never : Fields[key]["defaultValue"] extends string | number | boolean | Date ? never : Fields[key]["input"] extends false ? never : key]: InferFieldInput<Fields[key]> } & { [key in Key as Fields[key]["input"] extends false ? never : Fields[key]["required"] extends false ? key : Fields[key]["defaultValue"] extends string | number | boolean | Date ? key : never]?: InferFieldInput<Fields[key]> | undefined | null } : never;
+export type InferFieldsInputClient<Fields extends Record<string, DBFieldAttribute>> = Fields extends Record<infer Key, DBFieldAttribute> ? { [key in Key as Fields[key]["required"] extends false ? never : Fields[key]["defaultValue"] extends string | number | boolean | Date ? never : Fields[key]["input"] extends false ? never : key]: InferFieldInput<Fields[key]>; } & { [key in Key as Fields[key]["input"] extends false ? never : Fields[key]["required"] extends false ? key : Fields[key]["defaultValue"] extends string | number | boolean | Date ? key : never]?: InferFieldInput<Fields[key]> | undefined | null; } : never;
 type InferFieldOutput<T extends DBFieldAttribute> = T["returned"] extends false ? never : T["required"] extends false ? InferDBValueType<T["type"]> | undefined | null : InferDBValueType<T["type"]>;
 /**
  * Converts a Record<string, DBFieldAttribute> to an object type
  * with keys and value types inferred from DBFieldAttribute["type"].
  */
-type FieldAttributeToObject<Fields extends Record<string, DBFieldAttribute>> = AddOptionalFields<{ [K in keyof Fields]: InferDBValueType<Fields[K]["type"]> }, Fields>;
+export type FieldAttributeToObject<Fields extends Record<string, DBFieldAttribute>> = AddOptionalFields<{ [K in keyof Fields]: InferDBValueType<Fields[K]["type"]>; }, Fields>;
 type AddOptionalFields<T extends Record<string, any>, Fields extends Record<keyof T, DBFieldAttribute>> = { [K in keyof T as Fields[K] extends {
   required: false;
-} ? never : K]: T[K] } & { [K in keyof T as Fields[K] extends {
+} ? never : K]: T[K]; } & { [K in keyof T as Fields[K] extends {
   required: false;
-} ? K : never]?: T[K] };
+} ? K : never]?: T[K]; };
 /**
  * Infer the additional fields from the plugin options.
  * For example, you can infer the additional fields of the org plugin's organization schema like this:
@@ -27,15 +26,15 @@ type AddOptionalFields<T extends Record<string, any>, Fields extends Record<keyo
  * @param isClientSide - When `true` (default), filters out `input: false` fields (clients can't send these).
  *   When `false`, includes all fields (for internal/server-side use).
  */
-type InferAdditionalFieldsFromPluginOptions<SchemaName extends string, Options extends {
+export type InferAdditionalFieldsFromPluginOptions<SchemaName extends string, Options extends {
   schema?: { [key in SchemaName]?: {
     additionalFields?: Record<string, DBFieldAttribute>;
-  } } | undefined;
+  }; } | undefined;
 }, isClientSide extends boolean = true> = Options["schema"] extends { [key in SchemaName]?: {
   additionalFields: infer Field extends Record<string, DBFieldAttribute>;
-} } ? isClientSide extends true ? FieldAttributeToObject<RemoveFieldsWithInputFalse<Field>> : FieldAttributeToObject<Field> : {};
-type RemoveFieldsWithInputFalse<T extends Record<string, DBFieldAttribute>> = { [K in keyof T as T[K]["input"] extends false ? never : K]: T[K] };
-type RemoveFieldsWithReturnedFalse<T extends Record<string, DBFieldAttribute>> = { [K in keyof T as T[K]["returned"] extends false ? never : K]: T[K] };
+}; } ? isClientSide extends true ? FieldAttributeToObject<RemoveFieldsWithInputFalse<Field>> : FieldAttributeToObject<Field> : {};
+type RemoveFieldsWithInputFalse<T extends Record<string, DBFieldAttribute>> = { [K in keyof T as T[K]["input"] extends false ? never : K]: T[K]; };
+export type RemoveFieldsWithReturnedFalse<T extends Record<string, DBFieldAttribute>> = { [K in keyof T as T[K]["returned"] extends false ? never : K]: T[K]; };
 type InferFieldInput<T extends DBFieldAttribute> = InferDBValueType<T["type"]>;
 //#endregion
-export { FieldAttributeToObject, InferAdditionalFieldsFromPluginOptions, InferFieldsInputClient, InferFieldsOutput, RemoveFieldsWithReturnedFalse };
+export {};

package/dist/db/get-migration.d.mts

@@ -3,7 +3,6 @@ import { DBFieldAttribute, DBFieldType } from "@better-auth/core/db";
 import { BetterAuthError } from "@better-auth/core/error";
 import { KyselyDatabaseType } from "@better-auth/kysely-adapter";
 import { ResolvedDBTableIndex } from "@better-auth/core/db/internal";
-
 //#region src/db/get-migration.d.ts
 /**
  * Thrown when {@link getMigrations} refuses to add a required column with no
@@ -11,8 +10,8 @@ import { ResolvedDBTableIndex } from "@better-auth/core/db/internal";
  * {@link BetterAuthError} thrown for index-definition conflicts, so callers
  * can tell the two apart without matching on message text.
  */
-declare class UnsafeMigrationError extends BetterAuthError {}
-declare function matchType(columnDataType: string, fieldType: DBFieldType, dbType: KyselyDatabaseType): boolean;
+export declare class UnsafeMigrationError extends BetterAuthError {}
+export declare function matchType(columnDataType: string, fieldType: DBFieldType, dbType: KyselyDatabaseType): boolean;
 /**
  * Build the migration plan that `auth migrate` executes and `auth generate`
  * prints for the Kysely adapter.
@@ -27,9 +26,7 @@ declare function matchType(columnDataType: string, fieldType: DBFieldType, dbTyp
  * @throws {BetterAuthError} when an index definition conflicts with an
  * existing or already-planned index.
  */
-declare function getMigrations(config: BetterAuthOptions, {
-  throwOnUnsafe
-}?: {
+export declare function getMigrations(config: BetterAuthOptions, { throwOnUnsafe }?: {
   throwOnUnsafe?: boolean;
 }): Promise<{
   toBeCreated: {
@@ -52,5 +49,4 @@ declare function getMigrations(config: BetterAuthOptions, {
   runMigrations: () => Promise<void>;
   compileMigrations: () => Promise<string>;
 }>;
-//#endregion
-export { UnsafeMigrationError, getMigrations, matchType };
+//#endregion

package/dist/db/get-migration.mjs

@@ -176,8 +176,7 @@ async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
 				WHERE table_schema = DATABASE()
 			`.execute(db)).rows;
 			break;
-		case "mssql":
-			rows = (await sql`
+		case "mssql": rows = (await sql`
 				SELECT
 					tables.name AS "tableName",
 					indexes.name AS "indexName",
@@ -202,7 +201,6 @@ async function getDatabaseIndexMap(db, target, tableNames, introspectIndexes) {
 					AND indexes.name IS NOT NULL
 					AND index_columns.key_ordinal > 0
 			`.execute(db)).rows;
-			break;
 	}
 	const indexMetadata = /* @__PURE__ */ new Map();
 	for (const row of rows) {
@@ -253,8 +251,7 @@ async function getDatabaseColumnBounds(db, target) {
 				WHERE table_schema = DATABASE()
 			`.execute(db)).rows;
 			break;
-		case "mssql":
-			rows = (await sql`
+		case "mssql": rows = (await sql`
 				SELECT
 					tables.name AS "tableName",
 					columns.name AS "columnName",
@@ -266,7 +263,6 @@ async function getDatabaseColumnBounds(db, target) {
 					ON table_schemas.schema_id = tables.schema_id
 				WHERE table_schemas.name = ${target.schema}
 			`.execute(db)).rows;
-			break;
 	}
 	const bounds = /* @__PURE__ */ new Map();
 	for (const row of rows) {
@@ -370,8 +366,10 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 			};
 			logger.debug(`PostgreSQL migration: Using schema '${schema}' (${schemaName ? "from database.schemaName" : "from search_path"})`);
 			try {
-				if (!(await db.introspection.getSchemas()).some(({ name }) => name === schema)) if (schemaName) logger.debug(`Schema '${schema}' does not exist yet. The migration creates it before creating tables.`);
-				else logger.warn(`Schema '${schema}' does not exist. Create it before running migrations or check your database configuration.`);
+				if (!(await db.introspection.getSchemas()).some(({ name }) => name === schema)) {
+					if (schemaName) logger.debug(`Schema '${schema}' does not exist yet. The migration creates it before creating tables.`);
+					else logger.warn(`Schema '${schema}' does not exist. Create it before running migrations or check your database configuration.`);
+				}
 			} catch (error) {
 				logger.debug(`Could not verify schema existence: ${error instanceof Error ? error.message : String(error)}`);
 			}
@@ -396,9 +394,7 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 		case "mysql":
 			target = { type: "mysql" };
 			break;
-		case "sqlite":
-			target = { type: "sqlite" };
-			break;
+		case "sqlite": target = { type: "sqlite" };
 	}
 	const databaseIndexMap = await getDatabaseIndexMap(db, target, allTableMetadata.map((table) => table.name), introspectIndexes);
 	const databaseColumnBounds = await getDatabaseColumnBounds(db, target);
@@ -457,12 +453,13 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 				order: value.order || Infinity
 			};
 			const insertIndex = toBeCreated.findIndex((t) => (t.order || Infinity) > tableData.order);
-			if (insertIndex === -1) if (tIndex === -1) toBeCreated.push(tableData);
-			else toBeCreated[tIndex].fields = {
-				...toBeCreated[tIndex].fields,
-				...value.fields
-			};
-			else toBeCreated.splice(insertIndex, 0, tableData);
+			if (insertIndex === -1) {
+				if (tIndex === -1) toBeCreated.push(tableData);
+				else toBeCreated[tIndex].fields = {
+					...toBeCreated[tIndex].fields,
+					...value.fields
+				};
+			} else toBeCreated.splice(insertIndex, 0, tableData);
 			continue;
 		}
 		const toBeAddedFields = {};
@@ -618,9 +615,10 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 			const built = builder.addColumn(fieldName, type, (col) => {
 				col = field.required !== false ? col.notNull() : col;
 				if (field.references) col = col.references(getReferencePath(field)).onDelete(field.references.onDelete || "cascade");
-				if (timestampDefault) if (dbType === "mysql") col = col.defaultTo(sql`CURRENT_TIMESTAMP(3)`);
-				else col = col.defaultTo(sql`CURRENT_TIMESTAMP`);
-				else if (staticDefault) col = col.defaultTo(typeof field.defaultValue === "boolean" && (dbType === "sqlite" || dbType === "mssql") ? field.defaultValue ? 1 : 0 : field.defaultValue);
+				if (timestampDefault) {
+					if (dbType === "mysql") col = col.defaultTo(sql`CURRENT_TIMESTAMP(3)`);
+					else col = col.defaultTo(sql`CURRENT_TIMESTAMP`);
+				} else if (staticDefault) col = col.defaultTo(typeof field.defaultValue === "boolean" && (dbType === "sqlite" || dbType === "mssql") ? field.defaultValue ? 1 : 0 : field.defaultValue);
 				return col;
 			});
 			migrations.push(built);
@@ -647,8 +645,10 @@ async function getMigrations(config, { throwOnUnsafe = true } = {}) {
 				col = field.required !== false ? col.notNull() : col;
 				if (field.references) col = col.references(getReferencePath(field)).onDelete(field.references.onDelete || "cascade");
 				if (field.unique) col = col.unique();
-				if (field.type === "date" && typeof field.defaultValue === "function" && (dbType === "postgres" || dbType === "mysql" || dbType === "mssql")) if (dbType === "mysql") col = col.defaultTo(sql`CURRENT_TIMESTAMP(3)`);
-				else col = col.defaultTo(sql`CURRENT_TIMESTAMP`);
+				if (field.type === "date" && typeof field.defaultValue === "function" && (dbType === "postgres" || dbType === "mysql" || dbType === "mssql")) {
+					if (dbType === "mysql") col = col.defaultTo(sql`CURRENT_TIMESTAMP(3)`);
+					else col = col.defaultTo(sql`CURRENT_TIMESTAMP`);
+				}
 				return col;
 			});
 			if (field.index && !field.unique) {

package/dist/db/get-schema.d.mts

@@ -1,13 +1,11 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { DBFieldAttribute } from "@better-auth/core/db";
 import { ResolvedDBTableIndex } from "@better-auth/core/db/internal";
-
 //#region src/db/get-schema.d.ts
-declare function getSchema(config: BetterAuthOptions): Record<string, {
+export declare function getSchema(config: BetterAuthOptions): Record<string, {
   fields: Record<string, DBFieldAttribute>;
   indexes?: readonly ResolvedDBTableIndex[] | undefined;
   order: number;
   disableMigrations?: boolean | undefined;
 }>;
-//#endregion
-export { getSchema };
+//#endregion

package/dist/db/internal-adapter.d.mts

@@ -2,13 +2,11 @@ import { DatabaseHooksEntry } from "./with-hooks.mjs";
 import { AuthContext, BetterAuthOptions, InternalAdapter } from "@better-auth/core";
 import { InternalLogger } from "@better-auth/core/env";
 import { DBAdapter } from "@better-auth/core/db/adapter";
-
 //#region src/db/internal-adapter.d.ts
-declare const createInternalAdapter: (adapter: DBAdapter<BetterAuthOptions>, ctx: {
+export declare const createInternalAdapter: (adapter: DBAdapter<BetterAuthOptions>, ctx: {
   options: Omit<BetterAuthOptions, "logger">;
   logger: InternalLogger;
   hooks: DatabaseHooksEntry[];
   generateId: AuthContext["generateId"];
 }) => InternalAdapter;
-//#endregion
-export { createInternalAdapter };
+//#endregion

package/dist/db/internal-adapter.mjs

@@ -20,7 +20,7 @@ const createInternalAdapter = (adapter, ctx) => {
 	const options = ctx.options;
 	const secondaryStorage = options.secondaryStorage;
 	const verificationConsumeLocks = /* @__PURE__ */ new Map();
-	const sessionExpiration = options.session?.expiresIn || 3600 * 24 * 7;
+	const sessionExpiration = options.session?.expiresIn || 604800;
 	const databaseSessionFallbackEnabled = !!secondaryStorage && options.session?.storeSessionInDatabase === true && options.session?.preserveSessionInDatabase !== true;
 	const { createWithHooks, updateWithHooks, updateManyWithHooks, deleteWithHooks, deleteManyWithHooks, consumeOneWithHooks } = getWithHooks(adapter, ctx);
 	/**
@@ -280,7 +280,7 @@ const createInternalAdapter = (adapter, ctx) => {
 				* set the session to expire in 1 day.
 				* The cookie will be set to expire at the end of the session
 				*/
-				expiresAt: dontRememberMe ? getDate(3600 * 24, "sec") : getDate(sessionExpiration, "sec"),
+				expiresAt: dontRememberMe ? getDate(86400, "sec") : getDate(sessionExpiration, "sec"),
 				userId,
 				token: generateId(32),
 				createdAt: /* @__PURE__ */ new Date(),
@@ -773,7 +773,8 @@ const createInternalAdapter = (adapter, ctx) => {
 			return verification[0] || null;
 		},
 		deleteVerificationByIdentifier: async (identifier) => {
-			const storedIdentifier = await processIdentifier(identifier, getStorageOption(identifier, options.verification?.storeIdentifier));
+			const storageOption = getStorageOption(identifier, options.verification?.storeIdentifier);
+			const storedIdentifier = await processIdentifier(identifier, storageOption);
 			if (secondaryStorage) await secondaryStorage.delete(`verification:${storedIdentifier}`);
 			if (!secondaryStorage || options.verification?.storeInDatabase) await deleteWithHooks([{
 				field: "identifier",
@@ -938,7 +939,8 @@ const createInternalAdapter = (adapter, ctx) => {
 			return true;
 		},
 		updateVerificationByIdentifier: async (identifier, data) => {
-			const storedIdentifier = await processIdentifier(identifier, getStorageOption(identifier, options.verification?.storeIdentifier));
+			const storageOption = getStorageOption(identifier, options.verification?.storeIdentifier);
+			const storedIdentifier = await processIdentifier(identifier, storageOption);
 			if (secondaryStorage) {
 				const cached = await secondaryStorage.get(`verification:${storedIdentifier}`);
 				if (cached) {

package/dist/db/revoke-unproven-account-access.d.mts

@@ -1,6 +1,6 @@
 import { User } from "../types/models.mjs";
+import "../types/index.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
-
 //#region src/db/revoke-unproven-account-access.d.ts
 /**
  * Strip every account link and session a pre-existing account accrued before
@@ -16,6 +16,5 @@ import { GenericEndpointContext } from "@better-auth/core";
  *
  * @param userId - The pre-existing, not-yet-verified user being promoted.
  */
-declare function revokeUnprovenAccountAccess(ctx: GenericEndpointContext, userId: string): Promise<User | null>;
-//#endregion
-export { revokeUnprovenAccountAccess };
+export declare function revokeUnprovenAccountAccess(ctx: GenericEndpointContext, userId: string): Promise<User | null>;
+//#endregion

package/dist/db/schema.d.mts

@@ -1,9 +1,9 @@
 import { Account, Session as Session$1, User as User$1 } from "../types/models.mjs";
+import "../types/index.mjs";
 import { BetterAuthOptions } from "@better-auth/core";
 import { BetterAuthPluginDBSchema, DBFieldAttribute } from "@better-auth/core/db";
-
 //#region src/db/schema.d.ts
-declare function parseUserOutput<T extends User$1>(options: BetterAuthOptions, user: T): T;
+export declare function parseUserOutput<T extends User$1>(options: BetterAuthOptions, user: T): T;
 /**
  * Builds a synthetic user object that matches the shape of a real user
  * returned from the database. This ensures enumeration protection works
@@ -16,17 +16,17 @@ declare function parseUserOutput<T extends User$1>(options: BetterAuthOptions, u
  * - Applies default values where defined
  * - Always includes the 'id' field (not part of schema but always present)
  */
-declare function buildSyntheticUserOutput(options: BetterAuthOptions, data: Record<string, unknown>): Record<string, unknown>;
-declare function parseSessionOutput<T extends Session$1>(options: BetterAuthOptions, session: T): T;
-declare function parseAccountOutput<T extends Account>(options: BetterAuthOptions, account: T): Omit<T, "idToken" | "accessToken" | "refreshToken" | "accessTokenExpiresAt" | "refreshTokenExpiresAt" | "password">;
-declare function parseInputData<T extends Record<string, any>>(data: T, schema: {
+export declare function buildSyntheticUserOutput(options: BetterAuthOptions, data: Record<string, unknown>): Record<string, unknown>;
+export declare function parseSessionOutput<T extends Session$1>(options: BetterAuthOptions, session: T): T;
+export declare function parseAccountOutput<T extends Account>(options: BetterAuthOptions, account: T): Omit<T, "idToken" | "accessToken" | "refreshToken" | "accessTokenExpiresAt" | "refreshTokenExpiresAt" | "password">;
+export declare function parseInputData<T extends Record<string, any>>(data: T, schema: {
   fields: Record<string, DBFieldAttribute>;
   action?: ("create" | "update") | undefined;
 }): Partial<T>;
-declare function parseUserInput(options: BetterAuthOptions, user: Record<string, any> | undefined, action: "create" | "update"): Partial<Record<string, any>>;
-declare function parseAdditionalUserInputFromProviderProfile(options: BetterAuthOptions, profile: Record<string, unknown> | undefined, action: "create" | "update"): Partial<Record<string, unknown>>;
-declare function parseAdditionalUserInput(options: BetterAuthOptions, user?: Record<string, any> | undefined): Partial<Record<string, any>>;
-declare function parseAccountInput(options: BetterAuthOptions, account: Partial<Account>): Partial<Partial<{
+export declare function parseUserInput(options: BetterAuthOptions, user: Record<string, any> | undefined, action: "create" | "update"): Partial<Record<string, any>>;
+export declare function parseAdditionalUserInputFromProviderProfile(options: BetterAuthOptions, profile: Record<string, unknown> | undefined, action: "create" | "update"): Partial<Record<string, unknown>>;
+export declare function parseAdditionalUserInput(options: BetterAuthOptions, user?: Record<string, any> | undefined): Partial<Record<string, any>>;
+export declare function parseAccountInput(options: BetterAuthOptions, account: Partial<Account>): Partial<Partial<{
   id: string;
   createdAt: Date;
   updatedAt: Date;
@@ -41,7 +41,7 @@ declare function parseAccountInput(options: BetterAuthOptions, account: Partial<
   scope?: string | null | undefined;
   password?: string | null | undefined;
 }>>;
-declare function parseSessionInput(options: BetterAuthOptions, session: Partial<Session$1>, action?: "create" | "update"): Partial<Partial<{
+export declare function parseSessionInput(options: BetterAuthOptions, session: Partial<Session$1>, action?: "create" | "update"): Partial<Partial<{
   id: string;
   createdAt: Date;
   updatedAt: Date;
@@ -51,12 +51,11 @@ declare function parseSessionInput(options: BetterAuthOptions, session: Partial<
   ipAddress?: string | null | undefined;
   userAgent?: string | null | undefined;
 }>>;
-declare function getSessionDefaultFields(options: BetterAuthOptions): Record<string, any>;
-declare function mergeSchema<S extends BetterAuthPluginDBSchema>(schema: S, newSchema?: { [K in keyof S]?: {
+export declare function getSessionDefaultFields(options: BetterAuthOptions): Record<string, any>;
+export declare function mergeSchema<S extends BetterAuthPluginDBSchema>(schema: S, newSchema?: { [K in keyof S]?: {
   modelName?: string | undefined;
   fields?: {
     [P: string]: string;
   } | undefined;
-} | undefined } | undefined): S;
-//#endregion
-export { buildSyntheticUserOutput, getSessionDefaultFields, mergeSchema, parseAccountInput, parseAccountOutput, parseAdditionalUserInput, parseAdditionalUserInputFromProviderProfile, parseInputData, parseSessionInput, parseSessionOutput, parseUserInput, parseUserOutput };
+} | undefined; } | undefined): S;
+//#endregion

package/dist/db/schema.mjs

@@ -22,7 +22,8 @@ function getFields(options, modelName, mode) {
 	return schema;
 }
 function parseUserOutput(options, user) {
-	return filterOutputFields(user, getFields(options, "user", "output"));
+	const schema = getFields(options, "user", "output");
+	return filterOutputFields(user, schema);
 }
 /**
 * Builds a synthetic user object that matches the shape of a real user
@@ -50,10 +51,12 @@ function buildSyntheticUserOutput(options, data) {
 	return result;
 }
 function parseSessionOutput(options, session) {
-	return filterOutputFields(session, getFields(options, "session", "output"));
+	const schema = getFields(options, "session", "output");
+	return filterOutputFields(session, schema);
 }
 function parseAccountOutput(options, account) {
-	const { accessToken: _accessToken, refreshToken: _refreshToken, idToken: _idToken, accessTokenExpiresAt: _accessTokenExpiresAt, refreshTokenExpiresAt: _refreshTokenExpiresAt, password: _password, ...rest } = filterOutputFields(account, getFields(options, "account", "output"));
+	const schema = getFields(options, "account", "output");
+	const { accessToken: _accessToken, refreshToken: _refreshToken, idToken: _idToken, accessTokenExpiresAt: _accessTokenExpiresAt, refreshTokenExpiresAt: _refreshTokenExpiresAt, password: _password, ...rest } = filterOutputFields(account, schema);
 	return rest;
 }
 function parseInputData(data, schema) {

package/dist/db/to-zod.d.mts

@@ -1,11 +1,7 @@
 import { DBFieldAttribute } from "@better-auth/core/db";
 import * as z from "zod";
-
 //#region src/db/to-zod.d.ts
-declare function toZodSchema<Fields extends Record<string, DBFieldAttribute | never>, IsClientSide extends boolean>({
-  fields,
-  isClientSide
-}: {
+export declare function toZodSchema<Fields extends Record<string, DBFieldAttribute | never>, IsClientSide extends boolean>({ fields, isClientSide }: {
   fields: Fields;
   /**
    * If true, then any fields that have `input: false` will be removed from the schema to prevent user input.
@@ -13,8 +9,8 @@ declare function toZodSchema<Fields extends Record<string, DBFieldAttribute | ne
   isClientSide: IsClientSide;
 }): ZodSchemaForSide<Fields, IsClientSide>;
 type ZodSchemaForSide<Fields extends Record<string, DBFieldAttribute | never>, IsClientSide extends boolean> = IsClientSide extends true ? z.ZodObject<SchemaShape<Fields, true>, z.core.$strip> : z.ZodObject<SchemaShape<Fields, false>, z.core.$strip>;
-type SchemaShape<Fields extends Record<string, DBFieldAttribute | never>, IsClientSide extends boolean> = RemoveNeverProps<{ [key in keyof Fields]: FieldAttributeToSchema<Fields[key], IsClientSide> }>;
-type FieldAttributeToSchema<Field extends DBFieldAttribute | Record<string, never>, isClientSide extends boolean = false> = Field extends DBFieldAttribute ? GetSchemaForSide<isClientSide, Field, GetRequired<Field, GetType<Field>>> : Record<string, never>;
+type SchemaShape<Fields extends Record<string, DBFieldAttribute | never>, IsClientSide extends boolean> = RemoveNeverProps<{ [key in keyof Fields]: FieldAttributeToSchema<Fields[key], IsClientSide>; }>;
+export type FieldAttributeToSchema<Field extends DBFieldAttribute | Record<string, never>, isClientSide extends boolean = false> = Field extends DBFieldAttribute ? GetSchemaForSide<isClientSide, Field, GetRequired<Field, GetType<Field>>> : Record<string, never>;
 type GetType<F extends DBFieldAttribute> = F extends {
   type: "string";
 } ? z.ZodString : F extends {
@@ -32,6 +28,6 @@ type GetSchemaForSide<isClientSide extends boolean, Field extends DBFieldAttribu
 } ? never : Schema : Field extends {
   returned: false;
 } ? never : Schema;
-type RemoveNeverProps<T> = { [K in keyof T as [T[K]] extends [never] ? never : K]: T[K] };
+type RemoveNeverProps<T> = { [K in keyof T as [T[K]] extends [never] ? never : K]: T[K]; };
 //#endregion
-export { FieldAttributeToSchema, toZodSchema };
+export {};

package/dist/db/with-hooks.d.mts

@@ -1,13 +1,12 @@
 import { BetterAuthOptions } from "@better-auth/core";
 import { BaseModelNames } from "@better-auth/core/db";
 import { DBAdapter, Where } from "@better-auth/core/db/adapter";
-
 //#region src/db/with-hooks.d.ts
-type DatabaseHooksEntry = {
+export type DatabaseHooksEntry = {
   source: string;
   hooks: Exclude<BetterAuthOptions["databaseHooks"], undefined>;
 };
-declare function getWithHooks(adapter: DBAdapter<BetterAuthOptions>, ctx: {
+export declare function getWithHooks(adapter: DBAdapter<BetterAuthOptions>, ctx: {
   options: BetterAuthOptions;
   hooks: DatabaseHooksEntry[];
 }): {
@@ -33,5 +32,4 @@ declare function getWithHooks(adapter: DBAdapter<BetterAuthOptions>, ctx: {
   } | undefined) => Promise<any>;
   consumeOneWithHooks: <T extends Record<string, any>>(model: BaseModelNames, hookWhere: Where[], consumeFn: () => Promise<T | null>, preSnapshot?: T | null) => Promise<T | null>;
 };
-//#endregion
-export { DatabaseHooksEntry, getWithHooks };
+//#endregion

package/dist/index.d.mts

@@ -11,6 +11,7 @@ import { GenerateStateOptions, generateIdTokenNonce, generateState, parseState }
 import { StateData, generateGenericState, parseGenericState } from "./state.mjs";
 import { HIDE_METADATA } from "./utils/hide-metadata.mjs";
 import { getBaseURL, getHost, getHostFromSource, getOrigin, getProtocol, getProtocolFromSource, isDynamicBaseURLConfig, isRequestLike, matchesHostPattern, resolveBaseURL, resolveDynamicBaseURL, trimTrailingSlashes } from "./utils/url.mjs";
+import "./utils/index.mjs";
 import { APIError } from "./api/index.mjs";
 import { StandardSchemaV1 } from "@better-auth/core";
 import { getCurrentAdapter } from "@better-auth/core/context";
@@ -25,6 +26,6 @@ export * from "@better-auth/core/utils/error-codes";
 export * from "@better-auth/core/utils/id";
 export * from "@better-auth/core/utils/json";
 export * from "@better-auth/core/social-providers";
-export * from "better-call";
-export * from "zod";
-export { APIError, Account, AdditionalSessionFieldsInput, AdditionalUserFieldsInput, Auth, BetterAuthAdvancedOptions, BetterAuthClientOptions, BetterAuthClientPlugin, BetterAuthCookies, BetterAuthOptions, BetterAuthPlugin, BetterAuthRateLimitOptions, ClientAtomListener, ClientStore, DBAdapter, DBAdapterInstance, DBAdapterSchemaCreation, DBTransactionAdapter, ExtractPluginField, FilteredAPI, GenerateStateOptions, HIDE_METADATA, HasRequiredKeys, InferAPI, InferActions, InferAdditionalFromClient, InferClientAPI, InferErrorCodes, InferOptionSchema, InferPluginContext, InferPluginErrorCodes, InferPluginFieldFromTuple, InferPluginIDs, InferPluginTypes, InferSessionAPI, InferSessionFromClient, InferUserFromClient, IsAny, IsSignal, type JSONWebKeySet, type JWTPayload, JoinConfig, JoinOption, OverrideMerge, Prettify, PrettifyDeep, RateLimit, RequiredKeysOf, Session, SessionQueryParams, type StandardSchemaV1, StateData, StoreIdentifierOption, StripEmptyObjects, type TelemetryEvent, UnionToIntersection, User, UserProvisioningSource, ValidateUserInfoAction, ValidateUserInfoMethod, ValidateUserInfoOAuthInfo, ValidateUserInfoResult, ValidateUserInfoSSOInfo, ValidateUserInfoSource, Verification, Where, betterAuth, createTelemetry, generateGenericState, generateIdTokenNonce, generateState, getBaseURL, getCurrentAdapter, getHost, getHostFromSource, getOrigin, getProtocol, getProtocolFromSource, getTelemetryAuthConfig, isDynamicBaseURLConfig, isRequestLike, matchesHostPattern, parseGenericState, parseState, resolveBaseURL, resolveDynamicBaseURL, trimTrailingSlashes };
+export type * from "better-call";
+export type * from "zod";
+export { APIError, type Account, type AdditionalSessionFieldsInput, type AdditionalUserFieldsInput, type Auth, type BetterAuthAdvancedOptions, type BetterAuthClientOptions, type BetterAuthClientPlugin, type BetterAuthCookies, type BetterAuthOptions, type BetterAuthPlugin, type BetterAuthRateLimitOptions, type ClientAtomListener, type ClientStore, type DBAdapter, type DBAdapterInstance, type DBAdapterSchemaCreation, type DBTransactionAdapter, type ExtractPluginField, FilteredAPI, GenerateStateOptions, HIDE_METADATA, type HasRequiredKeys, InferAPI, InferActions, InferAdditionalFromClient, InferClientAPI, InferErrorCodes, type InferOptionSchema, type InferPluginContext, type InferPluginErrorCodes, type InferPluginFieldFromTuple, type InferPluginIDs, type InferPluginTypes, InferSessionAPI, InferSessionFromClient, InferUserFromClient, type IsAny, IsSignal, type JSONWebKeySet, type JWTPayload, type JoinConfig, type JoinOption, type OverrideMerge, type Prettify, type PrettifyDeep, type RateLimit, type RequiredKeysOf, type Session, SessionQueryParams, type StandardSchemaV1, type StateData, type StoreIdentifierOption, type StripEmptyObjects, type TelemetryEvent, type UnionToIntersection, type User, type UserProvisioningSource, type ValidateUserInfoAction, type ValidateUserInfoMethod, type ValidateUserInfoOAuthInfo, type ValidateUserInfoResult, type ValidateUserInfoSSOInfo, type ValidateUserInfoSource, type Verification, type Where, betterAuth, createTelemetry, generateGenericState, generateIdTokenNonce, generateState, getBaseURL, getCurrentAdapter, getHost, getHostFromSource, getOrigin, getProtocol, getProtocolFromSource, getTelemetryAuthConfig, isDynamicBaseURLConfig, isRequestLike, matchesHostPattern, parseGenericState, parseState, resolveBaseURL, resolveDynamicBaseURL, trimTrailingSlashes };