- Add GitHub Issue link for feedback
- Adjust user threshold to ≤ 10 users (align with Clerk docs)
- Add note about manual re-binding of social accounts
- Consolidate backup and dry-run reminders in Full Migration section
- Simplify Step 6 by referencing Simple Migration steps

- Add green bold for success counts and messages
- Add red bold for failure messages
- Fix NextAuth scope conversion (space → comma separated)
- Use deterministic id for account migration

- Delete src/libs/next-auth/ directory (19 files)
- Delete NextAuth pages (signin, error)
- Delete NextAuth layout provider and components
- Delete NextAuthUserService, replace with WebhookUserService
- Remove nextAuth field from TRPC context
- Remove unlinkSSOProvider endpoint (NextAuth-specific)
- Update middleware to only use Better Auth
- Clean up related tests

- Remove enableNextAuth/enableBetterAuth exports from envs/auth.ts
- Simplify auth route to directly use Better Auth handler
- Remove conditional checks in middleware, context, and actions
- Delete unnecessary layout files for auth pages
- Update tests to remove NextAuth-related mocks and test cases
- Fix profile/index.tsx to use isLoginWithBetterAuth only

- Remove isLoginWithBetterAuth selector, use isLogin instead
- Replace dynamic import('@/auth') with static imports
- Update profile and SSOProvidersList to use isLogin

… docs

- Add orderBy to topic.create.test.ts to ensure consistent query order
- Revert getSessionUser.ts to dynamic import to avoid validator ESM/CJS issue during sitemap generation

- Add SSO provider environment variable check in prebuild
- Add docs/self-hosting/advanced/redis/upstash.mdx documentation

Support separate sender address configuration for AWS SES and other
services where SMTP_USER is not a valid email address.

Add environment variable declarations for:
- Redis: REDIS_URL, REDIS_PREFIX, REDIS_TLS
- Email: SMTP_*, RESEND_*, EMAIL_SERVICE_PROVIDER
- Common SSO: Google, GitHub, Microsoft credentials

Support AUTH_ALLOWED_EMAILS env var to restrict registration to
specific emails or domains (e.g., "example.com,admin@other.com")

- Refactor checkDeprecatedAuth.js with config-driven approach
- Detect all NEXT_AUTH*/NEXTAUTH* env vars dynamically
- Add check for NEXT_PUBLIC_AUTH_* deprecated vars
- Remove NEXT_PUBLIC_* fallback in auth.ts
- Use APIError instead of Error in email-whitelist plugin

- Rename NEXT_PUBLIC_AUTH_EMAIL_VERIFICATION to AUTH_EMAIL_VERIFICATION
- Add AUTH_ALLOWED_EMAILS documentation for email whitelist feature
- Add FAQ entry for restricting registration to specific emails/domains

- Replace instances of NEXT_PUBLIC_AUTH_EMAIL_VERIFICATION with AUTH_EMAIL_VERIFICATION in .env.example, e2e configurations, and documentation.
- Update breaking changes documentation to reflect the new variable name for email verification requirement.

…Auth

Add comprehensive environment variable migration reference including:
- General variables mapping (NEXT_AUTH_SECRET → AUTH_SECRET, etc.)
- SSO provider variables (most unchanged, Microsoft renamed)
- New Better Auth feature variables (email whitelist, magic link, etc.)

…ion for compatibility

Replace AdapterAccount type import with local AccountType definition
to completely remove next-auth package dependency.

Rewrite the authentication provider development guide to reflect
the new Better Auth architecture, including:
- Provider definition structure (builtin vs generic)
- Environment variable configuration
- Provider registration process

….20260122.4 and remove unused Session and User imports from auth initial state

Ref: better-auth/better-auth#7023

Vercel uses Amazon Linux (glibc), not Alpine Linux (musl).
This excludes unnecessary musl binaries saving ~45MB:
- @napi-rs/canvas-*-musl: ~29MB
- @img/sharp-libvips-*musl: ~16MB

Revert temporary changes made for debugging 250MB limit:
- Remove NEXT_DEBUG_FUNCTION_SIZE from vercel.json
- Remove better-call override
- Restore better-auth packages to ^1.4.17
- Restore better-call to ^1.2.0

The outputFileTracingExcludes config is sufficient to fix the issue.