fix(api-key): enforce v1.7.1 request contracts

[salasebas]

Summary

• enforce Better Auth v1.7.1 API-key request schemas for create, verify, get, list, update, and delete
• return upstream-compatible validation envelopes and explicit API-key registry error codes
• preserve explicit null and false inputs through the shared API/endpoint seam
• add focused malformed body/query, coercion, bounds, and complete HTTP error-body regressions

Scope

• intentionally does not change verify endpoint serverOnly exposure; that confirmed finding is handled in a separate change

Testing

• API-key package: 239 runs, 1117 assertions, 0 failures
• request-contract regressions: 9 runs, 93 assertions, 0 failures
• core endpoint tests: 13 runs, 93 assertions, 0 failures
• core API tests: 19 runs, 105 assertions, 0 failures
• scoped StandardRB and git diff check passed

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
better-auth	Ignored		Aug 20, 2026 9:31pm