0.0.3

• Email/password sign-ups now remain unauthenticated until the email address is verified. Successful verification then creates the user's first session.

0.0.2

Added

• Added @vergekit/core/auth, centralizing Verge Kit’s foundational Better Auth runtime integration.
• Added defineAuthConfig for declarative app-owned auth policy, roles, route protection, admin permissions, and browser fallback copy.
• Added Better Auth server helpers for option construction, Drizzle adapter setup, email/password auth, email verification/reset hooks, banned-user session blocking, and BETTER_AUTH_URL / BETTER_AUTH_SECRET resolution.
• Added route helpers for protected/admin route evaluation and HTML sign-out form redirect handling.
• Added browser auth form helpers for JSON submissions, Better Auth error display, pending submit state, and safe redirect handling.
• Added role and permission helpers for app-level authorization checks.
• Added extension points for additional Better Auth server/client plugins and final option customization.

Changed

• @vergekit/core now owns reusable Better Auth scaffolding for Verge Kit apps, while applications keep policy/configuration in their own src/config/auth.ts.
• Added Better Auth package dependencies required by the new auth export.

0.0.1

Hella world