Better Auth

TypeScript-first, framework-agnostic auth (email/password, OAuth, magic links, passkeys, plugins). Always consult better-auth.com/docs for current API surface — this file exists for the failures the docs don't warn you about, not as a docs mirror.

Hard-Won Gotchas (fix these before they bite in review or CI)

1. Rate limiter fires on Vercel preview/dev, not just production (e2e-flake root cause)