@gatwech/auth 1.0.0-beta.18

package/dist/client/plugins/index.d.mts

@@ -0,0 +1,949 @@
+import { a as LiteralNumber, c as OmitId, d as PrettifyDeep, f as Primitive, g as WithoutEmpty, h as UnionToIntersection, i as HasRequiredKeys, l as PreserveJSDoc, m as StripEmptyObjects, n as DeepPartial, o as LiteralString, p as RequiredKeysOf, r as Expand, s as LiteralUnion, t as Awaitable, u as Prettify } from "../../helper-tmxW3BHj.mjs";
+import { K as SessionQueryParams, Y as Auth, g as User$1, h as Session$1, i as PayvoAuthPlugin$1, mn as InferAdditionalFieldsFromPluginOptions, r as PayvoAuthOptions$1 } from "../../index-Cxi7TbLE.mjs";
+import "../../types-B1OL7hyf.mjs";
+import "../../index-65G5U5DB-DSdjzreF.mjs";
+import "../../plugins-hFZT3hmK.mjs";
+import { a as Role, i as AccessControl, o as Statements } from "../../index-C7fQuk-V.mjs";
+import { t as admin } from "../../admin-DtfO1PLg.mjs";
+import { r as anonymous } from "../../index-B3n8e37d.mjs";
+import { r as apiKey } from "../../index-CM-CFWwr.mjs";
+import { t as deviceAuthorizationClient } from "../../client-CNY0tn9g.mjs";
+import { n as emailOTP } from "../../index-D_k662QG.mjs";
+import { n as genericOAuth } from "../../index-Buhn3hkR.mjs";
+import { t as jwt } from "../../index-34ONrP8l.mjs";
+import { t as magicLink } from "../../index-BYMI9r_d.mjs";
+import { t as multiSession } from "../../index-DoXZYQpq.mjs";
+import { t as oneTimeToken } from "../../index-C-u1h_WX.mjs";
+import "../../index-z0KSvE5i.mjs";
+import { F as OrganizationOptions, S as Team, b as OrganizationRole, c as InferMember, f as InferTeam, g as Member, l as InferOrganization, p as Invitation, r as OrganizationPlugin, s as InferInvitation, v as Organization, w as TeamMember } from "../../index-BHoQlf7a.mjs";
+import { r as phoneNumber } from "../../index-DKNNV1kb.mjs";
+import { t as twoFactorClient } from "../../client-BOX93C3d.mjs";
+import { n as Passkey, t as passkey } from "../../index-DlaMq1nb.mjs";
+import { n as username } from "../../index-CuFzhoS6.mjs";
+import * as _gatwech_core33 from "@gatwech/core";
+import { ClientStore, PayvoAuthOptions } from "@gatwech/core";
+import { DBFieldAttribute } from "@gatwech/core/db";
+import * as _better_fetch_fetch34 from "@better-fetch/fetch";
+import { BetterFetch, BetterFetchOption } from "@better-fetch/fetch";
+import * as nanostores1 from "nanostores";
+import { atom } from "nanostores";
+
+//#region src/plugins/additional-fields/client.d.ts
+declare const inferAdditionalFields: <T$1, S$1 extends {
+  user?: {
+    [key: string]: DBFieldAttribute;
+  } | undefined;
+  session?: {
+    [key: string]: DBFieldAttribute;
+  } | undefined;
+} = {}>(schema?: S$1 | undefined) => {
+  id: "additional-fields-client";
+  $InferServerPlugin: ((T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+    options: PayvoAuthOptions$1;
+  } ? T$1["options"] : never) extends never ? S$1 extends {
+    user?: {
+      [key: string]: DBFieldAttribute;
+    } | undefined;
+    session?: {
+      [key: string]: DBFieldAttribute;
+    } | undefined;
+  } ? {
+    id: "additional-fields-client";
+    schema: {
+      user: {
+        fields: S$1["user"] extends object ? S$1["user"] : {};
+      };
+      session: {
+        fields: S$1["session"] extends object ? S$1["session"] : {};
+      };
+    };
+  } : never : (T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+    options: PayvoAuthOptions$1;
+  } ? T$1["options"] : never) extends PayvoAuthOptions$1 ? {
+    id: "additional-fields";
+    schema: {
+      user: {
+        fields: (T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+          options: PayvoAuthOptions$1;
+        } ? T$1["options"] : never)["user"] extends {
+          additionalFields: infer U;
+        } ? U : {};
+      };
+      session: {
+        fields: (T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+          options: PayvoAuthOptions$1;
+        } ? T$1["options"] : never)["session"] extends {
+          additionalFields: infer U;
+        } ? U : {};
+      };
+    };
+  } : never) extends PayvoAuthPlugin$1 ? (T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+    options: PayvoAuthOptions$1;
+  } ? T$1["options"] : never) extends never ? S$1 extends {
+    user?: {
+      [key: string]: DBFieldAttribute;
+    } | undefined;
+    session?: {
+      [key: string]: DBFieldAttribute;
+    } | undefined;
+  } ? {
+    id: "additional-fields-client";
+    schema: {
+      user: {
+        fields: S$1["user"] extends object ? S$1["user"] : {};
+      };
+      session: {
+        fields: S$1["session"] extends object ? S$1["session"] : {};
+      };
+    };
+  } : never : (T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+    options: PayvoAuthOptions$1;
+  } ? T$1["options"] : never) extends PayvoAuthOptions$1 ? {
+    id: "additional-fields";
+    schema: {
+      user: {
+        fields: (T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+          options: PayvoAuthOptions$1;
+        } ? T$1["options"] : never)["user"] extends {
+          additionalFields: infer U;
+        } ? U : {};
+      };
+      session: {
+        fields: (T$1 extends PayvoAuthOptions$1 ? T$1 : T$1 extends {
+          options: PayvoAuthOptions$1;
+        } ? T$1["options"] : never)["session"] extends {
+          additionalFields: infer U;
+        } ? U : {};
+      };
+    };
+  } : never : undefined;
+};
+//#endregion
+//#region src/plugins/admin/client.d.ts
+interface AdminClientOptions {
+  ac?: AccessControl | undefined;
+  roles?: { [key in string]: Role } | undefined;
+}
+declare const adminClient: <O$1 extends AdminClientOptions>(options?: O$1 | undefined) => {
+  id: "admin-client";
+  $InferServerPlugin: ReturnType<typeof admin<{
+    ac: O$1["ac"] extends AccessControl ? O$1["ac"] : AccessControl<{
+      readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+      readonly session: readonly ["list", "revoke", "delete"];
+    }>;
+    roles: O$1["roles"] extends Record<string, Role> ? O$1["roles"] : {
+      admin: Role;
+      user: Role;
+    };
+  }>>;
+  getActions: () => {
+    admin: {
+      checkRolePermission: <R extends (O$1 extends {
+        roles: any;
+      } ? keyof O$1["roles"] : "admin" | "user")>(data: ({
+        /**
+         * @deprecated Use `permissions` instead
+         */
+        permission: { [key in keyof (O$1["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+          readonly session: readonly ["list", "revoke", "delete"];
+        })]?: ((O$1["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+          readonly session: readonly ["list", "revoke", "delete"];
+        })[key] extends readonly unknown[] ? (O$1["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+          readonly session: readonly ["list", "revoke", "delete"];
+        })[key][number] : never)[] | undefined };
+        permissions?: never | undefined;
+      } | {
+        permissions: { [key in keyof (O$1["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+          readonly session: readonly ["list", "revoke", "delete"];
+        })]?: ((O$1["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+          readonly session: readonly ["list", "revoke", "delete"];
+        })[key] extends readonly unknown[] ? (O$1["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password", "get", "update"];
+          readonly session: readonly ["list", "revoke", "delete"];
+        })[key][number] : never)[] | undefined };
+        permission?: never | undefined;
+      }) & {
+        role: R;
+      }) => boolean;
+    };
+  };
+  pathMethods: {
+    "/admin/list-users": "GET";
+    "/admin/stop-impersonating": "POST";
+  };
+};
+//#endregion
+//#region src/plugins/anonymous/client.d.ts
+declare const anonymousClient: () => {
+  id: "anonymous";
+  $InferServerPlugin: ReturnType<typeof anonymous>;
+  pathMethods: {
+    "/sign-in/anonymous": "POST";
+  };
+};
+//#endregion
+//#region src/plugins/api-key/client.d.ts
+declare const apiKeyClient: () => {
+  id: "api-key";
+  $InferServerPlugin: ReturnType<typeof apiKey>;
+  pathMethods: {
+    "/api-key/create": "POST";
+    "/api-key/delete": "POST";
+    "/api-key/delete-all-expired-api-keys": "POST";
+  };
+};
+type ApiKeyClientPlugin = ReturnType<typeof apiKeyClient>;
+//#endregion
+//#region src/plugins/custom-session/client.d.ts
+declare const customSessionClient: <A extends Auth | {
+  options: PayvoAuthOptions$1;
+}>() => {
+  id: "infer-server-plugin";
+  $InferServerPlugin: (A extends {
+    options: infer O;
+  } ? O : A)["plugins"] extends (infer P)[] ? P extends {
+    id: "custom-session";
+  } ? P : never : never;
+};
+//#endregion
+//#region src/plugins/email-otp/client.d.ts
+declare const emailOTPClient: () => {
+  id: "email-otp";
+  $InferServerPlugin: ReturnType<typeof emailOTP>;
+  atomListeners: {
+    matcher: (path: string) => path is "/email-otp/verify-email";
+    signal: "$sessionSignal";
+  }[];
+};
+//#endregion
+//#region src/plugins/generic-oauth/client.d.ts
+declare const genericOAuthClient: () => {
+  id: "generic-oauth-client";
+  $InferServerPlugin: ReturnType<typeof genericOAuth>;
+};
+//#endregion
+//#region src/plugins/jwt/client.d.ts
+declare const jwtClient: () => {
+  id: "payvo-auth-client";
+  $InferServerPlugin: ReturnType<typeof jwt>;
+};
+//#endregion
+//#region src/plugins/last-login-method/client.d.ts
+/**
+ * Configuration for the client-side last login method plugin
+ */
+interface LastLoginMethodClientConfig {
+  /**
+   * Name of the cookie to read the last login method from
+   * @default "payvo-auth.last_used_login_method"
+   */
+  cookieName?: string | undefined;
+}
+/**
+ * Client-side plugin to retrieve the last used login method
+ */
+declare const lastLoginMethodClient: (config?: LastLoginMethodClientConfig) => {
+  id: "last-login-method-client";
+  getActions(): {
+    /**
+     * Get the last used login method from cookies
+     * @returns The last used login method or null if not found
+     */
+    getLastUsedLoginMethod: () => string | null;
+    /**
+     * Clear the last used login method cookie
+     * This sets the cookie with an expiration date in the past
+     */
+    clearLastUsedLoginMethod: () => void;
+    /**
+     * Check if a specific login method was the last used
+     * @param method The method to check
+     * @returns True if the method was the last used, false otherwise
+     */
+    isLastUsedLoginMethod: (method: string) => boolean;
+  };
+};
+//#endregion
+//#region src/plugins/magic-link/client.d.ts
+declare const magicLinkClient: () => {
+  id: "magic-link";
+  $InferServerPlugin: ReturnType<typeof magicLink>;
+};
+//#endregion
+//#region src/plugins/multi-session/client.d.ts
+declare const multiSessionClient: () => {
+  id: "multi-session";
+  $InferServerPlugin: ReturnType<typeof multiSession>;
+  atomListeners: {
+    matcher(path: string): path is "/multi-session/set-active";
+    signal: "$sessionSignal";
+  }[];
+};
+//#endregion
+//#region src/plugins/one-tap/client.d.ts
+declare global {
+  interface Window {
+    google?: {
+      accounts: {
+        id: {
+          initialize: (config: any) => void;
+          prompt: (callback?: (notification: any) => void) => void;
+        };
+      };
+    } | undefined;
+    googleScriptInitialized?: boolean | undefined;
+  }
+}
+interface GoogleOneTapOptions {
+  /**
+   * Google client ID
+   */
+  clientId: string;
+  /**
+   * Auto select the account if the user is already signed in
+   */
+  autoSelect?: boolean | undefined;
+  /**
+   * Cancel the flow when the user taps outside the prompt
+   */
+  cancelOnTapOutside?: boolean | undefined;
+  /**
+   * The mode to use for the Google One Tap flow
+   *
+   * popup: Use a popup window
+   * redirect: Redirect the user to the Google One Tap flow
+   *
+   * @default "popup"
+   */
+  uxMode?: ("popup" | "redirect") | undefined;
+  /**
+   * The context to use for the Google One Tap flow. See https://developers.google.com/identity/gsi/web/reference/js-reference
+   *
+   * @default "signin"
+   */
+  context?: ("signin" | "signup" | "use") | undefined;
+  /**
+   * Additional configuration options to pass to the Google One Tap API.
+   */
+  additionalOptions?: Record<string, any> | undefined;
+  /**
+   * Configuration options for the prompt and exponential backoff behavior.
+   */
+  promptOptions?: {
+    /**
+     * Base delay (in milliseconds) for exponential backoff.
+     * @default 1000
+     */
+    baseDelay?: number;
+    /**
+     * Maximum number of prompt attempts before calling onPromptNotification.
+     * @default 5
+     */
+    maxAttempts?: number;
+  } | undefined;
+}
+interface GoogleOneTapActionOptions extends Omit<GoogleOneTapOptions, "clientId" | "promptOptions"> {
+  fetchOptions?: BetterFetchOption | undefined;
+  /**
+   * Callback URL.
+   */
+  callbackURL?: string | undefined;
+  /**
+   * Optional callback that receives the prompt notification if (or when) the prompt is dismissed or skipped.
+   * This lets you render an alternative UI (e.g. a Google Sign-In button) to restart the process.
+   */
+  onPromptNotification?: ((notification: any) => void) | undefined;
+}
+declare const oneTapClient: (options: GoogleOneTapOptions) => {
+  id: "one-tap";
+  getActions: ($fetch: _better_fetch_fetch34.BetterFetch, _: _gatwech_core33.ClientStore) => {
+    oneTap: (opts?: GoogleOneTapActionOptions | undefined, fetchOptions?: BetterFetchOption | undefined) => Promise<void>;
+  };
+  getAtoms($fetch: _better_fetch_fetch34.BetterFetch): {};
+};
+//#endregion
+//#region src/plugins/one-time-token/client.d.ts
+declare const oneTimeTokenClient: () => {
+  id: "one-time-token";
+  $InferServerPlugin: ReturnType<typeof oneTimeToken>;
+};
+//#endregion
+//#region src/plugins/organization/permission.d.ts
+type PermissionExclusive = {
+  /**
+   * @deprecated Use `permissions` instead
+   */
+  permission: {
+    [key: string]: string[];
+  };
+  permissions?: never | undefined;
+} | {
+  permissions: {
+    [key: string]: string[];
+  };
+  permission?: never | undefined;
+};
+type HasPermissionBaseInput = {
+  role: string;
+  options: OrganizationOptions;
+  allowCreatorAllPermissions?: boolean | undefined;
+} & PermissionExclusive;
+//#endregion
+//#region src/plugins/organization/client.d.ts
+/**
+ * Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
+ */
+declare const clientSideHasPermission: (input: HasPermissionBaseInput) => boolean;
+interface OrganizationClientOptions {
+  ac?: AccessControl | undefined;
+  roles?: { [key in string]: Role } | undefined;
+  teams?: {
+    enabled: boolean;
+  } | undefined;
+  schema?: {
+    organization?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    member?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    invitation?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    team?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    organizationRole?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+  } | undefined;
+  dynamicAccessControl?: {
+    enabled: boolean;
+  } | undefined;
+}
+declare const organizationClient: <CO extends OrganizationClientOptions>(options?: CO | undefined) => {
+  id: "organization";
+  $InferServerPlugin: OrganizationPlugin<{
+    ac: CO["ac"] extends AccessControl ? CO["ac"] : AccessControl<{
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+    roles: CO["roles"] extends Record<string, Role> ? CO["roles"] : {
+      admin: Role;
+      member: Role;
+      owner: Role;
+    };
+    teams: {
+      enabled: CO["teams"] extends {
+        enabled: true;
+      } ? true : false;
+    };
+    schema: CO["schema"];
+    dynamicAccessControl: {
+      enabled: CO["dynamicAccessControl"] extends {
+        enabled: true;
+      } ? true : false;
+    };
+  }>;
+  getActions: ($fetch: _better_fetch_fetch34.BetterFetch, _$store: _gatwech_core33.ClientStore, co: _gatwech_core33.PayvoAuthClientOptions | undefined) => {
+    $Infer: {
+      ActiveOrganization: CO["teams"] extends {
+        enabled: true;
+      } ? {
+        members: InferMember<CO, false>[];
+        invitations: InferInvitation<CO>[];
+        teams: InferTeam<CO, false>[];
+      } & ({
+        id: string;
+        name: string;
+        slug: string;
+        createdAt: Date;
+        logo?: string | null | undefined;
+        metadata?: any;
+      } & InferAdditionalFieldsFromPluginOptions<"organization", CO, false> extends infer T ? { [K in keyof T]: T[K] } : never) : {
+        members: InferMember<CO, false>[];
+        invitations: InferInvitation<CO, false>[];
+      } & ({
+        id: string;
+        name: string;
+        slug: string;
+        createdAt: Date;
+        logo?: string | null | undefined;
+        metadata?: any;
+      } & InferAdditionalFieldsFromPluginOptions<"organization", CO, false> extends infer T_1 ? { [K in keyof T_1]: T_1[K] } : never);
+      Organization: InferOrganization<CO, false>;
+      Invitation: InferInvitation<CO, false>;
+      Member: InferMember<CO, false>;
+      Team: InferTeam<CO, false>;
+    };
+    organization: {
+      checkRolePermission: <R extends (CO extends {
+        roles: any;
+      } ? keyof CO["roles"] : "admin" | "member" | "owner")>(data: ({
+        /**
+         * @deprecated Use `permissions` instead
+         */
+        permission: { [key in keyof (CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })]?: ((CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })[key] extends readonly unknown[] ? (CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })[key][number] : never)[] | undefined };
+        permissions?: never | undefined;
+      } | {
+        permissions: { [key in keyof (CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })]?: ((CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })[key] extends readonly unknown[] ? (CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })[key][number] : never)[] | undefined };
+        permission?: never | undefined;
+      }) & {
+        role: R;
+      }) => boolean;
+    };
+  };
+  getAtoms: ($fetch: _better_fetch_fetch34.BetterFetch) => {
+    $listOrg: nanostores1.PreinitializedWritableAtom<boolean> & object;
+    $activeOrgSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberRoleSignal: nanostores1.PreinitializedWritableAtom<boolean> & object;
+    activeOrganization: nanostores1.PreinitializedWritableAtom<{
+      data: Prettify<({
+        id: string;
+        name: string;
+        slug: string;
+        createdAt: Date;
+        logo?: string | null | undefined;
+        metadata?: any;
+      } & InferAdditionalFieldsFromPluginOptions<"organization", CO, false> extends infer T ? { [K in keyof T]: T[K] } : never) & {
+        members: InferMember<CO, false>[];
+        invitations: InferInvitation<CO, false>[];
+      }> | null;
+      error: null | _better_fetch_fetch34.BetterFetchError;
+      isPending: boolean;
+      isRefetching: boolean;
+      refetch: (queryParams?: {
+        query?: SessionQueryParams;
+      } | undefined) => void;
+    }> & object;
+    listOrganizations: nanostores1.PreinitializedWritableAtom<{
+      data: ({
+        id: string;
+        name: string;
+        slug: string;
+        createdAt: Date;
+        logo?: string | null | undefined;
+        metadata?: any;
+      } & InferAdditionalFieldsFromPluginOptions<"organization", CO, false> extends infer T_1 ? { [K in keyof T_1]: T_1[K] } : never)[] | null;
+      error: null | _better_fetch_fetch34.BetterFetchError;
+      isPending: boolean;
+      isRefetching: boolean;
+      refetch: (queryParams?: {
+        query?: SessionQueryParams;
+      } | undefined) => void;
+    }> & object;
+    activeMember: nanostores1.PreinitializedWritableAtom<{
+      data: {
+        id: string;
+        organizationId: string;
+        userId: string;
+        role: string;
+        createdAt: Date;
+      } | null;
+      error: null | _better_fetch_fetch34.BetterFetchError;
+      isPending: boolean;
+      isRefetching: boolean;
+      refetch: (queryParams?: {
+        query?: SessionQueryParams;
+      } | undefined) => void;
+    }> & object;
+    activeMemberRole: nanostores1.PreinitializedWritableAtom<{
+      data: {
+        role: string;
+      } | null;
+      error: null | _better_fetch_fetch34.BetterFetchError;
+      isPending: boolean;
+      isRefetching: boolean;
+      refetch: (queryParams?: {
+        query?: SessionQueryParams;
+      } | undefined) => void;
+    }> & object;
+  };
+  pathMethods: {
+    "/organization/get-full-organization": "GET";
+    "/organization/list-user-teams": "GET";
+  };
+  atomListeners: ({
+    matcher(path: string): path is "/organization/create" | "/organization/update" | "/organization/delete";
+    signal: "$listOrg";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$activeOrgSignal";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$sessionSignal";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$activeMemberSignal";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$activeMemberRoleSignal";
+  })[];
+};
+declare const inferOrgAdditionalFields: <O$1 extends {
+  options: PayvoAuthOptions$1;
+}, S$1 extends OrganizationOptions["schema"] = undefined>(schema?: S$1 | undefined) => undefined extends S$1 ? O$1 extends Object ? O$1 extends {
+  session?: {
+    fields?: {
+      activeOrganizationId?: string;
+      activeTeamId?: string;
+    };
+  };
+  organization?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Organization, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  member?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Member, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  invitation?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Invitation, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  team?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Team, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  teamMember?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<TeamMember, "id">]?: string };
+  };
+  organizationRole?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<OrganizationRole, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+} ? O$1 : ((O$1 extends {
+  options: any;
+} ? O$1 : {
+  options: {
+    plugins: [];
+  };
+})["options"]["plugins"][number] extends infer T ? T extends (O$1 extends {
+  options: any;
+} ? O$1 : {
+  options: {
+    plugins: [];
+  };
+})["options"]["plugins"][number] ? T extends {
+  id: "organization";
+} ? T : never : never : never) extends {
+  options: {
+    schema: infer S_1;
+  };
+} ? S_1 extends {
+  session?: {
+    fields?: {
+      activeOrganizationId?: string;
+      activeTeamId?: string;
+    };
+  };
+  organization?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Organization, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  member?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Member, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  invitation?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Invitation, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  team?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Team, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  teamMember?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<TeamMember, "id">]?: string };
+  };
+  organizationRole?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<OrganizationRole, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+} | undefined ? S_1 : undefined : undefined : undefined : S$1;
+//#endregion
+//#region src/plugins/phone-number/client.d.ts
+declare const phoneNumberClient: () => {
+  id: "phoneNumber";
+  $InferServerPlugin: ReturnType<typeof phoneNumber>;
+  atomListeners: {
+    matcher(path: string): path is "/phone-number/verify" | "/phone-number/update";
+    signal: "$sessionSignal";
+  }[];
+};
+//#endregion
+//#region src/plugins/passkey/client.d.ts
+declare const getPasskeyActions: ($fetch: BetterFetch, {
+  $listPasskeys,
+  $store
+}: {
+  $listPasskeys: ReturnType<typeof atom<any>>;
+  $store: ClientStore;
+}) => {
+  signIn: {
+    /**
+     * Sign in with a registered passkey
+     */
+    passkey: (opts?: {
+      autoFill?: boolean;
+      fetchOptions?: BetterFetchOption;
+    } | undefined, options?: BetterFetchOption | undefined) => Promise<{
+      data: null;
+      error: {
+        message?: string | undefined;
+        status: number;
+        statusText: string;
+      };
+    } | {
+      data: {
+        session: Session$1;
+        user: User$1;
+      };
+      error: null;
+    } | {
+      data: null;
+      error: {
+        code: string;
+        message: string;
+        status: number;
+        statusText: string;
+      };
+    }>;
+  };
+  passkey: {
+    /**
+     * Add a passkey to the user account
+     */
+    addPasskey: (opts?: {
+      fetchOptions?: BetterFetchOption;
+      /**
+       * The name of the passkey. This is used to
+       * identify the passkey in the UI.
+       */
+      name?: string;
+      /**
+       * The type of attachment for the passkey. Defaults to both
+       * platform and cross-platform allowed, with platform preferred.
+       */
+      authenticatorAttachment?: "platform" | "cross-platform";
+      /**
+       * Try to silently create a passkey with the password manager that the user just signed
+       * in with.
+       * @default false
+       */
+      useAutoRegister?: boolean;
+    } | undefined, fetchOpts?: BetterFetchOption | undefined) => Promise<{
+      data: null;
+      error: {
+        message?: string | undefined;
+        status: number;
+        statusText: string;
+      };
+    } | {
+      data: null;
+      error: {
+        code: string;
+        message: string;
+        status: number;
+        statusText: string;
+      };
+    } | undefined>;
+  };
+  /**
+   * Inferred Internal Types
+   */
+  $Infer: {
+    Passkey: Passkey;
+  };
+};
+declare const passkeyClient: () => {
+  id: "passkey";
+  $InferServerPlugin: ReturnType<typeof passkey>;
+  getActions: ($fetch: BetterFetch, $store: ClientStore) => {
+    signIn: {
+      /**
+       * Sign in with a registered passkey
+       */
+      passkey: (opts?: {
+        autoFill?: boolean;
+        fetchOptions?: BetterFetchOption;
+      } | undefined, options?: BetterFetchOption | undefined) => Promise<{
+        data: null;
+        error: {
+          message?: string | undefined;
+          status: number;
+          statusText: string;
+        };
+      } | {
+        data: {
+          session: Session$1;
+          user: User$1;
+        };
+        error: null;
+      } | {
+        data: null;
+        error: {
+          code: string;
+          message: string;
+          status: number;
+          statusText: string;
+        };
+      }>;
+    };
+    passkey: {
+      /**
+       * Add a passkey to the user account
+       */
+      addPasskey: (opts?: {
+        fetchOptions?: BetterFetchOption;
+        /**
+         * The name of the passkey. This is used to
+         * identify the passkey in the UI.
+         */
+        name?: string;
+        /**
+         * The type of attachment for the passkey. Defaults to both
+         * platform and cross-platform allowed, with platform preferred.
+         */
+        authenticatorAttachment?: "platform" | "cross-platform";
+        /**
+         * Try to silently create a passkey with the password manager that the user just signed
+         * in with.
+         * @default false
+         */
+        useAutoRegister?: boolean;
+      } | undefined, fetchOpts?: BetterFetchOption | undefined) => Promise<{
+        data: null;
+        error: {
+          message?: string | undefined;
+          status: number;
+          statusText: string;
+        };
+      } | {
+        data: null;
+        error: {
+          code: string;
+          message: string;
+          status: number;
+          statusText: string;
+        };
+      } | undefined>;
+    };
+    /**
+     * Inferred Internal Types
+     */
+    $Infer: {
+      Passkey: Passkey;
+    };
+  };
+  getAtoms($fetch: BetterFetch): {
+    listPasskeys: nanostores1.PreinitializedWritableAtom<{
+      data: Passkey[] | null;
+      error: null | _better_fetch_fetch34.BetterFetchError;
+      isPending: boolean;
+      isRefetching: boolean;
+      refetch: (queryParams?: {
+        query?: SessionQueryParams;
+      } | undefined) => void;
+    }> & object;
+    $listPasskeys: nanostores1.PreinitializedWritableAtom<any> & object;
+  };
+  pathMethods: {
+    "/passkey/register": "POST";
+    "/passkey/authenticate": "POST";
+  };
+  atomListeners: ({
+    matcher(path: string): path is "/sign-out" | "/passkey/verify-registration" | "/passkey/delete-passkey" | "/passkey/update-passkey";
+    signal: "$listPasskeys";
+  } | {
+    matcher: (path: string) => path is "/passkey/verify-authentication";
+    signal: "$sessionSignal";
+  })[];
+};
+//#endregion
+//#region src/plugins/username/client.d.ts
+declare const usernameClient: () => {
+  id: "username";
+  $InferServerPlugin: ReturnType<typeof username>;
+};
+//#endregion
+//#region src/client/plugins/infer-plugin.d.ts
+declare const InferServerPlugin: <AuthOrOption extends PayvoAuthOptions | {
+  options: PayvoAuthOptions;
+}, ID extends string>() => {
+  id: "infer-server-plugin";
+  $InferServerPlugin: (AuthOrOption extends {
+    options: infer O;
+  } ? O : AuthOrOption)["plugins"] extends (infer P)[] ? P extends {
+    id: ID;
+  } ? P : never : never;
+};
+//#endregion
+export { ApiKeyClientPlugin, Awaitable, DeepPartial, Expand, GoogleOneTapActionOptions, GoogleOneTapOptions, HasRequiredKeys, InferServerPlugin, LastLoginMethodClientConfig, LiteralNumber, LiteralString, LiteralUnion, OmitId, PreserveJSDoc, Prettify, PrettifyDeep, Primitive, RequiredKeysOf, StripEmptyObjects, UnionToIntersection, WithoutEmpty, adminClient, anonymousClient, apiKeyClient, clientSideHasPermission, customSessionClient, deviceAuthorizationClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, inferOrgAdditionalFields, jwtClient, lastLoginMethodClient, magicLinkClient, multiSessionClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, twoFactorClient, usernameClient };