@gatwech/auth 1.0.0-beta.18

package/dist/index-DoXZYQpq.d.mts

@@ -0,0 +1,290 @@
+import { o as Session, s as User } from "./index-65G5U5DB-DSdjzreF.mjs";
+import * as _gatwech_core1 from "@gatwech/core";
+import * as better_call7 from "better-call";
+import * as z$1 from "zod";
+
+//#region src/plugins/multi-session/index.d.ts
+interface MultiSessionConfig {
+  /**
+   * The maximum number of sessions a user can have
+   * at a time
+   * @default 5
+   */
+  maximumSessions?: number | undefined;
+}
+declare const multiSession: (options?: MultiSessionConfig | undefined) => {
+  id: "multi-session";
+  endpoints: {
+    /**
+     * ### Endpoint
+     *
+     * GET `/multi-session/list-device-sessions`
+     *
+     * ### API Methods
+     *
+     * **server:**
+     * `auth.api.listDeviceSessions`
+     *
+     * **client:**
+     * `authClient.multiSession.listDeviceSessions`
+     *
+     * @see [Read our docs to learn more.](https://payvopayvo.com/docs/plugins/multi-session#api-method-multi-session-list-device-sessions)
+     */
+    listDeviceSessions: {
+      <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body?: undefined;
+      } & {
+        method?: "GET" | undefined;
+      } & {
+        query?: Record<string, any> | undefined;
+      } & {
+        params?: Record<string, any>;
+      } & {
+        request?: Request;
+      } & {
+        headers: HeadersInit;
+      } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: better_call7.Middleware[];
+        path?: string;
+      } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+      }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+          session: Session;
+          user: User;
+        }[];
+      } : {
+        session: Session;
+        user: User;
+      }[]>;
+      options: {
+        method: "GET";
+        requireHeaders: true;
+      } & {
+        use: any[];
+      };
+      path: "/multi-session/list-device-sessions";
+    };
+    /**
+     * ### Endpoint
+     *
+     * POST `/multi-session/set-active`
+     *
+     * ### API Methods
+     *
+     * **server:**
+     * `auth.api.setActiveSession`
+     *
+     * **client:**
+     * `authClient.multiSession.setActive`
+     *
+     * @see [Read our docs to learn more.](https://payvopayvo.com/docs/plugins/multi-session#api-method-multi-session-set-active)
+     */
+    setActiveSession: {
+      <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body: {
+          sessionToken: string;
+        };
+      } & {
+        method?: "POST" | undefined;
+      } & {
+        query?: Record<string, any> | undefined;
+      } & {
+        params?: Record<string, any>;
+      } & {
+        request?: Request;
+      } & {
+        headers: HeadersInit;
+      } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: better_call7.Middleware[];
+        path?: string;
+      } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+      }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+          session: Session & Record<string, any>;
+          user: User & Record<string, any>;
+        };
+      } : {
+        session: Session & Record<string, any>;
+        user: User & Record<string, any>;
+      }>;
+      options: {
+        method: "POST";
+        body: z$1.ZodObject<{
+          sessionToken: z$1.ZodString;
+        }, z$1.core.$strip>;
+        requireHeaders: true;
+        use: ((inputContext: better_call7.MiddlewareInputContext<better_call7.MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>)[];
+        metadata: {
+          openapi: {
+            description: string;
+            responses: {
+              200: {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        session: {
+                          $ref: string;
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      } & {
+        use: any[];
+      };
+      path: "/multi-session/set-active";
+    };
+    /**
+     * ### Endpoint
+     *
+     * POST `/multi-session/revoke`
+     *
+     * ### API Methods
+     *
+     * **server:**
+     * `auth.api.revokeDeviceSession`
+     *
+     * **client:**
+     * `authClient.multiSession.revoke`
+     *
+     * @see [Read our docs to learn more.](https://payvopayvo.com/docs/plugins/multi-session#api-method-multi-session-revoke)
+     */
+    revokeDeviceSession: {
+      <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body: {
+          sessionToken: string;
+        };
+      } & {
+        method?: "POST" | undefined;
+      } & {
+        query?: Record<string, any> | undefined;
+      } & {
+        params?: Record<string, any>;
+      } & {
+        request?: Request;
+      } & {
+        headers: HeadersInit;
+      } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: better_call7.Middleware[];
+        path?: string;
+      } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+      }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: {
+          status: boolean;
+        };
+      } : {
+        status: boolean;
+      }>;
+      options: {
+        method: "POST";
+        body: z$1.ZodObject<{
+          sessionToken: z$1.ZodString;
+        }, z$1.core.$strip>;
+        requireHeaders: true;
+        use: ((inputContext: better_call7.MiddlewareInputContext<better_call7.MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>)[];
+        metadata: {
+          openapi: {
+            description: string;
+            responses: {
+              200: {
+                description: string;
+                content: {
+                  "application/json": {
+                    schema: {
+                      type: "object";
+                      properties: {
+                        status: {
+                          type: string;
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      } & {
+        use: any[];
+      };
+      path: "/multi-session/revoke";
+    };
+  };
+  hooks: {
+    after: {
+      matcher: (context: _gatwech_core1.HookEndpointContext) => boolean;
+      handler: (inputContext: better_call7.MiddlewareInputContext<better_call7.MiddlewareOptions>) => Promise<void>;
+    }[];
+  };
+  $ERROR_CODES: {
+    readonly INVALID_SESSION_TOKEN: "Invalid session token";
+  };
+};
+//#endregion
+export { multiSession as t };

package/dist/index-G6V0Z_Mn.d.mts

@@ -0,0 +1,125 @@
+import * as _gatwech_core7 from "@gatwech/core";
+import * as better_call19 from "better-call";
+import * as z$1 from "zod";
+
+//#region src/plugins/oauth-proxy/index.d.ts
+interface OAuthProxyOptions {
+  /**
+   * The current URL of the application.
+   * The plugin will attempt to infer the current URL from your environment
+   * by checking the base URL from popular hosting providers,
+   * from the request URL if invoked by a client,
+   * or as a fallback, from the `baseURL` in your auth config.
+   * If the URL is not inferred correctly, you can provide a value here."
+   */
+  currentURL?: string | undefined;
+  /**
+   * If a request in a production url it won't be proxied.
+   *
+   * default to `PAYVO_AUTH_URL`
+   */
+  productionURL?: string | undefined;
+}
+/**
+ * A proxy plugin, that allows you to proxy OAuth requests.
+ * Useful for development and preview deployments where
+ * the redirect URL can't be known in advance to add to the OAuth provider.
+ */
+declare const oAuthProxy: (opts?: OAuthProxyOptions | undefined) => {
+  id: "oauth-proxy";
+  options: OAuthProxyOptions | undefined;
+  endpoints: {
+    oAuthProxy: {
+      <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+        body?: undefined;
+      } & {
+        method?: "GET" | undefined;
+      } & {
+        query: {
+          callbackURL: string;
+          cookies: string;
+        };
+      } & {
+        params?: Record<string, any>;
+      } & {
+        request?: Request;
+      } & {
+        headers?: HeadersInit;
+      } & {
+        asResponse?: boolean;
+        returnHeaders?: boolean;
+        use?: better_call19.Middleware[];
+        path?: string;
+      } & {
+        asResponse?: AsResponse | undefined;
+        returnHeaders?: ReturnHeaders | undefined;
+      }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+        headers: Headers;
+        response: never;
+      } : never>;
+      options: {
+        method: "GET";
+        query: z$1.ZodObject<{
+          callbackURL: z$1.ZodString;
+          cookies: z$1.ZodString;
+        }, z$1.core.$strip>;
+        use: ((inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<void>)[];
+        metadata: {
+          openapi: {
+            description: string;
+            parameters: {
+              in: "query";
+              name: string;
+              required: true;
+              description: string;
+            }[];
+            responses: {
+              302: {
+                description: string;
+                headers: {
+                  Location: {
+                    description: string;
+                    schema: {
+                      type: string;
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      } & {
+        use: any[];
+      };
+      path: "/oauth-proxy-callback";
+    };
+  };
+  hooks: {
+    after: {
+      matcher(context: _gatwech_core7.HookEndpointContext): boolean;
+      handler: (inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<void>;
+    }[];
+    before: ({
+      matcher(): true;
+      handler: (inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<{
+        context: {
+          context: {
+            oauthConfig: {
+              skipStateCookieCheck: boolean;
+            };
+          };
+        };
+      } | undefined>;
+    } | {
+      matcher(context: _gatwech_core7.HookEndpointContext): boolean;
+      handler: (inputContext: better_call19.MiddlewareInputContext<better_call19.MiddlewareOptions>) => Promise<{
+        context: better_call19.MiddlewareContext<better_call19.MiddlewareOptions, _gatwech_core7.AuthContext<_gatwech_core7.PayvoAuthOptions> & {
+          returned?: unknown | undefined;
+          responseHeaders?: Headers | undefined;
+        }>;
+      } | undefined>;
+    })[];
+  };
+};
+//#endregion
+export { oAuthProxy as n, OAuthProxyOptions as t };

package/dist/index-z0KSvE5i.d.mts

@@ -0,0 +1,246 @@
+import { c as Subset, t as AuthorizeResponse } from "./index-C7fQuk-V.mjs";
+
+//#region src/plugins/organization/access/statement.d.ts
+declare const defaultStatements: {
+  readonly organization: readonly ["update", "delete"];
+  readonly member: readonly ["create", "update", "delete"];
+  readonly invitation: readonly ["create", "cancel"];
+  readonly team: readonly ["create", "update", "delete"];
+  readonly ac: readonly ["create", "read", "update", "delete"];
+};
+declare const defaultAc: {
+  newRole<K extends "organization" | "member" | "invitation" | "ac" | "team">(statements: Subset<K, {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }>): {
+    authorize<K_1 extends K>(request: K_1 extends infer T extends keyof Subset<K, {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }> ? { [key in T]?: Subset<K, {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key] | {
+      actions: Subset<K, {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>[key];
+      connector: "OR" | "AND";
+    } | undefined } : never, connector?: "OR" | "AND"): AuthorizeResponse;
+    statements: Subset<K, {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+  };
+  statements: {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  };
+};
+declare const adminAc: {
+  authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }>[key] | {
+    actions: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key];
+    connector: "OR" | "AND";
+  } | undefined } : never, connector?: "OR" | "AND"): AuthorizeResponse;
+  statements: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }>;
+};
+declare const ownerAc: {
+  authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }>[key] | {
+    actions: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key];
+    connector: "OR" | "AND";
+  } | undefined } : never, connector?: "OR" | "AND"): AuthorizeResponse;
+  statements: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }>;
+};
+declare const memberAc: {
+  authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }>[key] | {
+    actions: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key];
+    connector: "OR" | "AND";
+  } | undefined } : never, connector?: "OR" | "AND"): AuthorizeResponse;
+  statements: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+  }>;
+};
+declare const defaultRoles: {
+  admin: {
+    authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key] | {
+      actions: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>[key];
+      connector: "OR" | "AND";
+    } | undefined } : never, connector?: "OR" | "AND"): AuthorizeResponse;
+    statements: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+  };
+  owner: {
+    authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key] | {
+      actions: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>[key];
+      connector: "OR" | "AND";
+    } | undefined } : never, connector?: "OR" | "AND"): AuthorizeResponse;
+    statements: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+  };
+  member: {
+    authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key] | {
+      actions: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+      }>[key];
+      connector: "OR" | "AND";
+    } | undefined } : never, connector?: "OR" | "AND"): AuthorizeResponse;
+    statements: Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+  };
+};
+//#endregion
+export { memberAc as a, defaultStatements as i, defaultAc as n, ownerAc as o, defaultRoles as r, adminAc as t };