@gatwech/auth 1.0.0-beta.18

package/dist/src/plugins/one-tap/client.d.ts

@@ -0,0 +1,81 @@
+import type { BetterFetchOption } from "@better-fetch/fetch";
+declare global {
+    interface Window {
+        google?: {
+            accounts: {
+                id: {
+                    initialize: (config: any) => void;
+                    prompt: (callback?: (notification: any) => void) => void;
+                };
+            };
+        } | undefined;
+        googleScriptInitialized?: boolean | undefined;
+    }
+}
+export interface GoogleOneTapOptions {
+    /**
+     * Google client ID
+     */
+    clientId: string;
+    /**
+     * Auto select the account if the user is already signed in
+     */
+    autoSelect?: boolean | undefined;
+    /**
+     * Cancel the flow when the user taps outside the prompt
+     */
+    cancelOnTapOutside?: boolean | undefined;
+    /**
+     * The mode to use for the Google One Tap flow
+     *
+     * popup: Use a popup window
+     * redirect: Redirect the user to the Google One Tap flow
+     *
+     * @default "popup"
+     */
+    uxMode?: ("popup" | "redirect") | undefined;
+    /**
+     * The context to use for the Google One Tap flow. See https://developers.google.com/identity/gsi/web/reference/js-reference
+     *
+     * @default "signin"
+     */
+    context?: ("signin" | "signup" | "use") | undefined;
+    /**
+     * Additional configuration options to pass to the Google One Tap API.
+     */
+    additionalOptions?: Record<string, any> | undefined;
+    /**
+     * Configuration options for the prompt and exponential backoff behavior.
+     */
+    promptOptions?: {
+        /**
+         * Base delay (in milliseconds) for exponential backoff.
+         * @default 1000
+         */
+        baseDelay?: number;
+        /**
+         * Maximum number of prompt attempts before calling onPromptNotification.
+         * @default 5
+         */
+        maxAttempts?: number;
+    } | undefined;
+}
+export interface GoogleOneTapActionOptions extends Omit<GoogleOneTapOptions, "clientId" | "promptOptions"> {
+    fetchOptions?: BetterFetchOption | undefined;
+    /**
+     * Callback URL.
+     */
+    callbackURL?: string | undefined;
+    /**
+     * Optional callback that receives the prompt notification if (or when) the prompt is dismissed or skipped.
+     * This lets you render an alternative UI (e.g. a Google Sign-In button) to restart the process.
+     */
+    onPromptNotification?: ((notification: any) => void) | undefined;
+}
+export declare const oneTapClient: (options: GoogleOneTapOptions) => {
+    id: "one-tap";
+    getActions: ($fetch: import("@better-fetch/fetch").BetterFetch, _: import("@gatwech/core").ClientStore) => {
+        oneTap: (opts?: GoogleOneTapActionOptions | undefined, fetchOptions?: BetterFetchOption | undefined) => Promise<void>;
+    };
+    getAtoms($fetch: import("@better-fetch/fetch").BetterFetch): {};
+};

package/dist/src/plugins/one-tap/index.d.ts

@@ -0,0 +1,114 @@
+import * as z from "zod";
+interface OneTapOptions {
+    /**
+     * Disable the signup flow
+     *
+     * @default false
+     */
+    disableSignup?: boolean | undefined;
+    /**
+     * Google Client ID
+     *
+     * If a client ID is provided in the social provider configuration,
+     * it will be used.
+     */
+    clientId?: string | undefined;
+}
+export declare const oneTap: (options?: OneTapOptions | undefined) => {
+    id: "one-tap";
+    endpoints: {
+        oneTapCallback: {
+            <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+                body: {
+                    idToken: string;
+                };
+            } & {
+                method?: "POST" | undefined;
+            } & {
+                query?: Record<string, any> | undefined;
+            } & {
+                params?: Record<string, any>;
+            } & {
+                request?: Request;
+            } & {
+                headers?: HeadersInit;
+            } & {
+                asResponse?: boolean;
+                returnHeaders?: boolean;
+                use?: import("better-call").Middleware[];
+                path?: string;
+            } & {
+                asResponse?: AsResponse | undefined;
+                returnHeaders?: ReturnHeaders | undefined;
+            }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+                headers: Headers;
+                response: {
+                    error: string;
+                } | {
+                    token: string;
+                    user: {
+                        id: string;
+                        email: string;
+                        emailVerified: boolean;
+                        name: string;
+                        image: string | null | undefined;
+                        createdAt: Date;
+                        updatedAt: Date;
+                    };
+                };
+            } : {
+                error: string;
+            } | {
+                token: string;
+                user: {
+                    id: string;
+                    email: string;
+                    emailVerified: boolean;
+                    name: string;
+                    image: string | null | undefined;
+                    createdAt: Date;
+                    updatedAt: Date;
+                };
+            }>;
+            options: {
+                method: "POST";
+                body: z.ZodObject<{
+                    idToken: z.ZodString;
+                }, z.core.$strip>;
+                metadata: {
+                    openapi: {
+                        summary: string;
+                        description: string;
+                        responses: {
+                            200: {
+                                description: string;
+                                content: {
+                                    "application/json": {
+                                        schema: {
+                                            type: "object";
+                                            properties: {
+                                                session: {
+                                                    $ref: string;
+                                                };
+                                                user: {
+                                                    $ref: string;
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                            400: {
+                                description: string;
+                            };
+                        };
+                    };
+                };
+            } & {
+                use: any[];
+            };
+            path: "/one-tap/callback";
+        };
+    };
+};
+export {};

package/dist/src/plugins/one-time-token/client.d.ts

@@ -0,0 +1,5 @@
+import type { oneTimeToken } from "./index";
+export declare const oneTimeTokenClient: () => {
+    id: "one-time-token";
+    $InferServerPlugin: ReturnType<typeof oneTimeToken>;
+};

package/dist/src/plugins/one-time-token/index.d.ts

@@ -0,0 +1,170 @@
+import type { GenericEndpointContext } from "@gatwech/core";
+import * as z from "zod";
+import type { Session, User } from "../../types";
+interface OneTimeTokenOptions {
+    /**
+     * Expires in minutes
+     *
+     * @default 3
+     */
+    expiresIn?: number | undefined;
+    /**
+     * Only allow server initiated requests
+     */
+    disableClientRequest?: boolean | undefined;
+    /**
+     * Generate a custom token
+     */
+    generateToken?: ((session: {
+        user: User & Record<string, any>;
+        session: Session & Record<string, any>;
+    }, ctx: GenericEndpointContext) => Promise<string>) | undefined;
+    /**
+     * This option allows you to configure how the token is stored in your database.
+     * Note: This will not affect the token that's sent, it will only affect the token stored in your database.
+     *
+     * @default "plain"
+     */
+    storeToken?: ("plain" | "hashed" | {
+        type: "custom-hasher";
+        hash: (token: string) => Promise<string>;
+    }) | undefined;
+}
+export declare const oneTimeToken: (options?: OneTimeTokenOptions | undefined) => {
+    id: "one-time-token";
+    endpoints: {
+        /**
+         * ### Endpoint
+         *
+         * GET `/one-time-token/generate`
+         *
+         * ### API Methods
+         *
+         * **server:**
+         * `auth.api.generateOneTimeToken`
+         *
+         * **client:**
+         * `authClient.oneTimeToken.generate`
+         *
+         * @see [Read our docs to learn more.](https://payvopayvo.com/docs/plugins/one-time-token#api-method-one-time-token-generate)
+         */
+        generateOneTimeToken: {
+            <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0?: ({
+                body?: undefined;
+            } & {
+                method?: "GET" | undefined;
+            } & {
+                query?: Record<string, any> | undefined;
+            } & {
+                params?: Record<string, any>;
+            } & {
+                request?: Request;
+            } & {
+                headers?: HeadersInit;
+            } & {
+                asResponse?: boolean;
+                returnHeaders?: boolean;
+                use?: import("better-call").Middleware[];
+                path?: string;
+            } & {
+                asResponse?: AsResponse | undefined;
+                returnHeaders?: ReturnHeaders | undefined;
+            }) | undefined): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+                headers: Headers;
+                response: {
+                    token: string;
+                };
+            } : {
+                token: string;
+            }>;
+            options: {
+                method: "GET";
+                use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+                    session: {
+                        session: Record<string, any> & {
+                            id: string;
+                            createdAt: Date;
+                            updatedAt: Date;
+                            userId: string;
+                            expiresAt: Date;
+                            token: string;
+                            ipAddress?: string | null | undefined;
+                            userAgent?: string | null | undefined;
+                        };
+                        user: Record<string, any> & {
+                            id: string;
+                            createdAt: Date;
+                            updatedAt: Date;
+                            email: string;
+                            emailVerified: boolean;
+                            name: string;
+                            image?: string | null | undefined;
+                        };
+                    };
+                }>)[];
+            } & {
+                use: any[];
+            };
+            path: "/one-time-token/generate";
+        };
+        /**
+         * ### Endpoint
+         *
+         * POST `/one-time-token/verify`
+         *
+         * ### API Methods
+         *
+         * **server:**
+         * `auth.api.verifyOneTimeToken`
+         *
+         * **client:**
+         * `authClient.oneTimeToken.verify`
+         *
+         * @see [Read our docs to learn more.](https://payvopayvo.com/docs/plugins/one-time-token#api-method-one-time-token-verify)
+         */
+        verifyOneTimeToken: {
+            <AsResponse extends boolean = false, ReturnHeaders extends boolean = false>(inputCtx_0: {
+                body: {
+                    token: string;
+                };
+            } & {
+                method?: "POST" | undefined;
+            } & {
+                query?: Record<string, any> | undefined;
+            } & {
+                params?: Record<string, any>;
+            } & {
+                request?: Request;
+            } & {
+                headers?: HeadersInit;
+            } & {
+                asResponse?: boolean;
+                returnHeaders?: boolean;
+                use?: import("better-call").Middleware[];
+                path?: string;
+            } & {
+                asResponse?: AsResponse | undefined;
+                returnHeaders?: ReturnHeaders | undefined;
+            }): Promise<[AsResponse] extends [true] ? Response : [ReturnHeaders] extends [true] ? {
+                headers: Headers;
+                response: {
+                    session: Session & Record<string, any>;
+                    user: User & Record<string, any>;
+                };
+            } : {
+                session: Session & Record<string, any>;
+                user: User & Record<string, any>;
+            }>;
+            options: {
+                method: "POST";
+                body: z.ZodObject<{
+                    token: z.ZodString;
+                }, z.core.$strip>;
+            } & {
+                use: any[];
+            };
+            path: "/one-time-token/verify";
+        };
+    };
+};
+export {};

package/dist/src/plugins/one-time-token/utils.d.ts

@@ -0,0 +1 @@
+export declare const defaultKeyHasher: (token: string) => Promise<string>;

package/dist/src/plugins/organization/access/index.d.ts

@@ -0,0 +1 @@
+export * from "./statement";

package/dist/src/plugins/organization/access/statement.d.ts

@@ -0,0 +1,241 @@
+export declare const defaultStatements: {
+    readonly organization: readonly ["update", "delete"];
+    readonly member: readonly ["create", "update", "delete"];
+    readonly invitation: readonly ["create", "cancel"];
+    readonly team: readonly ["create", "update", "delete"];
+    readonly ac: readonly ["create", "read", "update", "delete"];
+};
+export declare const defaultAc: {
+    newRole<K extends "organization" | "member" | "invitation" | "ac" | "team">(statements: import("../../access").Subset<K, {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }>): {
+        authorize<K_1 extends K>(request: K_1 extends infer T extends keyof import("../../access").Subset<K, {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }> ? { [key in T]?: import("../../access").Subset<K, {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>[key] | {
+            actions: import("../../access").Subset<K, {
+                readonly organization: readonly ["update", "delete"];
+                readonly member: readonly ["create", "update", "delete"];
+                readonly invitation: readonly ["create", "cancel"];
+                readonly team: readonly ["create", "update", "delete"];
+                readonly ac: readonly ["create", "read", "update", "delete"];
+            }>[key];
+            connector: "OR" | "AND";
+        } | undefined; } : never, connector?: "OR" | "AND"): import("../../access").AuthorizeResponse;
+        statements: import("../../access").Subset<K, {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>;
+    };
+    statements: {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    };
+};
+export declare const adminAc: {
+    authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }> ? { [key in T]?: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key] | {
+        actions: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>[key];
+        connector: "OR" | "AND";
+    } | undefined; } : never, connector?: "OR" | "AND"): import("../../access").AuthorizeResponse;
+    statements: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+};
+export declare const ownerAc: {
+    authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }> ? { [key in T]?: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key] | {
+        actions: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>[key];
+        connector: "OR" | "AND";
+    } | undefined; } : never, connector?: "OR" | "AND"): import("../../access").AuthorizeResponse;
+    statements: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+};
+export declare const memberAc: {
+    authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }> ? { [key in T]?: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }>[key] | {
+        actions: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>[key];
+        connector: "OR" | "AND";
+    } | undefined; } : never, connector?: "OR" | "AND"): import("../../access").AuthorizeResponse;
+    statements: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+        readonly organization: readonly ["update", "delete"];
+        readonly member: readonly ["create", "update", "delete"];
+        readonly invitation: readonly ["create", "cancel"];
+        readonly team: readonly ["create", "update", "delete"];
+        readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+};
+export declare const defaultRoles: {
+    admin: {
+        authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }> ? { [key in T]?: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>[key] | {
+            actions: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+                readonly organization: readonly ["update", "delete"];
+                readonly member: readonly ["create", "update", "delete"];
+                readonly invitation: readonly ["create", "cancel"];
+                readonly team: readonly ["create", "update", "delete"];
+                readonly ac: readonly ["create", "read", "update", "delete"];
+            }>[key];
+            connector: "OR" | "AND";
+        } | undefined; } : never, connector?: "OR" | "AND"): import("../../access").AuthorizeResponse;
+        statements: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>;
+    };
+    owner: {
+        authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }> ? { [key in T]?: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>[key] | {
+            actions: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+                readonly organization: readonly ["update", "delete"];
+                readonly member: readonly ["create", "update", "delete"];
+                readonly invitation: readonly ["create", "cancel"];
+                readonly team: readonly ["create", "update", "delete"];
+                readonly ac: readonly ["create", "read", "update", "delete"];
+            }>[key];
+            connector: "OR" | "AND";
+        } | undefined; } : never, connector?: "OR" | "AND"): import("../../access").AuthorizeResponse;
+        statements: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>;
+    };
+    member: {
+        authorize<K extends "organization" | "member" | "invitation" | "ac" | "team">(request: K extends infer T extends keyof import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }> ? { [key in T]?: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>[key] | {
+            actions: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+                readonly organization: readonly ["update", "delete"];
+                readonly member: readonly ["create", "update", "delete"];
+                readonly invitation: readonly ["create", "cancel"];
+                readonly team: readonly ["create", "update", "delete"];
+                readonly ac: readonly ["create", "read", "update", "delete"];
+            }>[key];
+            connector: "OR" | "AND";
+        } | undefined; } : never, connector?: "OR" | "AND"): import("../../access").AuthorizeResponse;
+        statements: import("../../access").Subset<"organization" | "member" | "invitation" | "ac" | "team", {
+            readonly organization: readonly ["update", "delete"];
+            readonly member: readonly ["create", "update", "delete"];
+            readonly invitation: readonly ["create", "cancel"];
+            readonly team: readonly ["create", "update", "delete"];
+            readonly ac: readonly ["create", "read", "update", "delete"];
+        }>;
+    };
+};