@inkeep/agents-core 0.72.2 → 0.73.1

package/dist/auth/auth.d.ts

@@ -4,7 +4,8 @@ import * as jose0 from "jose";
 import * as zod0 from "zod";
 import * as better_auth0 from "better-auth";
 import * as _better_auth_oauth_provider0 from "@better-auth/oauth-provider";
-import * as better_auth_plugins20 from "better-auth/plugins";
+import * as better_auth_plugins0 from "better-auth/plugins";
+import * as zod_v4_core0 from "zod/v4/core";
 
 //#region src/auth/auth.d.ts
 
@@ -26,6 +27,7 @@ import * as better_auth_plugins20 from "better-auth/plugins";
 declare function _inferAuthType(): better_auth0.Auth<{
   plugins: [{
     id: "bearer";
+    version: string;
     hooks: {
       before: {
         matcher(context: better_auth0.HookEndpointContext): boolean;
@@ -40,10 +42,11 @@ declare function _inferAuthType(): better_auth0.Auth<{
         handler: (inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>;
       }[];
     };
-    options: better_auth_plugins20.BearerOptions | undefined;
+    options: better_auth_plugins0.BearerOptions | undefined;
   }, {
     id: "oauth-proxy";
-    options: NoInfer<better_auth_plugins20.OAuthProxyOptions>;
+    version: string;
+    options: NoInfer<better_auth_plugins0.OAuthProxyOptions>;
     endpoints: {
       oAuthProxy: better_auth0.StrictEndpoint<"/oauth-proxy-callback", {
         method: "GET";
@@ -51,7 +54,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         query: zod0.ZodObject<{
           callbackURL: zod0.ZodString;
           profile: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>)[];
         metadata: {
           openapi: {
@@ -97,7 +100,8 @@ declare function _inferAuthType(): better_auth0.Auth<{
     };
   }, {
     id: "jwt";
-    options: NoInfer<better_auth_plugins20.JwtOptions>;
+    version: string;
+    options: NoInfer<better_auth_plugins0.JwtOptions>;
     endpoints: {
       getJwks: better_auth0.StrictEndpoint<string, {
         method: "GET";
@@ -234,14 +238,14 @@ declare function _inferAuthType(): better_auth0.Auth<{
           $Infer: {
             body: {
               payload: jose0.JWTPayload;
-              overrideOptions?: better_auth_plugins20.JwtOptions | undefined;
+              overrideOptions?: better_auth_plugins0.JwtOptions | undefined;
             };
           };
         };
         body: zod0.ZodObject<{
           payload: zod0.ZodRecord<zod0.ZodString, zod0.ZodAny>;
           overrideOptions: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodAny>>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
       }, {
         token: string;
       }>;
@@ -265,7 +269,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         body: zod0.ZodObject<{
           token: zod0.ZodString;
           issuer: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
       }, {
         payload: (jose0.JWTPayload & Required<Pick<jose0.JWTPayload, "sub" | "aud">>) | null;
       }>;
@@ -300,6 +304,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
     };
   }, {
     id: "oauth-provider";
+    version: string;
     options: NoInfer<{
       loginPage: string;
       consentPage: string;
@@ -331,18 +336,19 @@ declare function _inferAuthType(): better_auth0.Auth<{
           SERVER_ONLY: true;
         };
       }, Omit<_better_auth_oauth_provider0.OIDCMetadata, "id_token_signing_alg_values_supported"> & {
-        id_token_signing_alg_values_supported: better_auth_plugins20.JWSAlgorithms[] | ["HS256"];
+        id_token_signing_alg_values_supported: better_auth_plugins0.JWSAlgorithms[] | ["HS256"];
       }>;
       oauth2Authorize: better_auth0.StrictEndpoint<"/oauth2/authorize", {
         method: "GET";
         query: zod0.ZodObject<{
-          response_type: zod0.ZodEnum<{
+          response_type: zod0.ZodOptional<zod0.ZodEnum<{
             code: "code";
-          }>;
+          }>>;
           client_id: zod0.ZodString;
           redirect_uri: zod0.ZodOptional<zod0.ZodURL>;
           scope: zod0.ZodOptional<zod0.ZodString>;
           state: zod0.ZodOptional<zod0.ZodString>;
+          request_uri: zod0.ZodOptional<zod0.ZodString>;
           code_challenge: zod0.ZodOptional<zod0.ZodString>;
           code_challenge_method: zod0.ZodOptional<zod0.ZodEnum<{
             S256: "S256";
@@ -357,14 +363,14 @@ declare function _inferAuthType(): better_auth0.Auth<{
             "login consent": "login consent";
             "select_account consent": "select_account consent";
           }>>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
             parameters: ({
               name: string;
               in: "query";
-              required: true;
+              required: false;
               schema: {
                 type: "string";
                 format?: undefined;
@@ -373,10 +379,10 @@ declare function _inferAuthType(): better_auth0.Auth<{
             } | {
               name: string;
               in: "query";
-              required: false;
+              required: true;
               schema: {
                 type: "string";
-                format: string;
+                format?: undefined;
               };
               description: string;
             } | {
@@ -385,7 +391,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
               required: false;
               schema: {
                 type: "string";
-                format?: undefined;
+                format: string;
               };
               description: string;
             })[];
@@ -437,7 +443,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
           accept: zod0.ZodBoolean;
           scope: zod0.ZodOptional<zod0.ZodString>;
           oauth_query: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
@@ -497,7 +503,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
           created: zod0.ZodOptional<zod0.ZodBoolean>;
           postLogin: zod0.ZodOptional<zod0.ZodBoolean>;
           oauth_query: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
@@ -566,7 +572,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
           refresh_token: zod0.ZodOptional<zod0.ZodString>;
           resource: zod0.ZodOptional<zod0.ZodString>;
           scope: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           allowedMediaTypes: string[];
           openapi: {
@@ -690,8 +696,10 @@ declare function _inferAuthType(): better_auth0.Auth<{
         access_token: string;
         expires_in: number;
         expires_at: number;
-        token_type: string;
+        token_type: "Bearer";
+        refresh_token: string | undefined;
         scope: string;
+        id_token: string | undefined;
       }>;
       oauth2Introspect: better_auth0.StrictEndpoint<"/oauth2/introspect", {
         method: "POST";
@@ -703,7 +711,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
             refresh_token: "refresh_token";
             access_token: "access_token";
           }>>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           allowedMediaTypes: string[];
           openapi: {
@@ -840,7 +848,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
             refresh_token: "refresh_token";
             access_token: "access_token";
           }>>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           allowedMediaTypes: string[];
           openapi: {
@@ -1041,7 +1049,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
           client_id: zod0.ZodOptional<zod0.ZodString>;
           post_logout_redirect_uri: zod0.ZodOptional<zod0.ZodURL>;
           state: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1111,7 +1119,8 @@ declare function _inferAuthType(): better_auth0.Auth<{
             public: "public";
             pairwise: "pairwise";
           }>>;
-        }, better_auth0.$strip>;
+          skip_consent: zod0.ZodOptional<zod0.ZodNever>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1288,7 +1297,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
             pairwise: "pairwise";
           }>>;
           metadata: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           SERVER_ONLY: true;
           openapi: {
@@ -1483,7 +1492,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
             native: "native";
             "user-agent-based": "user-agent-based";
           }>>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1643,7 +1652,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         }>)[];
         query: zod0.ZodObject<{
           client_id: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1677,7 +1686,20 @@ declare function _inferAuthType(): better_auth0.Auth<{
         }>)[];
         query: zod0.ZodObject<{
           client_id: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
+        metadata: {
+          openapi: {
+            description: string;
+          };
+        };
+      }, _better_auth_oauth_provider0.OAuthClient>;
+      getOAuthClientPublicPrelogin: better_auth0.StrictEndpoint<"/oauth2/public-client-prelogin", {
+        method: "POST";
+        use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<void>)[];
+        body: zod0.ZodObject<{
+          client_id: zod0.ZodString;
+          oauth_query: zod0.ZodOptional<zod0.ZodString>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1749,8 +1771,8 @@ declare function _inferAuthType(): better_auth0.Auth<{
             skip_consent: zod0.ZodOptional<zod0.ZodBoolean>;
             enable_end_session: zod0.ZodOptional<zod0.ZodBoolean>;
             metadata: zod0.ZodOptional<zod0.ZodRecord<zod0.ZodString, zod0.ZodUnknown>>;
-          }, better_auth0.$strip>;
-        }, better_auth0.$strip>;
+          }, zod_v4_core0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           SERVER_ONLY: true;
           openapi: {
@@ -1811,8 +1833,8 @@ declare function _inferAuthType(): better_auth0.Auth<{
               native: "native";
               "user-agent-based": "user-agent-based";
             }>>;
-          }, better_auth0.$strip>;
-        }, better_auth0.$strip>;
+          }, zod_v4_core0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1846,7 +1868,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         }>)[];
         body: zod0.ZodObject<{
           client_id: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1880,7 +1902,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         }>)[];
         body: zod0.ZodObject<{
           client_id: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -1891,7 +1913,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         method: "GET";
         query: zod0.ZodObject<{
           id: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         use: ((inputContext: better_auth0.MiddlewareInputContext<better_auth0.MiddlewareOptions>) => Promise<{
           session: {
             session: Record<string, any> & {
@@ -1981,8 +2003,8 @@ declare function _inferAuthType(): better_auth0.Auth<{
           id: zod0.ZodString;
           update: zod0.ZodObject<{
             scopes: zod0.ZodArray<zod0.ZodString>;
-          }, better_auth0.$strip>;
-        }, better_auth0.$strip>;
+          }, zod_v4_core0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -2016,7 +2038,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         }>)[];
         body: zod0.ZodObject<{
           id: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -2324,7 +2346,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
       window: number;
       max: number;
     })[];
-  }, better_auth_plugins20.DefaultOrganizationPlugin<{
+  }, better_auth_plugins0.DefaultOrganizationPlugin<{
     schema: {
       invitation: {
         additionalFields: {
@@ -2351,6 +2373,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
     };
   }>, {
     id: "device-authorization";
+    version: string;
     schema: {
       deviceCode: {
         fields: {
@@ -2399,14 +2422,14 @@ declare function _inferAuthType(): better_auth0.Auth<{
         body: zod0.ZodObject<{
           client_id: zod0.ZodString;
           scope: zod0.ZodOptional<zod0.ZodString>;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         error: zod0.ZodObject<{
           error: zod0.ZodEnum<{
             invalid_request: "invalid_request";
             invalid_client: "invalid_client";
           }>;
           error_description: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -2485,7 +2508,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
           grant_type: zod0.ZodLiteral<"urn:ietf:params:oauth:grant-type:device_code">;
           device_code: zod0.ZodString;
           client_id: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         error: zod0.ZodObject<{
           error: zod0.ZodEnum<{
             invalid_request: "invalid_request";
@@ -2496,7 +2519,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
             invalid_grant: "invalid_grant";
           }>;
           error_description: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -2551,13 +2574,13 @@ declare function _inferAuthType(): better_auth0.Auth<{
         method: "GET";
         query: zod0.ZodObject<{
           user_code: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         error: zod0.ZodObject<{
           error: zod0.ZodEnum<{
             invalid_request: "invalid_request";
           }>;
           error_description: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         metadata: {
           openapi: {
             description: string;
@@ -2594,7 +2617,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         method: "POST";
         body: zod0.ZodObject<{
           userCode: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         error: zod0.ZodObject<{
           error: zod0.ZodEnum<{
             invalid_request: "invalid_request";
@@ -2604,7 +2627,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
             unauthorized: "unauthorized";
           }>;
           error_description: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         requireHeaders: true;
         metadata: {
           openapi: {
@@ -2635,7 +2658,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
         method: "POST";
         body: zod0.ZodObject<{
           userCode: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         error: zod0.ZodObject<{
           error: zod0.ZodEnum<{
             invalid_request: "invalid_request";
@@ -2644,7 +2667,7 @@ declare function _inferAuthType(): better_auth0.Auth<{
             unauthorized: "unauthorized";
           }>;
           error_description: zod0.ZodString;
-        }, better_auth0.$strip>;
+        }, zod_v4_core0.$strip>;
         requireHeaders: true;
         metadata: {
           openapi: {
@@ -2687,8 +2710,8 @@ declare function _inferAuthType(): better_auth0.Auth<{
       AUTHENTICATION_REQUIRED: better_auth0.RawError<"AUTHENTICATION_REQUIRED">;
     };
     options: Partial<{
-      expiresIn: better_auth_plugins20.TimeString;
-      interval: better_auth_plugins20.TimeString;
+      expiresIn: better_auth_plugins0.TimeString;
+      interval: better_auth_plugins0.TimeString;
       deviceCodeLength: number;
       userCodeLength: number;
       schema: {

package/dist/auth/auth.js

@@ -6,17 +6,23 @@ import { setPasswordResetLink } from "./password-reset-link-store.js";
 import { createUserProfileIfNotExists } from "../data-access/runtime/userProfiles.js";
 import { querySsoProviderIds } from "../data-access/runtime/auth.js";
 import { extractCookieDomain, getInitialOrganization, getTrustedOrigins, hasCredentialAccount, shouldAutoProvision } from "./auth-config-utils.js";
-import { passwordPolicyHook } from "./password-policy.js";
+import { checkPasswordPolicy } from "./password-policy.js";
 import { ac, adminRole, memberRole, ownerRole } from "./permissions.js";
 import { logSessionDeletion } from "./session-hooks.js";
+import { createAuthMiddleware } from "better-auth/api";
 import { betterAuth } from "better-auth";
 import { dash } from "@better-auth/infra";
 import { oauthProvider } from "@better-auth/oauth-provider";
 import { sso } from "@better-auth/sso";
 import { drizzleAdapter } from "better-auth/adapters/drizzle";
-import { bearer, deviceAuthorization, haveIBeenPwned, jwt, lastLoginMethod, oAuthProxy, organization } from "better-auth/plugins";
+import { bearer, captcha, deviceAuthorization, haveIBeenPwned, jwt, lastLoginMethod, oAuthProxy, organization } from "better-auth/plugins";
 
 //#region src/auth/auth.ts
+const CAPTCHA_GUARDED_PATHS = [
+	"/sign-up/email",
+	"/sign-in/email",
+	"/request-password-reset"
+];
 function createAuth(config) {
 	const cookieDomain = extractCookieDomain(config.baseURL, config.cookieDomain);
 	const isSecure = config.baseURL.startsWith("https://");
@@ -129,7 +135,10 @@ function createAuth(config) {
 			...config.advanced
 		},
 		trustedOrigins: (request) => getTrustedOrigins(config.dbClient, request),
-		hooks: { before: passwordPolicyHook },
+		hooks: { before: createAuthMiddleware(async (ctx) => {
+			await checkPasswordPolicy(ctx);
+			if (config.recaptcha && CAPTCHA_GUARDED_PATHS.includes(ctx.path) && ctx.headers?.get("x-captcha-response")) console.log("[captcha] pass", { path: ctx.path });
+		}) },
 		plugins: [
 			bearer(),
 			dash(),
@@ -361,7 +370,12 @@ function createAuth(config) {
 				interval: "5s",
 				userCodeLength: 8
 			}),
-			haveIBeenPwned({ customPasswordCompromisedMessage: "Please choose a more secure password." })
+			haveIBeenPwned({ customPasswordCompromisedMessage: "Please choose a more secure password." }),
+			...config.recaptcha ? [captcha({
+				provider: "google-recaptcha",
+				secretKey: config.recaptcha.secretKey,
+				minScore: config.recaptcha.minScore ?? .5
+			})] : []
 		]
 	});
 	return instance;

package/dist/auth/password-policy.d.ts

@@ -1,10 +1,14 @@
 import { MIN_PASSWORD_LENGTH, PASSWORD_REQUIREMENTS, PasswordPolicyContext, PasswordRequirement, PolicyViolation } from "./password-policy-rules.js";
-import * as better_auth133 from "better-auth";
 
 //#region src/auth/password-policy.d.ts
 declare function validatePasswordPolicy(password: string, context?: PasswordPolicyContext): PolicyViolation[];
 declare function enforcePasswordPolicy(password: string, context?: PasswordPolicyContext): void;
-declare const passwordPolicyHook: (inputContext: better_auth133.MiddlewareInputContext<better_auth133.MiddlewareOptions>) => Promise<void>;
+declare function checkPasswordPolicy(ctx: {
+  path: string;
+  body: unknown;
+}): Promise<void>;
+/** @deprecated Renamed to `checkPasswordPolicy`. Will be removed in a future major version. */
+declare const passwordPolicyHook: typeof checkPasswordPolicy;
 declare function generateCompliantPassword(length?: number): string;
 //#endregion
-export { MIN_PASSWORD_LENGTH, PASSWORD_REQUIREMENTS, type PasswordPolicyContext, type PasswordRequirement, type PolicyViolation, enforcePasswordPolicy, generateCompliantPassword, passwordPolicyHook, validatePasswordPolicy };
+export { MIN_PASSWORD_LENGTH, PASSWORD_REQUIREMENTS, type PasswordPolicyContext, type PasswordRequirement, type PolicyViolation, checkPasswordPolicy, enforcePasswordPolicy, generateCompliantPassword, passwordPolicyHook, validatePasswordPolicy };

package/dist/auth/password-policy.js

@@ -1,5 +1,5 @@
 import { MIN_PASSWORD_LENGTH, PASSWORD_REQUIREMENTS } from "./password-policy-rules.js";
-import { APIError, createAuthMiddleware } from "better-auth/api";
+import { APIError } from "better-auth/api";
 import { randomInt } from "node:crypto";
 
 //#region src/auth/password-policy.ts
@@ -46,7 +46,7 @@ function readString(body, key) {
 	const value = body[key];
 	return typeof value === "string" ? value : void 0;
 }
-const passwordPolicyHook = createAuthMiddleware(async (ctx) => {
+async function checkPasswordPolicy(ctx) {
 	if (!PASSWORD_POLICY_PATHS.has(ctx.path)) return;
 	if (!isPlainObject(ctx.body)) return;
 	const pw = readString(ctx.body, "newPassword") ?? readString(ctx.body, "password");
@@ -55,7 +55,9 @@ const passwordPolicyHook = createAuthMiddleware(async (ctx) => {
 		userEmail: readString(ctx.body, "email"),
 		userName: readString(ctx.body, "name")
 	});
-});
+}
+/** @deprecated Renamed to `checkPasswordPolicy`. Will be removed in a future major version. */
+const passwordPolicyHook = checkPasswordPolicy;
 const LOWERCASE = "abcdefghijklmnopqrstuvwxyz";
 const UPPERCASE = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
 const DIGITS = "0123456789";
@@ -85,4 +87,4 @@ function generateCompliantPassword(length = MIN_PASSWORD_LENGTH + 4) {
 }
 
 //#endregion
-export { MIN_PASSWORD_LENGTH, PASSWORD_REQUIREMENTS, enforcePasswordPolicy, generateCompliantPassword, passwordPolicyHook, validatePasswordPolicy };
+export { MIN_PASSWORD_LENGTH, PASSWORD_REQUIREMENTS, checkPasswordPolicy, enforcePasswordPolicy, generateCompliantPassword, passwordPolicyHook, validatePasswordPolicy };

package/dist/auth/permissions.d.ts

@@ -1,29 +1,29 @@
-import * as better_auth_plugins0 from "better-auth/plugins";
+import * as better_auth_plugins7 from "better-auth/plugins";
 import { AccessControl } from "better-auth/plugins/access";
 import { organizationClient } from "better-auth/client/plugins";
 
 //#region src/auth/permissions.d.ts
 declare const ac: AccessControl;
 declare const memberRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "project" | "organization" | "invitation" | "member" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>[key] | {
+    actions: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins7.AuthorizeResponse;
+  statements: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>;
 };
 declare const adminRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "project" | "organization" | "invitation" | "member" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>[key] | {
+    actions: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins7.AuthorizeResponse;
+  statements: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>;
 };
 declare const ownerRole: {
-  authorize<K_1 extends "project" | "organization" | "team" | "member" | "ac" | "invitation">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key] | {
-    actions: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>[key];
+  authorize<K_1 extends "project" | "organization" | "invitation" | "member" | "team" | "ac">(request: K_1 extends infer T extends K ? { [key in T]?: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>[key] | {
+    actions: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>[key];
     connector: "OR" | "AND";
-  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins0.AuthorizeResponse;
-  statements: better_auth_plugins0.Subset<"project" | "organization" | "team" | "member" | "ac" | "invitation", better_auth_plugins0.Statements>;
+  } | undefined } : never, connector?: "OR" | "AND"): better_auth_plugins7.AuthorizeResponse;
+  statements: better_auth_plugins7.Subset<"project" | "organization" | "invitation" | "member" | "team" | "ac", better_auth_plugins7.Statements>;
 };
 //#endregion
 export { ac, adminRole, memberRole, organizationClient, ownerRole };