@masheev/better-auth 0.0.0-stage → 1.7.5

package/dist/plugins/organization/call.mjs

@@ -0,0 +1,15 @@
+import { sessionMiddleware } from "../../api/routes/session.mjs";
+import { createAuthMiddleware } from "@better-auth/core/api";
+//#region src/plugins/organization/call.ts
+const orgMiddleware = createAuthMiddleware(async () => {
+	return {};
+});
+/**
+* The middleware forces the endpoint to require a valid session by utilizing the `sessionMiddleware`.
+* It also appends additional types to the session type regarding organizations.
+*/
+const orgSessionMiddleware = createAuthMiddleware({ use: [sessionMiddleware] }, async (ctx) => {
+	return { session: ctx.context.session };
+});
+//#endregion
+export { orgMiddleware, orgSessionMiddleware };

package/dist/plugins/organization/client.d.mts

@@ -0,0 +1,375 @@
+import { FieldAttributeToObject, RemoveFieldsWithReturnedFalse } from "../../db/field.mjs";
+import { Prettify } from "../../types/helper.mjs";
+import { BetterAuthOptions as BetterAuthOptions$1 } from "../../types/index.mjs";
+import { AuthQueryAtom } from "../../client/query.mjs";
+import { AccessControl, ArrayElement, Role, Statements } from "../access/types.mjs";
+import { OrganizationOptions } from "./types.mjs";
+import { InferInvitation, InferMember, InferOrganization, InferOrganizationRolesFromOption, InferOrganizationZodRolesFromOption, InferTeam, Invitation, InvitationInput, InvitationStatus, Member, MemberInput, Organization, OrganizationInput, OrganizationRole, OrganizationSchema, Team, TeamInput, TeamMember, TeamMemberInput, defaultRolesSchema, invitationSchema, invitationStatus, memberSchema, organizationRoleSchema, organizationSchema, roleSchema, teamMemberSchema, teamSchema } from "./schema.mjs";
+import { ORGANIZATION_ERROR_CODES } from "./error-codes.mjs";
+import { HasPermissionBaseInput } from "./permission.mjs";
+import { OrganizationPlugin } from "./organization.mjs";
+import * as _$_better_auth_core0 from "@better-auth/core";
+import { DBFieldAttribute } from "@better-auth/core/db";
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
+import * as _$nanostores from "nanostores";
+import { BetterFetch } from "@better-fetch/fetch";
+
+//#region src/plugins/organization/client.d.ts
+/**
+ * Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
+ */
+declare const clientSideHasPermission: (input: HasPermissionBaseInput) => boolean;
+interface OrganizationClientOptions {
+  ac?: AccessControl | undefined;
+  roles?: { [key in string]: Role } | undefined;
+  teams?: {
+    enabled: boolean;
+  } | undefined;
+  schema?: {
+    organization?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    member?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    invitation?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    team?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+    organizationRole?: {
+      additionalFields?: {
+        [key: string]: DBFieldAttribute;
+      };
+    };
+  } | undefined;
+  dynamicAccessControl?: {
+    enabled: boolean;
+  } | undefined;
+}
+declare const organizationClient: <CO extends OrganizationClientOptions>(options?: CO | undefined) => {
+  id: "organization";
+  version: string;
+  $InferServerPlugin: OrganizationPlugin<{
+    ac: CO["ac"] extends AccessControl ? CO["ac"] : AccessControl<{
+      readonly organization: readonly ["update", "delete"];
+      readonly member: readonly ["create", "update", "delete"];
+      readonly invitation: readonly ["create", "cancel"];
+      readonly team: readonly ["create", "update", "delete"];
+      readonly ac: readonly ["create", "read", "update", "delete"];
+    }>;
+    roles: CO["roles"] extends Record<string, Role> ? CO["roles"] : {
+      admin: Role;
+      member: Role;
+      owner: Role;
+    };
+    teams: {
+      enabled: CO["teams"] extends {
+        enabled: true;
+      } ? true : false;
+    };
+    schema: CO["schema"];
+    dynamicAccessControl: {
+      enabled: CO["dynamicAccessControl"] extends {
+        enabled: true;
+      } ? true : false;
+    };
+  }>;
+  getActions: ($fetch: BetterFetch, _$store: _$_better_auth_core0.ClientStore, co: _$_better_auth_core0.BetterAuthClientOptions | undefined) => {
+    $Infer: {
+      ActiveOrganization: CO["teams"] extends {
+        enabled: true;
+      } ? {
+        members: InferMember<CO>[];
+        invitations: InferInvitation<CO>[];
+        teams: InferTeam<CO>[];
+      } & ({
+        id: string;
+        name: string;
+        slug: string;
+        createdAt: Date;
+        logo?: string | null | undefined;
+        metadata?: any;
+      } & (CO["schema"] extends {
+        organization?: {
+          additionalFields: infer Field extends Record<string, DBFieldAttribute>;
+        } | undefined;
+      } ? FieldAttributeToObject<RemoveFieldsWithReturnedFalse<Field>> : {}) extends infer T ? { [K in keyof T]: T[K] } : never) : {
+        members: InferMember<CO>[];
+        invitations: InferInvitation<CO>[];
+      } & ({
+        id: string;
+        name: string;
+        slug: string;
+        createdAt: Date;
+        logo?: string | null | undefined;
+        metadata?: any;
+      } & (CO["schema"] extends {
+        organization?: {
+          additionalFields: infer Field extends Record<string, DBFieldAttribute>;
+        } | undefined;
+      } ? FieldAttributeToObject<RemoveFieldsWithReturnedFalse<Field>> : {}) extends infer T_1 ? { [K in keyof T_1]: T_1[K] } : never);
+      Organization: InferOrganization<CO>;
+      Invitation: InferInvitation<CO>;
+      Member: InferMember<CO>;
+      Team: InferTeam<CO>;
+    };
+    organization: {
+      checkRolePermission: <R extends (CO extends {
+        roles: any;
+      } ? keyof CO["roles"] : "admin" | "member" | "owner")>(data: {
+        permissions: { [key in keyof (CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })]?: ((CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })[key] extends readonly unknown[] ? ArrayElement<(CO["ac"] extends AccessControl<infer S extends Statements> ? S : {
+          readonly organization: readonly ["update", "delete"];
+          readonly member: readonly ["create", "update", "delete"];
+          readonly invitation: readonly ["create", "cancel"];
+          readonly team: readonly ["create", "update", "delete"];
+          readonly ac: readonly ["create", "read", "update", "delete"];
+        })[key]> : never)[] | undefined };
+      } & {
+        role: R;
+      }) => boolean;
+    };
+  };
+  getAtoms: ($fetch: BetterFetch) => {
+    $listOrg: _$nanostores.PreinitializedWritableAtom<boolean> & object;
+    $activeOrgSignal: _$nanostores.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberSignal: _$nanostores.PreinitializedWritableAtom<boolean> & object;
+    $activeMemberRoleSignal: _$nanostores.PreinitializedWritableAtom<boolean> & object;
+    activeOrganization: AuthQueryAtom<Prettify<({
+      id: string;
+      name: string;
+      slug: string;
+      createdAt: Date;
+      logo?: string | null | undefined;
+      metadata?: any;
+    } & (CO["schema"] extends {
+      organization?: {
+        additionalFields: infer Field extends Record<string, DBFieldAttribute>;
+      } | undefined;
+    } ? FieldAttributeToObject<RemoveFieldsWithReturnedFalse<Field>> : {}) extends infer T ? { [K in keyof T]: T[K] } : never) & {
+      members: InferMember<CO>[];
+      invitations: InferInvitation<CO>[];
+    }>>;
+    listOrganizations: AuthQueryAtom<({
+      id: string;
+      name: string;
+      slug: string;
+      createdAt: Date;
+      logo?: string | null | undefined;
+      metadata?: any;
+    } & (CO["schema"] extends {
+      organization?: {
+        additionalFields: infer Field extends Record<string, DBFieldAttribute>;
+      } | undefined;
+    } ? FieldAttributeToObject<RemoveFieldsWithReturnedFalse<Field>> : {}) extends infer T_1 ? { [K in keyof T_1]: T_1[K] } : never)[]>;
+    activeMember: AuthQueryAtom<{
+      id: string;
+      organizationId: string;
+      userId: string;
+      role: string;
+      createdAt: Date;
+    }>;
+    activeMemberRole: AuthQueryAtom<{
+      role: string;
+    }>;
+  };
+  pathMethods: {
+    "/organization/get-full-organization": "GET";
+    "/organization/list-user-teams": "GET";
+  };
+  atomListeners: ({
+    matcher(path: string): path is "/organization/create" | "/organization/update" | "/organization/delete";
+    signal: "$listOrg";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$activeOrgSignal";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$sessionSignal";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$activeMemberSignal";
+  } | {
+    matcher(path: string): boolean;
+    signal: "$activeMemberRoleSignal";
+  })[];
+  $ERROR_CODES: {
+    YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION">;
+    YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: _$_better_auth_core_utils_error_codes0.RawError<"YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS">;
+    ORGANIZATION_ALREADY_EXISTS: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_ALREADY_EXISTS">;
+    ORGANIZATION_SLUG_ALREADY_TAKEN: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_SLUG_ALREADY_TAKEN">;
+    ORGANIZATION_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_NOT_FOUND">;
+    USER_IS_NOT_A_MEMBER_OF_THE_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_NOT_A_MEMBER_OF_THE_ORGANIZATION">;
+    YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_ORGANIZATION">;
+    YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_ORGANIZATION">;
+    NO_ACTIVE_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"NO_ACTIVE_ORGANIZATION">;
+    USER_IS_ALREADY_A_MEMBER_OF_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_ALREADY_A_MEMBER_OF_THIS_ORGANIZATION">;
+    MEMBER_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"MEMBER_NOT_FOUND">;
+    ROLE_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"ROLE_NOT_FOUND">;
+    YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM">;
+    TEAM_ALREADY_EXISTS: _$_better_auth_core_utils_error_codes0.RawError<"TEAM_ALREADY_EXISTS">;
+    TEAM_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"TEAM_NOT_FOUND">;
+    YOU_CANNOT_LEAVE_THE_ORGANIZATION_AS_THE_ONLY_OWNER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_CANNOT_LEAVE_THE_ORGANIZATION_AS_THE_ONLY_OWNER">;
+    YOU_CANNOT_LEAVE_THE_ORGANIZATION_WITHOUT_AN_OWNER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_CANNOT_LEAVE_THE_ORGANIZATION_WITHOUT_AN_OWNER">;
+    YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_MEMBER">;
+    YOU_ARE_NOT_ALLOWED_TO_INVITE_USERS_TO_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USERS_TO_THIS_ORGANIZATION">;
+    USER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION">;
+    INVITATION_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"INVITATION_NOT_FOUND">;
+    YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION">;
+    EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION">;
+    EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION">;
+    YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION">;
+    INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION">;
+    YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE">;
+    FAILED_TO_RETRIEVE_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"FAILED_TO_RETRIEVE_INVITATION">;
+    YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_TEAMS: _$_better_auth_core_utils_error_codes0.RawError<"YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_TEAMS">;
+    UNABLE_TO_REMOVE_LAST_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"UNABLE_TO_REMOVE_LAST_TEAM">;
+    YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_MEMBER">;
+    ORGANIZATION_MEMBERSHIP_LIMIT_REACHED: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_MEMBERSHIP_LIMIT_REACHED">;
+    YOU_ARE_NOT_ALLOWED_TO_CREATE_TEAMS_IN_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_TEAMS_IN_THIS_ORGANIZATION">;
+    YOU_ARE_NOT_ALLOWED_TO_DELETE_TEAMS_IN_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_TEAMS_IN_THIS_ORGANIZATION">;
+    YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_TEAM">;
+    YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_TEAM">;
+    INVITATION_LIMIT_REACHED: _$_better_auth_core_utils_error_codes0.RawError<"INVITATION_LIMIT_REACHED">;
+    TEAM_MEMBER_LIMIT_REACHED: _$_better_auth_core_utils_error_codes0.RawError<"TEAM_MEMBER_LIMIT_REACHED">;
+    USER_IS_NOT_A_MEMBER_OF_THE_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_NOT_A_MEMBER_OF_THE_TEAM">;
+    YOU_CAN_NOT_ACCESS_THE_MEMBERS_OF_THIS_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_CAN_NOT_ACCESS_THE_MEMBERS_OF_THIS_TEAM">;
+    YOU_DO_NOT_HAVE_AN_ACTIVE_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_DO_NOT_HAVE_AN_ACTIVE_TEAM">;
+    YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM_MEMBER">;
+    YOU_ARE_NOT_ALLOWED_TO_REMOVE_A_TEAM_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_REMOVE_A_TEAM_MEMBER">;
+    YOU_ARE_NOT_ALLOWED_TO_ACCESS_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_ACCESS_THIS_ORGANIZATION">;
+    YOU_ARE_NOT_A_MEMBER_OF_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_A_MEMBER_OF_THIS_ORGANIZATION">;
+    MISSING_AC_INSTANCE: _$_better_auth_core_utils_error_codes0.RawError<"MISSING_AC_INSTANCE">;
+    YOU_MUST_BE_IN_AN_ORGANIZATION_TO_CREATE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_MUST_BE_IN_AN_ORGANIZATION_TO_CREATE_A_ROLE">;
+    YOU_ARE_NOT_ALLOWED_TO_CREATE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_ROLE">;
+    YOU_ARE_NOT_ALLOWED_TO_UPDATE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_A_ROLE">;
+    YOU_ARE_NOT_ALLOWED_TO_DELETE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_A_ROLE">;
+    YOU_ARE_NOT_ALLOWED_TO_READ_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_READ_A_ROLE">;
+    YOU_ARE_NOT_ALLOWED_TO_LIST_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_LIST_A_ROLE">;
+    YOU_ARE_NOT_ALLOWED_TO_GET_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_GET_A_ROLE">;
+    TOO_MANY_ROLES: _$_better_auth_core_utils_error_codes0.RawError<"TOO_MANY_ROLES">;
+    INVALID_RESOURCE: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_RESOURCE">;
+    ROLE_NAME_IS_ALREADY_TAKEN: _$_better_auth_core_utils_error_codes0.RawError<"ROLE_NAME_IS_ALREADY_TAKEN">;
+    CANNOT_DELETE_A_PRE_DEFINED_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"CANNOT_DELETE_A_PRE_DEFINED_ROLE">;
+    ROLE_IS_ASSIGNED_TO_MEMBERS: _$_better_auth_core_utils_error_codes0.RawError<"ROLE_IS_ASSIGNED_TO_MEMBERS">;
+    INVALID_TEAM_ID: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_TEAM_ID">;
+  };
+};
+declare const inferOrgAdditionalFields: <O extends {
+  options: BetterAuthOptions$1;
+}, S extends OrganizationOptions["schema"] = undefined>(schema?: S | undefined) => undefined extends S ? O extends Object ? O extends {
+  session?: {
+    fields?: {
+      activeOrganizationId?: string;
+      activeTeamId?: string;
+    };
+  };
+  organization?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Organization, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  member?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Member, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  invitation?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Invitation, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  team?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Team, "id"> | "memberCount"]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  teamMember?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<TeamMember, "id"> | "membershipKey"]?: string };
+  };
+  organizationRole?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<OrganizationRole, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+} ? O : ((O extends {
+  options: any;
+} ? O : {
+  options: {
+    plugins: [];
+  };
+})["options"]["plugins"][number] extends infer T ? T extends (O extends {
+  options: any;
+} ? O : {
+  options: {
+    plugins: [];
+  };
+})["options"]["plugins"][number] ? T extends {
+  id: "organization";
+} ? T : never : never : never) extends {
+  options: {
+    schema: infer S_1;
+  };
+} ? S_1 extends {
+  session?: {
+    fields?: {
+      activeOrganizationId?: string;
+      activeTeamId?: string;
+    };
+  };
+  organization?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Organization, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  member?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Member, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  invitation?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Invitation, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  team?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<Team, "id"> | "memberCount"]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+  teamMember?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<TeamMember, "id"> | "membershipKey"]?: string };
+  };
+  organizationRole?: {
+    modelName?: string;
+    fields?: { [key in keyof Omit<OrganizationRole, "id">]?: string };
+    additionalFields?: { [key in string]: DBFieldAttribute };
+  };
+} | undefined ? { [K in keyof S_1 as S_1[K] extends {
+  additionalFields: unknown;
+} ? K : never]: S_1[K] } : undefined : undefined : undefined : S;
+//#endregion
+export { OrganizationClientOptions, clientSideHasPermission, inferOrgAdditionalFields, organizationClient };

package/dist/plugins/organization/client.mjs

@@ -0,0 +1,104 @@
+import { PACKAGE_VERSION } from "../../version.mjs";
+import { useAuthQuery } from "../../client/query.mjs";
+import { adminAc, defaultRoles, memberAc, ownerAc } from "./access/statement.mjs";
+import { ORGANIZATION_ERROR_CODES } from "./error-codes.mjs";
+import { hasPermissionFn } from "./permission.mjs";
+import { atom } from "nanostores";
+//#region src/plugins/organization/client.ts
+/**
+* Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
+*/
+const clientSideHasPermission = (input) => {
+	return hasPermissionFn(input, input.options.roles || defaultRoles);
+};
+const organizationClient = (options) => {
+	const $listOrg = atom(false);
+	const $activeOrgSignal = atom(false);
+	const $activeMemberSignal = atom(false);
+	const $activeMemberRoleSignal = atom(false);
+	const roles = {
+		admin: adminAc,
+		member: memberAc,
+		owner: ownerAc,
+		...options?.roles
+	};
+	return {
+		id: "organization",
+		version: PACKAGE_VERSION,
+		$InferServerPlugin: {},
+		getActions: ($fetch, _$store, co) => ({
+			$Infer: {
+				ActiveOrganization: {},
+				Organization: {},
+				Invitation: {},
+				Member: {},
+				Team: {}
+			},
+			organization: { checkRolePermission: (data) => {
+				return clientSideHasPermission({
+					role: data.role,
+					options: {
+						ac: options?.ac,
+						roles
+					},
+					permissions: data.permissions
+				});
+			} }
+		}),
+		getAtoms: ($fetch) => {
+			const listOrganizations = useAuthQuery($listOrg, "/organization/list", $fetch, { method: "GET" });
+			return {
+				$listOrg,
+				$activeOrgSignal,
+				$activeMemberSignal,
+				$activeMemberRoleSignal,
+				activeOrganization: useAuthQuery([$activeOrgSignal], "/organization/get-full-organization", $fetch, () => ({ method: "GET" })),
+				listOrganizations,
+				activeMember: useAuthQuery([$activeOrgSignal, $activeMemberSignal], "/organization/get-active-member", $fetch, { method: "GET" }),
+				activeMemberRole: useAuthQuery([$activeOrgSignal, $activeMemberRoleSignal], "/organization/get-active-member-role", $fetch, { method: "GET" })
+			};
+		},
+		pathMethods: {
+			"/organization/get-full-organization": "GET",
+			"/organization/list-user-teams": "GET"
+		},
+		atomListeners: [
+			{
+				matcher(path) {
+					return path === "/organization/create" || path === "/organization/delete" || path === "/organization/update";
+				},
+				signal: "$listOrg"
+			},
+			{
+				matcher(path) {
+					return path === "/sign-out" || path.startsWith("/organization");
+				},
+				signal: "$activeOrgSignal"
+			},
+			{
+				matcher(path) {
+					return path.startsWith("/organization/set-active") || path === "/organization/create" || path === "/organization/delete" || path === "/organization/remove-member" || path === "/organization/leave" || path === "/organization/accept-invitation";
+				},
+				signal: "$sessionSignal"
+			},
+			{
+				matcher(path) {
+					return path.includes("/organization/update-member-role") || path.startsWith("/organization/set-active");
+				},
+				signal: "$activeMemberSignal"
+			},
+			{
+				matcher(path) {
+					return path.includes("/organization/update-member-role") || path.startsWith("/organization/set-active");
+				},
+				signal: "$activeMemberRoleSignal"
+			}
+		],
+		$ERROR_CODES: ORGANIZATION_ERROR_CODES
+	};
+};
+const inferOrgAdditionalFields = (schema) => {
+	return {};
+};
+//#endregion
+export { clientSideHasPermission, inferOrgAdditionalFields, organizationClient };

package/dist/plugins/organization/error-codes.d.mts

@@ -0,0 +1,66 @@
+import * as _$_better_auth_core_utils_error_codes0 from "@better-auth/core/utils/error-codes";
+
+//#region src/plugins/organization/error-codes.d.ts
+declare const ORGANIZATION_ERROR_CODES: {
+  YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION">;
+  YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: _$_better_auth_core_utils_error_codes0.RawError<"YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS">;
+  ORGANIZATION_ALREADY_EXISTS: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_ALREADY_EXISTS">;
+  ORGANIZATION_SLUG_ALREADY_TAKEN: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_SLUG_ALREADY_TAKEN">;
+  ORGANIZATION_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_NOT_FOUND">;
+  USER_IS_NOT_A_MEMBER_OF_THE_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_NOT_A_MEMBER_OF_THE_ORGANIZATION">;
+  YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_ORGANIZATION">;
+  YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_ORGANIZATION">;
+  NO_ACTIVE_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"NO_ACTIVE_ORGANIZATION">;
+  USER_IS_ALREADY_A_MEMBER_OF_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_ALREADY_A_MEMBER_OF_THIS_ORGANIZATION">;
+  MEMBER_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"MEMBER_NOT_FOUND">;
+  ROLE_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"ROLE_NOT_FOUND">;
+  YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM">;
+  TEAM_ALREADY_EXISTS: _$_better_auth_core_utils_error_codes0.RawError<"TEAM_ALREADY_EXISTS">;
+  TEAM_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"TEAM_NOT_FOUND">;
+  YOU_CANNOT_LEAVE_THE_ORGANIZATION_AS_THE_ONLY_OWNER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_CANNOT_LEAVE_THE_ORGANIZATION_AS_THE_ONLY_OWNER">;
+  YOU_CANNOT_LEAVE_THE_ORGANIZATION_WITHOUT_AN_OWNER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_CANNOT_LEAVE_THE_ORGANIZATION_WITHOUT_AN_OWNER">;
+  YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_MEMBER">;
+  YOU_ARE_NOT_ALLOWED_TO_INVITE_USERS_TO_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USERS_TO_THIS_ORGANIZATION">;
+  USER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION">;
+  INVITATION_NOT_FOUND: _$_better_auth_core_utils_error_codes0.RawError<"INVITATION_NOT_FOUND">;
+  YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION">;
+  EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION">;
+  EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION">;
+  YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION">;
+  INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION">;
+  YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE">;
+  FAILED_TO_RETRIEVE_INVITATION: _$_better_auth_core_utils_error_codes0.RawError<"FAILED_TO_RETRIEVE_INVITATION">;
+  YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_TEAMS: _$_better_auth_core_utils_error_codes0.RawError<"YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_TEAMS">;
+  UNABLE_TO_REMOVE_LAST_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"UNABLE_TO_REMOVE_LAST_TEAM">;
+  YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_MEMBER">;
+  ORGANIZATION_MEMBERSHIP_LIMIT_REACHED: _$_better_auth_core_utils_error_codes0.RawError<"ORGANIZATION_MEMBERSHIP_LIMIT_REACHED">;
+  YOU_ARE_NOT_ALLOWED_TO_CREATE_TEAMS_IN_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_TEAMS_IN_THIS_ORGANIZATION">;
+  YOU_ARE_NOT_ALLOWED_TO_DELETE_TEAMS_IN_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_TEAMS_IN_THIS_ORGANIZATION">;
+  YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_TEAM">;
+  YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_TEAM">;
+  INVITATION_LIMIT_REACHED: _$_better_auth_core_utils_error_codes0.RawError<"INVITATION_LIMIT_REACHED">;
+  TEAM_MEMBER_LIMIT_REACHED: _$_better_auth_core_utils_error_codes0.RawError<"TEAM_MEMBER_LIMIT_REACHED">;
+  USER_IS_NOT_A_MEMBER_OF_THE_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"USER_IS_NOT_A_MEMBER_OF_THE_TEAM">;
+  YOU_CAN_NOT_ACCESS_THE_MEMBERS_OF_THIS_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_CAN_NOT_ACCESS_THE_MEMBERS_OF_THIS_TEAM">;
+  YOU_DO_NOT_HAVE_AN_ACTIVE_TEAM: _$_better_auth_core_utils_error_codes0.RawError<"YOU_DO_NOT_HAVE_AN_ACTIVE_TEAM">;
+  YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM_MEMBER">;
+  YOU_ARE_NOT_ALLOWED_TO_REMOVE_A_TEAM_MEMBER: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_REMOVE_A_TEAM_MEMBER">;
+  YOU_ARE_NOT_ALLOWED_TO_ACCESS_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_ACCESS_THIS_ORGANIZATION">;
+  YOU_ARE_NOT_A_MEMBER_OF_THIS_ORGANIZATION: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_A_MEMBER_OF_THIS_ORGANIZATION">;
+  MISSING_AC_INSTANCE: _$_better_auth_core_utils_error_codes0.RawError<"MISSING_AC_INSTANCE">;
+  YOU_MUST_BE_IN_AN_ORGANIZATION_TO_CREATE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_MUST_BE_IN_AN_ORGANIZATION_TO_CREATE_A_ROLE">;
+  YOU_ARE_NOT_ALLOWED_TO_CREATE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_A_ROLE">;
+  YOU_ARE_NOT_ALLOWED_TO_UPDATE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_A_ROLE">;
+  YOU_ARE_NOT_ALLOWED_TO_DELETE_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_A_ROLE">;
+  YOU_ARE_NOT_ALLOWED_TO_READ_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_READ_A_ROLE">;
+  YOU_ARE_NOT_ALLOWED_TO_LIST_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_LIST_A_ROLE">;
+  YOU_ARE_NOT_ALLOWED_TO_GET_A_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_GET_A_ROLE">;
+  TOO_MANY_ROLES: _$_better_auth_core_utils_error_codes0.RawError<"TOO_MANY_ROLES">;
+  INVALID_RESOURCE: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_RESOURCE">;
+  ROLE_NAME_IS_ALREADY_TAKEN: _$_better_auth_core_utils_error_codes0.RawError<"ROLE_NAME_IS_ALREADY_TAKEN">;
+  CANNOT_DELETE_A_PRE_DEFINED_ROLE: _$_better_auth_core_utils_error_codes0.RawError<"CANNOT_DELETE_A_PRE_DEFINED_ROLE">;
+  ROLE_IS_ASSIGNED_TO_MEMBERS: _$_better_auth_core_utils_error_codes0.RawError<"ROLE_IS_ASSIGNED_TO_MEMBERS">;
+  INVALID_TEAM_ID: _$_better_auth_core_utils_error_codes0.RawError<"INVALID_TEAM_ID">;
+};
+//#endregion
+export { ORGANIZATION_ERROR_CODES };

package/dist/plugins/organization/error-codes.mjs

@@ -0,0 +1,65 @@
+import { defineErrorCodes } from "@better-auth/core/utils/error-codes";
+//#region src/plugins/organization/error-codes.ts
+const ORGANIZATION_ERROR_CODES = defineErrorCodes({
+	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: "You are not allowed to create a new organization",
+	YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: "You have reached the maximum number of organizations",
+	ORGANIZATION_ALREADY_EXISTS: "Organization already exists",
+	ORGANIZATION_SLUG_ALREADY_TAKEN: "Organization slug already taken",
+	ORGANIZATION_NOT_FOUND: "Organization not found",
+	USER_IS_NOT_A_MEMBER_OF_THE_ORGANIZATION: "User is not a member of the organization",
+	YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_ORGANIZATION: "You are not allowed to update this organization",
+	YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_ORGANIZATION: "You are not allowed to delete this organization",
+	NO_ACTIVE_ORGANIZATION: "No active organization",
+	USER_IS_ALREADY_A_MEMBER_OF_THIS_ORGANIZATION: "User is already a member of this organization",
+	MEMBER_NOT_FOUND: "Member not found",
+	ROLE_NOT_FOUND: "Role not found",
+	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM: "You are not allowed to create a new team",
+	TEAM_ALREADY_EXISTS: "Team already exists",
+	TEAM_NOT_FOUND: "Team not found",
+	YOU_CANNOT_LEAVE_THE_ORGANIZATION_AS_THE_ONLY_OWNER: "You cannot leave the organization as the only owner",
+	YOU_CANNOT_LEAVE_THE_ORGANIZATION_WITHOUT_AN_OWNER: "You cannot leave the organization without an owner",
+	YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_MEMBER: "You are not allowed to delete this member",
+	YOU_ARE_NOT_ALLOWED_TO_INVITE_USERS_TO_THIS_ORGANIZATION: "You are not allowed to invite users to this organization",
+	USER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION: "User is already invited to this organization",
+	INVITATION_NOT_FOUND: "Invitation not found",
+	YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: "You are not the recipient of the invitation",
+	EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: "Email verification required before accepting or rejecting invitation",
+	EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: "Email verification required to view or list invitations for the session email",
+	YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: "You are not allowed to cancel this invitation",
+	INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: "Inviter is no longer a member of the organization",
+	YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: "You are not allowed to invite a user with this role",
+	FAILED_TO_RETRIEVE_INVITATION: "Failed to retrieve invitation",
+	YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_TEAMS: "You have reached the maximum number of teams",
+	UNABLE_TO_REMOVE_LAST_TEAM: "Unable to remove last team",
+	YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_MEMBER: "You are not allowed to update this member",
+	ORGANIZATION_MEMBERSHIP_LIMIT_REACHED: "Organization membership limit reached",
+	YOU_ARE_NOT_ALLOWED_TO_CREATE_TEAMS_IN_THIS_ORGANIZATION: "You are not allowed to create teams in this organization",
+	YOU_ARE_NOT_ALLOWED_TO_DELETE_TEAMS_IN_THIS_ORGANIZATION: "You are not allowed to delete teams in this organization",
+	YOU_ARE_NOT_ALLOWED_TO_UPDATE_THIS_TEAM: "You are not allowed to update this team",
+	YOU_ARE_NOT_ALLOWED_TO_DELETE_THIS_TEAM: "You are not allowed to delete this team",
+	INVITATION_LIMIT_REACHED: "Invitation limit reached",
+	TEAM_MEMBER_LIMIT_REACHED: "Team member limit reached",
+	USER_IS_NOT_A_MEMBER_OF_THE_TEAM: "User is not a member of the team",
+	YOU_CAN_NOT_ACCESS_THE_MEMBERS_OF_THIS_TEAM: "You are not allowed to list the members of this team",
+	YOU_DO_NOT_HAVE_AN_ACTIVE_TEAM: "You do not have an active team",
+	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_TEAM_MEMBER: "You are not allowed to create a new member",
+	YOU_ARE_NOT_ALLOWED_TO_REMOVE_A_TEAM_MEMBER: "You are not allowed to remove a team member",
+	YOU_ARE_NOT_ALLOWED_TO_ACCESS_THIS_ORGANIZATION: "You are not allowed to access this organization as an owner",
+	YOU_ARE_NOT_A_MEMBER_OF_THIS_ORGANIZATION: "You are not a member of this organization",
+	MISSING_AC_INSTANCE: "Dynamic Access Control requires a pre-defined ac instance on the server auth plugin. Read server logs for more information",
+	YOU_MUST_BE_IN_AN_ORGANIZATION_TO_CREATE_A_ROLE: "You must be in an organization to create a role",
+	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_ROLE: "You are not allowed to create a role",
+	YOU_ARE_NOT_ALLOWED_TO_UPDATE_A_ROLE: "You are not allowed to update a role",
+	YOU_ARE_NOT_ALLOWED_TO_DELETE_A_ROLE: "You are not allowed to delete a role",
+	YOU_ARE_NOT_ALLOWED_TO_READ_A_ROLE: "You are not allowed to read a role",
+	YOU_ARE_NOT_ALLOWED_TO_LIST_A_ROLE: "You are not allowed to list a role",
+	YOU_ARE_NOT_ALLOWED_TO_GET_A_ROLE: "You are not allowed to get a role",
+	TOO_MANY_ROLES: "This organization has too many roles",
+	INVALID_RESOURCE: "The provided permission includes an invalid resource",
+	ROLE_NAME_IS_ALREADY_TAKEN: "That role name is already taken",
+	CANNOT_DELETE_A_PRE_DEFINED_ROLE: "Cannot delete a pre-defined role",
+	ROLE_IS_ASSIGNED_TO_MEMBERS: "Cannot delete a role that is assigned to members. Please reassign the members to a different role first",
+	INVALID_TEAM_ID: "Team id contains a reserved character"
+});
+//#endregion
+export { ORGANIZATION_ERROR_CODES };

package/dist/plugins/organization/has-permission.d.mts

@@ -0,0 +1,17 @@
+import { HasPermissionBaseInput } from "./permission.mjs";
+import { GenericEndpointContext } from "@better-auth/core";
+
+//#region src/plugins/organization/has-permission.d.ts
+declare const hasPermission: (input: {
+  organizationId: string;
+  /**
+   * If true, will use the in-memory cache of the roles.
+   * Keep in mind to use this in a stateless mindset, the purpose of this is to avoid unnecessary database calls when running multiple
+   * hasPermission calls in a row.
+   *
+   * @default false
+   */
+  useMemoryCache?: boolean | undefined;
+} & HasPermissionBaseInput, ctx: GenericEndpointContext) => Promise<boolean>;
+//#endregion
+export { hasPermission };