@meistrari/auth-core 1.26.0 → 1.28.0

package/dist/index.d.mts

@@ -4386,15 +4386,15 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
 } & {
     applications: {
         getApplicationAuthContext: (applicationId: string) => Promise<{
-            data: ApplicationAuthContextResponse;
-            error: null;
-        } | {
             data: null;
             error: {
                 message?: string | undefined;
                 status: number;
                 statusText: string;
             };
+        } | {
+            data: ApplicationAuthContextResponse;
+            error: null;
         }>;
         listCandidateOrganizations: (applicationId: string) => Promise<{
             data: ListCandidateOrganizationsResponse;
@@ -5723,6 +5723,8 @@ type CreateAdminApplicationOptions = {
     homeUrl?: string | null;
     /** Custom application authentication settings. */
     config?: ApplicationConfig | null;
+    /** Organizations to enable for this application during creation. */
+    entitlements?: CreateAdminApplicationEntitlementOptions[];
 };
 /**
  * Options accepted when enabling an organization for an application.
@@ -5757,6 +5759,36 @@ type ListAdminOrganizationMembersOptions = {
     limit?: number;
     /** Number of members to skip. Defaults to 0. */
     offset?: number;
+    /** Free-text search matched against member name, email, role, user ID, and member ID. */
+    query?: string;
+};
+/**
+ * Options accepted when listing teams for a single organization as a global admin.
+ */
+type ListAdminOrganizationTeamsOptions = {
+    /** ID of the organization whose teams should be listed. */
+    organizationId: string;
+    /** Maximum number of teams to return. Defaults to 50. */
+    limit?: number;
+    /** Number of teams to skip. Defaults to 0. */
+    offset?: number;
+    /** Free-text search matched against team name and ID. */
+    query?: string;
+    /** Column used to order the listing. Defaults to creation date. */
+    sortBy?: 'createdAt' | 'name';
+    /** Order direction. Defaults to descending. */
+    sortDirection?: 'asc' | 'desc';
+};
+/**
+ * Options accepted when creating a team for a single organization as a global admin.
+ */
+type CreateAdminOrganizationTeamOptions = {
+    /** ID of the organization that should own the team. */
+    organizationId: string;
+    /** Display name of the team. */
+    name: string;
+    /** User IDs of organization members to add to the team. */
+    memberIds?: string[];
 };
 /**
  * Options accepted when creating an organization as a global admin.
@@ -5846,6 +5878,26 @@ type ListAdminOrganizationMembersResult = {
     limit: number;
     offset: number;
 };
+/**
+ * Full team row returned by the admin organization team listing endpoint.
+ */
+type AdminOrganizationTeamRecord = {
+    id: string;
+    name: string;
+    organizationId: string;
+    createdAt: string;
+    updatedAt: string;
+    memberCount: number;
+};
+/**
+ * Paginated organization team listing response.
+ */
+type ListAdminOrganizationTeamsResult = {
+    teams: AdminOrganizationTeamRecord[];
+    total: number;
+    limit: number;
+    offset: number;
+};
 /**
  * Organization row embedded in an admin application entitlement.
  */
@@ -5985,15 +6037,15 @@ declare class AdminService {
      * @returns The paginated organization listing
      */
     listOrganizations(options?: ListAdminOrganizationsOptions): Promise<{
+        data: ListAdminOrganizationsResult;
+        error: null;
+    } | {
         data: null;
         error: {
             message?: string | undefined;
             status: number;
             statusText: string;
         };
-    } | {
-        data: ListAdminOrganizationsResult;
-        error: null;
     }>;
     /**
      * Lists all Better Auth users from the user table.
@@ -6025,7 +6077,7 @@ declare class AdminService {
     /**
      * Lists active members for one organization as a global admin.
      *
-     * @param options - Organization ID and pagination options
+     * @param options - Organization ID, pagination, and search options
      * @returns The paginated organization member listing
      */
     listOrganizationMembers(options: ListAdminOrganizationMembersOptions): Promise<{
@@ -6039,6 +6091,32 @@ declare class AdminService {
         data: ListAdminOrganizationMembersResult;
         error: null;
     }>;
+    /**
+     * Lists teams for one organization as a global admin.
+     *
+     * @param options - Organization ID, pagination, search, and ordering options
+     * @returns The paginated organization team listing
+     */
+    listOrganizationTeams(options: ListAdminOrganizationTeamsOptions): Promise<{
+        data: null;
+        error: {
+            message?: string | undefined;
+            status: number;
+            statusText: string;
+        };
+    } | {
+        data: ListAdminOrganizationTeamsResult;
+        error: null;
+    }>;
+    /**
+     * Creates a team for one organization as a global admin.
+     *
+     * @param options - Organization ID, team name, and optional team members
+     * @returns The created team
+     */
+    createOrganizationTeam(options: CreateAdminOrganizationTeamOptions): Promise<{
+        data: AdminOrganizationTeamRecord;
+    } | null>;
     /**
      * Creates an organization without adding the creator as a member.
      *
@@ -6990,4 +7068,4 @@ declare function validateToken(token: string, apiUrl: string): Promise<boolean>;
 declare function extractTokenPayload(token: string): DecodedJWTPayload;
 
 export { AAL, AALBrand, AALs, ACR, ACRBrand, ACRs, AMR, AMRBrand, AMRs, ApiKeyMetadata, ApplicationConfig, ApplicationError, ApplicationSessionAssuranceConfig, ApplicationSessionAssuranceError, AuthClient, AuthMethod, AuthMethodBrand, AuthMethods, AuthorizationFlowError, DEFAULT_APPLICATION_CONFIG, DEFAULT_JWT_ASSURANCE, DEFAULT_SESSION_ASSURANCE_CONFIG, DeviceAccessDeniedError, DeviceAuthorizationPendingError, DeviceAuthorizationSlowDownError, DeviceCodeExpiredError, DeviceTransientServerError, EmailOTPService, EmailRequired, InvalidCallbackURL, InvalidSocialProvider, JWTPayload, JWTPayloadAssurance, JWTPayloadUser, JWTPayloadWorkspace, OAuthBeginStepUpResponse, OAuthCompleteStepUpResponse, OAuthStepUpProvider, RefreshTokenExpiredError, Roles, SENSITIVE_ACTION_ASSURANCE_POLICY, SendOtpResponse, SessionAssurancePolicy, SessionAssuranceRequiredError, SessionAssuranceRequiredPayload, SessionAssuranceResponse, SessionAssuranceService, StepUpOption, UserNotLoggedInError, ac, assuranceFields, canStepUpWithAmr, createAPIClient, extractTokenPayload, getAalRank, invitationAdditionalFields, isAssuranceSufficientForPolicy, isSessionAssuranceSufficient, isTokenExpired, memberAdditionalFields, mergeStepUpAssurance, organizationAdditionalFields, parseSessionAssuranceRequiredPayload, rolesAccessControl, sessionAssurancePluginClient, userAdditionalFields, validateToken };
-export type { APIClient, AdminApplication, AdminApplicationEntitlement, AdminApplicationEntitlementRecord, AdminApplicationMember, AdminApplicationOrganization, AdminApplicationRecord, AdminOrganization, AdminOrganizationApplication, AdminOrganizationMember, AdminOrganizationMemberRecord, AdminUser, ApiKey, ApiKeyWithoutSecret, Application, ApplicationAuthContextResponse, AssuranceFields, BaseOrganization, BeginOAuthStepUpParams, BillingMode, CompleteAuthorizationFlowResponse, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateApiKeyPayload, CreateTeamPayload, DecodedJWTPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, EmailOTPSignInOptions, FullOrganization, GetAdminOrganizationOptions, Invitation, InviteUserToOrganizationOptions, JWTPayloadData, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminUsersOptions, ListAdminUsersResult, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, SendVerificationOTPOptions, Session, SessionAssuranceActions, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateAdminOrganizationOptions, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, UserProfile, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };
+export type { APIClient, AdminApplication, AdminApplicationEntitlement, AdminApplicationEntitlementRecord, AdminApplicationMember, AdminApplicationOrganization, AdminApplicationRecord, AdminOrganization, AdminOrganizationApplication, AdminOrganizationMember, AdminOrganizationMemberRecord, AdminOrganizationTeamRecord, AdminUser, ApiKey, ApiKeyWithoutSecret, Application, ApplicationAuthContextResponse, AssuranceFields, BaseOrganization, BeginOAuthStepUpParams, BillingMode, CompleteAuthorizationFlowResponse, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, CreateApiKeyPayload, CreateTeamPayload, DecodedJWTPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, EmailOTPSignInOptions, FullOrganization, GetAdminOrganizationOptions, Invitation, InviteUserToOrganizationOptions, JWTPayloadData, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminUsersOptions, ListAdminUsersResult, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, SendVerificationOTPOptions, Session, SessionAssuranceActions, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateAdminOrganizationOptions, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, UserProfile, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };

package/dist/index.d.ts

@@ -4386,15 +4386,15 @@ declare function createAPIClient(apiUrl: string, fetchOptions?: BetterFetchOptio
 } & {
     applications: {
         getApplicationAuthContext: (applicationId: string) => Promise<{
-            data: ApplicationAuthContextResponse;
-            error: null;
-        } | {
             data: null;
             error: {
                 message?: string | undefined;
                 status: number;
                 statusText: string;
             };
+        } | {
+            data: ApplicationAuthContextResponse;
+            error: null;
         }>;
         listCandidateOrganizations: (applicationId: string) => Promise<{
             data: ListCandidateOrganizationsResponse;
@@ -5723,6 +5723,8 @@ type CreateAdminApplicationOptions = {
     homeUrl?: string | null;
     /** Custom application authentication settings. */
     config?: ApplicationConfig | null;
+    /** Organizations to enable for this application during creation. */
+    entitlements?: CreateAdminApplicationEntitlementOptions[];
 };
 /**
  * Options accepted when enabling an organization for an application.
@@ -5757,6 +5759,36 @@ type ListAdminOrganizationMembersOptions = {
     limit?: number;
     /** Number of members to skip. Defaults to 0. */
     offset?: number;
+    /** Free-text search matched against member name, email, role, user ID, and member ID. */
+    query?: string;
+};
+/**
+ * Options accepted when listing teams for a single organization as a global admin.
+ */
+type ListAdminOrganizationTeamsOptions = {
+    /** ID of the organization whose teams should be listed. */
+    organizationId: string;
+    /** Maximum number of teams to return. Defaults to 50. */
+    limit?: number;
+    /** Number of teams to skip. Defaults to 0. */
+    offset?: number;
+    /** Free-text search matched against team name and ID. */
+    query?: string;
+    /** Column used to order the listing. Defaults to creation date. */
+    sortBy?: 'createdAt' | 'name';
+    /** Order direction. Defaults to descending. */
+    sortDirection?: 'asc' | 'desc';
+};
+/**
+ * Options accepted when creating a team for a single organization as a global admin.
+ */
+type CreateAdminOrganizationTeamOptions = {
+    /** ID of the organization that should own the team. */
+    organizationId: string;
+    /** Display name of the team. */
+    name: string;
+    /** User IDs of organization members to add to the team. */
+    memberIds?: string[];
 };
 /**
  * Options accepted when creating an organization as a global admin.
@@ -5846,6 +5878,26 @@ type ListAdminOrganizationMembersResult = {
     limit: number;
     offset: number;
 };
+/**
+ * Full team row returned by the admin organization team listing endpoint.
+ */
+type AdminOrganizationTeamRecord = {
+    id: string;
+    name: string;
+    organizationId: string;
+    createdAt: string;
+    updatedAt: string;
+    memberCount: number;
+};
+/**
+ * Paginated organization team listing response.
+ */
+type ListAdminOrganizationTeamsResult = {
+    teams: AdminOrganizationTeamRecord[];
+    total: number;
+    limit: number;
+    offset: number;
+};
 /**
  * Organization row embedded in an admin application entitlement.
  */
@@ -5985,15 +6037,15 @@ declare class AdminService {
      * @returns The paginated organization listing
      */
     listOrganizations(options?: ListAdminOrganizationsOptions): Promise<{
+        data: ListAdminOrganizationsResult;
+        error: null;
+    } | {
         data: null;
         error: {
             message?: string | undefined;
             status: number;
             statusText: string;
         };
-    } | {
-        data: ListAdminOrganizationsResult;
-        error: null;
     }>;
     /**
      * Lists all Better Auth users from the user table.
@@ -6025,7 +6077,7 @@ declare class AdminService {
     /**
      * Lists active members for one organization as a global admin.
      *
-     * @param options - Organization ID and pagination options
+     * @param options - Organization ID, pagination, and search options
      * @returns The paginated organization member listing
      */
     listOrganizationMembers(options: ListAdminOrganizationMembersOptions): Promise<{
@@ -6039,6 +6091,32 @@ declare class AdminService {
         data: ListAdminOrganizationMembersResult;
         error: null;
     }>;
+    /**
+     * Lists teams for one organization as a global admin.
+     *
+     * @param options - Organization ID, pagination, search, and ordering options
+     * @returns The paginated organization team listing
+     */
+    listOrganizationTeams(options: ListAdminOrganizationTeamsOptions): Promise<{
+        data: null;
+        error: {
+            message?: string | undefined;
+            status: number;
+            statusText: string;
+        };
+    } | {
+        data: ListAdminOrganizationTeamsResult;
+        error: null;
+    }>;
+    /**
+     * Creates a team for one organization as a global admin.
+     *
+     * @param options - Organization ID, team name, and optional team members
+     * @returns The created team
+     */
+    createOrganizationTeam(options: CreateAdminOrganizationTeamOptions): Promise<{
+        data: AdminOrganizationTeamRecord;
+    } | null>;
     /**
      * Creates an organization without adding the creator as a member.
      *
@@ -6990,4 +7068,4 @@ declare function validateToken(token: string, apiUrl: string): Promise<boolean>;
 declare function extractTokenPayload(token: string): DecodedJWTPayload;
 
 export { AAL, AALBrand, AALs, ACR, ACRBrand, ACRs, AMR, AMRBrand, AMRs, ApiKeyMetadata, ApplicationConfig, ApplicationError, ApplicationSessionAssuranceConfig, ApplicationSessionAssuranceError, AuthClient, AuthMethod, AuthMethodBrand, AuthMethods, AuthorizationFlowError, DEFAULT_APPLICATION_CONFIG, DEFAULT_JWT_ASSURANCE, DEFAULT_SESSION_ASSURANCE_CONFIG, DeviceAccessDeniedError, DeviceAuthorizationPendingError, DeviceAuthorizationSlowDownError, DeviceCodeExpiredError, DeviceTransientServerError, EmailOTPService, EmailRequired, InvalidCallbackURL, InvalidSocialProvider, JWTPayload, JWTPayloadAssurance, JWTPayloadUser, JWTPayloadWorkspace, OAuthBeginStepUpResponse, OAuthCompleteStepUpResponse, OAuthStepUpProvider, RefreshTokenExpiredError, Roles, SENSITIVE_ACTION_ASSURANCE_POLICY, SendOtpResponse, SessionAssurancePolicy, SessionAssuranceRequiredError, SessionAssuranceRequiredPayload, SessionAssuranceResponse, SessionAssuranceService, StepUpOption, UserNotLoggedInError, ac, assuranceFields, canStepUpWithAmr, createAPIClient, extractTokenPayload, getAalRank, invitationAdditionalFields, isAssuranceSufficientForPolicy, isSessionAssuranceSufficient, isTokenExpired, memberAdditionalFields, mergeStepUpAssurance, organizationAdditionalFields, parseSessionAssuranceRequiredPayload, rolesAccessControl, sessionAssurancePluginClient, userAdditionalFields, validateToken };
-export type { APIClient, AdminApplication, AdminApplicationEntitlement, AdminApplicationEntitlementRecord, AdminApplicationMember, AdminApplicationOrganization, AdminApplicationRecord, AdminOrganization, AdminOrganizationApplication, AdminOrganizationMember, AdminOrganizationMemberRecord, AdminUser, ApiKey, ApiKeyWithoutSecret, Application, ApplicationAuthContextResponse, AssuranceFields, BaseOrganization, BeginOAuthStepUpParams, BillingMode, CompleteAuthorizationFlowResponse, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateApiKeyPayload, CreateTeamPayload, DecodedJWTPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, EmailOTPSignInOptions, FullOrganization, GetAdminOrganizationOptions, Invitation, InviteUserToOrganizationOptions, JWTPayloadData, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminUsersOptions, ListAdminUsersResult, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, SendVerificationOTPOptions, Session, SessionAssuranceActions, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateAdminOrganizationOptions, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, UserProfile, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };
+export type { APIClient, AdminApplication, AdminApplicationEntitlement, AdminApplicationEntitlementRecord, AdminApplicationMember, AdminApplicationOrganization, AdminApplicationRecord, AdminOrganization, AdminOrganizationApplication, AdminOrganizationMember, AdminOrganizationMemberRecord, AdminOrganizationTeamRecord, AdminUser, ApiKey, ApiKeyWithoutSecret, Application, ApplicationAuthContextResponse, AssuranceFields, BaseOrganization, BeginOAuthStepUpParams, BillingMode, CompleteAuthorizationFlowResponse, CreateAdminApplicationEntitlementOptions, CreateAdminApplicationOptions, CreateAdminOrganizationOptions, CreateAdminOrganizationTeamOptions, CreateApiKeyPayload, CreateTeamPayload, DecodedJWTPayload, DeviceAuthorizationActionResponse, DeviceAuthorizationContextResponse, DeviceAuthorizationResponse, DeviceContextApplication, EmailOTPSignInOptions, FullOrganization, GetAdminOrganizationOptions, Invitation, InviteUserToOrganizationOptions, JWTPayloadData, ListAdminApplicationsOptions, ListAdminApplicationsResult, ListAdminOrganizationMembersOptions, ListAdminOrganizationMembersResult, ListAdminOrganizationTeamsOptions, ListAdminOrganizationTeamsResult, ListAdminOrganizationsOptions, ListAdminOrganizationsResult, ListAdminUsersOptions, ListAdminUsersResult, ListCandidateOrganizationsResponse, ListMembersOptions, Member, ExtendedOrganization as Organization, OrganizationSettings, RemoveUserFromOrganizationOptions, Role, SendVerificationOTPOptions, Session, SessionAssuranceActions, SignInWithEmailAndPasswordOptions, SignInWithSamlOptions, SocialSignInOptions, StartAuthorizationFlowResponse, Strict, Team, TeamMember, UpdateAdminOrganizationOptions, UpdateApiKeyPayload, UpdateMemberRoleOptions, UpdateOrganizationPayload, UpdateTeamPayload, User, UserProfile, WhoAmIInclude, WhoAmIOptions, WhoAmIOrganization, WhoAmIResponse };

package/dist/index.mjs

@@ -8,7 +8,7 @@ import { defaultStatements } from 'better-auth/plugins/organization/access';
 import z, { z as z$1 } from 'zod';
 export { APIError } from 'better-auth';
 
-const version = "1.26.0";
+const version = "1.28.0";
 
 function parsedEnumValues(schema) {
   return Object.fromEntries(
@@ -482,7 +482,7 @@ class AdminService {
   /**
    * Lists active members for one organization as a global admin.
    *
-   * @param options - Organization ID and pagination options
+   * @param options - Organization ID, pagination, and search options
    * @returns The paginated organization member listing
    */
   async listOrganizationMembers(options) {
@@ -490,10 +490,45 @@ class AdminService {
       method: "GET",
       query: {
         ...options.limit !== void 0 ? { limit: options.limit } : {},
-        ...options.offset !== void 0 ? { offset: options.offset } : {}
+        ...options.offset !== void 0 ? { offset: options.offset } : {},
+        ...options.query ? { query: options.query } : {}
+      }
+    });
+  }
+  /**
+   * Lists teams for one organization as a global admin.
+   *
+   * @param options - Organization ID, pagination, search, and ordering options
+   * @returns The paginated organization team listing
+   */
+  async listOrganizationTeams(options) {
+    return await this.client.$fetch(`/admin/organizations/${encodeURIComponent(options.organizationId)}/teams`, {
+      method: "GET",
+      query: {
+        ...options.limit !== void 0 ? { limit: options.limit } : {},
+        ...options.offset !== void 0 ? { offset: options.offset } : {},
+        ...options.query ? { query: options.query } : {},
+        ...options.sortBy ? { sortBy: options.sortBy } : {},
+        ...options.sortDirection ? { sortDirection: options.sortDirection } : {}
       }
     });
   }
+  /**
+   * Creates a team for one organization as a global admin.
+   *
+   * @param options - Organization ID, team name, and optional team members
+   * @returns The created team
+   */
+  async createOrganizationTeam(options) {
+    const { data } = await this.client.$fetch(`/admin/organizations/${encodeURIComponent(options.organizationId)}/teams`, {
+      method: "POST",
+      body: {
+        name: options.name,
+        memberIds: options.memberIds ?? []
+      }
+    });
+    return data;
+  }
   /**
    * Creates an organization without adding the creator as a member.
    *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meistrari/auth-core",
-  "version": "1.26.0",
+  "version": "1.28.0",
   "type": "module",
   "exports": {
     ".": {