@objectstack/platform-objects 12.6.0 → 14.3.0

package/dist/identity/index.d.mts

@@ -307,7 +307,12 @@ declare const SysUser: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -653,9 +658,10 @@ declare const SysUser: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -800,7 +806,7 @@ declare const SysUser: Omit<{
         readonly locations: ["list_toolbar"];
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/invite-member";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Invitation sent";
         readonly refreshAfter: true;
         readonly params: [{
@@ -851,6 +857,61 @@ declare const SysUser: Omit<{
         readonly recordIdParam: "userId";
         readonly successMessage: "Account unlocked";
         readonly refreshAfter: true;
+    }, {
+        readonly name: "create_user";
+        readonly label: "Create User";
+        readonly icon: "user-plus";
+        readonly variant: "secondary";
+        readonly locations: ["list_toolbar"];
+        readonly type: "api";
+        readonly target: "/api/v1/auth/admin/create-user";
+        readonly visible: "features.admin == true";
+        readonly successMessage: "User created";
+        readonly refreshAfter: true;
+        readonly params: [{
+            readonly field: "email";
+            readonly required: false;
+        }, {
+            readonly name: "phoneNumber";
+            readonly label: "Phone Number";
+            readonly type: "text";
+            readonly required: false;
+            readonly helpText: "Sign-in phone number (E.164, e.g. +8613800000000). Required when no email is given.";
+        }, {
+            readonly field: "name";
+            readonly required: false;
+        }, {
+            readonly name: "generatePassword";
+            readonly label: "Generate Temporary Password";
+            readonly type: "boolean";
+            readonly required: false;
+            readonly defaultValue: true;
+        }, {
+            readonly name: "password";
+            readonly label: "Password (leave empty to generate)";
+            readonly type: "text";
+            readonly required: false;
+        }, {
+            readonly name: "mustChangePassword";
+            readonly label: "Require Password Change On First Login";
+            readonly type: "boolean";
+            readonly required: false;
+            readonly defaultValue: true;
+        }];
+        readonly resultDialog: {
+            readonly title: "User Created";
+            readonly description: "Copy the temporary password now — it is shown only once and never stored.";
+            readonly acknowledge: "I have saved this password";
+            readonly fields: [{
+                readonly path: "user.email";
+                readonly label: "Email";
+                readonly format: "text";
+            }, {
+                readonly path: "temporaryPassword";
+                readonly label: "Temporary Password";
+                readonly format: "secret";
+            }];
+        };
     }, {
         readonly name: "set_user_password";
         readonly label: "Set Password";
@@ -863,11 +924,33 @@ declare const SysUser: Omit<{
         readonly successMessage: "Password updated";
         readonly refreshAfter: false;
         readonly params: [{
+            readonly name: "generatePassword";
+            readonly label: "Generate Temporary Password";
+            readonly type: "boolean";
+            readonly required: false;
+            readonly defaultValue: false;
+        }, {
             readonly name: "newPassword";
-            readonly label: "New Password";
+            readonly label: "New Password (leave empty to generate)";
             readonly type: "text";
-            readonly required: true;
+            readonly required: false;
+        }, {
+            readonly name: "mustChangePassword";
+            readonly label: "Require Password Change On Next Login";
+            readonly type: "boolean";
+            readonly required: false;
+            readonly defaultValue: true;
         }];
+        readonly resultDialog: {
+            readonly title: "Password Updated";
+            readonly description: "If a temporary password was generated, copy it now — it is shown only once and never stored.";
+            readonly acknowledge: "Done";
+            readonly fields: [{
+                readonly path: "temporaryPassword";
+                readonly label: "Temporary Password";
+                readonly format: "secret";
+            }];
+        };
     }, {
         readonly name: "set_user_role";
         readonly label: "Set Platform Role";
@@ -3169,7 +3252,7 @@ declare const SysUser: Omit<{
             readonly index?: boolean | undefined;
             readonly type: "datetime";
         };
-        readonly mfa_required_at: {
+        readonly phone_number: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             readonly options?: {
@@ -3350,9 +3433,9 @@ declare const SysUser: Omit<{
             readonly inlineHelpText?: string | undefined;
             readonly autonumberFormat?: string | undefined;
             readonly index?: boolean | undefined;
-            readonly type: "datetime";
+            readonly type: "text";
         };
-        readonly last_login_at: {
+        readonly phone_number_verified: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             readonly options?: {
@@ -3533,9 +3616,9 @@ declare const SysUser: Omit<{
             readonly inlineHelpText?: string | undefined;
             readonly autonumberFormat?: string | undefined;
             readonly index?: boolean | undefined;
-            readonly type: "datetime";
+            readonly type: "boolean";
         };
-        readonly last_login_ip: {
+        readonly must_change_password: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             readonly options?: {
@@ -3716,9 +3799,9 @@ declare const SysUser: Omit<{
             readonly inlineHelpText?: string | undefined;
             readonly autonumberFormat?: string | undefined;
             readonly index?: boolean | undefined;
-            readonly type: "text";
+            readonly type: "boolean";
         };
-        readonly ai_access: {
+        readonly mfa_required_at: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             readonly options?: {
@@ -3899,9 +3982,9 @@ declare const SysUser: Omit<{
             readonly inlineHelpText?: string | undefined;
             readonly autonumberFormat?: string | undefined;
             readonly index?: boolean | undefined;
-            readonly type: "boolean";
+            readonly type: "datetime";
         };
-        readonly image: {
+        readonly last_login_at: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             readonly options?: {
@@ -4082,9 +4165,9 @@ declare const SysUser: Omit<{
             readonly inlineHelpText?: string | undefined;
             readonly autonumberFormat?: string | undefined;
             readonly index?: boolean | undefined;
-            readonly type: "url";
+            readonly type: "datetime";
         };
-        readonly manager_id: {
+        readonly last_login_ip: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             readonly options?: {
@@ -4134,7 +4217,7 @@ declare const SysUser: Omit<{
             readonly maxLength?: number | undefined;
             readonly minLength?: number | undefined;
             readonly scale?: number | undefined;
-            reference: string;
+            readonly reference?: string | undefined;
             readonly referenceFilters?: string[] | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
             readonly inlineEdit?: boolean | "grid" | "form" | undefined;
@@ -4265,9 +4348,9 @@ declare const SysUser: Omit<{
             readonly inlineHelpText?: string | undefined;
             readonly autonumberFormat?: string | undefined;
             readonly index?: boolean | undefined;
-            readonly type: "lookup";
+            readonly type: "text";
         };
-        readonly primary_business_unit_id: {
+        readonly ai_access: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             readonly options?: {
@@ -4317,189 +4400,738 @@ declare const SysUser: Omit<{
             readonly maxLength?: number | undefined;
             readonly minLength?: number | undefined;
             readonly scale?: number | undefined;
-            reference: string;
-            readonly referenceFilters?: string[] | undefined;
-            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
-            readonly inlineEdit?: boolean | "grid" | "form" | undefined;
-            readonly inlineTitle?: string | undefined;
-            readonly inlineColumns?: any[] | undefined;
-            readonly inlineAmountField?: string | undefined;
-            readonly relatedList?: boolean | "primary" | undefined;
-            readonly relatedListTitle?: string | undefined;
-            readonly relatedListColumns?: any[] | undefined;
-            readonly displayField?: string | undefined;
-            readonly descriptionField?: string | undefined;
-            readonly lookupColumns?: (string | {
-                field: string;
-                label?: string | undefined;
-                width?: string | undefined;
-                type?: string | undefined;
-            })[] | undefined;
-            readonly lookupPageSize?: number | undefined;
-            readonly lookupFilters?: {
-                field: string;
-                operator: "in" | "eq" | "ne" | "gt" | "lt" | "gte" | "lte" | "contains" | "notIn";
-                value: any;
-            }[] | undefined;
-            readonly dependsOn?: (string | {
-                field: string;
-                param?: string | undefined;
-            })[] | undefined;
-            readonly allowCreate?: boolean | undefined;
-            readonly expression?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly summaryOperations?: {
-                object: string;
-                field: string;
-                function: "min" | "max" | "count" | "sum" | "avg";
-                relationshipField?: string | undefined;
-            } | undefined;
-            readonly language?: string | undefined;
-            readonly step?: number | undefined;
-            readonly currencyConfig?: {
-                precision: number;
-                currencyMode: "fixed" | "dynamic";
-                defaultCurrency: string;
-            } | undefined;
-            readonly vectorConfig?: {
-                dimensions: number;
-                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
-                normalized: boolean;
-                indexed: boolean;
-                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
-            } | undefined;
-            readonly fileAttachmentConfig?: {
-                virusScan: boolean;
-                virusScanOnUpload: boolean;
-                quarantineOnThreat: boolean;
-                allowMultiple: boolean;
-                allowReplace: boolean;
-                allowDelete: boolean;
-                requireUpload: boolean;
-                extractMetadata: boolean;
-                extractText: boolean;
-                versioningEnabled: boolean;
-                publicRead: boolean;
-                presignedUrlExpiry: number;
-                minSize?: number | undefined;
-                maxSize?: number | undefined;
-                allowedTypes?: string[] | undefined;
-                blockedTypes?: string[] | undefined;
-                allowedMimeTypes?: string[] | undefined;
-                blockedMimeTypes?: string[] | undefined;
-                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
-                storageProvider?: string | undefined;
-                storageBucket?: string | undefined;
-                storagePrefix?: string | undefined;
-                imageValidation?: {
-                    generateThumbnails: boolean;
-                    preserveMetadata: boolean;
-                    autoRotate: boolean;
-                    minWidth?: number | undefined;
-                    maxWidth?: number | undefined;
-                    minHeight?: number | undefined;
-                    maxHeight?: number | undefined;
-                    aspectRatio?: string | undefined;
-                    thumbnailSizes?: {
-                        name: string;
-                        width: number;
-                        height: number;
-                        crop: boolean;
-                    }[] | undefined;
-                } | undefined;
-                maxVersions?: number | undefined;
-            } | undefined;
-            readonly trackHistory?: boolean | undefined;
-            readonly readonlyWhen?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly requiredWhen?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly conditionalRequired?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly sortable?: boolean | undefined;
-            readonly inlineHelpText?: string | undefined;
-            readonly autonumberFormat?: string | undefined;
-            readonly index?: boolean | undefined;
-            readonly type: "lookup";
-        };
-        readonly source: {
-            readonly readonly?: boolean | undefined;
-            readonly format?: string | undefined;
-            options: {
-                label: string;
-                value: string;
-                color?: string | undefined;
-                default?: boolean | undefined;
-                visibleWhen?: {
-                    dialect: "cel" | "js" | "cron" | "template";
-                    source?: string | undefined;
-                    ast?: unknown;
-                    meta?: {
-                        rationale?: string | undefined;
-                        generatedBy?: string | undefined;
-                    } | undefined;
-                } | undefined;
-            }[];
-            readonly description?: string | undefined;
-            readonly label?: string | undefined;
-            readonly name?: string | undefined;
-            readonly precision?: number | undefined;
-            readonly required?: boolean | undefined;
-            readonly returnType?: "number" | "boolean" | "date" | "text" | undefined;
-            readonly multiple?: boolean | undefined;
-            readonly dependencies?: string[] | undefined;
-            readonly externalId?: boolean | undefined;
-            readonly defaultValue?: unknown;
-            readonly requiredPermissions?: string[] | undefined;
-            readonly group?: string | undefined;
-            readonly hidden?: boolean | undefined;
-            readonly system?: boolean | undefined;
-            readonly min?: number | undefined;
-            readonly max?: number | undefined;
-            readonly visibleWhen?: {
-                dialect: "cel" | "js" | "cron" | "template";
-                source?: string | undefined;
-                ast?: unknown;
-                meta?: {
-                    rationale?: string | undefined;
-                    generatedBy?: string | undefined;
-                } | undefined;
-            } | undefined;
-            readonly dimensions?: number | undefined;
-            readonly columnName?: string | undefined;
-            readonly searchable?: boolean | undefined;
-            readonly unique?: boolean | undefined;
-            readonly maxLength?: number | undefined;
-            readonly minLength?: number | undefined;
-            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly inlineEdit?: boolean | "grid" | "form" | undefined;
+            readonly inlineTitle?: string | undefined;
+            readonly inlineColumns?: any[] | undefined;
+            readonly inlineAmountField?: string | undefined;
+            readonly relatedList?: boolean | "primary" | undefined;
+            readonly relatedListTitle?: string | undefined;
+            readonly relatedListColumns?: any[] | undefined;
+            readonly displayField?: string | undefined;
+            readonly descriptionField?: string | undefined;
+            readonly lookupColumns?: (string | {
+                field: string;
+                label?: string | undefined;
+                width?: string | undefined;
+                type?: string | undefined;
+            })[] | undefined;
+            readonly lookupPageSize?: number | undefined;
+            readonly lookupFilters?: {
+                field: string;
+                operator: "in" | "eq" | "ne" | "gt" | "lt" | "gte" | "lte" | "contains" | "notIn";
+                value: any;
+            }[] | undefined;
+            readonly dependsOn?: (string | {
+                field: string;
+                param?: string | undefined;
+            })[] | undefined;
+            readonly allowCreate?: boolean | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+                relationshipField?: string | undefined;
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly step?: number | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly trackHistory?: boolean | undefined;
+            readonly readonlyWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly requiredWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "boolean";
+        };
+        readonly image: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+                visibleWhen?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly returnType?: "number" | "boolean" | "date" | "text" | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly requiredPermissions?: string[] | undefined;
+            readonly group?: string | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly system?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly visibleWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly dimensions?: number | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            readonly reference?: string | undefined;
+            readonly referenceFilters?: string[] | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly inlineEdit?: boolean | "grid" | "form" | undefined;
+            readonly inlineTitle?: string | undefined;
+            readonly inlineColumns?: any[] | undefined;
+            readonly inlineAmountField?: string | undefined;
+            readonly relatedList?: boolean | "primary" | undefined;
+            readonly relatedListTitle?: string | undefined;
+            readonly relatedListColumns?: any[] | undefined;
+            readonly displayField?: string | undefined;
+            readonly descriptionField?: string | undefined;
+            readonly lookupColumns?: (string | {
+                field: string;
+                label?: string | undefined;
+                width?: string | undefined;
+                type?: string | undefined;
+            })[] | undefined;
+            readonly lookupPageSize?: number | undefined;
+            readonly lookupFilters?: {
+                field: string;
+                operator: "in" | "eq" | "ne" | "gt" | "lt" | "gte" | "lte" | "contains" | "notIn";
+                value: any;
+            }[] | undefined;
+            readonly dependsOn?: (string | {
+                field: string;
+                param?: string | undefined;
+            })[] | undefined;
+            readonly allowCreate?: boolean | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+                relationshipField?: string | undefined;
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly step?: number | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly trackHistory?: boolean | undefined;
+            readonly readonlyWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly requiredWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "url";
+        };
+        readonly manager_id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+                visibleWhen?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly returnType?: "number" | "boolean" | "date" | "text" | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly requiredPermissions?: string[] | undefined;
+            readonly group?: string | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly system?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly visibleWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly dimensions?: number | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly inlineEdit?: boolean | "grid" | "form" | undefined;
+            readonly inlineTitle?: string | undefined;
+            readonly inlineColumns?: any[] | undefined;
+            readonly inlineAmountField?: string | undefined;
+            readonly relatedList?: boolean | "primary" | undefined;
+            readonly relatedListTitle?: string | undefined;
+            readonly relatedListColumns?: any[] | undefined;
+            readonly displayField?: string | undefined;
+            readonly descriptionField?: string | undefined;
+            readonly lookupColumns?: (string | {
+                field: string;
+                label?: string | undefined;
+                width?: string | undefined;
+                type?: string | undefined;
+            })[] | undefined;
+            readonly lookupPageSize?: number | undefined;
+            readonly lookupFilters?: {
+                field: string;
+                operator: "in" | "eq" | "ne" | "gt" | "lt" | "gte" | "lte" | "contains" | "notIn";
+                value: any;
+            }[] | undefined;
+            readonly dependsOn?: (string | {
+                field: string;
+                param?: string | undefined;
+            })[] | undefined;
+            readonly allowCreate?: boolean | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+                relationshipField?: string | undefined;
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly step?: number | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly trackHistory?: boolean | undefined;
+            readonly readonlyWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly requiredWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly primary_business_unit_id: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            readonly options?: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+                visibleWhen?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+            }[] | undefined;
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly returnType?: "number" | "boolean" | "date" | "text" | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly requiredPermissions?: string[] | undefined;
+            readonly group?: string | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly system?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly visibleWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly dimensions?: number | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
+            reference: string;
+            readonly referenceFilters?: string[] | undefined;
+            readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
+            readonly inlineEdit?: boolean | "grid" | "form" | undefined;
+            readonly inlineTitle?: string | undefined;
+            readonly inlineColumns?: any[] | undefined;
+            readonly inlineAmountField?: string | undefined;
+            readonly relatedList?: boolean | "primary" | undefined;
+            readonly relatedListTitle?: string | undefined;
+            readonly relatedListColumns?: any[] | undefined;
+            readonly displayField?: string | undefined;
+            readonly descriptionField?: string | undefined;
+            readonly lookupColumns?: (string | {
+                field: string;
+                label?: string | undefined;
+                width?: string | undefined;
+                type?: string | undefined;
+            })[] | undefined;
+            readonly lookupPageSize?: number | undefined;
+            readonly lookupFilters?: {
+                field: string;
+                operator: "in" | "eq" | "ne" | "gt" | "lt" | "gte" | "lte" | "contains" | "notIn";
+                value: any;
+            }[] | undefined;
+            readonly dependsOn?: (string | {
+                field: string;
+                param?: string | undefined;
+            })[] | undefined;
+            readonly allowCreate?: boolean | undefined;
+            readonly expression?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly summaryOperations?: {
+                object: string;
+                field: string;
+                function: "min" | "max" | "count" | "sum" | "avg";
+                relationshipField?: string | undefined;
+            } | undefined;
+            readonly language?: string | undefined;
+            readonly step?: number | undefined;
+            readonly currencyConfig?: {
+                precision: number;
+                currencyMode: "fixed" | "dynamic";
+                defaultCurrency: string;
+            } | undefined;
+            readonly vectorConfig?: {
+                dimensions: number;
+                distanceMetric: "cosine" | "euclidean" | "dotProduct" | "manhattan";
+                normalized: boolean;
+                indexed: boolean;
+                indexType?: "flat" | "hnsw" | "ivfflat" | undefined;
+            } | undefined;
+            readonly fileAttachmentConfig?: {
+                virusScan: boolean;
+                virusScanOnUpload: boolean;
+                quarantineOnThreat: boolean;
+                allowMultiple: boolean;
+                allowReplace: boolean;
+                allowDelete: boolean;
+                requireUpload: boolean;
+                extractMetadata: boolean;
+                extractText: boolean;
+                versioningEnabled: boolean;
+                publicRead: boolean;
+                presignedUrlExpiry: number;
+                minSize?: number | undefined;
+                maxSize?: number | undefined;
+                allowedTypes?: string[] | undefined;
+                blockedTypes?: string[] | undefined;
+                allowedMimeTypes?: string[] | undefined;
+                blockedMimeTypes?: string[] | undefined;
+                virusScanProvider?: "custom" | "clamav" | "virustotal" | "metadefender" | undefined;
+                storageProvider?: string | undefined;
+                storageBucket?: string | undefined;
+                storagePrefix?: string | undefined;
+                imageValidation?: {
+                    generateThumbnails: boolean;
+                    preserveMetadata: boolean;
+                    autoRotate: boolean;
+                    minWidth?: number | undefined;
+                    maxWidth?: number | undefined;
+                    minHeight?: number | undefined;
+                    maxHeight?: number | undefined;
+                    aspectRatio?: string | undefined;
+                    thumbnailSizes?: {
+                        name: string;
+                        width: number;
+                        height: number;
+                        crop: boolean;
+                    }[] | undefined;
+                } | undefined;
+                maxVersions?: number | undefined;
+            } | undefined;
+            readonly trackHistory?: boolean | undefined;
+            readonly readonlyWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly requiredWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly conditionalRequired?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly sortable?: boolean | undefined;
+            readonly inlineHelpText?: string | undefined;
+            readonly autonumberFormat?: string | undefined;
+            readonly index?: boolean | undefined;
+            readonly type: "lookup";
+        };
+        readonly source: {
+            readonly readonly?: boolean | undefined;
+            readonly format?: string | undefined;
+            options: {
+                label: string;
+                value: string;
+                color?: string | undefined;
+                default?: boolean | undefined;
+                visibleWhen?: {
+                    dialect: "cel" | "js" | "cron" | "template";
+                    source?: string | undefined;
+                    ast?: unknown;
+                    meta?: {
+                        rationale?: string | undefined;
+                        generatedBy?: string | undefined;
+                    } | undefined;
+                } | undefined;
+            }[];
+            readonly description?: string | undefined;
+            readonly label?: string | undefined;
+            readonly name?: string | undefined;
+            readonly precision?: number | undefined;
+            readonly required?: boolean | undefined;
+            readonly returnType?: "number" | "boolean" | "date" | "text" | undefined;
+            readonly multiple?: boolean | undefined;
+            readonly dependencies?: string[] | undefined;
+            readonly externalId?: boolean | undefined;
+            readonly defaultValue?: unknown;
+            readonly requiredPermissions?: string[] | undefined;
+            readonly group?: string | undefined;
+            readonly hidden?: boolean | undefined;
+            readonly system?: boolean | undefined;
+            readonly min?: number | undefined;
+            readonly max?: number | undefined;
+            readonly visibleWhen?: {
+                dialect: "cel" | "js" | "cron" | "template";
+                source?: string | undefined;
+                ast?: unknown;
+                meta?: {
+                    rationale?: string | undefined;
+                    generatedBy?: string | undefined;
+                } | undefined;
+            } | undefined;
+            readonly dimensions?: number | undefined;
+            readonly columnName?: string | undefined;
+            readonly searchable?: boolean | undefined;
+            readonly unique?: boolean | undefined;
+            readonly maxLength?: number | undefined;
+            readonly minLength?: number | undefined;
+            readonly scale?: number | undefined;
             readonly reference?: string | undefined;
             readonly referenceFilters?: string[] | undefined;
             readonly deleteBehavior?: "set_null" | "cascade" | "restrict" | undefined;
@@ -5189,6 +5821,9 @@ declare const SysUser: Omit<{
     }, {
         readonly fields: ["created_at"];
         readonly unique: false;
+    }, {
+        readonly fields: ["phone_number"];
+        readonly unique: true;
     }];
     readonly enable: {
         readonly trackHistory: true;
@@ -5508,7 +6143,12 @@ declare const SysSession: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -5854,9 +6494,10 @@ declare const SysSession: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -8949,7 +9590,12 @@ declare const SysAccount: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -9295,9 +9941,10 @@ declare const SysAccount: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -12446,7 +13093,12 @@ declare const SysVerification: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -12792,9 +13444,10 @@ declare const SysVerification: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -12921,6 +13574,9 @@ declare const SysVerification: Omit<{
     readonly icon: "shield-check";
     readonly isSystem: true;
     readonly managedBy: "better-auth";
+    readonly access: {
+        readonly default: "private";
+    };
     readonly protection: {
         readonly lock: "full";
         readonly reason: "Identity table managed by better-auth — see ADR-0010.";
@@ -14353,7 +15009,12 @@ declare const SysOrganization: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -14699,9 +15360,10 @@ declare const SysOrganization: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -16751,7 +17413,12 @@ declare const SysMember: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -17097,9 +17764,10 @@ declare const SysMember: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -17242,7 +17910,7 @@ declare const SysMember: Omit<{
         readonly locations: ["list_toolbar"];
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/add-member";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Member added";
         readonly refreshAfter: true;
         readonly params: [{
@@ -17265,7 +17933,7 @@ declare const SysMember: Omit<{
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/update-member-role";
         readonly recordIdParam: "memberId";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Member role updated";
         readonly refreshAfter: true;
         readonly params: [{
@@ -17283,7 +17951,7 @@ declare const SysMember: Omit<{
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/remove-member";
         readonly recordIdParam: "memberIdOrEmail";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly confirmText: "Remove this member from the organization? They will lose access to all org resources.";
         readonly successMessage: "Member removed";
         readonly refreshAfter: true;
@@ -17300,7 +17968,7 @@ declare const SysMember: Omit<{
         readonly bodyExtra: {
             readonly role: "owner";
         };
-        readonly visible: "record.role != 'owner' && features.multiOrgEnabled != false";
+        readonly visible: "record.role != 'owner' && features.organization != false";
         readonly confirmText: "Transfer ownership of this organization to the selected member? You will be demoted to admin and lose owner-only privileges.";
         readonly successMessage: "Ownership transferred";
         readonly refreshAfter: true;
@@ -18570,7 +19238,12 @@ declare const SysInvitation: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -18916,9 +19589,10 @@ declare const SysInvitation: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -19061,7 +19735,7 @@ declare const SysInvitation: Omit<{
         readonly locations: ["list_toolbar"];
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/invite-member";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Invitation sent";
         readonly refreshAfter: true;
         readonly params: [{
@@ -19081,7 +19755,7 @@ declare const SysInvitation: Omit<{
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/cancel-invitation";
         readonly recordIdParam: "invitationId";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly confirmText: "Cancel this invitation? The recipient will no longer be able to accept it.";
         readonly successMessage: "Invitation canceled";
         readonly refreshAfter: true;
@@ -19096,7 +19770,7 @@ declare const SysInvitation: Omit<{
         readonly bodyExtra: {
             readonly resend: true;
         };
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Invitation resent";
         readonly refreshAfter: true;
         readonly params: [{
@@ -21189,7 +21863,12 @@ declare const SysTeam: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -21535,9 +22214,10 @@ declare const SysTeam: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -21682,7 +22362,7 @@ declare const SysTeam: Omit<{
         readonly locations: ["list_toolbar"];
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/create-team";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Team created";
         readonly refreshAfter: true;
         readonly params: [{
@@ -21704,7 +22384,7 @@ declare const SysTeam: Omit<{
         readonly bodyShape: {
             readonly wrap: "data";
         };
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Team updated";
         readonly refreshAfter: true;
         readonly params: [{
@@ -21722,7 +22402,7 @@ declare const SysTeam: Omit<{
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/remove-team";
         readonly recordIdParam: "teamId";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly confirmText: "Delete this team? Members will lose any team-scoped access. This cannot be undone.";
         readonly successMessage: "Team deleted";
         readonly refreshAfter: true;
@@ -23010,7 +23690,12 @@ declare const SysTeamMember: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -23356,9 +24041,10 @@ declare const SysTeamMember: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -23501,7 +24187,7 @@ declare const SysTeamMember: Omit<{
         readonly locations: ["list_toolbar"];
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/add-team-member";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly successMessage: "Team member added";
         readonly refreshAfter: true;
         readonly params: [{
@@ -23522,7 +24208,7 @@ declare const SysTeamMember: Omit<{
         readonly locations: ["list_item"];
         readonly type: "api";
         readonly target: "/api/v1/auth/organization/remove-team-member";
-        readonly visible: "features.multiOrgEnabled != false";
+        readonly visible: "features.organization != false";
         readonly confirmText: "Remove this user from the team? They will lose any team-scoped access.";
         readonly successMessage: "Team member removed";
         readonly refreshAfter: true;
@@ -24602,7 +25288,12 @@ declare const SysBusinessUnit: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -24948,9 +25639,10 @@ declare const SysBusinessUnit: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -27901,7 +28593,12 @@ declare const SysBusinessUnitMember: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -28247,9 +28944,10 @@ declare const SysBusinessUnitMember: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -28378,7 +29076,7 @@ declare const SysBusinessUnitMember: Omit<{
     readonly managedBy: "platform";
     readonly description: "User assignment to a business unit (matrix-org friendly, effective-dated).";
     readonly titleFormat: "{user_id} in {business_unit_id}";
-    readonly highlightFields: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"];
+    readonly highlightFields: ["user_id", "business_unit_id", "function_in_business_unit", "is_primary"];
     readonly fields: {
         readonly id: {
             readonly readonly?: boolean | undefined;
@@ -28929,7 +29627,7 @@ declare const SysBusinessUnitMember: Omit<{
             readonly index?: boolean | undefined;
             readonly type: "lookup";
         };
-        readonly role_in_business_unit: {
+        readonly function_in_business_unit: {
             readonly readonly?: boolean | undefined;
             readonly format?: string | undefined;
             options: {
@@ -30353,7 +31051,12 @@ declare const SysApiKey: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -30699,9 +31402,10 @@ declare const SysApiKey: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -33295,7 +33999,12 @@ declare const SysTwoFactor: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -33641,9 +34350,10 @@ declare const SysTwoFactor: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -35502,7 +36212,12 @@ declare const SysDeviceCode: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -35848,9 +36563,10 @@ declare const SysDeviceCode: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -35977,6 +36693,9 @@ declare const SysDeviceCode: Omit<{
     readonly icon: "key-round";
     readonly isSystem: true;
     readonly managedBy: "better-auth";
+    readonly access: {
+        readonly default: "private";
+    };
     readonly protection: {
         readonly lock: "full";
         readonly reason: "Identity table managed by better-auth — see ADR-0010.";
@@ -38518,7 +39237,12 @@ declare const SysUserPreference: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -38864,9 +39588,10 @@ declare const SysUserPreference: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -40493,7 +41218,12 @@ declare const SysOauthApplication: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -40839,9 +41569,10 @@ declare const SysOauthApplication: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -47032,7 +47763,12 @@ declare const SysOauthAccessToken: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -47378,9 +48114,10 @@ declare const SysOauthAccessToken: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -47507,6 +48244,9 @@ declare const SysOauthAccessToken: Omit<{
     readonly icon: "ticket";
     readonly isSystem: true;
     readonly managedBy: "better-auth";
+    readonly access: {
+        readonly default: "private";
+    };
     readonly protection: {
         readonly lock: "full";
         readonly reason: "Identity table managed by better-auth — see ADR-0010.";
@@ -49676,7 +50416,12 @@ declare const SysOauthRefreshToken: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -50022,9 +50767,10 @@ declare const SysOauthRefreshToken: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -50151,6 +50897,9 @@ declare const SysOauthRefreshToken: Omit<{
     readonly icon: "refresh-cw";
     readonly isSystem: true;
     readonly managedBy: "better-auth";
+    readonly access: {
+        readonly default: "private";
+    };
     readonly protection: {
         readonly lock: "full";
         readonly reason: "Identity table managed by better-auth — see ADR-0010.";
@@ -52503,7 +53252,12 @@ declare const SysOauthConsent: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -52849,9 +53603,10 @@ declare const SysOauthConsent: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -54591,7 +55346,12 @@ declare const SysJwks: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -54937,9 +55697,10 @@ declare const SysJwks: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -55066,6 +55827,9 @@ declare const SysJwks: Omit<{
     readonly icon: "key";
     readonly isSystem: true;
     readonly managedBy: "better-auth";
+    readonly access: {
+        readonly default: "private";
+    };
     readonly protection: {
         readonly lock: "full";
         readonly reason: "Identity table managed by better-auth — see ADR-0010.";
@@ -56318,7 +57082,12 @@ declare const SysSsoProvider: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -56664,9 +57433,10 @@ declare const SysSsoProvider: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -59385,7 +60155,12 @@ declare const SysScimProvider: Omit<{
     access?: {
         default: "public" | "private";
     } | undefined;
-    requiredPermissions?: string[] | undefined;
+    requiredPermissions?: string[] | {
+        read?: string[] | undefined;
+        create?: string[] | undefined;
+        update?: string[] | undefined;
+        delete?: string[] | undefined;
+    } | undefined;
     softDelete?: {
         enabled: boolean;
         field: string;
@@ -59731,9 +60506,10 @@ declare const SysScimProvider: Omit<{
         trash: boolean;
         mru: boolean;
         clone: boolean;
-        apiMethods?: ("search" | "create" | "import" | "delete" | "get" | "update" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
+        apiMethods?: ("search" | "create" | "import" | "delete" | "update" | "get" | "upsert" | "list" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "private" | "read" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
+    sharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
+    externalSharingModel?: "private" | "public_read" | "public_read_write" | "controlled_by_parent" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -59860,6 +60636,7 @@ declare const SysScimProvider: Omit<{
     readonly icon: "users";
     readonly isSystem: true;
     readonly managedBy: "better-auth";
+    readonly requiredPermissions: ["manage_platform_settings"];
     readonly protection: {
         readonly lock: "full";
         readonly reason: "Identity table managed by better-auth (@better-auth/scim) — see ADR-0071.";