@shipdit/cli 0.1.1 → 0.2.0

package/dist/index.mjs

@@ -375,10 +375,12 @@ const m$1 = (...t) => hc(...t);
 const h$1 = (...t) => hc(...t);
 const g$1 = (...t) => hc(...t);
 const _$1 = (...t) => hc(...t);
-function v$1(e) {
+const v$1 = (...t) => hc(...t);
+const y$1 = (...t) => hc(...t);
+function b$1(e) {
 	return `${e.replace(/\/+$/, ``)}/api/v1/rpc`;
 }
-function y$1(e) {
+function x$1(e) {
 	return {
 		...e.fetch ? { fetch: e.fetch } : {},
 		init: { credentials: e.client === `dashboard` ? `include` : `same-origin` },
@@ -388,100 +390,128 @@ function y$1(e) {
 		}
 	};
 }
-async function b$1(e, t) {
+async function S$1(e, t) {
 	return i$1(await e({ json: t }));
 }
-function x$1(e) {
-	let t = v$1(e.baseUrl), n = y$1(e), r = a$1(t, n), i = o$1(t, n), x = s$1(t, n), S = c$1(t, n), C = l$1(t, n), w = u$2(t, n), T = d$2(t, n), E = m$1(t, n), D = f$1(t, n), O = p$1(t, n), k = h$1(t, n), A = g$1(t, n), j = _$1(t, n);
+function C$1(e) {
+	let t = b$1(e.baseUrl), n = x$1(e), r = a$1(t, n), i = o$1(t, n), C = s$1(t, n), w = c$1(t, n), T = l$1(t, n), E = u$2(t, n), D = d$2(t, n), O = f$1(t, n), k = h$1(t, n), A = p$1(t, n), j = m$1(t, n), M = g$1(t, n), N = _$1(t, n), P = v$1(t, n), F = y$1(t, n);
 	return {
 		me: {
-			get: (e = {}) => b$1(r.me.$post, e),
-			feedback: (e) => b$1(r.me.feedback.$post, e)
+			get: (e = {}) => S$1(r.me.$post, e),
+			feedback: (e) => S$1(r.me.feedback.$post, e)
 		},
 		project: {
-			list: (e = {}) => b$1(i.project.list.$post, e),
-			create: (e) => b$1(i.project.create.$post, e),
-			update: (e) => b$1(i.project.update.$post, e),
-			archive: (e) => b$1(i.project.archive.$post, e)
+			list: (e = {}) => S$1(i.project.list.$post, e),
+			create: (e) => S$1(i.project.create.$post, e),
+			update: (e) => S$1(i.project.update.$post, e),
+			archive: (e) => S$1(i.project.archive.$post, e),
+			listTeams: (e) => S$1(i.project.listTeams.$post, e),
+			setTeams: (e) => S$1(i.project.setTeams.$post, e)
 		},
+		team: { listMembers: (e) => S$1(F.team.listMembers.$post, e) },
 		environment: {
-			list: (e) => b$1(x.environment.list.$post, e),
-			create: (e) => b$1(x.environment.create.$post, e),
-			update: (e) => b$1(x.environment.update.$post, e),
-			archive: (e) => b$1(x.environment.archive.$post, e)
+			list: (e) => S$1(C.environment.list.$post, e),
+			create: (e) => S$1(C.environment.create.$post, e),
+			update: (e) => S$1(C.environment.update.$post, e),
+			archive: (e) => S$1(C.environment.archive.$post, e)
 		},
 		flag: {
-			list: (e) => b$1(S.flag.list.$post, e),
-			get: (e) => b$1(S.flag.get.$post, e),
-			create: (e) => b$1(S.flag.create.$post, e),
-			update: (e) => b$1(S.flag.update.$post, e),
-			archive: (e) => b$1(S.flag.archive.$post, e),
-			updateEnvironment: (e) => b$1(S.flag.updateEnvironment.$post, e),
-			toggleEnvironment: (e) => b$1(S.flag.toggleEnvironment.$post, e),
-			listEnvironmentStates: (e) => b$1(S.flag.listEnvironmentStates.$post, e),
-			pull: (e) => b$1(S.flag.pull.$post, e),
-			diff: (e) => b$1(S.flag.diff.$post, e),
-			push: (e) => b$1(S.flag.push.$post, e)
+			list: (e) => S$1(w.flag.list.$post, e),
+			get: (e) => S$1(w.flag.get.$post, e),
+			create: (e) => S$1(w.flag.create.$post, e),
+			update: (e) => S$1(w.flag.update.$post, e),
+			archive: (e) => S$1(w.flag.archive.$post, e),
+			updateEnvironment: (e) => S$1(w.flag.updateEnvironment.$post, e),
+			toggleEnvironment: (e) => S$1(w.flag.toggleEnvironment.$post, e),
+			listEnvironmentStates: (e) => S$1(w.flag.listEnvironmentStates.$post, e),
+			pull: (e) => S$1(w.flag.pull.$post, e),
+			diff: (e) => S$1(w.flag.diff.$post, e),
+			push: (e) => S$1(w.flag.push.$post, e)
 		},
 		apiKey: {
-			list: (e = {}) => b$1(C.apiKey.list.$post, e),
-			create: (e) => b$1(C.apiKey.create.$post, e),
-			revoke: (e) => b$1(C.apiKey.revoke.$post, e)
+			list: (e = {}) => S$1(T.apiKey.list.$post, e),
+			create: (e) => S$1(T.apiKey.create.$post, e),
+			revoke: (e) => S$1(T.apiKey.revoke.$post, e)
 		},
 		sdkKey: {
-			list: (e = {}) => b$1(T.sdkKey.list.$post, e),
-			create: (e) => b$1(T.sdkKey.create.$post, e),
-			revoke: (e) => b$1(T.sdkKey.revoke.$post, e)
+			list: (e = {}) => S$1(O.sdkKey.list.$post, e),
+			create: (e) => S$1(O.sdkKey.create.$post, e),
+			revoke: (e) => S$1(O.sdkKey.revoke.$post, e)
 		},
 		segment: {
-			list: (e) => b$1(E.segment.list.$post, e),
-			get: (e) => b$1(E.segment.get.$post, e),
-			create: (e) => b$1(E.segment.create.$post, e),
-			update: (e) => b$1(E.segment.update.$post, e),
-			archive: (e) => b$1(E.segment.archive.$post, e),
-			listEnvironmentStates: (e) => b$1(E.segment.listEnvironmentStates.$post, e),
-			updateEnvironment: (e) => b$1(E.segment.updateEnvironment.$post, e)
+			list: (e) => S$1(k.segment.list.$post, e),
+			get: (e) => S$1(k.segment.get.$post, e),
+			create: (e) => S$1(k.segment.create.$post, e),
+			update: (e) => S$1(k.segment.update.$post, e),
+			archive: (e) => S$1(k.segment.archive.$post, e),
+			listEnvironmentStates: (e) => S$1(k.segment.listEnvironmentStates.$post, e),
+			updateEnvironment: (e) => S$1(k.segment.updateEnvironment.$post, e)
 		},
 		evaluatedEntity: {
-			list: (e) => b$1(D.evaluatedEntity.list.$post, e),
-			get: (e) => b$1(D.evaluatedEntity.get.$post, e),
-			delete: (e) => b$1(D.evaluatedEntity.delete.$post, e)
+			list: (e) => S$1(A.evaluatedEntity.list.$post, e),
+			get: (e) => S$1(A.evaluatedEntity.get.$post, e),
+			delete: (e) => S$1(A.evaluatedEntity.delete.$post, e)
 		},
 		evaluationFact: {
-			list: (e) => b$1(O.evaluationFact.list.$post, e),
-			byRule: (e) => b$1(O.evaluationFact.byRule.$post, e),
-			orgSummary: (e = {}) => b$1(O.evaluationFact.orgSummary.$post, e),
-			projectSummary: (e) => b$1(O.evaluationFact.projectSummary.$post, e),
-			simulate: (e) => b$1(O.evaluationFact.simulate.$post, e)
+			list: (e) => S$1(j.evaluationFact.list.$post, e),
+			byRule: (e) => S$1(j.evaluationFact.byRule.$post, e),
+			orgSummary: (e = {}) => S$1(j.evaluationFact.orgSummary.$post, e),
+			projectSummary: (e) => S$1(j.evaluationFact.projectSummary.$post, e),
+			simulate: (e) => S$1(j.evaluationFact.simulate.$post, e)
 		},
-		snapshot: { publish: (e) => b$1(k.snapshot.publish.$post, e) },
-		device: { authorize: (e) => b$1(A.device.authorize.$post, e) },
+		snapshot: { publish: (e) => S$1(M.snapshot.publish.$post, e) },
+		device: { authorize: (e) => S$1(N.device.authorize.$post, e) },
 		billing: {
-			get: (e = {}) => b$1(j.billing.get.$post, e),
-			attach: (e) => b$1(j.billing.attach.$post, e),
-			openPortal: (e) => b$1(j.billing.openPortal.$post, e)
+			get: (e = {}) => S$1(P.billing.get.$post, e),
+			attach: (e) => S$1(P.billing.attach.$post, e),
+			openPortal: (e) => S$1(P.billing.openPortal.$post, e)
+		},
+		approval: {
+			listPolicies: (e = {}) => S$1(E.approval.listPolicies.$post, e),
+			createPolicy: (e) => S$1(E.approval.createPolicy.$post, e),
+			updatePolicy: (e) => S$1(E.approval.updatePolicy.$post, e),
+			deletePolicy: (e) => S$1(E.approval.deletePolicy.$post, e),
+			listRequests: (e = {}) => S$1(E.approval.listRequests.$post, e),
+			get: (e) => S$1(E.approval.get.$post, e),
+			approve: (e) => S$1(E.approval.approve.$post, e),
+			reject: (e) => S$1(E.approval.reject.$post, e),
+			cancel: (e) => S$1(E.approval.cancel.$post, e)
+		},
+		audit: {
+			list: (e = {}) => S$1(D.audit.list.$post, e),
+			get: (e) => S$1(D.audit.get.$post, e),
+			actions: (e = {}) => S$1(D.audit.actions.$post, e),
+			export: (e) => S$1(D.audit.export.$post, e),
+			getSettings: (e = {}) => S$1(D.audit.getSettings.$post, e),
+			updateSettings: (e) => S$1(D.audit.updateSettings.$post, e),
+			listDestinations: (e = {}) => S$1(D.audit.listDestinations.$post, e),
+			createDestination: (e) => S$1(D.audit.createDestination.$post, e),
+			updateDestination: (e) => S$1(D.audit.updateDestination.$post, e),
+			deleteDestination: (e) => S$1(D.audit.deleteDestination.$post, e),
+			testDestination: (e) => S$1(D.audit.testDestination.$post, e)
 		},
-		audit: { list: (e = {}) => b$1(w.audit.list.$post, e) },
 		raw: {
 			me: r,
 			project: i,
-			environment: x,
-			flag: S,
-			apiKey: C,
-			audit: w,
-			sdkKey: T,
-			segment: E,
-			evaluatedEntity: D,
-			evaluationFact: O,
-			snapshot: k,
-			device: A,
-			billing: j
+			environment: C,
+			flag: w,
+			apiKey: T,
+			approval: E,
+			audit: D,
+			sdkKey: O,
+			segment: k,
+			evaluatedEntity: A,
+			evaluationFact: j,
+			snapshot: M,
+			device: N,
+			billing: P,
+			team: F
 		}
 	};
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@openteleme_92516152aeaed9865e4d3971447ef996/node_modules/@better-auth/core/dist/utils/error-codes.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/error-codes.mjs
 function defineErrorCodes(codes) {
 	return Object.fromEntries(Object.entries(codes).map(([key, value]) => [key, {
 		code: key,
@@ -491,7 +521,7 @@ function defineErrorCodes(codes) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-call@1.3.7_zod@4.4.3/node_modules/better-call/dist/error.mjs
+//#region ../../node_modules/.pnpm/better-call@1.4.0_zod@4.4.3/node_modules/better-call/dist/error.mjs
 function isErrorStackTraceLimitWritable() {
 	const desc = Object.getOwnPropertyDescriptor(Error, "stackTraceLimit");
 	if (desc === void 0) return Object.isExtensible(Error);
@@ -588,6 +618,10 @@ const statusCodes = {
 	NETWORK_AUTHENTICATION_REQUIRED: 511
 };
 var InternalAPIError = class extends Error {
+	status;
+	body;
+	headers;
+	statusCode;
 	constructor(status = "INTERNAL_SERVER_ERROR", body = void 0, headers = {}, statusCode = typeof status === "number" ? status : statusCodes[status]) {
 		super(body?.message, body?.cause ? { cause: body.cause } : void 0);
 		this.status = status;
@@ -604,7 +638,7 @@ var InternalAPIError = class extends Error {
 const APIError = makeErrorForHideStackFrame(InternalAPIError, Error);
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@openteleme_92516152aeaed9865e4d3971447ef996/node_modules/@better-auth/core/dist/error/index.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/error/index.mjs
 var BetterAuthError = class extends Error {
 	constructor(message, options) {
 		super(message, options);
@@ -615,7 +649,7 @@ var BetterAuthError = class extends Error {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/access/access.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/access/access.mjs
 function unknownResourceResponse(requestedResource) {
 	return {
 		success: false,
@@ -692,11 +726,13 @@ function createAccessControl(s) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
 const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 	OTP_NOT_ENABLED: "OTP not enabled",
+	OTP_NOT_CONFIGURED: "OTP is not available",
 	OTP_HAS_EXPIRED: "OTP has expired",
 	TOTP_NOT_ENABLED: "TOTP not enabled",
+	TOTP_NOT_CONFIGURED: "TOTP is not available",
 	TWO_FACTOR_NOT_ENABLED: "Two factor isn't enabled",
 	BACKUP_CODES_NOT_ENABLED: "Backup codes aren't enabled",
 	INVALID_BACKUP_CODE: "Invalid backup code",
@@ -707,15 +743,15 @@ const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/package.mjs
-var version = "1.6.26";
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/package.mjs
+var version = "1.7.1";
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/version.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/version.mjs
 const PACKAGE_VERSION$2 = version;
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@openteleme_92516152aeaed9865e4d3971447ef996/node_modules/@better-auth/core/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/url.mjs
 /**
 * Schemes that execute or embed code when navigated to or accepted as a
 * redirect target. These are never safe as an OAuth `redirect_uri` or as a
@@ -747,7 +783,7 @@ function isSafeUrlScheme(value) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/two-factor/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/two-factor/client.mjs
 const twoFactorClient = (options) => {
 	return {
 		id: "two-factor",
@@ -785,7 +821,7 @@ const twoFactorClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
 const defaultStatements$1 = {
 	user: [
 		"create",
@@ -836,7 +872,7 @@ const defaultRoles$1 = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
 const ADMIN_ERROR_CODES = defineErrorCodes({
 	FAILED_TO_CREATE_USER: "Failed to create user",
 	USER_ALREADY_EXISTS: "User already exists.",
@@ -864,7 +900,7 @@ const ADMIN_ERROR_CODES = defineErrorCodes({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@openteleme_92516152aeaed9865e4d3971447ef996/node_modules/@better-auth/core/dist/env/env-impl.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/env/env-impl.mjs
 const _envShim = Object.create(null);
 const _getEnv = (useShim) => globalThis.process?.env || globalThis.Deno?.env.toObject() || globalThis.__env__ || (useShim ? _envShim : globalThis);
 const env = new Proxy(_envShim, {
@@ -928,7 +964,7 @@ const ENV = Object.freeze({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/utils/url.mjs
 const SLASH_CHAR_CODE = "/".charCodeAt(0);
 function trimTrailingSlashes(value) {
 	let end = value.length;
@@ -1007,7 +1043,7 @@ function getOrigin(url) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
 const hasPermission = (input) => {
 	if (input.userId && input.options?.adminUserIds?.includes(input.userId)) return true;
 	if (!input.permissions) return false;
@@ -1536,7 +1572,7 @@ var betterFetch = async (url, options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/parser.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/parser.mjs
 const PROTO_POLLUTION_PATTERNS = {
 	proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
 	constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
@@ -1606,7 +1642,7 @@ function parseJSON(value, options = { strict: true }) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
 const defaultStatements = {
 	organization: ["update", "delete"],
 	member: [
@@ -1682,7 +1718,7 @@ const defaultRoles = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/organization/permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/permission.mjs
 const hasPermissionFn = (input, acRoles) => {
 	if (!input.permissions) return false;
 	const roles = input.role.split(",");
@@ -1695,7 +1731,7 @@ const hasPermissionFn = (input, acRoles) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
 const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: "You are not allowed to create a new organization",
 	YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: "You have reached the maximum number of organizations",
@@ -1768,12 +1804,22 @@ const t$1 = createAccessControl({
 		`update`,
 		`delete`
 	],
+	invitation: [`create`, `cancel`],
+	team: [
+		`create`,
+		`read`,
+		`update`,
+		`delete`
+	],
 	audit: [`read`],
+	approval_policy: [`update`],
+	approval_request: [`review`],
 	project: [
 		`create`,
 		`read`,
 		`update`,
-		`archive`
+		`archive`,
+		`assign_teams`
 	],
 	environment: [
 		`create`,
@@ -1806,6 +1852,7 @@ const t$1 = createAccessControl({
 const n$1 = {
 	viewer: t$1.newRole({
 		member: [`read`],
+		team: [`read`],
 		project: [`read`],
 		environment: [`read`],
 		flag: [`read`],
@@ -1814,6 +1861,7 @@ const n$1 = {
 	}),
 	editor: t$1.newRole({
 		member: [`read`],
+		team: [`read`],
 		project: [`read`, `update`],
 		environment: [`read`],
 		flag: [
@@ -1823,8 +1871,12 @@ const n$1 = {
 			`archive`
 		],
 		flag_state: [`update`],
-		apiKey: [`read`],
-		sdk_key: [`read`],
+		apiKey: [`create`, `read`],
+		sdk_key: [
+			`create`,
+			`read`,
+			`revoke`
+		],
 		evaluated_entity: [`read`],
 		billing: [`read`]
 	}),
@@ -1835,12 +1887,22 @@ const n$1 = {
 			`read`,
 			`update`
 		],
+		invitation: [`create`, `cancel`],
+		team: [
+			`create`,
+			`read`,
+			`update`,
+			`delete`
+		],
 		audit: [`read`],
+		approval_policy: [`update`],
+		approval_request: [`review`],
 		project: [
 			`create`,
 			`read`,
 			`update`,
-			`archive`
+			`archive`,
+			`assign_teams`
 		],
 		environment: [
 			`create`,
@@ -1878,12 +1940,22 @@ const n$1 = {
 			`update`,
 			`delete`
 		],
+		invitation: [`create`, `cancel`],
+		team: [
+			`create`,
+			`read`,
+			`update`,
+			`delete`
+		],
 		audit: [`read`],
+		approval_policy: [`update`],
+		approval_request: [`review`],
 		project: [
 			`create`,
 			`read`,
 			`update`,
-			`archive`
+			`archive`,
+			`assign_teams`
 		],
 		environment: [
 			`create`,
@@ -1916,7 +1988,7 @@ const n$1 = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/broadcast-channel.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/broadcast-channel.mjs
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now$1 = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -1960,23 +2032,30 @@ function getGlobalBroadcastChannel(name = "better-auth.message") {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/nanostores@1.4.2/node_modules/nanostores/clean-stores/index.js
+//#region ../../node_modules/.pnpm/nanostores@1.5.2/node_modules/nanostores/clean-stores/index.js
 const clean = Symbol("clean");
 
 //#endregion
-//#region ../../node_modules/.pnpm/nanostores@1.4.2/node_modules/nanostores/atom/index.js
+//#region ../../node_modules/.pnpm/nanostores@1.5.2/node_modules/nanostores/atom/index.js
 let listenerQueue = [];
 let lqIndex = 0;
 let batchSeen = null;
 const QUEUE_ITEMS_PER_LISTENER = 4;
 const nanostoresGlobal = globalThis.nanostoresGlobal ||= { epoch: 0 };
 let drainQueue = () => {
-	for (lqIndex = 0; lqIndex < listenerQueue.length; lqIndex += QUEUE_ITEMS_PER_LISTENER) listenerQueue[lqIndex](listenerQueue[lqIndex + 1].value, listenerQueue[lqIndex + 2], listenerQueue[lqIndex + 3]);
+	let thrown;
+	for (lqIndex = 0; lqIndex < listenerQueue.length; lqIndex += QUEUE_ITEMS_PER_LISTENER) try {
+		listenerQueue[lqIndex](listenerQueue[lqIndex + 1].value, listenerQueue[lqIndex + 2], listenerQueue[lqIndex + 3]);
+	} catch (e) {
+		thrown = e;
+	}
 	listenerQueue.length = 0;
+	if (thrown) throw thrown;
 };
 const atom = /* @__NO_SIDE_EFFECTS__ */ (initialValue) => {
 	let listeners = [];
 	let $atom = {
+		eq: Object.is,
 		get() {
 			if (!$atom.lc) $atom.listen(() => {})();
 			return $atom.value;
@@ -2008,7 +2087,7 @@ const atom = /* @__NO_SIDE_EFFECTS__ */ (initialValue) => {
 		off() {},
 		set(newValue) {
 			let oldValue = $atom.value;
-			if (oldValue !== newValue) {
+			if (!$atom.eq(oldValue, newValue)) {
 				$atom.value = newValue;
 				$atom.notify(oldValue);
 			}
@@ -2029,7 +2108,7 @@ const atom = /* @__NO_SIDE_EFFECTS__ */ (initialValue) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/nanostores@1.4.2/node_modules/nanostores/lifecycle/index.js
+//#region ../../node_modules/.pnpm/nanostores@1.5.2/node_modules/nanostores/lifecycle/index.js
 const SET = 2;
 const MOUNT = 5;
 const UNMOUNT = 6;
@@ -2133,7 +2212,7 @@ let onMount = ($store, initialize) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/equality.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/equality.mjs
 function isPlainObject(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -2174,7 +2253,7 @@ function withEquality(store, isEqual) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/focus-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/focus-manager.mjs
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2204,7 +2283,7 @@ function getGlobalFocusManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/online-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/online-manager.mjs
 const kOnlineManager = Symbol.for("better-auth:online-manager");
 var WindowOnlineManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2237,7 +2316,7 @@ function getGlobalOnlineManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/query.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/query.mjs
 const isServer$1 = () => typeof window === "undefined";
 function isAuthQueryStateEqual(a, b) {
 	return isJsonEqual(a.data, b.data) && a.error === b.error && a.isPending === b.isPending && a.isRefetching === b.isRefetching && a.refetch === b.refetch;
@@ -2250,7 +2329,7 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 		isRefetching: false,
 		refetch: (queryParams) => fn(queryParams)
 	});
-	withEquality(value, isAuthQueryStateEqual);
+	onMount(value, () => withEquality(value, isAuthQueryStateEqual));
 	const fn = async (queryParams) => {
 		return new Promise((resolve) => {
 			const opts = typeof options === "function" ? options({
@@ -2359,7 +2438,7 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/session-refresh.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/session-refresh.mjs
 const now = () => Math.floor(Date.now() / 1e3);
 /**
 * Rate limit: don't refetch on focus if a session request was made within this many seconds
@@ -2487,7 +2566,7 @@ function createSessionRefreshManager(opts) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/fetch-plugins.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/fetch-plugins.mjs
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -2503,8 +2582,20 @@ const redirectPlugin = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/session-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/session-atom.mjs
 const isServer = () => typeof window === "undefined";
+const SESSION_MOUNT_DEDUPE_INTERVAL = STORE_UNMOUNT_DELAY;
+function hydrateSessionAtom(sessionAtom, session) {
+	if (typeof window === "undefined") return;
+	const currentSession = sessionAtom.get();
+	if (currentSession.data !== null || session === null) return;
+	sessionAtom.set({
+		...currentSession,
+		data: session,
+		error: null,
+		isPending: false
+	});
+}
 /**
 * Normalize $fetch response: `throw: true` returns data directly,
 * otherwise `{ data, error }`.
@@ -2526,7 +2617,13 @@ function isSessionAtomEqual(a, b) {
 }
 function getSessionAtom($fetch, options) {
 	const $signal = /* @__PURE__ */ atom(false);
-	let abortController;
+	let flight;
+	let freshUntil = 0;
+	let sessionRevision = 0;
+	$signal.listen(() => {
+		sessionRevision++;
+		freshUntil = 0;
+	});
 	const refetch = (queryParams) => fetchSession(queryParams);
 	const session = /* @__PURE__ */ atom({
 		data: null,
@@ -2536,23 +2633,8 @@ function getSessionAtom($fetch, options) {
 		refetch
 	});
 	withEquality(session, isSessionAtomEqual);
-	const settleAbortedFetch = (controller) => {
-		if (abortController !== controller) return;
-		const current = session.get();
-		abortController = void 0;
-		if (!current.isPending && !current.isRefetching) return;
-		session.set({
-			...current,
-			isPending: false,
-			isRefetching: false,
-			refetch
-		});
-	};
-	const fetchSession = async (queryParams) => {
-		abortController?.abort();
-		const controller = new AbortController();
-		abortController = controller;
-		const current = session.get();
+	const executeSessionFetch = async (signal, queryParams) => {
+		const current = session.value;
 		session.set({
 			...current,
 			isPending: current.data === null,
@@ -2560,35 +2642,29 @@ function getSessionAtom($fetch, options) {
 			error: null,
 			refetch
 		});
+		if (signal.aborted) return "aborted";
 		try {
 			const res = await $fetch("/get-session", {
 				method: "GET",
 				query: queryParams?.query,
-				signal: controller.signal
+				signal
 			});
-			if (controller.signal.aborted) {
-				settleAbortedFetch(controller);
-				return;
-			}
+			if (signal.aborted) return "aborted";
 			let { data, error } = normalizeSessionResponse(res);
+			let outcome = "fresh";
 			if (data?.needsRefresh) try {
 				const refreshRes = await $fetch("/get-session", {
 					method: "POST",
-					signal: controller.signal
+					signal
 				});
-				if (controller.signal.aborted) {
-					settleAbortedFetch(controller);
-					return;
-				}
+				if (signal.aborted) return "aborted";
 				({data, error} = normalizeSessionResponse(refreshRes));
 			} catch {
-				if (controller.signal.aborted) {
-					settleAbortedFetch(controller);
-					return;
-				}
+				if (signal.aborted) return "aborted";
+				outcome = "stale";
 			}
 			if (error) {
-				const latest = session.get();
+				const latest = session.value;
 				const isUnauthorized = error?.status === 401;
 				session.set({
 					data: isUnauthorized ? null : latest.data,
@@ -2597,10 +2673,10 @@ function getSessionAtom($fetch, options) {
 					isRefetching: false,
 					refetch
 				});
-				return;
+				return "failed";
 			}
 			const sessionData = normalizeSessionData(data);
-			const current = session.get();
+			const current = session.value;
 			const stableData = current.data != null && sessionData != null && isJsonEqual(current.data, sessionData) ? current.data : sessionData;
 			session.set({
 				data: stableData,
@@ -2609,12 +2685,10 @@ function getSessionAtom($fetch, options) {
 				isRefetching: false,
 				refetch
 			});
+			return outcome;
 		} catch (fetchError) {
-			if (controller.signal.aborted) {
-				settleAbortedFetch(controller);
-				return;
-			}
-			const latest = session.get();
+			if (signal.aborted) return "aborted";
+			const latest = session.value;
 			session.set({
 				data: latest.data,
 				error: fetchError,
@@ -2622,17 +2696,49 @@ function getSessionAtom($fetch, options) {
 				isRefetching: false,
 				refetch
 			});
+			return "failed";
 		}
 	};
+	const getFreshUntil = () => {
+		const expiresAt = session.value.data?.session?.expiresAt;
+		const sessionExpiresAt = expiresAt instanceof Date ? expiresAt.getTime() : Number.POSITIVE_INFINITY;
+		return Math.min(Date.now() + SESSION_MOUNT_DEDUPE_INTERVAL, sessionExpiresAt);
+	};
+	const fetchSession = (queryParams) => {
+		freshUntil = 0;
+		flight?.cancel();
+		const controller = new AbortController();
+		const request = {
+			cancel: () => controller.abort(),
+			promise: Promise.resolve().then(() => {
+				if (controller.signal.aborted) return "aborted";
+				return executeSessionFetch(controller.signal, queryParams);
+			}),
+			revision: sessionRevision
+		};
+		flight = request;
+		const settleFlight = (outcome) => {
+			if (flight !== request) return;
+			flight = void 0;
+			if (outcome === "fresh" && request.revision === sessionRevision) freshUntil = getFreshUntil();
+		};
+		request.promise.then(settleFlight, () => settleFlight("failed"));
+		return request.promise.then(() => void 0);
+	};
+	const fetchSessionOnMount = () => {
+		if (flight?.revision === sessionRevision) return flight.promise.then(() => void 0);
+		if (Date.now() < freshUntil) return Promise.resolve();
+		return fetchSession();
+	};
 	let broadcastSessionUpdate = () => {};
 	onMount(session, () => {
 		let timeoutId;
 		if (!isServer()) timeoutId = setTimeout(() => {
-			fetchSession();
+			fetchSessionOnMount();
 		}, 0);
 		const refreshManager = createSessionRefreshManager({
 			fetchSession,
-			shouldPollSession: () => session.get().data != null,
+			shouldPollSession: () => session.value.data != null,
 			sessionSignal: $signal,
 			options
 		});
@@ -2640,9 +2746,6 @@ function getSessionAtom($fetch, options) {
 		broadcastSessionUpdate = refreshManager.broadcastSessionUpdate;
 		return () => {
 			if (timeoutId) clearTimeout(timeoutId);
-			const controller = abortController;
-			controller?.abort();
-			if (controller) settleAbortedFetch(controller);
 			refreshManager.cleanup();
 		};
 	});
@@ -2654,7 +2757,7 @@ function getSessionAtom($fetch, options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/config.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/config.mjs
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -2702,6 +2805,12 @@ const getClientConfig = (options, loadEnv) => {
 		]
 	});
 	const { $sessionSignal, session, broadcastSessionUpdate } = getSessionAtom($fetch, options);
+	let hasHydrated = false;
+	const hydrateSession = (sessionData) => {
+		if (hasHydrated || sessionData === null) return;
+		hasHydrated = true;
+		hydrateSessionAtom(session, sessionData);
+	};
 	const plugins = options?.plugins || [];
 	let pluginsActions = {};
 	const pluginsAtoms = {
@@ -2747,19 +2856,20 @@ const getClientConfig = (options, loadEnv) => {
 		pluginsAtoms,
 		pluginPathMethods,
 		atomListeners,
+		hydrateSession,
 		$fetch,
 		$store
 	};
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/utils/is-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/utils/is-atom.mjs
 function isAtom(value) {
 	return typeof value === "object" && value !== null && "get" in value && typeof value.get === "function" && "lc" in value && typeof value.lc === "number";
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@openteleme_92516152aeaed9865e4d3971447ef996/node_modules/@better-auth/core/dist/utils/string.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/string.mjs
 function capitalizeFirstLetter(str) {
 	return str.charAt(0).toUpperCase() + str.slice(1);
 }
@@ -2773,7 +2883,7 @@ function toKebabCase(input) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/proxy.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/proxy.mjs
 function getMethod(path, knownPathMethods, args) {
 	const method = knownPathMethods[path];
 	const { fetchOptions, query: _query, ...body } = args || {};
@@ -2849,21 +2959,22 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/client/vanilla.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/vanilla.mjs
 function createAuthClient(options) {
-	const { pluginPathMethods, pluginsActions, pluginsAtoms, $fetch, atomListeners, $store } = getClientConfig(options);
+	const { pluginPathMethods, pluginsActions, pluginsAtoms, hydrateSession, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
 	for (const [key, value] of Object.entries(pluginsAtoms)) resolvedHooks[`use${capitalizeFirstLetter(key)}`] = value;
 	return createDynamicPathProxy({
 		...pluginsActions,
 		...resolvedHooks,
+		hydrateSession,
 		$fetch,
 		$store
 	}, $fetch, pluginPathMethods, pluginsAtoms, atomListeners);
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
 const inferAdditionalFields = (schema) => {
 	return {
 		id: "additional-fields-client",
@@ -2873,7 +2984,7 @@ const inferAdditionalFields = (schema) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/admin/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/client.mjs
 const adminClient = (options) => {
 	const roles = {
 		admin: adminAc$1,
@@ -2908,7 +3019,7 @@ const adminClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
 const deviceAuthorizationClient = () => {
 	return {
 		id: "device-authorization",
@@ -2925,7 +3036,7 @@ const deviceAuthorizationClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.6.26_@opentelemetry+api@1.9.1_drizzle-orm@1.0.0-rc.4_@opentelemetry+api@1_20fb48331ea10f84b14a69b42b690fe2/node_modules/better-auth/dist/plugins/organization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/client.mjs
 /**
 * Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
 */
@@ -2968,18 +3079,15 @@ const organizationClient = (options) => {
 		}),
 		getAtoms: ($fetch) => {
 			const listOrganizations = useAuthQuery($listOrg, "/organization/list", $fetch, { method: "GET" });
-			const activeOrganization = useAuthQuery([$activeOrgSignal], "/organization/get-full-organization", $fetch, () => ({ method: "GET" }));
-			const activeMember = useAuthQuery([$activeOrgSignal, $activeMemberSignal], "/organization/get-active-member", $fetch, { method: "GET" });
-			const activeMemberRole = useAuthQuery([$activeOrgSignal, $activeMemberRoleSignal], "/organization/get-active-member-role", $fetch, { method: "GET" });
 			return {
 				$listOrg,
 				$activeOrgSignal,
 				$activeMemberSignal,
 				$activeMemberRoleSignal,
-				activeOrganization,
+				activeOrganization: useAuthQuery([$activeOrgSignal], "/organization/get-full-organization", $fetch, () => ({ method: "GET" })),
 				listOrganizations,
-				activeMember,
-				activeMemberRole
+				activeMember: useAuthQuery([$activeOrgSignal, $activeMemberSignal], "/organization/get-active-member", $fetch, { method: "GET" }),
+				activeMemberRole: useAuthQuery([$activeOrgSignal, $activeMemberRoleSignal], "/organization/get-active-member-role", $fetch, { method: "GET" })
 			};
 		},
 		pathMethods: {
@@ -3023,7 +3131,7 @@ const organizationClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.6.26_@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-f_26c063546df2762d5214ad7424a4d563/node_modules/@better-auth/api-key/dist/version-vgVyvied.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_2568c45b7ee73e55b396faf3d8bd3e1a/node_modules/@better-auth/api-key/dist/version-D365O1mH.mjs
 const API_KEY_ERROR_CODES = defineErrorCodes({
 	INVALID_METADATA_TYPE: "metadata must be an object or undefined",
 	REFILL_AMOUNT_AND_INTERVAL_REQUIRED: "refillAmount is required when refillInterval is provided",
@@ -3057,10 +3165,10 @@ const API_KEY_ERROR_CODES = defineErrorCodes({
 	NO_DEFAULT_API_KEY_CONFIGURATION_FOUND: "No default api-key configuration found.",
 	ORGANIZATION_PLUGIN_REQUIRED: "Organization plugin is required for organization-owned API keys. Please install and configure the organization plugin."
 });
-const PACKAGE_VERSION$1 = "1.6.26";
+const PACKAGE_VERSION$1 = "1.7.1";
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.6.26_@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-f_26c063546df2762d5214ad7424a4d563/node_modules/@better-auth/api-key/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_2568c45b7ee73e55b396faf3d8bd3e1a/node_modules/@better-auth/api-key/dist/client.mjs
 const apiKeyClient = () => {
 	return {
 		id: "api-key",
@@ -3076,7 +3184,7 @@ const apiKeyClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.6.26_@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-f_b9d6999fc8dc623532f797abb6d4608d/node_modules/@better-auth/passkey/dist/version-BE4wdr64.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_3e5015565ab35cd7b806fd7cb64ff2ec/node_modules/@better-auth/passkey/dist/version-CNE1I0BY.mjs
 const PASSKEY_ERROR_CODES = defineErrorCodes({
 	CHALLENGE_NOT_FOUND: "Challenge not found",
 	YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: "You are not allowed to register this passkey",
@@ -3084,6 +3192,7 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 	PASSKEY_NOT_FOUND: "Passkey not found",
 	AUTHENTICATION_FAILED: "Authentication failed",
 	UNABLE_TO_CREATE_SESSION: "Unable to create session",
+	USER_NOT_FOUND: "User not found",
 	FAILED_TO_UPDATE_PASSKEY: "Failed to update passkey",
 	PREVIOUSLY_REGISTERED: "Previously registered",
 	REGISTRATION_CANCELLED: "Registration cancelled",
@@ -3093,7 +3202,7 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 	RESOLVE_USER_REQUIRED: "Passkey registration requires either an authenticated session or a resolveUser callback when requireSession is false",
 	RESOLVED_USER_INVALID: "Resolved user is invalid"
 });
-const PACKAGE_VERSION = "1.6.26";
+const PACKAGE_VERSION = "1.7.1";
 
 //#endregion
 //#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/bufferToBase64URLString.js
@@ -3565,7 +3674,7 @@ async function startAuthentication(options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.6.26_@better-auth+core@1.6.26_@better-auth+utils@0.4.2_@better-f_b9d6999fc8dc623532f797abb6d4608d/node_modules/@better-auth/passkey/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_3e5015565ab35cd7b806fd7cb64ff2ec/node_modules/@better-auth/passkey/dist/client.mjs
 const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 	const signInPasskey = async (opts, options) => {
 		const response = await $fetch("/passkey/generate-authenticate-options", {
@@ -3658,13 +3767,15 @@ const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 				...fetchOpts,
 				body: {
 					response: responseBody,
-					name: opts?.name
+					name: opts?.name,
+					...opts?.createSession && { createSession: true }
 				},
 				method: "POST",
 				throw: false
 			});
 			if (!verified.data) return verified;
 			$listPasskeys.set(Math.random());
+			if (verified.data.session) $store.notify("$sessionSignal");
 			if (opts?.returnWebAuthnResponse) return {
 				...verified,
 				webauthn: {
@@ -3775,7 +3886,8 @@ function u$1(n) {
 		passkeyClient(),
 		organizationClient({
 			ac: t$1,
-			roles: n$1
+			roles: n$1,
+			teams: { enabled: !0 }
 		}),
 		inferAdditionalFields()
 	];
@@ -3874,7 +3986,7 @@ async function createCliApiClient(runtime) {
 		sessionToken,
 		orgSlug: runtime.org
 	});
-	const client = x$1({
+	const client = C$1({
 		baseUrl: runtime.apiUrl,
 		client: "cli",
 		getHeaders: () => {
@@ -4366,7 +4478,8 @@ const K = z.object({
 	changes: z.array(U),
 	remoteOnly: z.array(L).default([]),
 	forced: z.boolean().default(!1),
-	adopted: z.boolean().default(!1)
+	adopted: z.boolean().default(!1),
+	approvalRequests: z.array(z.string()).default([])
 });
 
 //#endregion
@@ -4856,13 +4969,16 @@ function registerPushCommand(program) {
 		}).catch(mapApiError);
 		const appliedPlan = buildSyncPlan(applied.changes);
 		const types = await runTypegen(runtime);
+		const approvalRequests = applied.approvalRequests ?? [];
 		printResult(runtime, {
 			plan: appliedPlan,
 			remoteOnly,
 			forced: applied.forced === true,
+			approvalRequests,
 			types
 		}, [
-			`Applied ${applied.changes.length} change(s).`,
+			applied.changes.length > 0 ? `Applied ${applied.changes.length} change(s).` : null,
+			approvalRequests.length > 0 ? `${approvalRequests.length} environment change(s) queued for approval.` : null,
 			applied.forced ? "Forced through version conflicts (audited)." : null,
 			`Wrote types for ${types.flagCount} flag(s) to ${types.written}`
 		].filter(Boolean).join("\n"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipdit/cli",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "shipd's command-line interface",
   "repository": {
     "type": "git",
@@ -19,17 +19,17 @@
   "dependencies": {
     "commander": "^14.0.0",
     "jiti": "^2.5.1",
-    "zod": "^4",
-    "shipdit": "0.2.1"
+    "shipdit": "0.2.2",
+    "zod": "^4"
   },
   "devDependencies": {
+    "@shipd/api-client": "0.0.1",
+    "@shipd/auth": "0.0.1",
+    "@shipd/contracts": "0.0.1",
     "@types/node": "^24.13.3",
     "tsdown": "0.22.14",
     "typescript": "^7.0.2",
-    "vitest": "^4",
-    "@shipd/api-client": "0.0.1",
-    "@shipd/auth": "0.0.1",
-    "@shipd/contracts": "0.0.1"
+    "vitest": "^4"
   },
   "engines": {
     "node": ">=20"