@shipdit/cli 0.1.2 → 0.2.1

package/dist/index.mjs

@@ -367,18 +367,21 @@ const o$1 = (...t) => hc(...t);
 const s$1 = (...t) => hc(...t);
 const c$1 = (...t) => hc(...t);
 const l$1 = (...t) => hc(...t);
-const u$2 = (...t) => hc(...t);
+const u$1 = (...t) => hc(...t);
 const d$2 = (...t) => hc(...t);
-const f$1 = (...t) => hc(...t);
+const f$2 = (...t) => hc(...t);
 const p$1 = (...t) => hc(...t);
 const m$1 = (...t) => hc(...t);
 const h$1 = (...t) => hc(...t);
 const g$1 = (...t) => hc(...t);
 const _$1 = (...t) => hc(...t);
-function v$1(e) {
+const v$1 = (...t) => hc(...t);
+const y$1 = (...t) => hc(...t);
+const b$1 = (...t) => hc(...t);
+function x$1(e) {
 	return `${e.replace(/\/+$/, ``)}/api/v1/rpc`;
 }
-function y$1(e) {
+function S$1(e) {
 	return {
 		...e.fetch ? { fetch: e.fetch } : {},
 		init: { credentials: e.client === `dashboard` ? `include` : `same-origin` },
@@ -388,100 +391,135 @@ function y$1(e) {
 		}
 	};
 }
-async function b$1(e, t) {
+async function C$1(e, t) {
 	return i$1(await e({ json: t }));
 }
-function x$1(e) {
-	let t = v$1(e.baseUrl), n = y$1(e), r = a$1(t, n), i = o$1(t, n), x = s$1(t, n), S = c$1(t, n), C = l$1(t, n), w = u$2(t, n), T = d$2(t, n), E = m$1(t, n), D = f$1(t, n), O = p$1(t, n), k = h$1(t, n), A = g$1(t, n), j = _$1(t, n);
+function w$1(e) {
+	let t = x$1(e.baseUrl), n = S$1(e), r = a$1(t, n), i = o$1(t, n), w = s$1(t, n), T = c$1(t, n), E = l$1(t, n), D = u$1(t, n), O = d$2(t, n), k = f$2(t, n), A = h$1(t, n), j = p$1(t, n), M = m$1(t, n), N = g$1(t, n), P = _$1(t, n), F = v$1(t, n), I = y$1(t, n), L = b$1(t, n);
 	return {
 		me: {
-			get: (e = {}) => b$1(r.me.$post, e),
-			feedback: (e) => b$1(r.me.feedback.$post, e)
+			get: (e = {}) => C$1(r.me.$post, e),
+			feedback: (e) => C$1(r.me.feedback.$post, e)
 		},
 		project: {
-			list: (e = {}) => b$1(i.project.list.$post, e),
-			create: (e) => b$1(i.project.create.$post, e),
-			update: (e) => b$1(i.project.update.$post, e),
-			archive: (e) => b$1(i.project.archive.$post, e)
+			list: (e = {}) => C$1(i.project.list.$post, e),
+			create: (e) => C$1(i.project.create.$post, e),
+			update: (e) => C$1(i.project.update.$post, e),
+			archive: (e) => C$1(i.project.archive.$post, e),
+			listTeams: (e) => C$1(i.project.listTeams.$post, e),
+			setTeams: (e) => C$1(i.project.setTeams.$post, e)
 		},
+		team: { listMembers: (e) => C$1(I.team.listMembers.$post, e) },
 		environment: {
-			list: (e) => b$1(x.environment.list.$post, e),
-			create: (e) => b$1(x.environment.create.$post, e),
-			update: (e) => b$1(x.environment.update.$post, e),
-			archive: (e) => b$1(x.environment.archive.$post, e)
+			list: (e) => C$1(w.environment.list.$post, e),
+			create: (e) => C$1(w.environment.create.$post, e),
+			update: (e) => C$1(w.environment.update.$post, e),
+			archive: (e) => C$1(w.environment.archive.$post, e)
 		},
 		flag: {
-			list: (e) => b$1(S.flag.list.$post, e),
-			get: (e) => b$1(S.flag.get.$post, e),
-			create: (e) => b$1(S.flag.create.$post, e),
-			update: (e) => b$1(S.flag.update.$post, e),
-			archive: (e) => b$1(S.flag.archive.$post, e),
-			updateEnvironment: (e) => b$1(S.flag.updateEnvironment.$post, e),
-			toggleEnvironment: (e) => b$1(S.flag.toggleEnvironment.$post, e),
-			listEnvironmentStates: (e) => b$1(S.flag.listEnvironmentStates.$post, e),
-			pull: (e) => b$1(S.flag.pull.$post, e),
-			diff: (e) => b$1(S.flag.diff.$post, e),
-			push: (e) => b$1(S.flag.push.$post, e)
+			list: (e) => C$1(T.flag.list.$post, e),
+			get: (e) => C$1(T.flag.get.$post, e),
+			create: (e) => C$1(T.flag.create.$post, e),
+			update: (e) => C$1(T.flag.update.$post, e),
+			archive: (e) => C$1(T.flag.archive.$post, e),
+			updateEnvironment: (e) => C$1(T.flag.updateEnvironment.$post, e),
+			toggleEnvironment: (e) => C$1(T.flag.toggleEnvironment.$post, e),
+			listEnvironmentStates: (e) => C$1(T.flag.listEnvironmentStates.$post, e),
+			pull: (e) => C$1(T.flag.pull.$post, e),
+			diff: (e) => C$1(T.flag.diff.$post, e),
+			push: (e) => C$1(T.flag.push.$post, e)
 		},
 		apiKey: {
-			list: (e = {}) => b$1(C.apiKey.list.$post, e),
-			create: (e) => b$1(C.apiKey.create.$post, e),
-			revoke: (e) => b$1(C.apiKey.revoke.$post, e)
+			list: (e = {}) => C$1(E.apiKey.list.$post, e),
+			create: (e) => C$1(E.apiKey.create.$post, e),
+			revoke: (e) => C$1(E.apiKey.revoke.$post, e)
 		},
 		sdkKey: {
-			list: (e = {}) => b$1(T.sdkKey.list.$post, e),
-			create: (e) => b$1(T.sdkKey.create.$post, e),
-			revoke: (e) => b$1(T.sdkKey.revoke.$post, e)
+			list: (e = {}) => C$1(k.sdkKey.list.$post, e),
+			create: (e) => C$1(k.sdkKey.create.$post, e),
+			revoke: (e) => C$1(k.sdkKey.revoke.$post, e)
 		},
 		segment: {
-			list: (e) => b$1(E.segment.list.$post, e),
-			get: (e) => b$1(E.segment.get.$post, e),
-			create: (e) => b$1(E.segment.create.$post, e),
-			update: (e) => b$1(E.segment.update.$post, e),
-			archive: (e) => b$1(E.segment.archive.$post, e),
-			listEnvironmentStates: (e) => b$1(E.segment.listEnvironmentStates.$post, e),
-			updateEnvironment: (e) => b$1(E.segment.updateEnvironment.$post, e)
+			list: (e) => C$1(A.segment.list.$post, e),
+			get: (e) => C$1(A.segment.get.$post, e),
+			create: (e) => C$1(A.segment.create.$post, e),
+			update: (e) => C$1(A.segment.update.$post, e),
+			archive: (e) => C$1(A.segment.archive.$post, e),
+			listEnvironmentStates: (e) => C$1(A.segment.listEnvironmentStates.$post, e),
+			updateEnvironment: (e) => C$1(A.segment.updateEnvironment.$post, e)
 		},
 		evaluatedEntity: {
-			list: (e) => b$1(D.evaluatedEntity.list.$post, e),
-			get: (e) => b$1(D.evaluatedEntity.get.$post, e),
-			delete: (e) => b$1(D.evaluatedEntity.delete.$post, e)
+			list: (e) => C$1(j.evaluatedEntity.list.$post, e),
+			get: (e) => C$1(j.evaluatedEntity.get.$post, e),
+			delete: (e) => C$1(j.evaluatedEntity.delete.$post, e)
 		},
 		evaluationFact: {
-			list: (e) => b$1(O.evaluationFact.list.$post, e),
-			byRule: (e) => b$1(O.evaluationFact.byRule.$post, e),
-			orgSummary: (e = {}) => b$1(O.evaluationFact.orgSummary.$post, e),
-			projectSummary: (e) => b$1(O.evaluationFact.projectSummary.$post, e),
-			simulate: (e) => b$1(O.evaluationFact.simulate.$post, e)
+			list: (e) => C$1(M.evaluationFact.list.$post, e),
+			byRule: (e) => C$1(M.evaluationFact.byRule.$post, e),
+			orgSummary: (e = {}) => C$1(M.evaluationFact.orgSummary.$post, e),
+			projectSummary: (e) => C$1(M.evaluationFact.projectSummary.$post, e),
+			simulate: (e) => C$1(M.evaluationFact.simulate.$post, e)
 		},
-		snapshot: { publish: (e) => b$1(k.snapshot.publish.$post, e) },
-		device: { authorize: (e) => b$1(A.device.authorize.$post, e) },
+		snapshot: { publish: (e) => C$1(N.snapshot.publish.$post, e) },
+		device: { authorize: (e) => C$1(P.device.authorize.$post, e) },
 		billing: {
-			get: (e = {}) => b$1(j.billing.get.$post, e),
-			attach: (e) => b$1(j.billing.attach.$post, e),
-			openPortal: (e) => b$1(j.billing.openPortal.$post, e)
+			get: (e = {}) => C$1(F.billing.get.$post, e),
+			attach: (e) => C$1(F.billing.attach.$post, e),
+			openPortal: (e) => C$1(F.billing.openPortal.$post, e)
+		},
+		approval: {
+			listPolicies: (e = {}) => C$1(D.approval.listPolicies.$post, e),
+			createPolicy: (e) => C$1(D.approval.createPolicy.$post, e),
+			updatePolicy: (e) => C$1(D.approval.updatePolicy.$post, e),
+			deletePolicy: (e) => C$1(D.approval.deletePolicy.$post, e),
+			listRequests: (e = {}) => C$1(D.approval.listRequests.$post, e),
+			get: (e) => C$1(D.approval.get.$post, e),
+			approve: (e) => C$1(D.approval.approve.$post, e),
+			reject: (e) => C$1(D.approval.reject.$post, e),
+			cancel: (e) => C$1(D.approval.cancel.$post, e)
+		},
+		audit: {
+			list: (e = {}) => C$1(O.audit.list.$post, e),
+			get: (e) => C$1(O.audit.get.$post, e),
+			actions: (e = {}) => C$1(O.audit.actions.$post, e),
+			export: (e) => C$1(O.audit.export.$post, e),
+			getSettings: (e = {}) => C$1(O.audit.getSettings.$post, e),
+			updateSettings: (e) => C$1(O.audit.updateSettings.$post, e),
+			listDestinations: (e = {}) => C$1(O.audit.listDestinations.$post, e),
+			createDestination: (e) => C$1(O.audit.createDestination.$post, e),
+			updateDestination: (e) => C$1(O.audit.updateDestination.$post, e),
+			deleteDestination: (e) => C$1(O.audit.deleteDestination.$post, e),
+			testDestination: (e) => C$1(O.audit.testDestination.$post, e)
+		},
+		sso: {
+			getSettings: (e = {}) => C$1(L.sso.getSettings.$post, e),
+			listProviders: (e = {}) => C$1(L.sso.listProviders.$post, e),
+			updateAllowedDomains: (e) => C$1(L.sso.updateAllowedDomains.$post, e),
+			setEnforcement: (e) => C$1(L.sso.setEnforcement.$post, e)
 		},
-		audit: { list: (e = {}) => b$1(w.audit.list.$post, e) },
 		raw: {
 			me: r,
 			project: i,
-			environment: x,
-			flag: S,
-			apiKey: C,
-			audit: w,
-			sdkKey: T,
-			segment: E,
-			evaluatedEntity: D,
-			evaluationFact: O,
-			snapshot: k,
-			device: A,
-			billing: j
+			environment: w,
+			flag: T,
+			apiKey: E,
+			approval: D,
+			audit: O,
+			sdkKey: k,
+			segment: A,
+			evaluatedEntity: j,
+			evaluationFact: M,
+			snapshot: N,
+			device: P,
+			billing: F,
+			team: I,
+			sso: L
 		}
 	};
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_1aaca9e036ea8c887647c0ceb365d61f/node_modules/@better-auth/core/dist/utils/error-codes.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/error-codes.mjs
 function defineErrorCodes(codes) {
 	return Object.fromEntries(Object.entries(codes).map(([key, value]) => [key, {
 		code: key,
@@ -608,7 +646,7 @@ var InternalAPIError = class extends Error {
 const APIError = makeErrorForHideStackFrame(InternalAPIError, Error);
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_1aaca9e036ea8c887647c0ceb365d61f/node_modules/@better-auth/core/dist/error/index.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/error/index.mjs
 var BetterAuthError = class extends Error {
 	constructor(message, options) {
 		super(message, options);
@@ -619,7 +657,7 @@ var BetterAuthError = class extends Error {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/access/access.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/access/access.mjs
 function unknownResourceResponse(requestedResource) {
 	return {
 		success: false,
@@ -696,7 +734,7 @@ function createAccessControl(s) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/two-factor/error-code.mjs
 const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 	OTP_NOT_ENABLED: "OTP not enabled",
 	OTP_NOT_CONFIGURED: "OTP is not available",
@@ -713,15 +751,15 @@ const TWO_FACTOR_ERROR_CODES = defineErrorCodes({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/package.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/package.mjs
 var version = "1.7.1";
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/version.mjs
-const PACKAGE_VERSION$2 = version;
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/version.mjs
+const PACKAGE_VERSION$3 = version;
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_1aaca9e036ea8c887647c0ceb365d61f/node_modules/@better-auth/core/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/url.mjs
 /**
 * Schemes that execute or embed code when navigated to or accepted as a
 * redirect target. These are never safe as an OAuth `redirect_uri` or as a
@@ -753,11 +791,11 @@ function isSafeUrlScheme(value) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/two-factor/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/two-factor/client.mjs
 const twoFactorClient = (options) => {
 	return {
 		id: "two-factor",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		atomListeners: [{
 			matcher: (path) => path.startsWith("/two-factor/"),
@@ -791,7 +829,7 @@ const twoFactorClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/access/statement.mjs
 const defaultStatements$1 = {
 	user: [
 		"create",
@@ -842,7 +880,7 @@ const defaultRoles$1 = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/error-codes.mjs
 const ADMIN_ERROR_CODES = defineErrorCodes({
 	FAILED_TO_CREATE_USER: "Failed to create user",
 	USER_ALREADY_EXISTS: "User already exists.",
@@ -870,7 +908,7 @@ const ADMIN_ERROR_CODES = defineErrorCodes({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_1aaca9e036ea8c887647c0ceb365d61f/node_modules/@better-auth/core/dist/env/env-impl.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/env/env-impl.mjs
 const _envShim = Object.create(null);
 const _getEnv = (useShim) => globalThis.process?.env || globalThis.Deno?.env.toObject() || globalThis.__env__ || (useShim ? _envShim : globalThis);
 const env = new Proxy(_envShim, {
@@ -934,7 +972,7 @@ const ENV = Object.freeze({
 });
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/utils/url.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/utils/url.mjs
 const SLASH_CHAR_CODE = "/".charCodeAt(0);
 function trimTrailingSlashes(value) {
 	let end = value.length;
@@ -1013,7 +1051,7 @@ function getOrigin(url) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/has-permission.mjs
 const hasPermission = (input) => {
 	if (input.userId && input.options?.adminUserIds?.includes(input.userId)) return true;
 	if (!input.permissions) return false;
@@ -1542,7 +1580,7 @@ var betterFetch = async (url, options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/parser.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/parser.mjs
 const PROTO_POLLUTION_PATTERNS = {
 	proto: /"(?:_|\\u0{2}5[Ff]){2}(?:p|\\u0{2}70)(?:r|\\u0{2}72)(?:o|\\u0{2}6[Ff])(?:t|\\u0{2}74)(?:o|\\u0{2}6[Ff])(?:_|\\u0{2}5[Ff]){2}"\s*:/,
 	constructor: /"(?:c|\\u0063)(?:o|\\u006[Ff])(?:n|\\u006[Ee])(?:s|\\u0073)(?:t|\\u0074)(?:r|\\u0072)(?:u|\\u0075)(?:c|\\u0063)(?:t|\\u0074)(?:o|\\u006[Ff])(?:r|\\u0072)"\s*:/,
@@ -1612,7 +1650,7 @@ function parseJSON(value, options = { strict: true }) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/access/statement.mjs
 const defaultStatements = {
 	organization: ["update", "delete"],
 	member: [
@@ -1688,7 +1726,7 @@ const defaultRoles = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/organization/permission.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/permission.mjs
 const hasPermissionFn = (input, acRoles) => {
 	if (!input.permissions) return false;
 	const roles = input.role.split(",");
@@ -1701,7 +1739,7 @@ const hasPermissionFn = (input, acRoles) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/error-codes.mjs
 const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	YOU_ARE_NOT_ALLOWED_TO_CREATE_A_NEW_ORGANIZATION: "You are not allowed to create a new organization",
 	YOU_HAVE_REACHED_THE_MAXIMUM_NUMBER_OF_ORGANIZATIONS: "You have reached the maximum number of organizations",
@@ -1774,12 +1812,22 @@ const t$1 = createAccessControl({
 		`update`,
 		`delete`
 	],
+	invitation: [`create`, `cancel`],
+	team: [
+		`create`,
+		`read`,
+		`update`,
+		`delete`
+	],
 	audit: [`read`],
+	approval_policy: [`update`],
+	approval_request: [`review`],
 	project: [
 		`create`,
 		`read`,
 		`update`,
-		`archive`
+		`archive`,
+		`assign_teams`
 	],
 	environment: [
 		`create`,
@@ -1807,11 +1855,17 @@ const t$1 = createAccessControl({
 		`revoke`
 	],
 	evaluated_entity: [`read`, `delete`],
-	billing: [`read`, `manage`]
+	billing: [`read`, `manage`],
+	sso: [
+		`read`,
+		`manage`,
+		`enforce`
+	]
 });
 const n$1 = {
 	viewer: t$1.newRole({
 		member: [`read`],
+		team: [`read`],
 		project: [`read`],
 		environment: [`read`],
 		flag: [`read`],
@@ -1820,6 +1874,7 @@ const n$1 = {
 	}),
 	editor: t$1.newRole({
 		member: [`read`],
+		team: [`read`],
 		project: [`read`, `update`],
 		environment: [`read`],
 		flag: [
@@ -1829,8 +1884,12 @@ const n$1 = {
 			`archive`
 		],
 		flag_state: [`update`],
-		apiKey: [`read`],
-		sdk_key: [`read`],
+		apiKey: [`create`, `read`],
+		sdk_key: [
+			`create`,
+			`read`,
+			`revoke`
+		],
 		evaluated_entity: [`read`],
 		billing: [`read`]
 	}),
@@ -1841,12 +1900,22 @@ const n$1 = {
 			`read`,
 			`update`
 		],
+		invitation: [`create`, `cancel`],
+		team: [
+			`create`,
+			`read`,
+			`update`,
+			`delete`
+		],
 		audit: [`read`],
+		approval_policy: [`update`],
+		approval_request: [`review`],
 		project: [
 			`create`,
 			`read`,
 			`update`,
-			`archive`
+			`archive`,
+			`assign_teams`
 		],
 		environment: [
 			`create`,
@@ -1874,7 +1943,8 @@ const n$1 = {
 			`revoke`
 		],
 		evaluated_entity: [`read`, `delete`],
-		billing: [`read`, `manage`]
+		billing: [`read`, `manage`],
+		sso: [`read`, `manage`]
 	}),
 	owner: t$1.newRole({
 		organization: [`update`, `delete`],
@@ -1884,12 +1954,22 @@ const n$1 = {
 			`update`,
 			`delete`
 		],
+		invitation: [`create`, `cancel`],
+		team: [
+			`create`,
+			`read`,
+			`update`,
+			`delete`
+		],
 		audit: [`read`],
+		approval_policy: [`update`],
+		approval_request: [`review`],
 		project: [
 			`create`,
 			`read`,
 			`update`,
-			`archive`
+			`archive`,
+			`assign_teams`
 		],
 		environment: [
 			`create`,
@@ -1917,12 +1997,17 @@ const n$1 = {
 			`revoke`
 		],
 		evaluated_entity: [`read`, `delete`],
-		billing: [`read`, `manage`]
+		billing: [`read`, `manage`],
+		sso: [
+			`read`,
+			`manage`,
+			`enforce`
+		]
 	})
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/broadcast-channel.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/broadcast-channel.mjs
 const kBroadcastChannel = Symbol.for("better-auth:broadcast-channel");
 const now$1 = () => Math.floor(Date.now() / 1e3);
 var WindowBroadcastChannel = class {
@@ -2146,7 +2231,7 @@ let onMount = ($store, initialize) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/equality.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/equality.mjs
 function isPlainObject(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const prototype = Object.getPrototypeOf(value);
@@ -2187,7 +2272,7 @@ function withEquality(store, isEqual) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/focus-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/focus-manager.mjs
 const kFocusManager = Symbol.for("better-auth:focus-manager");
 var WindowFocusManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2217,7 +2302,7 @@ function getGlobalFocusManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/online-manager.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/online-manager.mjs
 const kOnlineManager = Symbol.for("better-auth:online-manager");
 var WindowOnlineManager = class {
 	listeners = /* @__PURE__ */ new Set();
@@ -2250,7 +2335,7 @@ function getGlobalOnlineManager() {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/query.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/query.mjs
 const isServer$1 = () => typeof window === "undefined";
 function isAuthQueryStateEqual(a, b) {
 	return isJsonEqual(a.data, b.data) && a.error === b.error && a.isPending === b.isPending && a.isRefetching === b.isRefetching && a.refetch === b.refetch;
@@ -2372,7 +2457,7 @@ const useAuthQuery = (initializedAtom, path, $fetch, options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/session-refresh.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/session-refresh.mjs
 const now = () => Math.floor(Date.now() / 1e3);
 /**
 * Rate limit: don't refetch on focus if a session request was made within this many seconds
@@ -2500,7 +2585,7 @@ function createSessionRefreshManager(opts) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/fetch-plugins.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/fetch-plugins.mjs
 const redirectPlugin = {
 	id: "redirect",
 	name: "Redirect",
@@ -2516,7 +2601,7 @@ const redirectPlugin = {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/session-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/session-atom.mjs
 const isServer = () => typeof window === "undefined";
 const SESSION_MOUNT_DEDUPE_INTERVAL = STORE_UNMOUNT_DELAY;
 function hydrateSessionAtom(sessionAtom, session) {
@@ -2691,7 +2776,7 @@ function getSessionAtom($fetch, options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/config.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/config.mjs
 const resolvePublicAuthUrl = (basePath) => {
 	if (typeof process === "undefined") return void 0;
 	const path = basePath ?? "/api/auth";
@@ -2797,13 +2882,13 @@ const getClientConfig = (options, loadEnv) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/utils/is-atom.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/utils/is-atom.mjs
 function isAtom(value) {
 	return typeof value === "object" && value !== null && "get" in value && typeof value.get === "function" && "lc" in value && typeof value.lc === "number";
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_1aaca9e036ea8c887647c0ceb365d61f/node_modules/@better-auth/core/dist/utils/string.mjs
+//#region ../../node_modules/.pnpm/@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+fetch@1.3.1_@opentelemet_2e71ba5b354a0fbab5c1bdc9f6326b28/node_modules/@better-auth/core/dist/utils/string.mjs
 function capitalizeFirstLetter(str) {
 	return str.charAt(0).toUpperCase() + str.slice(1);
 }
@@ -2817,7 +2902,7 @@ function toKebabCase(input) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/proxy.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/proxy.mjs
 function getMethod(path, knownPathMethods, args) {
 	const method = knownPathMethods[path];
 	const { fetchOptions, query: _query, ...body } = args || {};
@@ -2893,7 +2978,7 @@ function createDynamicPathProxy(routes, client, knownPathMethods, atoms, atomLis
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/client/vanilla.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/client/vanilla.mjs
 function createAuthClient(options) {
 	const { pluginPathMethods, pluginsActions, pluginsAtoms, hydrateSession, $fetch, atomListeners, $store } = getClientConfig(options);
 	const resolvedHooks = {};
@@ -2908,17 +2993,17 @@ function createAuthClient(options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/additional-fields/client.mjs
 const inferAdditionalFields = (schema) => {
 	return {
 		id: "additional-fields-client",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {}
 	};
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/admin/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/admin/client.mjs
 const adminClient = (options) => {
 	const roles = {
 		admin: adminAc$1,
@@ -2927,7 +3012,7 @@ const adminClient = (options) => {
 	};
 	return {
 		id: "admin-client",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		getActions: () => ({ admin: { checkRolePermission: (data) => {
 			return hasPermission({
@@ -2953,11 +3038,11 @@ const adminClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/device-authorization/client.mjs
 const deviceAuthorizationClient = () => {
 	return {
 		id: "device-authorization",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		pathMethods: {
 			"/device/code": "POST",
@@ -2970,7 +3055,7 @@ const deviceAuthorizationClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._31fe88df78ef9a08dd335587a42dd18d/node_modules/better-auth/dist/plugins/organization/client.mjs
+//#region ../../node_modules/.pnpm/better-auth@1.7.1_@opentelemetry+api@1.9.1_drizzle-kit@1.0.0-rc.4_drizzle-orm@1.0.0-rc._0f4663e1f35d01509eefb20039600143/node_modules/better-auth/dist/plugins/organization/client.mjs
 /**
 * Using the same `hasPermissionFn` function, but without the need for a `ctx` parameter or the `organizationId` parameter.
 */
@@ -2990,7 +3075,7 @@ const organizationClient = (options) => {
 	};
 	return {
 		id: "organization",
-		version: PACKAGE_VERSION$2,
+		version: PACKAGE_VERSION$3,
 		$InferServerPlugin: {},
 		getActions: ($fetch, _$store, co) => ({
 			$Infer: {
@@ -3065,7 +3150,7 @@ const organizationClient = (options) => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_730a8e1115b706db03150c1fedf71d83/node_modules/@better-auth/api-key/dist/version-D365O1mH.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_2568c45b7ee73e55b396faf3d8bd3e1a/node_modules/@better-auth/api-key/dist/version-D365O1mH.mjs
 const API_KEY_ERROR_CODES = defineErrorCodes({
 	INVALID_METADATA_TYPE: "metadata must be an object or undefined",
 	REFILL_AMOUNT_AND_INTERVAL_REQUIRED: "refillAmount is required when refillInterval is provided",
@@ -3099,14 +3184,14 @@ const API_KEY_ERROR_CODES = defineErrorCodes({
 	NO_DEFAULT_API_KEY_CONFIGURATION_FOUND: "No default api-key configuration found.",
 	ORGANIZATION_PLUGIN_REQUIRED: "Organization plugin is required for organization-owned API keys. Please install and configure the organization plugin."
 });
-const PACKAGE_VERSION$1 = "1.7.1";
+const PACKAGE_VERSION$2 = "1.7.1";
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_730a8e1115b706db03150c1fedf71d83/node_modules/@better-auth/api-key/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+api-key@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_2568c45b7ee73e55b396faf3d8bd3e1a/node_modules/@better-auth/api-key/dist/client.mjs
 const apiKeyClient = () => {
 	return {
 		id: "api-key",
-		version: PACKAGE_VERSION$1,
+		version: PACKAGE_VERSION$2,
 		$InferServerPlugin: {},
 		pathMethods: {
 			"/api-key/create": "POST",
@@ -3118,7 +3203,7 @@ const apiKeyClient = () => {
 };
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_3091161c3af04ded06e8ccc4fdc3184d/node_modules/@better-auth/passkey/dist/version-CNE1I0BY.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_3e5015565ab35cd7b806fd7cb64ff2ec/node_modules/@better-auth/passkey/dist/version-CNE1I0BY.mjs
 const PASSKEY_ERROR_CODES = defineErrorCodes({
 	CHALLENGE_NOT_FOUND: "Challenge not found",
 	YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: "You are not allowed to register this passkey",
@@ -3136,7 +3221,7 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 	RESOLVE_USER_REQUIRED: "Passkey registration requires either an authenticated session or a resolveUser callback when requireSession is false",
 	RESOLVED_USER_INVALID: "Resolved user is invalid"
 });
-const PACKAGE_VERSION = "1.7.1";
+const PACKAGE_VERSION$1 = "1.7.1";
 
 //#endregion
 //#region ../../node_modules/.pnpm/@simplewebauthn+browser@13.3.0/node_modules/@simplewebauthn/browser/esm/helpers/bufferToBase64URLString.js
@@ -3608,7 +3693,7 @@ async function startAuthentication(options) {
 }
 
 //#endregion
-//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_3091161c3af04ded06e8ccc4fdc3184d/node_modules/@better-auth/passkey/dist/client.mjs
+//#region ../../node_modules/.pnpm/@better-auth+passkey@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fet_3e5015565ab35cd7b806fd7cb64ff2ec/node_modules/@better-auth/passkey/dist/client.mjs
 const getPasskeyActions = ($fetch, { $listPasskeys, $store }) => {
 	const signInPasskey = async (opts, options) => {
 		const response = await $fetch("/passkey/generate-authenticate-options", {
@@ -3780,7 +3865,7 @@ const passkeyClient = () => {
 	const $listPasskeys = /* @__PURE__ */ atom();
 	return {
 		id: "passkey",
-		version: PACKAGE_VERSION,
+		version: PACKAGE_VERSION$1,
 		$InferServerPlugin: {},
 		getActions: ($fetch, $store) => getPasskeyActions($fetch, {
 			$listPasskeys,
@@ -3809,27 +3894,59 @@ const passkeyClient = () => {
 	};
 };
 
+//#endregion
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+f_ab392d2d19ca264106fdcee67033c1f1/node_modules/@better-auth/sso/dist/version-BbG1DbY-.mjs
+const PACKAGE_VERSION = "1.7.1";
+
+//#endregion
+//#region ../../node_modules/.pnpm/@better-auth+sso@1.7.1_@better-auth+core@1.7.1_@better-auth+utils@0.4.2_@better-fetch+f_ab392d2d19ca264106fdcee67033c1f1/node_modules/@better-auth/sso/dist/client.mjs
+const ssoClient = (options) => {
+	return {
+		id: "sso-client",
+		version: PACKAGE_VERSION,
+		$InferServerPlugin: {},
+		pathMethods: {
+			"/sso/providers": "GET",
+			"/sso/get-provider": "GET"
+		}
+	};
+};
+
 //#endregion
 //#region ../auth/dist/client.mjs
-function u$1(n) {
+function d$1(n) {
 	return [
 		apiKeyClient(),
 		adminClient(),
 		deviceAuthorizationClient(),
 		twoFactorClient({ twoFactorPage: n?.twoFactorPage ?? `/auth/two-factor` }),
 		passkeyClient(),
+		ssoClient({
+			domainVerification: { enabled: !0 },
+			schema: { ssoProvider: { additionalFields: {
+				displayName: {
+					type: `string`,
+					required: !1
+				},
+				enabled: {
+					type: `boolean`,
+					required: !1
+				}
+			} } }
+		}),
 		organizationClient({
 			ac: t$1,
-			roles: n$1
+			roles: n$1,
+			teams: { enabled: !0 }
 		}),
 		inferAdditionalFields()
 	];
 }
-const d$1 = (e) => createAuthClient({
+const f$1 = (e) => createAuthClient({
 	baseURL: e.baseURL,
 	basePath: e.basePath,
 	fetchOptions: e.fetchOptions,
-	plugins: u$1(e)
+	plugins: d$1(e)
 });
 
 //#endregion
@@ -3855,7 +3972,7 @@ function exitCodeForError(error) {
 //#region src/lib/client.ts
 const AUTH_BASE_PATH = "/api/v1/auth";
 function createCliAuthClient(apiUrl) {
-	return d$1({
+	return f$1({
 		baseURL: apiUrl,
 		basePath: AUTH_BASE_PATH
 	});
@@ -3919,7 +4036,7 @@ async function createCliApiClient(runtime) {
 		sessionToken,
 		orgSlug: runtime.org
 	});
-	const client = x$1({
+	const client = w$1({
 		baseUrl: runtime.apiUrl,
 		client: "cli",
 		getHeaders: () => {
@@ -4411,7 +4528,8 @@ const K = z.object({
 	changes: z.array(U),
 	remoteOnly: z.array(L).default([]),
 	forced: z.boolean().default(!1),
-	adopted: z.boolean().default(!1)
+	adopted: z.boolean().default(!1),
+	approvalRequests: z.array(z.string()).default([])
 });
 
 //#endregion
@@ -4901,13 +5019,16 @@ function registerPushCommand(program) {
 		}).catch(mapApiError);
 		const appliedPlan = buildSyncPlan(applied.changes);
 		const types = await runTypegen(runtime);
+		const approvalRequests = applied.approvalRequests ?? [];
 		printResult(runtime, {
 			plan: appliedPlan,
 			remoteOnly,
 			forced: applied.forced === true,
+			approvalRequests,
 			types
 		}, [
-			`Applied ${applied.changes.length} change(s).`,
+			applied.changes.length > 0 ? `Applied ${applied.changes.length} change(s).` : null,
+			approvalRequests.length > 0 ? `${approvalRequests.length} environment change(s) queued for approval.` : null,
 			applied.forced ? "Forced through version conflicts (audited)." : null,
 			`Wrote types for ${types.flagCount} flag(s) to ${types.written}`
 		].filter(Boolean).join("\n"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipdit/cli",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "description": "shipd's command-line interface",
   "repository": {
     "type": "git",
@@ -19,17 +19,17 @@
   "dependencies": {
     "commander": "^14.0.0",
     "jiti": "^2.5.1",
-    "zod": "^4",
-    "shipdit": "0.2.2"
+    "shipdit": "0.2.3",
+    "zod": "^4"
   },
   "devDependencies": {
+    "@shipd/api-client": "0.0.1",
+    "@shipd/auth": "0.0.1",
+    "@shipd/contracts": "0.0.1",
     "@types/node": "^24.13.3",
     "tsdown": "0.22.14",
     "typescript": "^7.0.2",
-    "vitest": "^4",
-    "@shipd/api-client": "0.0.1",
-    "@shipd/auth": "0.0.1",
-    "@shipd/contracts": "0.0.1"
+    "vitest": "^4"
   },
   "engines": {
     "node": ">=20"