@stll/auth-model 0.2.1 → 0.2.2

package/dist/contract.d.ts

@@ -1,10 +1,10 @@
 //#region src/contract.d.ts
 /** Better Auth version whose logical schema this contract describes. */
-declare const BETTER_AUTH_CONTRACT_VERSION = "1.7.1";
-declare const ORGANIZATION_ROLE_NAMES: readonly ["owner", "admin", "member", "intern", "external"];
-type OrganizationRoleName = (typeof ORGANIZATION_ROLE_NAMES)[number];
+export declare const BETTER_AUTH_CONTRACT_VERSION = "1.7.1";
+export declare const ORGANIZATION_ROLE_NAMES: readonly ["owner", "admin", "member", "intern", "external"];
+export type OrganizationRoleName = (typeof ORGANIZATION_ROLE_NAMES)[number];
 /** Better Auth organization resources. Hosts extend this with product grants. */
-declare const BETTER_AUTH_ORGANIZATION_STATEMENTS: {
+export declare const BETTER_AUTH_ORGANIZATION_STATEMENTS: {
   readonly organization: readonly ["update", "delete"];
   readonly member: readonly ["create", "update", "delete"];
   readonly invitation: readonly ["create", "cancel"];
@@ -12,9 +12,9 @@ declare const BETTER_AUTH_ORGANIZATION_STATEMENTS: {
   readonly ac: readonly ["create", "read", "update", "delete"];
 };
 type OrganizationPermissionMap = { [Resource in keyof typeof BETTER_AUTH_ORGANIZATION_STATEMENTS]: (typeof BETTER_AUTH_ORGANIZATION_STATEMENTS)[Resource][number][]; };
-type BetterAuthOrganizationRoleGrants = Record<OrganizationRoleName, OrganizationPermissionMap>;
+export type BetterAuthOrganizationRoleGrants = Record<OrganizationRoleName, OrganizationPermissionMap>;
 /** Core grants shared by every application; product grants remain host-owned. */
-declare const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS: {
+export declare const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS: {
   owner: {
     organization: ("update" | "delete")[];
     member: ("update" | "delete" | "create")[];
@@ -55,7 +55,7 @@ declare const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS: {
  * Values that change Better Auth's organization authorization semantics.
  * Hooks, adapters, email delivery, and product-specific options stay local.
  */
-declare const BETTER_AUTH_ORGANIZATION_OPTIONS: {
+export declare const BETTER_AUTH_ORGANIZATION_OPTIONS: {
   readonly allowUserToCreateOrganization: true;
   readonly cancelPendingInvitationsOnReInvite: false;
   readonly creatorRole: "owner";
@@ -64,16 +64,16 @@ declare const BETTER_AUTH_ORGANIZATION_OPTIONS: {
   readonly requireEmailVerificationOnInvitation: true;
 };
 /** Adapter switches which must match in every host. */
-declare const BETTER_AUTH_ADAPTER_OPTIONS: {
+export declare const BETTER_AUTH_ADAPTER_OPTIONS: {
   readonly camelCase: false;
   readonly provider: "pg";
   readonly transaction: true;
   readonly usePlural: false;
 };
-declare const BETTER_AUTH_CORE_MODEL_NAMES: readonly ["user", "session", "account", "verification", "organization", "member", "invitation"];
-type BetterAuthCoreModelName = (typeof BETTER_AUTH_CORE_MODEL_NAMES)[number];
-type BetterAuthFieldType = "boolean" | "date" | "string";
-type BetterAuthFieldDefault = {
+export declare const BETTER_AUTH_CORE_MODEL_NAMES: readonly ["user", "session", "account", "verification", "organization", "member", "invitation"];
+export type BetterAuthCoreModelName = (typeof BETTER_AUTH_CORE_MODEL_NAMES)[number];
+export type BetterAuthFieldType = "boolean" | "date" | "string";
+export type BetterAuthFieldDefault = {
   kind: "none";
 } | {
   kind: "runtime";
@@ -81,12 +81,12 @@ type BetterAuthFieldDefault = {
   kind: "literal";
   value: boolean | number | string;
 };
-type BetterAuthFieldReference = {
+export type BetterAuthFieldReference = {
   field: "id";
   model: "organization" | "user";
   onDelete: "cascade" | null;
 };
-type BetterAuthLogicalFieldContract = {
+export type BetterAuthLogicalFieldContract = {
   default: BetterAuthFieldDefault;
   indexed: boolean;
   input: "allowed" | "server-managed";
@@ -98,7 +98,7 @@ type BetterAuthLogicalFieldContract = {
   type: BetterAuthFieldType;
   unique: boolean;
 };
-type BetterAuthDatabaseFieldContract = {
+export type BetterAuthDatabaseFieldContract = {
   columnName: string;
   columnType: "boolean" | "text" | "timestamptz";
   default: BetterAuthFieldDefault;
@@ -110,16 +110,16 @@ type BetterAuthDatabaseFieldContract = {
   unique: boolean;
 };
 /** Better Auth behavior and physical database guarantees, kept separate. */
-type BetterAuthFieldContract = {
+export type BetterAuthFieldContract = {
   database: BetterAuthDatabaseFieldContract;
   logical: BetterAuthLogicalFieldContract;
 };
-type BetterAuthIndexContract = {
+export type BetterAuthIndexContract = {
   fields: readonly string[];
   predicate: string | null;
   unique: boolean;
 };
-type BetterAuthModelContract = {
+export type BetterAuthModelContract = {
   fields: Record<string, BetterAuthFieldContract>;
   indexes: readonly BetterAuthIndexContract[];
   primaryKey: readonly string[];
@@ -129,7 +129,7 @@ type BetterAuthModelContract = {
  * Normalized Better Auth core plus the organization plugin's shared models and
  * `activeOrganizationId` session extension.
  */
-declare const BETTER_AUTH_CORE_SCHEMA: {
+export declare const BETTER_AUTH_CORE_SCHEMA: {
   readonly user: {
     readonly tableName: "user";
     readonly primaryKey: readonly ["id"];
@@ -151,7 +151,7 @@ declare const BETTER_AUTH_CORE_SCHEMA: {
     readonly primaryKey: readonly ["id"];
     readonly fields: Record<string, BetterAuthFieldContract>;
     readonly indexes: readonly [{
-      readonly fields: readonly ["issuer", "accountId"];
+      readonly fields: readonly ["providerId", "accountId"];
       readonly predicate: null;
       readonly unique: true;
     }, {
@@ -213,7 +213,7 @@ declare const BETTER_AUTH_CORE_SCHEMA: {
     }];
   };
 };
-type BetterAuthAdapterContract = {
+export type BetterAuthAdapterContract = {
   camelCase: boolean;
   dateStorage: "timestamp-with-time-zone";
   idGeneration: "application-string";
@@ -224,7 +224,7 @@ type BetterAuthAdapterContract = {
   usePlural: boolean;
   verificationStorage: "database";
 };
-declare const BETTER_AUTH_ADAPTER_INVARIANTS: {
+export declare const BETTER_AUTH_ADAPTER_INVARIANTS: {
   readonly dateStorage: "timestamp-with-time-zone";
   readonly idGeneration: "application-string";
   readonly sessionStorage: "database";
@@ -243,21 +243,21 @@ declare const BETTER_AUTH_ADAPTER_INVARIANTS: {
   readonly transaction: true;
   readonly usePlural: false;
 };
-type BetterAuthSchemaCandidate = {
+export type BetterAuthSchemaCandidate = {
   adapter: BetterAuthAdapterContract;
   models: Record<string, BetterAuthModelContract>;
 };
-type BetterAuthSchemaExtensions = {
+export type BetterAuthSchemaExtensions = {
   fields?: Partial<Record<BetterAuthCoreModelName, Record<string, BetterAuthFieldContract>>>;
   indexes?: Partial<Record<BetterAuthCoreModelName, readonly BetterAuthIndexContract[]>>;
   models?: readonly string[];
 };
-type BetterAuthSchemaParityIssue = {
+export type BetterAuthSchemaParityIssue = {
   actual: unknown;
   expected: unknown;
   path: string;
 };
-type BetterAuthSchemaParityResult = {
+export type BetterAuthSchemaParityResult = {
   status: "compatible";
 } | {
   issues: BetterAuthSchemaParityIssue[];
@@ -267,8 +267,8 @@ type BetterAuthSchemaParityResult = {
  * Compares a normalized host schema with the complete shared core. Extensions
  * are exact allowlists: missing, stale, and undeclared additions all fail.
  */
-declare const compareBetterAuthSchema: (candidate: BetterAuthSchemaCandidate, extensions?: BetterAuthSchemaExtensions) => BetterAuthSchemaParityResult;
-declare const BETTER_AUTH_PARITY_MANIFEST: {
+export declare const compareBetterAuthSchema: (candidate: BetterAuthSchemaCandidate, extensions?: BetterAuthSchemaExtensions) => BetterAuthSchemaParityResult;
+export declare const BETTER_AUTH_PARITY_MANIFEST: {
   readonly adapterInvariants: {
     readonly dateStorage: "timestamp-with-time-zone";
     readonly idGeneration: "application-string";
@@ -357,7 +357,7 @@ declare const BETTER_AUTH_PARITY_MANIFEST: {
       readonly primaryKey: readonly ["id"];
       readonly fields: Record<string, BetterAuthFieldContract>;
       readonly indexes: readonly [{
-        readonly fields: readonly ["issuer", "accountId"];
+        readonly fields: readonly ["providerId", "accountId"];
         readonly predicate: null;
         readonly unique: true;
       }, {
@@ -420,5 +420,4 @@ declare const BETTER_AUTH_PARITY_MANIFEST: {
     };
   };
 };
-//#endregion
-export { BETTER_AUTH_ADAPTER_INVARIANTS, BETTER_AUTH_ADAPTER_OPTIONS, BETTER_AUTH_CONTRACT_VERSION, BETTER_AUTH_CORE_MODEL_NAMES, BETTER_AUTH_CORE_SCHEMA, BETTER_AUTH_ORGANIZATION_OPTIONS, BETTER_AUTH_ORGANIZATION_ROLE_GRANTS, BETTER_AUTH_ORGANIZATION_STATEMENTS, BETTER_AUTH_PARITY_MANIFEST, BetterAuthAdapterContract, BetterAuthCoreModelName, BetterAuthDatabaseFieldContract, BetterAuthFieldContract, BetterAuthFieldDefault, BetterAuthFieldReference, BetterAuthFieldType, BetterAuthIndexContract, BetterAuthLogicalFieldContract, BetterAuthModelContract, BetterAuthOrganizationRoleGrants, BetterAuthSchemaCandidate, BetterAuthSchemaExtensions, BetterAuthSchemaParityIssue, BetterAuthSchemaParityResult, ORGANIZATION_ROLE_NAMES, OrganizationRoleName, compareBetterAuthSchema };
+//#endregion

package/dist/contract.js

@@ -278,7 +278,10 @@ const BETTER_AUTH_CORE_SCHEMA = {
 		primaryKey: ["id"],
 		fields: withPhysicalNames({
 			id: idField,
-			issuer: field("string", { required: true }),
+			issuer: field("string", {
+				database: { notNull: false },
+				required: true
+			}),
 			accountId: field("string", { required: true }),
 			providerId: field("string", { required: true }),
 			userId: field("string", {
@@ -297,7 +300,7 @@ const BETTER_AUTH_CORE_SCHEMA = {
 			updatedAt: updatedDate
 		}),
 		indexes: [{
-			fields: ["issuer", "accountId"],
+			fields: ["providerId", "accountId"],
 			predicate: null,
 			unique: true
 		}, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stll/auth-model",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Portable Better Auth core contract and parity checks.",
   "keywords": [
     "authentication",
@@ -42,14 +42,14 @@
     "typecheck": "bun ../../packages/scripts/src/tsc-native.ts --noEmit",
     "lint": "cd ../.. && bun --bun oxlint -c oxlint.config.ts --report-unused-disable-directives-severity=error --deny-warnings --type-aware packages/auth-model",
     "lint:fix": "cd ../.. && bun --bun oxlint -c oxlint.config.ts --type-aware --fix packages/auth-model",
-    "format": "oxfmt .",
+    "format": "bun ../../scripts/run-oxfmt.ts .",
     "prepack": "bun run build"
   },
   "devDependencies": {
     "@stll/typescript-config": "0.0.0",
     "better-auth": "1.7.1",
-    "bun-types": "1.4.0",
-    "tsdown": "0.22.14"
+    "bun-types": "1.4.2",
+    "tsdown": "0.23.0"
   },
   "main": "./dist/contract.js",
   "types": "./dist/contract.d.ts"