@stll/auth-model 0.2.5 → 0.2.7

package/README.md

@@ -20,13 +20,14 @@ product permissions. Every additional field, index, or plugin model must be
 declared explicitly when comparing the normalized host schema.
 
 ```ts
+import { createAccessControl } from "better-auth/plugins/access";
+
 import {
   BETTER_AUTH_ADAPTER_OPTIONS,
   BETTER_AUTH_ORGANIZATION_OPTIONS,
   BETTER_AUTH_ORGANIZATION_ROLE_GRANTS,
   BETTER_AUTH_ORGANIZATION_STATEMENTS,
 } from "@stll/auth-model";
-import { createAccessControl } from "better-auth/plugins/access";
 
 const statements = {
   ...BETTER_AUTH_ORGANIZATION_STATEMENTS,

package/dist/contract.d.ts

@@ -2,6 +2,8 @@
 /** Better Auth version whose logical schema this contract describes. */
 export declare const BETTER_AUTH_CONTRACT_VERSION = "1.7.6";
 export declare const AUTH_SESSION_STARTUP_HEADER = "x-stella-session-startup";
+export declare const AUTH_SOCIAL_PROVIDER_IDS: readonly ["google", "microsoft"];
+export declare const AUTH_ACCESS_RESET_ERROR_CODE = "confirm_access_reset";
 export declare const ORGANIZATION_ROLE_NAMES: readonly ["owner", "admin", "member", "intern", "external"];
 export type OrganizationRoleName = (typeof ORGANIZATION_ROLE_NAMES)[number];
 /** Better Auth organization resources. Hosts extend this with product grants. */
@@ -17,18 +19,18 @@ export type BetterAuthOrganizationRoleGrants = Record<OrganizationRoleName, Orga
 /** Core grants shared by every application; product grants remain host-owned. */
 export declare const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS: {
   owner: {
-    organization: ("update" | "delete")[];
-    member: ("update" | "delete" | "create")[];
-    invitation: ("create" | "cancel")[];
-    team: ("update" | "delete" | "create")[];
-    ac: ("update" | "delete" | "create" | "read")[];
+    organization: ("delete" | "update")[];
+    member: ("create" | "delete" | "update")[];
+    invitation: ("cancel" | "create")[];
+    team: ("create" | "delete" | "update")[];
+    ac: ("create" | "delete" | "read" | "update")[];
   };
   admin: {
     organization: "update"[];
-    member: ("update" | "delete" | "create")[];
-    invitation: ("create" | "cancel")[];
-    team: ("update" | "delete" | "create")[];
-    ac: ("update" | "delete" | "create" | "read")[];
+    member: ("create" | "delete" | "update")[];
+    invitation: ("cancel" | "create")[];
+    team: ("create" | "delete" | "update")[];
+    ac: ("create" | "delete" | "read" | "update")[];
   };
   member: {
     organization: never[];
@@ -84,7 +86,7 @@ export type BetterAuthFieldDefault = {
 };
 export type BetterAuthFieldReference = {
   field: "id";
-  model: "organization" | "user";
+  model: "oauthConsent" | "organization" | "user";
   onDelete: "cascade" | null;
 };
 export type BetterAuthLogicalFieldContract = {
@@ -142,6 +144,10 @@ export declare const BETTER_AUTH_CORE_SCHEMA: {
     readonly primaryKey: readonly ["id"];
     readonly fields: Record<string, BetterAuthFieldContract>;
     readonly indexes: readonly [{
+      readonly fields: readonly ["id"];
+      readonly predicate: `"session"."id" LIKE 'synthetic-session-%'`;
+      readonly unique: false;
+    }, {
       readonly fields: readonly ["userId", "activeOrganizationId"];
       readonly predicate: null;
       readonly unique: false;
@@ -222,6 +228,10 @@ export type BetterAuthAdapterContract = {
   verificationStorage: "database";
 };
 export declare const BETTER_AUTH_ADAPTER_INVARIANTS: {
+  readonly camelCase: false;
+  readonly provider: "pg";
+  readonly transaction: true;
+  readonly usePlural: false;
   readonly dateStorage: "timestamp-with-time-zone";
   readonly idGeneration: "application-string";
   readonly sessionStorage: "database";
@@ -235,10 +245,6 @@ export declare const BETTER_AUTH_ADAPTER_INVARIANTS: {
     readonly member: "member";
     readonly invitation: "invitation";
   };
-  readonly camelCase: false;
-  readonly provider: "pg";
-  readonly transaction: true;
-  readonly usePlural: false;
 };
 export type BetterAuthSchemaCandidate = {
   adapter: BetterAuthAdapterContract;
@@ -267,6 +273,10 @@ export type BetterAuthSchemaParityResult = {
 export declare const compareBetterAuthSchema: (candidate: BetterAuthSchemaCandidate, extensions?: BetterAuthSchemaExtensions) => BetterAuthSchemaParityResult;
 export declare const BETTER_AUTH_PARITY_MANIFEST: {
   readonly adapterInvariants: {
+    readonly camelCase: false;
+    readonly provider: "pg";
+    readonly transaction: true;
+    readonly usePlural: false;
     readonly dateStorage: "timestamp-with-time-zone";
     readonly idGeneration: "application-string";
     readonly sessionStorage: "database";
@@ -280,10 +290,6 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
       readonly member: "member";
       readonly invitation: "invitation";
     };
-    readonly camelCase: false;
-    readonly provider: "pg";
-    readonly transaction: true;
-    readonly usePlural: false;
   };
   readonly betterAuthVersion: "1.7.6";
   readonly options: {
@@ -296,18 +302,18 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
   };
   readonly roleGrants: {
     owner: {
-      organization: ("update" | "delete")[];
-      member: ("update" | "delete" | "create")[];
-      invitation: ("create" | "cancel")[];
-      team: ("update" | "delete" | "create")[];
-      ac: ("update" | "delete" | "create" | "read")[];
+      organization: ("delete" | "update")[];
+      member: ("create" | "delete" | "update")[];
+      invitation: ("cancel" | "create")[];
+      team: ("create" | "delete" | "update")[];
+      ac: ("create" | "delete" | "read" | "update")[];
     };
     admin: {
       organization: "update"[];
-      member: ("update" | "delete" | "create")[];
-      invitation: ("create" | "cancel")[];
-      team: ("update" | "delete" | "create")[];
-      ac: ("update" | "delete" | "create" | "read")[];
+      member: ("create" | "delete" | "update")[];
+      invitation: ("cancel" | "create")[];
+      team: ("create" | "delete" | "update")[];
+      ac: ("create" | "delete" | "read" | "update")[];
     };
     member: {
       organization: never[];
@@ -344,6 +350,10 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
       readonly primaryKey: readonly ["id"];
       readonly fields: Record<string, BetterAuthFieldContract>;
       readonly indexes: readonly [{
+        readonly fields: readonly ["id"];
+        readonly predicate: `"session"."id" LIKE 'synthetic-session-%'`;
+        readonly unique: false;
+      }, {
         readonly fields: readonly ["userId", "activeOrganizationId"];
         readonly predicate: null;
         readonly unique: false;

package/dist/contract.js

@@ -2,6 +2,8 @@
 /** Better Auth version whose logical schema this contract describes. */
 const BETTER_AUTH_CONTRACT_VERSION = "1.7.6";
 const AUTH_SESSION_STARTUP_HEADER = "x-stella-session-startup";
+const AUTH_SOCIAL_PROVIDER_IDS = ["google", "microsoft"];
+const AUTH_ACCESS_RESET_ERROR_CODE = "confirm_access_reset";
 const ORGANIZATION_ROLE_NAMES = [
 	"owner",
 	"admin",
@@ -269,6 +271,10 @@ const BETTER_AUTH_CORE_SCHEMA = {
 			activeOrganizationId: field("string", { input: "server-managed" })
 		}),
 		indexes: [{
+			fields: ["id"],
+			predicate: `"session"."id" LIKE 'synthetic-session-%'`,
+			unique: false
+		}, {
 			fields: ["userId", "activeOrganizationId"],
 			predicate: null,
 			unique: false
@@ -534,4 +540,4 @@ const BETTER_AUTH_PARITY_MANIFEST = {
 	schema: BETTER_AUTH_CORE_SCHEMA
 };
 //#endregion
-export { AUTH_SESSION_STARTUP_HEADER, BETTER_AUTH_ADAPTER_INVARIANTS, BETTER_AUTH_ADAPTER_OPTIONS, BETTER_AUTH_CONTRACT_VERSION, BETTER_AUTH_CORE_MODEL_NAMES, BETTER_AUTH_CORE_SCHEMA, BETTER_AUTH_ORGANIZATION_OPTIONS, BETTER_AUTH_ORGANIZATION_ROLE_GRANTS, BETTER_AUTH_ORGANIZATION_STATEMENTS, BETTER_AUTH_PARITY_MANIFEST, ORGANIZATION_ROLE_NAMES, compareBetterAuthSchema };
+export { AUTH_ACCESS_RESET_ERROR_CODE, AUTH_SESSION_STARTUP_HEADER, AUTH_SOCIAL_PROVIDER_IDS, BETTER_AUTH_ADAPTER_INVARIANTS, BETTER_AUTH_ADAPTER_OPTIONS, BETTER_AUTH_CONTRACT_VERSION, BETTER_AUTH_CORE_MODEL_NAMES, BETTER_AUTH_CORE_SCHEMA, BETTER_AUTH_ORGANIZATION_OPTIONS, BETTER_AUTH_ORGANIZATION_ROLE_GRANTS, BETTER_AUTH_ORGANIZATION_STATEMENTS, BETTER_AUTH_PARITY_MANIFEST, ORGANIZATION_ROLE_NAMES, compareBetterAuthSchema };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stll/auth-model",
-  "version": "0.2.5",
+  "version": "0.2.7",
   "description": "Portable Better Auth core contract and parity checks.",
   "keywords": [
     "authentication",
@@ -39,16 +39,15 @@
     "build": "tsdown",
     "pack:dry-run": "bun pm pack --dry-run",
     "test": "bun test src",
-    "typecheck": "bun ../../packages/scripts/src/tsc-native.ts --noEmit",
+    "typecheck": "bun check --no-pretty --all --project=tsconfig.json",
     "lint": "cd ../.. && bun --bun oxlint -c oxlint.config.ts --report-unused-disable-directives-severity=error --type-aware --type-check packages/auth-model",
     "lint:fix": "cd ../.. && bun --bun oxlint -c oxlint.config.ts --type-aware --fix packages/auth-model",
-    "format": "bun ../../scripts/run-oxfmt.ts .",
     "prepack": "bun run build"
   },
   "devDependencies": {
     "@stll/typescript-config": "0.0.0",
     "better-auth": "1.7.6",
-    "bun-types": "1.4.2",
+    "bun-types": "1.4.4",
     "tsdown": "0.23.0"
   },
   "main": "./dist/contract.js",