@stll/auth-model 0.2.6 → 0.3.0

package/README.md

@@ -20,13 +20,14 @@ product permissions. Every additional field, index, or plugin model must be
 declared explicitly when comparing the normalized host schema.
 
 ```ts
+import { createAccessControl } from "better-auth/plugins/access";
+
 import {
   BETTER_AUTH_ADAPTER_OPTIONS,
   BETTER_AUTH_ORGANIZATION_OPTIONS,
   BETTER_AUTH_ORGANIZATION_ROLE_GRANTS,
   BETTER_AUTH_ORGANIZATION_STATEMENTS,
 } from "@stll/auth-model";
-import { createAccessControl } from "better-auth/plugins/access";
 
 const statements = {
   ...BETTER_AUTH_ORGANIZATION_STATEMENTS,

package/dist/contract.d.ts

@@ -1,8 +1,9 @@
 //#region src/contract.d.ts
 /** Better Auth version whose logical schema this contract describes. */
-export declare const BETTER_AUTH_CONTRACT_VERSION = "1.7.6";
+export declare const BETTER_AUTH_CONTRACT_VERSION = "1.7.12";
 export declare const AUTH_SESSION_STARTUP_HEADER = "x-stella-session-startup";
-export declare const AUTH_SOCIAL_PROVIDER_IDS: readonly ["google", "microsoft"];
+export declare const AUTH_SOCIAL_PROVIDER_IDS: readonly ["google", "microsoft", "apple"];
+export type AuthSocialProviderId = (typeof AUTH_SOCIAL_PROVIDER_IDS)[number];
 export declare const AUTH_ACCESS_RESET_ERROR_CODE = "confirm_access_reset";
 export declare const ORGANIZATION_ROLE_NAMES: readonly ["owner", "admin", "member", "intern", "external"];
 export type OrganizationRoleName = (typeof ORGANIZATION_ROLE_NAMES)[number];
@@ -19,18 +20,18 @@ export type BetterAuthOrganizationRoleGrants = Record<OrganizationRoleName, Orga
 /** Core grants shared by every application; product grants remain host-owned. */
 export declare const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS: {
   owner: {
-    organization: ("update" | "delete")[];
-    member: ("update" | "delete" | "create")[];
-    invitation: ("create" | "cancel")[];
-    team: ("update" | "delete" | "create")[];
-    ac: ("update" | "delete" | "create" | "read")[];
+    organization: ("delete" | "update")[];
+    member: ("create" | "delete" | "update")[];
+    invitation: ("cancel" | "create")[];
+    team: ("create" | "delete" | "update")[];
+    ac: ("create" | "delete" | "read" | "update")[];
   };
   admin: {
     organization: "update"[];
-    member: ("update" | "delete" | "create")[];
-    invitation: ("create" | "cancel")[];
-    team: ("update" | "delete" | "create")[];
-    ac: ("update" | "delete" | "create" | "read")[];
+    member: ("create" | "delete" | "update")[];
+    invitation: ("cancel" | "create")[];
+    team: ("create" | "delete" | "update")[];
+    ac: ("create" | "delete" | "read" | "update")[];
   };
   member: {
     organization: never[];
@@ -86,7 +87,7 @@ export type BetterAuthFieldDefault = {
 };
 export type BetterAuthFieldReference = {
   field: "id";
-  model: "organization" | "user";
+  model: "oauthConsent" | "organization" | "user";
   onDelete: "cascade" | null;
 };
 export type BetterAuthLogicalFieldContract = {
@@ -144,6 +145,10 @@ export declare const BETTER_AUTH_CORE_SCHEMA: {
     readonly primaryKey: readonly ["id"];
     readonly fields: Record<string, BetterAuthFieldContract>;
     readonly indexes: readonly [{
+      readonly fields: readonly ["id"];
+      readonly predicate: `"session"."id" LIKE 'synthetic-session-%'`;
+      readonly unique: false;
+    }, {
       readonly fields: readonly ["userId", "activeOrganizationId"];
       readonly predicate: null;
       readonly unique: false;
@@ -224,6 +229,10 @@ export type BetterAuthAdapterContract = {
   verificationStorage: "database";
 };
 export declare const BETTER_AUTH_ADAPTER_INVARIANTS: {
+  readonly camelCase: false;
+  readonly provider: "pg";
+  readonly transaction: true;
+  readonly usePlural: false;
   readonly dateStorage: "timestamp-with-time-zone";
   readonly idGeneration: "application-string";
   readonly sessionStorage: "database";
@@ -237,10 +246,6 @@ export declare const BETTER_AUTH_ADAPTER_INVARIANTS: {
     readonly member: "member";
     readonly invitation: "invitation";
   };
-  readonly camelCase: false;
-  readonly provider: "pg";
-  readonly transaction: true;
-  readonly usePlural: false;
 };
 export type BetterAuthSchemaCandidate = {
   adapter: BetterAuthAdapterContract;
@@ -269,6 +274,10 @@ export type BetterAuthSchemaParityResult = {
 export declare const compareBetterAuthSchema: (candidate: BetterAuthSchemaCandidate, extensions?: BetterAuthSchemaExtensions) => BetterAuthSchemaParityResult;
 export declare const BETTER_AUTH_PARITY_MANIFEST: {
   readonly adapterInvariants: {
+    readonly camelCase: false;
+    readonly provider: "pg";
+    readonly transaction: true;
+    readonly usePlural: false;
     readonly dateStorage: "timestamp-with-time-zone";
     readonly idGeneration: "application-string";
     readonly sessionStorage: "database";
@@ -282,12 +291,8 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
       readonly member: "member";
       readonly invitation: "invitation";
     };
-    readonly camelCase: false;
-    readonly provider: "pg";
-    readonly transaction: true;
-    readonly usePlural: false;
   };
-  readonly betterAuthVersion: "1.7.6";
+  readonly betterAuthVersion: "1.7.12";
   readonly options: {
     readonly allowUserToCreateOrganization: true;
     readonly cancelPendingInvitationsOnReInvite: false;
@@ -298,18 +303,18 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
   };
   readonly roleGrants: {
     owner: {
-      organization: ("update" | "delete")[];
-      member: ("update" | "delete" | "create")[];
-      invitation: ("create" | "cancel")[];
-      team: ("update" | "delete" | "create")[];
-      ac: ("update" | "delete" | "create" | "read")[];
+      organization: ("delete" | "update")[];
+      member: ("create" | "delete" | "update")[];
+      invitation: ("cancel" | "create")[];
+      team: ("create" | "delete" | "update")[];
+      ac: ("create" | "delete" | "read" | "update")[];
     };
     admin: {
       organization: "update"[];
-      member: ("update" | "delete" | "create")[];
-      invitation: ("create" | "cancel")[];
-      team: ("update" | "delete" | "create")[];
-      ac: ("update" | "delete" | "create" | "read")[];
+      member: ("create" | "delete" | "update")[];
+      invitation: ("cancel" | "create")[];
+      team: ("create" | "delete" | "update")[];
+      ac: ("create" | "delete" | "read" | "update")[];
     };
     member: {
       organization: never[];
@@ -346,6 +351,10 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
       readonly primaryKey: readonly ["id"];
       readonly fields: Record<string, BetterAuthFieldContract>;
       readonly indexes: readonly [{
+        readonly fields: readonly ["id"];
+        readonly predicate: `"session"."id" LIKE 'synthetic-session-%'`;
+        readonly unique: false;
+      }, {
         readonly fields: readonly ["userId", "activeOrganizationId"];
         readonly predicate: null;
         readonly unique: false;

package/dist/contract.js

@@ -1,8 +1,12 @@
 //#region src/contract.ts
 /** Better Auth version whose logical schema this contract describes. */
-const BETTER_AUTH_CONTRACT_VERSION = "1.7.6";
+const BETTER_AUTH_CONTRACT_VERSION = "1.7.12";
 const AUTH_SESSION_STARTUP_HEADER = "x-stella-session-startup";
-const AUTH_SOCIAL_PROVIDER_IDS = ["google", "microsoft"];
+const AUTH_SOCIAL_PROVIDER_IDS = [
+	"google",
+	"microsoft",
+	"apple"
+];
 const AUTH_ACCESS_RESET_ERROR_CODE = "confirm_access_reset";
 const ORGANIZATION_ROLE_NAMES = [
 	"owner",
@@ -271,6 +275,10 @@ const BETTER_AUTH_CORE_SCHEMA = {
 			activeOrganizationId: field("string", { input: "server-managed" })
 		}),
 		indexes: [{
+			fields: ["id"],
+			predicate: `"session"."id" LIKE 'synthetic-session-%'`,
+			unique: false
+		}, {
 			fields: ["userId", "activeOrganizationId"],
 			predicate: null,
 			unique: false

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stll/auth-model",
-  "version": "0.2.6",
+  "version": "0.3.0",
   "description": "Portable Better Auth core contract and parity checks.",
   "keywords": [
     "authentication",
@@ -39,17 +39,17 @@
     "build": "tsdown",
     "pack:dry-run": "bun pm pack --dry-run",
     "test": "bun test src",
-    "typecheck": "bun ../../packages/scripts/src/tsc-native.ts --noEmit",
+    "typecheck": "bun check --no-pretty --all --project=tsconfig.json",
     "lint": "cd ../.. && bun --bun oxlint -c oxlint.config.ts --report-unused-disable-directives-severity=error --type-aware --type-check packages/auth-model",
     "lint:fix": "cd ../.. && bun --bun oxlint -c oxlint.config.ts --type-aware --fix packages/auth-model",
-    "format": "bun ../../scripts/run-oxfmt.ts .",
     "prepack": "bun run build"
   },
   "devDependencies": {
     "@stll/typescript-config": "0.0.0",
-    "better-auth": "1.7.6",
-    "bun-types": "1.4.2",
-    "tsdown": "0.23.0"
+    "better-auth": "1.7.12",
+    "bun-types": "1.4.4",
+    "tsdown": "0.23.0",
+    "tsrs": "0.18.0-ts7.1.0-dev.20260929"
   },
   "main": "./dist/contract.js",
   "types": "./dist/contract.d.ts"