@stll/auth-model 0.2.7 → 0.4.0

package/dist/contract.d.ts

@@ -1,8 +1,9 @@
 //#region src/contract.d.ts
 /** Better Auth version whose logical schema this contract describes. */
-export declare const BETTER_AUTH_CONTRACT_VERSION = "1.7.6";
+export declare const BETTER_AUTH_CONTRACT_VERSION = "1.7.12";
 export declare const AUTH_SESSION_STARTUP_HEADER = "x-stella-session-startup";
-export declare const AUTH_SOCIAL_PROVIDER_IDS: readonly ["google", "microsoft"];
+export declare const AUTH_SOCIAL_PROVIDER_IDS: readonly ["google", "microsoft", "apple"];
+export type AuthSocialProviderId = (typeof AUTH_SOCIAL_PROVIDER_IDS)[number];
 export declare const AUTH_ACCESS_RESET_ERROR_CODE = "confirm_access_reset";
 export declare const ORGANIZATION_ROLE_NAMES: readonly ["owner", "admin", "member", "intern", "external"];
 export type OrganizationRoleName = (typeof ORGANIZATION_ROLE_NAMES)[number];
@@ -58,6 +59,19 @@ export declare const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS: {
  * Values that change Better Auth's organization authorization semantics.
  * Hooks, adapters, email delivery, and product-specific options stay local.
  */
+export declare const ORGANIZATION_SLUG_RULES: {
+  readonly minLength: 1;
+  readonly maxLength: 128;
+  readonly pattern: RegExp;
+};
+/** Random bytes behind an opaque organization slug. */
+export declare const ORGANIZATION_OPAQUE_SLUG_BYTES = 10;
+/**
+ * The opaque `org-` slug shared by organization creation and slug changes.
+ * The source fills this function's own fixed-size buffer, so it cannot change
+ * the identifier's length; organization names never enter the identifier.
+ */
+export declare const createOpaqueOrganizationSlug: (fillRandom?: (bytes: Uint8Array) => void) => string;
 export declare const BETTER_AUTH_ORGANIZATION_OPTIONS: {
   readonly allowUserToCreateOrganization: true;
   readonly cancelPendingInvitationsOnReInvite: false;
@@ -291,7 +305,7 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
       readonly invitation: "invitation";
     };
   };
-  readonly betterAuthVersion: "1.7.6";
+  readonly betterAuthVersion: "1.7.12";
   readonly options: {
     readonly allowUserToCreateOrganization: true;
     readonly cancelPendingInvitationsOnReInvite: false;
@@ -423,4 +437,5 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
     };
   };
 };
-//#endregion
+//#endregion
+export {};

package/dist/contract.js

@@ -1,8 +1,12 @@
 //#region src/contract.ts
 /** Better Auth version whose logical schema this contract describes. */
-const BETTER_AUTH_CONTRACT_VERSION = "1.7.6";
+const BETTER_AUTH_CONTRACT_VERSION = "1.7.12";
 const AUTH_SESSION_STARTUP_HEADER = "x-stella-session-startup";
-const AUTH_SOCIAL_PROVIDER_IDS = ["google", "microsoft"];
+const AUTH_SOCIAL_PROVIDER_IDS = [
+	"google",
+	"microsoft",
+	"apple"
+];
 const AUTH_ACCESS_RESET_ERROR_CODE = "confirm_access_reset";
 const ORGANIZATION_ROLE_NAMES = [
 	"owner",
@@ -100,6 +104,26 @@ const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS = {
 * Values that change Better Auth's organization authorization semantics.
 * Hooks, adapters, email delivery, and product-specific options stay local.
 */
+const ORGANIZATION_SLUG_RULES = {
+	minLength: 1,
+	maxLength: 128,
+	pattern: /^[a-z0-9\x2d]+$/u
+};
+/** Random bytes behind an opaque organization slug. */
+const ORGANIZATION_OPAQUE_SLUG_BYTES = 10;
+const OPAQUE_SLUG_ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
+/**
+* The opaque `org-` slug shared by organization creation and slug changes.
+* The source fills this function's own fixed-size buffer, so it cannot change
+* the identifier's length; organization names never enter the identifier.
+*/
+const createOpaqueOrganizationSlug = (fillRandom = (bytes) => {
+	crypto.getRandomValues(bytes);
+}) => {
+	const bytes = /* @__PURE__ */ new Uint8Array(10);
+	fillRandom(bytes);
+	return `org-${Array.from(bytes, (byte) => OPAQUE_SLUG_ALPHABET.charAt(byte % 32)).join("")}`;
+};
 const BETTER_AUTH_ORGANIZATION_OPTIONS = {
 	allowUserToCreateOrganization: true,
 	cancelPendingInvitationsOnReInvite: false,
@@ -540,4 +564,4 @@ const BETTER_AUTH_PARITY_MANIFEST = {
 	schema: BETTER_AUTH_CORE_SCHEMA
 };
 //#endregion
-export { AUTH_ACCESS_RESET_ERROR_CODE, AUTH_SESSION_STARTUP_HEADER, AUTH_SOCIAL_PROVIDER_IDS, BETTER_AUTH_ADAPTER_INVARIANTS, BETTER_AUTH_ADAPTER_OPTIONS, BETTER_AUTH_CONTRACT_VERSION, BETTER_AUTH_CORE_MODEL_NAMES, BETTER_AUTH_CORE_SCHEMA, BETTER_AUTH_ORGANIZATION_OPTIONS, BETTER_AUTH_ORGANIZATION_ROLE_GRANTS, BETTER_AUTH_ORGANIZATION_STATEMENTS, BETTER_AUTH_PARITY_MANIFEST, ORGANIZATION_ROLE_NAMES, compareBetterAuthSchema };
+export { AUTH_ACCESS_RESET_ERROR_CODE, AUTH_SESSION_STARTUP_HEADER, AUTH_SOCIAL_PROVIDER_IDS, BETTER_AUTH_ADAPTER_INVARIANTS, BETTER_AUTH_ADAPTER_OPTIONS, BETTER_AUTH_CONTRACT_VERSION, BETTER_AUTH_CORE_MODEL_NAMES, BETTER_AUTH_CORE_SCHEMA, BETTER_AUTH_ORGANIZATION_OPTIONS, BETTER_AUTH_ORGANIZATION_ROLE_GRANTS, BETTER_AUTH_ORGANIZATION_STATEMENTS, BETTER_AUTH_PARITY_MANIFEST, ORGANIZATION_OPAQUE_SLUG_BYTES, ORGANIZATION_ROLE_NAMES, ORGANIZATION_SLUG_RULES, compareBetterAuthSchema, createOpaqueOrganizationSlug };