@stll/auth-model 0.3.0 → 0.5.0

package/dist/contract.d.ts

@@ -59,6 +59,19 @@ export declare const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS: {
  * Values that change Better Auth's organization authorization semantics.
  * Hooks, adapters, email delivery, and product-specific options stay local.
  */
+export declare const ORGANIZATION_SLUG_RULES: {
+  readonly minLength: 1;
+  readonly maxLength: 128;
+  readonly pattern: RegExp;
+};
+/** Random bytes behind an opaque organization slug. */
+export declare const ORGANIZATION_OPAQUE_SLUG_BYTES = 10;
+/**
+ * The opaque `org-` slug shared by organization creation and slug changes.
+ * The source fills this function's own fixed-size buffer, so it cannot change
+ * the identifier's length; organization names never enter the identifier.
+ */
+export declare const createOpaqueOrganizationSlug: (fillRandom?: (bytes: Uint8Array) => void) => string;
 export declare const BETTER_AUTH_ORGANIZATION_OPTIONS: {
   readonly allowUserToCreateOrganization: true;
   readonly cancelPendingInvitationsOnReInvite: false;
@@ -424,4 +437,5 @@ export declare const BETTER_AUTH_PARITY_MANIFEST: {
     };
   };
 };
-//#endregion
+//#endregion
+export {};

package/dist/contract.js

@@ -104,6 +104,26 @@ const BETTER_AUTH_ORGANIZATION_ROLE_GRANTS = {
 * Values that change Better Auth's organization authorization semantics.
 * Hooks, adapters, email delivery, and product-specific options stay local.
 */
+const ORGANIZATION_SLUG_RULES = {
+	minLength: 1,
+	maxLength: 128,
+	pattern: /^[a-z0-9\x2d]+$/u
+};
+/** Random bytes behind an opaque organization slug. */
+const ORGANIZATION_OPAQUE_SLUG_BYTES = 10;
+const OPAQUE_SLUG_ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
+/**
+* The opaque `org-` slug shared by organization creation and slug changes.
+* The source fills this function's own fixed-size buffer, so it cannot change
+* the identifier's length; organization names never enter the identifier.
+*/
+const createOpaqueOrganizationSlug = (fillRandom = (bytes) => {
+	crypto.getRandomValues(bytes);
+}) => {
+	const bytes = /* @__PURE__ */ new Uint8Array(10);
+	fillRandom(bytes);
+	return `org-${Array.from(bytes, (byte) => OPAQUE_SLUG_ALPHABET.charAt(byte % 32)).join("")}`;
+};
 const BETTER_AUTH_ORGANIZATION_OPTIONS = {
 	allowUserToCreateOrganization: true,
 	cancelPendingInvitationsOnReInvite: false,
@@ -544,4 +564,4 @@ const BETTER_AUTH_PARITY_MANIFEST = {
 	schema: BETTER_AUTH_CORE_SCHEMA
 };
 //#endregion
-export { AUTH_ACCESS_RESET_ERROR_CODE, AUTH_SESSION_STARTUP_HEADER, AUTH_SOCIAL_PROVIDER_IDS, BETTER_AUTH_ADAPTER_INVARIANTS, BETTER_AUTH_ADAPTER_OPTIONS, BETTER_AUTH_CONTRACT_VERSION, BETTER_AUTH_CORE_MODEL_NAMES, BETTER_AUTH_CORE_SCHEMA, BETTER_AUTH_ORGANIZATION_OPTIONS, BETTER_AUTH_ORGANIZATION_ROLE_GRANTS, BETTER_AUTH_ORGANIZATION_STATEMENTS, BETTER_AUTH_PARITY_MANIFEST, ORGANIZATION_ROLE_NAMES, compareBetterAuthSchema };
+export { AUTH_ACCESS_RESET_ERROR_CODE, AUTH_SESSION_STARTUP_HEADER, AUTH_SOCIAL_PROVIDER_IDS, BETTER_AUTH_ADAPTER_INVARIANTS, BETTER_AUTH_ADAPTER_OPTIONS, BETTER_AUTH_CONTRACT_VERSION, BETTER_AUTH_CORE_MODEL_NAMES, BETTER_AUTH_CORE_SCHEMA, BETTER_AUTH_ORGANIZATION_OPTIONS, BETTER_AUTH_ORGANIZATION_ROLE_GRANTS, BETTER_AUTH_ORGANIZATION_STATEMENTS, BETTER_AUTH_PARITY_MANIFEST, ORGANIZATION_OPAQUE_SLUG_BYTES, ORGANIZATION_ROLE_NAMES, ORGANIZATION_SLUG_RULES, compareBetterAuthSchema, createOpaqueOrganizationSlug };