@tulip-systems/core 0.10.0 → 0.10.2

package/dist/modules/auth/plugins/admin.d.mts

@@ -0,0 +1,917 @@
+import * as zod from "zod";
+import * as better_auth_plugins0 from "better-auth/plugins";
+import { AccessControl, AdminOptions, Role } from "better-auth/plugins";
+import * as better_auth0 from "better-auth";
+import * as better_call0 from "better-call";
+import * as zod_v4_core0 from "zod/v4/core";
+import * as better_auth_client0 from "better-auth/client";
+
+//#region src/modules/auth/plugins/admin.d.ts
+/**
+ * Admin client options
+ */
+type AdminClientOptions = {
+  ac?: AccessControl | undefined;
+  roles?: { [key in string]: Role } | undefined;
+};
+/**
+ * Admin plugin.
+ */
+declare function adminPlugin<Options extends AdminOptions>({
+  roles,
+  ac,
+  adminRoles,
+  defaultRole,
+  ...props
+}: Options): {
+  id: "admin";
+  version: string;
+  init(): {
+    options: {
+      databaseHooks: {
+        user: {
+          create: {
+            before(user: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            } & Record<string, unknown>): Promise<{
+              data: {
+                id: string;
+                createdAt: Date;
+                updatedAt: Date;
+                email: string;
+                emailVerified: boolean;
+                name: string;
+                image?: string | null | undefined;
+                role: string;
+              };
+            }>;
+          };
+        };
+        session: {
+          create: {
+            before(session: {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            } & Record<string, unknown>, ctx: better_auth0.GenericEndpointContext | null): Promise<void>;
+          };
+        };
+      };
+    };
+  };
+  hooks: {
+    after: {
+      matcher(context: better_auth0.HookEndpointContext): boolean;
+      handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<better_auth_plugins0.SessionWithImpersonatedBy[] | undefined>;
+    }[];
+  };
+  endpoints: {
+    setRole: better_call0.StrictEndpoint<"/admin/set-role", {
+      method: "POST";
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+        role: zod.ZodUnion<readonly [zod.ZodString, zod.ZodArray<zod.ZodString>]>;
+      }, zod_v4_core0.$strip>;
+      requireHeaders: true;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      user: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        $Infer: {
+          body: {
+            userId: string;
+            role: better_auth_plugins0.InferAdminRolesFromOption<Options & Required<Pick<AdminOptions, "adminRoles" | "defaultRole" | "bannedUserMessage">>> | better_auth_plugins0.InferAdminRolesFromOption<Options & Required<Pick<AdminOptions, "adminRoles" | "defaultRole" | "bannedUserMessage">>>[];
+          };
+        };
+      };
+    }, {
+      user: better_auth_plugins0.UserWithRole;
+    }>;
+    getUser: better_call0.StrictEndpoint<"/admin/get-user", {
+      method: "GET";
+      query: zod.ZodObject<{
+        id: zod.ZodString;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      user: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, better_auth_plugins0.UserWithRole>;
+    createUser: better_call0.StrictEndpoint<"/admin/create-user", {
+      method: "POST";
+      body: zod.ZodObject<{
+        email: zod.ZodString;
+        password: zod.ZodOptional<zod.ZodString>;
+        name: zod.ZodString;
+        role: zod.ZodOptional<zod.ZodUnion<readonly [zod.ZodString, zod.ZodArray<zod.ZodString>]>>;
+        data: zod.ZodOptional<zod.ZodRecord<zod.ZodString, zod.ZodAny>>;
+      }, zod_v4_core0.$strip>;
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      user: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+        $Infer: {
+          body: {
+            email: string;
+            password?: string | undefined;
+            name: string;
+            role?: better_auth_plugins0.InferAdminRolesFromOption<Options & Required<Pick<AdminOptions, "adminRoles" | "defaultRole" | "bannedUserMessage">>> | better_auth_plugins0.InferAdminRolesFromOption<Options & Required<Pick<AdminOptions, "adminRoles" | "defaultRole" | "bannedUserMessage">>>[] | undefined;
+            data?: Record<string, any> | undefined;
+          };
+        };
+      };
+    }, {
+      user: better_auth_plugins0.UserWithRole;
+    }>;
+    adminUpdateUser: better_call0.StrictEndpoint<"/admin/update-user", {
+      method: "POST";
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+        data: zod.ZodRecord<zod.ZodAny, zod.ZodAny>;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      user: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, better_auth_plugins0.UserWithRole>;
+    listUsers: better_call0.StrictEndpoint<"/admin/list-users", {
+      method: "GET";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      query: zod.ZodObject<{
+        searchValue: zod.ZodOptional<zod.ZodString>;
+        searchField: zod.ZodOptional<zod.ZodEnum<{
+          email: "email";
+          name: "name";
+        }>>;
+        searchOperator: zod.ZodOptional<zod.ZodEnum<{
+          contains: "contains";
+          starts_with: "starts_with";
+          ends_with: "ends_with";
+        }>>;
+        limit: zod.ZodOptional<zod.ZodUnion<[zod.ZodString, zod.ZodNumber]>>;
+        offset: zod.ZodOptional<zod.ZodUnion<[zod.ZodString, zod.ZodNumber]>>;
+        sortBy: zod.ZodOptional<zod.ZodString>;
+        sortDirection: zod.ZodOptional<zod.ZodEnum<{
+          asc: "asc";
+          desc: "desc";
+        }>>;
+        filterField: zod.ZodOptional<zod.ZodString>;
+        filterValue: zod.ZodOptional<zod.ZodUnion<[zod.ZodUnion<[zod.ZodUnion<[zod.ZodUnion<[zod.ZodString, zod.ZodNumber]>, zod.ZodBoolean]>, zod.ZodArray<zod.ZodString>]>, zod.ZodArray<zod.ZodNumber>]>>;
+        filterOperator: zod.ZodOptional<zod.ZodEnum<{
+          eq: "eq";
+          ne: "ne";
+          gt: "gt";
+          gte: "gte";
+          lt: "lt";
+          lte: "lte";
+          in: "in";
+          not_in: "not_in";
+          contains: "contains";
+          starts_with: "starts_with";
+          ends_with: "ends_with";
+        }>>;
+      }, zod_v4_core0.$strip>;
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      users: {
+                        type: string;
+                        items: {
+                          $ref: string;
+                        };
+                      };
+                      total: {
+                        type: string;
+                      };
+                      limit: {
+                        type: string;
+                      };
+                      offset: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      users: better_auth_plugins0.UserWithRole[];
+      total: number;
+    }>;
+    listUserSessions: better_call0.StrictEndpoint<"/admin/list-user-sessions", {
+      method: "POST";
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+      }, zod_v4_core0.$strip>;
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      sessions: {
+                        type: string;
+                        items: {
+                          $ref: string;
+                        };
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      sessions: better_auth_plugins0.SessionWithImpersonatedBy[];
+    }>;
+    unbanUser: better_call0.StrictEndpoint<"/admin/unban-user", {
+      method: "POST";
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      user: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      user: better_auth_plugins0.UserWithRole;
+    }>;
+    banUser: better_call0.StrictEndpoint<"/admin/ban-user", {
+      method: "POST";
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+        banReason: zod.ZodOptional<zod.ZodString>;
+        banExpiresIn: zod.ZodOptional<zod.ZodNumber>;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      user: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      user: better_auth_plugins0.UserWithRole;
+    }>;
+    impersonateUser: better_call0.StrictEndpoint<"/admin/impersonate-user", {
+      method: "POST";
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      session: {
+                        $ref: string;
+                      };
+                      user: {
+                        $ref: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      session: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        userId: string;
+        expiresAt: Date;
+        token: string;
+        ipAddress?: string | null | undefined;
+        userAgent?: string | null | undefined;
+      };
+      user: better_auth_plugins0.UserWithRole;
+    }>;
+    stopImpersonating: better_call0.StrictEndpoint<"/admin/stop-impersonating", {
+      method: "POST";
+      requireHeaders: true;
+    }, {
+      session: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        userId: string;
+        expiresAt: Date;
+        token: string;
+        ipAddress?: string | null | undefined;
+        userAgent?: string | null | undefined;
+      } & Record<string, any>;
+      user: {
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        email: string;
+        emailVerified: boolean;
+        name: string;
+        image?: string | null | undefined;
+      } & Record<string, any>;
+    }>;
+    revokeUserSession: better_call0.StrictEndpoint<"/admin/revoke-user-session", {
+      method: "POST";
+      body: zod.ZodObject<{
+        sessionToken: zod.ZodString;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      success: {
+                        type: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      success: boolean;
+    }>;
+    revokeUserSessions: better_call0.StrictEndpoint<"/admin/revoke-user-sessions", {
+      method: "POST";
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      success: {
+                        type: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      success: boolean;
+    }>;
+    removeUser: better_call0.StrictEndpoint<"/admin/remove-user", {
+      method: "POST";
+      body: zod.ZodObject<{
+        userId: zod.ZodCoercedString<unknown>;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      success: {
+                        type: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      success: boolean;
+    }>;
+    setUserPassword: better_call0.StrictEndpoint<"/admin/set-user-password", {
+      method: "POST";
+      body: zod.ZodObject<{
+        newPassword: zod.ZodString;
+        userId: zod.ZodCoercedString<unknown>;
+      }, zod_v4_core0.$strip>;
+      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+        session: {
+          user: better_auth_plugins0.UserWithRole;
+          session: {
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+          };
+        };
+      }>)[];
+      metadata: {
+        openapi: {
+          operationId: string;
+          summary: string;
+          description: string;
+          responses: {
+            200: {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      status: {
+                        type: string;
+                      };
+                    };
+                  };
+                };
+              };
+            };
+          };
+        };
+      };
+    }, {
+      status: boolean;
+    }>;
+    userHasPermission: better_call0.StrictEndpoint<"/admin/has-permission", {
+      method: "POST";
+      body: zod.ZodIntersection<zod.ZodObject<{
+        userId: zod.ZodOptional<zod.ZodCoercedString<unknown>>;
+        role: zod.ZodOptional<zod.ZodString>;
+      }, zod_v4_core0.$strip>, zod.ZodXor<readonly [zod.ZodObject<{
+        permission: zod.ZodRecord<zod.ZodString, zod.ZodArray<zod.ZodString>>;
+      }, zod_v4_core0.$strip>, zod.ZodObject<{
+        permissions: zod.ZodRecord<zod.ZodString, zod.ZodArray<zod.ZodString>>;
+      }, zod_v4_core0.$strip>]>>;
+      metadata: {
+        openapi: {
+          description: string;
+          requestBody: {
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object";
+                  properties: {
+                    permissions: {
+                      type: string;
+                      description: string;
+                    };
+                  };
+                  required: string[];
+                };
+              };
+            };
+          };
+          responses: {
+            "200": {
+              description: string;
+              content: {
+                "application/json": {
+                  schema: {
+                    type: "object";
+                    properties: {
+                      error: {
+                        type: string;
+                      };
+                      success: {
+                        type: string;
+                      };
+                    };
+                    required: string[];
+                  };
+                };
+              };
+            };
+          };
+        };
+        $Infer: {
+          body: {
+            permissions: { [key in keyof (Options["ac"] extends AccessControl<infer S extends better_auth_client0.Statements> ? S : {
+              readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "impersonate-admins", "delete", "set-password", "get", "update"];
+              readonly session: readonly ["list", "revoke", "delete"];
+            })]?: ((Options["ac"] extends AccessControl<infer S_1 extends better_auth_client0.Statements> ? S_1 : {
+              readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "impersonate-admins", "delete", "set-password", "get", "update"];
+              readonly session: readonly ["list", "revoke", "delete"];
+            })[key] extends readonly unknown[] ? better_auth_client0.ArrayElement<(Options["ac"] extends AccessControl<infer S_2 extends better_auth_client0.Statements> ? S_2 : {
+              readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "impersonate-admins", "delete", "set-password", "get", "update"];
+              readonly session: readonly ["list", "revoke", "delete"];
+            })[key]> : never)[] | undefined };
+          } & {
+            userId?: string | undefined;
+            role?: better_auth_plugins0.InferAdminRolesFromOption<Options> | undefined;
+          };
+        };
+      };
+    }, {
+      error: null;
+      success: boolean;
+    }>;
+  };
+  $ERROR_CODES: {
+    USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL: better_auth0.RawError<"USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL">;
+    FAILED_TO_CREATE_USER: better_auth0.RawError<"FAILED_TO_CREATE_USER">;
+    USER_ALREADY_EXISTS: better_auth0.RawError<"USER_ALREADY_EXISTS">;
+    YOU_CANNOT_BAN_YOURSELF: better_auth0.RawError<"YOU_CANNOT_BAN_YOURSELF">;
+    YOU_ARE_NOT_ALLOWED_TO_CHANGE_USERS_ROLE: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CHANGE_USERS_ROLE">;
+    YOU_ARE_NOT_ALLOWED_TO_CREATE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CREATE_USERS">;
+    YOU_ARE_NOT_ALLOWED_TO_LIST_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_LIST_USERS">;
+    YOU_ARE_NOT_ALLOWED_TO_LIST_USERS_SESSIONS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_LIST_USERS_SESSIONS">;
+    YOU_ARE_NOT_ALLOWED_TO_BAN_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_BAN_USERS">;
+    YOU_ARE_NOT_ALLOWED_TO_IMPERSONATE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_IMPERSONATE_USERS">;
+    YOU_ARE_NOT_ALLOWED_TO_REVOKE_USERS_SESSIONS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_REVOKE_USERS_SESSIONS">;
+    YOU_ARE_NOT_ALLOWED_TO_DELETE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_DELETE_USERS">;
+    YOU_ARE_NOT_ALLOWED_TO_SET_USERS_PASSWORD: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_SET_USERS_PASSWORD">;
+    BANNED_USER: better_auth0.RawError<"BANNED_USER">;
+    YOU_ARE_NOT_ALLOWED_TO_GET_USER: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_GET_USER">;
+    NO_DATA_TO_UPDATE: better_auth0.RawError<"NO_DATA_TO_UPDATE">;
+    YOU_ARE_NOT_ALLOWED_TO_UPDATE_USERS: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_UPDATE_USERS">;
+    YOU_CANNOT_REMOVE_YOURSELF: better_auth0.RawError<"YOU_CANNOT_REMOVE_YOURSELF">;
+    YOU_ARE_NOT_ALLOWED_TO_SET_NON_EXISTENT_VALUE: better_auth0.RawError<"YOU_ARE_NOT_ALLOWED_TO_SET_NON_EXISTENT_VALUE">;
+    YOU_CANNOT_IMPERSONATE_ADMINS: better_auth0.RawError<"YOU_CANNOT_IMPERSONATE_ADMINS">;
+    INVALID_ROLE_TYPE: better_auth0.RawError<"INVALID_ROLE_TYPE">;
+  };
+  schema: {
+    user: {
+      fields: {
+        role: {
+          type: "string";
+          required: false;
+          input: false;
+        };
+        banned: {
+          type: "boolean";
+          defaultValue: false;
+          required: false;
+          input: false;
+        };
+        banReason: {
+          type: "string";
+          required: false;
+          input: false;
+        };
+        banExpires: {
+          type: "date";
+          required: false;
+          input: false;
+        };
+      };
+    };
+    session: {
+      fields: {
+        impersonatedBy: {
+          type: "string";
+          required: false;
+        };
+      };
+    };
+  };
+  options: NoInfer<Options>;
+};
+//#endregion
+export { AdminClientOptions, adminPlugin };