better-auth 1.2.1-beta.7 → 1.2.1-beta.8

package/dist/shared/{better-auth.BSGhjwQl.d.cts → better-auth.CJ1sW1nP.d.cts}

@@ -1,8 +1,9 @@
-import { Subset, AuthortizeResponse, AccessControl, Role, Statements } from '../plugins/access/index.cjs';
+import { AccessControl, Role, Statements } from '../plugins/access/index.cjs';
 import { z } from 'zod';
 import * as better_call from 'better-call';
 import { b as Prettify } from './better-auth.Bi8FQwDD.cjs';
 import { U as User, S as Session, G as GenericEndpointContext } from './better-auth.C5lR-8io.cjs';
+import { defaultRoles } from '../plugins/organization/access/index.cjs';
 
 declare const organizationSchema: z.ZodObject<{
     id: z.ZodDefault<z.ZodString>;
@@ -150,90 +151,6 @@ type InferInvitation<O extends OrganizationOptions> = O["teams"] extends {
     teamId?: string;
 };
 
-declare const defaultRoles: {
-    admin: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-    owner: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-    member: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-};
-
 interface OrganizationOptions {
     /**
      * Configure whether new users are able to create new organizations.

package/dist/shared/{better-auth.So1syTlx.cjs → better-auth.CqrfZNPk.cjs}

@@ -7,8 +7,8 @@ require('./better-auth.DiSjtgs9.cjs');
 require('@better-auth/utils/base64');
 require('@better-auth/utils/hmac');
 require('./better-auth.CHyZMcYK.cjs');
-const crudTeam = require('./better-auth.DgJAmPzg.cjs');
-const statement = require('./better-auth.C9_rxJsh.cjs');
+const crudTeam = require('./better-auth.hiN7NHra.cjs');
+const plugins_organization_access_index = require('../plugins/organization/access/index.cjs');
 
 const shimContext = (originalObject, newContext) => {
   const shimmedObj = {};
@@ -64,7 +64,7 @@ const organization = (options) => {
     };
   }
   const roles = {
-    ...statement.defaultRoles,
+    ...plugins_organization_access_index.defaultRoles,
     ...options?.roles
   };
   const teamSchema = teamSupport ? {

package/dist/shared/{better-auth.CU8biKFT.d.ts → better-auth.DMF7ioFR.d.ts}

@@ -1,8 +1,9 @@
-import { Subset, AuthortizeResponse, AccessControl, Role, Statements } from '../plugins/access/index.js';
+import { AccessControl, Role, Statements } from '../plugins/access/index.js';
 import { z } from 'zod';
 import * as better_call from 'better-call';
 import { b as Prettify } from './better-auth.Bi8FQwDD.js';
 import { U as User, S as Session, G as GenericEndpointContext } from './better-auth.DRwwN3to.js';
+import { defaultRoles } from '../plugins/organization/access/index.js';
 
 declare const organizationSchema: z.ZodObject<{
     id: z.ZodDefault<z.ZodString>;
@@ -150,90 +151,6 @@ type InferInvitation<O extends OrganizationOptions> = O["teams"] extends {
     teamId?: string;
 };
 
-declare const defaultRoles: {
-    admin: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-    owner: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-    member: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-};
-
 interface OrganizationOptions {
     /**
      * Configure whether new users are able to create new organizations.

package/dist/shared/{better-auth.Do86a39J.d.mts → better-auth.DrdqHwS2.d.mts}

@@ -1,8 +1,9 @@
-import { Subset, AuthortizeResponse, AccessControl, Role, Statements } from '../plugins/access/index.mjs';
+import { AccessControl, Role, Statements } from '../plugins/access/index.mjs';
 import { z } from 'zod';
 import * as better_call from 'better-call';
 import { b as Prettify } from './better-auth.Bi8FQwDD.mjs';
 import { U as User, S as Session, G as GenericEndpointContext } from './better-auth.DHI5BUFl.mjs';
+import { defaultRoles } from '../plugins/organization/access/index.mjs';
 
 declare const organizationSchema: z.ZodObject<{
     id: z.ZodDefault<z.ZodString>;
@@ -150,90 +151,6 @@ type InferInvitation<O extends OrganizationOptions> = O["teams"] extends {
     teamId?: string;
 };
 
-declare const defaultRoles: {
-    admin: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-    owner: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-    member: {
-        authorize<K extends "organization" | "member" | "invitation" | "team">(request: K extends infer T extends keyof Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }> ? { [key in T]?: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>[key] | {
-            actions: Subset<"organization" | "member" | "invitation" | "team", {
-                readonly organization: readonly ["update", "delete"];
-                readonly member: readonly ["create", "update", "delete"];
-                readonly invitation: readonly ["create", "cancel"];
-                readonly team: readonly ["create", "update", "delete"];
-            }>[key];
-            connector: "OR" | "AND";
-        } | undefined; } : never, connector?: "OR" | "AND"): AuthortizeResponse;
-        statements: Subset<"organization" | "member" | "invitation" | "team", {
-            readonly organization: readonly ["update", "delete"];
-            readonly member: readonly ["create", "update", "delete"];
-            readonly invitation: readonly ["create", "cancel"];
-            readonly team: readonly ["create", "update", "delete"];
-        }>;
-    };
-};
-
 interface OrganizationOptions {
     /**
      * Configure whether new users are able to create new organizations.

package/dist/shared/{better-auth.DgJAmPzg.cjs → better-auth.hiN7NHra.cjs}

@@ -24,7 +24,7 @@ const cookies_index = require('../cookies/index.cjs');
 const date = require('./better-auth.C1hdVENX.cjs');
 const index = require('./better-auth.ANpbi45u.cjs');
 const parser = require('./better-auth.DhsGZ30Q.cjs');
-const statement = require('./better-auth.C9_rxJsh.cjs');
+const plugins_organization_access_index = require('../plugins/organization/access/index.cjs');
 
 const getOrgAdapter = (context, options) => {
   const adapter = context.adapter;
@@ -628,7 +628,7 @@ const ORGANIZATION_ERROR_CODES = {
 
 const hasPermission = (input) => {
   const roles = input.role.split(",");
-  const acRoles = input.options.roles || statement.defaultRoles;
+  const acRoles = input.options.roles || plugins_organization_access_index.defaultRoles;
   for (const role of roles) {
     const _role = acRoles[role];
     const result = _role?.authorize(input.permission);

package/dist/shared/{better-auth.Zq6lveA0.mjs → better-auth.jzWjCwdJ.mjs}

@@ -22,7 +22,7 @@ import { setSessionCookie } from '../cookies/index.mjs';
 import { g as getDate } from './better-auth.CW6D9eSx.mjs';
 import { B as BetterAuthError } from './better-auth.DdzSJf-n.mjs';
 import { p as parseJSON } from './better-auth.ffWeg50w.mjs';
-import { d as defaultRoles } from './better-auth.DOX3pFKZ.mjs';
+import { defaultRoles } from '../plugins/organization/access/index.mjs';
 
 const getOrgAdapter = (context, options) => {
   const adapter = context.adapter;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "better-auth",
-  "version": "1.2.1-beta.7",
+  "version": "1.2.1-beta.8",
   "description": "The most comprehensive authentication library for TypeScript.",
   "type": "module",
   "repository": {
@@ -401,6 +401,16 @@
         "default": "./dist/plugins/organization/index.cjs"
       }
     },
+    "./plugins/organization/access": {
+      "import": {
+        "types": "./dist/plugins/organization/access/index.d.ts",
+        "default": "./dist/plugins/organization/access/index.mjs"
+      },
+      "require": {
+        "types": "./dist/plugins/organization/access/index.d.cts",
+        "default": "./dist/plugins/organization/access/index.cjs"
+      }
+    },
     "./plugins/passkey": {
       "import": {
         "types": "./dist/plugins/passkey/index.d.ts",
@@ -552,6 +562,9 @@
       "plugins/organization": [
         "./dist/plugins/organization/index.d.ts"
       ],
+      "plugins/organization/access": [
+        "./dist/plugins/organization/access/index.d.ts"
+      ],
       "plugins/passkey": [
         "./dist/plugins/passkey/index.d.ts"
       ],