better-auth 1.2.6-beta.7 → 1.2.7-beta.1

package/dist/client/plugins/index.d.cts

@@ -4,14 +4,14 @@ import { AccessControl, Role, Statements } from '../../plugins/access/index.cjs'
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { BetterFetch, BetterFetchOption } from '@better-fetch/fetch';
 import { organization, InferMember, InferInvitation, Team, Organization, Member, Invitation } from '../../plugins/organization/index.cjs';
-import { b as Prettify } from '../../shared/better-auth.Bi8FQwDD.cjs';
+import { P as Prettify } from '../../shared/better-auth.CYegVoq1.cjs';
 import { username } from '../../plugins/username/index.cjs';
 import { Passkey, passkey } from '../../plugins/passkey/index.cjs';
 export { twoFactorClient } from '../../plugins/two-factor/index.cjs';
 import { magicLink } from '../../plugins/magic-link/index.cjs';
 import { phoneNumber } from '../../plugins/phone-number/index.cjs';
 import { anonymous } from '../../plugins/anonymous/index.cjs';
-import { T as FieldAttribute, f as BetterAuthOptions, B as BetterAuthPlugin } from '../../shared/better-auth.BiQsvaIP.cjs';
+import { F as FieldAttribute, f as BetterAuthOptions, B as BetterAuthPlugin } from '../../shared/better-auth.BcU1Kjyq.cjs';
 import { admin } from '../../plugins/admin/index.cjs';
 import { genericOAuth } from '../../plugins/generic-oauth/index.cjs';
 import { jwt } from '../../plugins/jwt/index.cjs';
@@ -20,12 +20,13 @@ import { emailOTP } from '../../plugins/email-otp/index.cjs';
 import { Store } from '../../types/index.cjs';
 import { sso } from '../../plugins/sso/index.cjs';
 import { oidcProvider } from '../../plugins/oidc-provider/index.cjs';
-import { a as apiKey } from '../../shared/better-auth.DWRligF8.cjs';
+import { a as apiKey } from '../../shared/better-auth.CT9J6rD-.cjs';
+import { oneTimeToken } from '../../plugins/one-time-token/index.cjs';
 export * from '@simplewebauthn/server';
 import 'zod';
 import 'better-call';
 import '../../plugins/organization/access/index.cjs';
-import '../../shared/better-auth.B2Fw1vhH.cjs';
+import '../../shared/better-auth.DTiSPWEk.cjs';
 import 'jose';
 import 'kysely';
 import 'better-sqlite3';
@@ -74,7 +75,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any> : {
+            } : {
                 members: InferMember<O>[];
                 invitations: InferInvitation<O>[];
             } & {
@@ -84,7 +85,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any>;
+            };
             Organization: Organization;
             Invitation: InferInvitation<O>;
             Member: InferMember<O>;
@@ -93,19 +94,47 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
         organization: {
             checkRolePermission: <R extends O extends {
                 roles: any;
-            } ? keyof O["roles"] : "admin" | "member" | "owner">(data: {
-                role: R;
+            } ? keyof O["roles"] : "admin" | "member" | "owner">(data: ({
+                /**
+                 * @deprecated Use `permissions` instead
+                 */
                 permission: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly organization: readonly ["update", "delete"];
                     readonly member: readonly ["create", "update", "delete"];
                     readonly invitation: readonly ["create", "cancel"];
                     readonly team: readonly ["create", "update", "delete"];
-                })]?: (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permissions?: never;
+            } | {
+                permissions: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly organization: readonly ["update", "delete"];
                     readonly member: readonly ["create", "update", "delete"];
                     readonly invitation: readonly ["create", "cancel"];
                     readonly team: readonly ["create", "update", "delete"];
-                })[key][number][]; };
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permission?: never;
+            }) & {
+                role: R;
             }) => boolean;
         };
     };
@@ -121,7 +150,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any> & {
+            } & {
                 members: (Member & {
                     user: {
                         id: string;
@@ -138,7 +167,14 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
             refetch: () => void;
         }> & object;
         listOrganizations: nanostores.PreinitializedWritableAtom<{
-            data: Organization[] | null;
+            data: {
+                id: string;
+                name: string;
+                createdAt: Date;
+                slug: string;
+                metadata?: any;
+                logo?: string | null | undefined;
+            }[] | null;
             error: null | _better_fetch_fetch.BetterFetchError;
             isPending: boolean;
             isRefetching: boolean;
@@ -453,15 +489,35 @@ declare const adminClient: <O extends AdminClientOptions>(options?: O) => {
         admin: {
             checkRolePermission: <R extends O extends {
                 roles: any;
-            } ? keyof O["roles"] : "admin" | "user">(data: {
-                role: R;
+            } ? keyof O["roles"] : "admin" | "user">(data: ({
+                /**
+                 * @deprecated Use `permissions` instead
+                 */
                 permission: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
                     readonly session: readonly ["list", "revoke", "delete"];
-                })]?: (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
                     readonly session: readonly ["list", "revoke", "delete"];
-                })[key][number][]; };
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permissions?: never;
+            } | {
+                permissions: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permission?: never;
+            }) & {
+                role: R;
             }) => boolean;
         };
     };
@@ -531,11 +587,11 @@ interface GoogleOneTapOptions {
      */
     uxMode?: "popup" | "redirect";
     /**
-     * The context to use for the Google One Tap flow
+     * The context to use for the Google One Tap flow. See https://developers.google.com/identity/gsi/web/reference/js-reference
      *
      * @default "signin"
      */
-    context?: string;
+    context?: "signin" | "signup" | "use";
     /**
      * Additional configuration options to pass to the Google One Tap API.
      */
@@ -618,4 +674,9 @@ declare const apiKeyClient: () => {
     };
 };
 
-export { type GoogleOneTapActionOptions, type GoogleOneTapOptions, InferServerPlugin, adminClient, anonymousClient, apiKeyClient, customSessionClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, jwtClient, magicLinkClient, multiSessionClient, oidcClient, oneTapClient, organizationClient, passkeyClient, phoneNumberClient, ssoClient, usernameClient };
+declare const oneTimeTokenClient: () => {
+    id: "one-time-token";
+    $InferServerPlugin: ReturnType<typeof oneTimeToken>;
+};
+
+export { type GoogleOneTapActionOptions, type GoogleOneTapOptions, InferServerPlugin, adminClient, anonymousClient, apiKeyClient, customSessionClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, jwtClient, magicLinkClient, multiSessionClient, oidcClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, ssoClient, usernameClient };

package/dist/client/plugins/index.d.mts

@@ -4,14 +4,14 @@ import { AccessControl, Role, Statements } from '../../plugins/access/index.mjs'
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { BetterFetch, BetterFetchOption } from '@better-fetch/fetch';
 import { organization, InferMember, InferInvitation, Team, Organization, Member, Invitation } from '../../plugins/organization/index.mjs';
-import { b as Prettify } from '../../shared/better-auth.Bi8FQwDD.mjs';
+import { P as Prettify } from '../../shared/better-auth.CYegVoq1.mjs';
 import { username } from '../../plugins/username/index.mjs';
 import { Passkey, passkey } from '../../plugins/passkey/index.mjs';
 export { twoFactorClient } from '../../plugins/two-factor/index.mjs';
 import { magicLink } from '../../plugins/magic-link/index.mjs';
 import { phoneNumber } from '../../plugins/phone-number/index.mjs';
 import { anonymous } from '../../plugins/anonymous/index.mjs';
-import { T as FieldAttribute, f as BetterAuthOptions, B as BetterAuthPlugin } from '../../shared/better-auth.D-oLmHIj.mjs';
+import { F as FieldAttribute, f as BetterAuthOptions, B as BetterAuthPlugin } from '../../shared/better-auth.DQ7OSJbI.mjs';
 import { admin } from '../../plugins/admin/index.mjs';
 import { genericOAuth } from '../../plugins/generic-oauth/index.mjs';
 import { jwt } from '../../plugins/jwt/index.mjs';
@@ -20,12 +20,13 @@ import { emailOTP } from '../../plugins/email-otp/index.mjs';
 import { Store } from '../../types/index.mjs';
 import { sso } from '../../plugins/sso/index.mjs';
 import { oidcProvider } from '../../plugins/oidc-provider/index.mjs';
-import { a as apiKey } from '../../shared/better-auth.wcdMj2cT.mjs';
+import { a as apiKey } from '../../shared/better-auth.DIt2e3lu.mjs';
+import { oneTimeToken } from '../../plugins/one-time-token/index.mjs';
 export * from '@simplewebauthn/server';
 import 'zod';
 import 'better-call';
 import '../../plugins/organization/access/index.mjs';
-import '../../shared/better-auth.bKwabe3I.mjs';
+import '../../shared/better-auth.B88xucNq.mjs';
 import 'jose';
 import 'kysely';
 import 'better-sqlite3';
@@ -74,7 +75,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any> : {
+            } : {
                 members: InferMember<O>[];
                 invitations: InferInvitation<O>[];
             } & {
@@ -84,7 +85,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any>;
+            };
             Organization: Organization;
             Invitation: InferInvitation<O>;
             Member: InferMember<O>;
@@ -93,19 +94,47 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
         organization: {
             checkRolePermission: <R extends O extends {
                 roles: any;
-            } ? keyof O["roles"] : "admin" | "member" | "owner">(data: {
-                role: R;
+            } ? keyof O["roles"] : "admin" | "member" | "owner">(data: ({
+                /**
+                 * @deprecated Use `permissions` instead
+                 */
                 permission: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly organization: readonly ["update", "delete"];
                     readonly member: readonly ["create", "update", "delete"];
                     readonly invitation: readonly ["create", "cancel"];
                     readonly team: readonly ["create", "update", "delete"];
-                })]?: (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permissions?: never;
+            } | {
+                permissions: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly organization: readonly ["update", "delete"];
                     readonly member: readonly ["create", "update", "delete"];
                     readonly invitation: readonly ["create", "cancel"];
                     readonly team: readonly ["create", "update", "delete"];
-                })[key][number][]; };
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permission?: never;
+            }) & {
+                role: R;
             }) => boolean;
         };
     };
@@ -121,7 +150,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any> & {
+            } & {
                 members: (Member & {
                     user: {
                         id: string;
@@ -138,7 +167,14 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
             refetch: () => void;
         }> & object;
         listOrganizations: nanostores.PreinitializedWritableAtom<{
-            data: Organization[] | null;
+            data: {
+                id: string;
+                name: string;
+                createdAt: Date;
+                slug: string;
+                metadata?: any;
+                logo?: string | null | undefined;
+            }[] | null;
             error: null | _better_fetch_fetch.BetterFetchError;
             isPending: boolean;
             isRefetching: boolean;
@@ -453,15 +489,35 @@ declare const adminClient: <O extends AdminClientOptions>(options?: O) => {
         admin: {
             checkRolePermission: <R extends O extends {
                 roles: any;
-            } ? keyof O["roles"] : "admin" | "user">(data: {
-                role: R;
+            } ? keyof O["roles"] : "admin" | "user">(data: ({
+                /**
+                 * @deprecated Use `permissions` instead
+                 */
                 permission: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
                     readonly session: readonly ["list", "revoke", "delete"];
-                })]?: (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
                     readonly session: readonly ["list", "revoke", "delete"];
-                })[key][number][]; };
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permissions?: never;
+            } | {
+                permissions: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permission?: never;
+            }) & {
+                role: R;
             }) => boolean;
         };
     };
@@ -531,11 +587,11 @@ interface GoogleOneTapOptions {
      */
     uxMode?: "popup" | "redirect";
     /**
-     * The context to use for the Google One Tap flow
+     * The context to use for the Google One Tap flow. See https://developers.google.com/identity/gsi/web/reference/js-reference
      *
      * @default "signin"
      */
-    context?: string;
+    context?: "signin" | "signup" | "use";
     /**
      * Additional configuration options to pass to the Google One Tap API.
      */
@@ -618,4 +674,9 @@ declare const apiKeyClient: () => {
     };
 };
 
-export { type GoogleOneTapActionOptions, type GoogleOneTapOptions, InferServerPlugin, adminClient, anonymousClient, apiKeyClient, customSessionClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, jwtClient, magicLinkClient, multiSessionClient, oidcClient, oneTapClient, organizationClient, passkeyClient, phoneNumberClient, ssoClient, usernameClient };
+declare const oneTimeTokenClient: () => {
+    id: "one-time-token";
+    $InferServerPlugin: ReturnType<typeof oneTimeToken>;
+};
+
+export { type GoogleOneTapActionOptions, type GoogleOneTapOptions, InferServerPlugin, adminClient, anonymousClient, apiKeyClient, customSessionClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, jwtClient, magicLinkClient, multiSessionClient, oidcClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, ssoClient, usernameClient };

package/dist/client/plugins/index.d.ts

@@ -4,14 +4,14 @@ import { AccessControl, Role, Statements } from '../../plugins/access/index.js';
 import * as _better_fetch_fetch from '@better-fetch/fetch';
 import { BetterFetch, BetterFetchOption } from '@better-fetch/fetch';
 import { organization, InferMember, InferInvitation, Team, Organization, Member, Invitation } from '../../plugins/organization/index.js';
-import { b as Prettify } from '../../shared/better-auth.Bi8FQwDD.js';
+import { P as Prettify } from '../../shared/better-auth.CYegVoq1.js';
 import { username } from '../../plugins/username/index.js';
 import { Passkey, passkey } from '../../plugins/passkey/index.js';
 export { twoFactorClient } from '../../plugins/two-factor/index.js';
 import { magicLink } from '../../plugins/magic-link/index.js';
 import { phoneNumber } from '../../plugins/phone-number/index.js';
 import { anonymous } from '../../plugins/anonymous/index.js';
-import { T as FieldAttribute, f as BetterAuthOptions, B as BetterAuthPlugin } from '../../shared/better-auth.DU2QNVc_.js';
+import { F as FieldAttribute, f as BetterAuthOptions, B as BetterAuthPlugin } from '../../shared/better-auth.CA2hFK4N.js';
 import { admin } from '../../plugins/admin/index.js';
 import { genericOAuth } from '../../plugins/generic-oauth/index.js';
 import { jwt } from '../../plugins/jwt/index.js';
@@ -20,12 +20,13 @@ import { emailOTP } from '../../plugins/email-otp/index.js';
 import { Store } from '../../types/index.js';
 import { sso } from '../../plugins/sso/index.js';
 import { oidcProvider } from '../../plugins/oidc-provider/index.js';
-import { a as apiKey } from '../../shared/better-auth.BWp5dztg.js';
+import { a as apiKey } from '../../shared/better-auth.CmN4mlPh.js';
+import { oneTimeToken } from '../../plugins/one-time-token/index.js';
 export * from '@simplewebauthn/server';
 import 'zod';
 import 'better-call';
 import '../../plugins/organization/access/index.js';
-import '../../shared/better-auth.BANAxdkL.js';
+import '../../shared/better-auth.DNTAFSt1.js';
 import 'jose';
 import 'kysely';
 import 'better-sqlite3';
@@ -74,7 +75,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any> : {
+            } : {
                 members: InferMember<O>[];
                 invitations: InferInvitation<O>[];
             } & {
@@ -84,7 +85,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any>;
+            };
             Organization: Organization;
             Invitation: InferInvitation<O>;
             Member: InferMember<O>;
@@ -93,19 +94,47 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
         organization: {
             checkRolePermission: <R extends O extends {
                 roles: any;
-            } ? keyof O["roles"] : "admin" | "member" | "owner">(data: {
-                role: R;
+            } ? keyof O["roles"] : "admin" | "member" | "owner">(data: ({
+                /**
+                 * @deprecated Use `permissions` instead
+                 */
                 permission: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly organization: readonly ["update", "delete"];
                     readonly member: readonly ["create", "update", "delete"];
                     readonly invitation: readonly ["create", "cancel"];
                     readonly team: readonly ["create", "update", "delete"];
-                })]?: (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permissions?: never;
+            } | {
+                permissions: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly organization: readonly ["update", "delete"];
                     readonly member: readonly ["create", "update", "delete"];
                     readonly invitation: readonly ["create", "cancel"];
                     readonly team: readonly ["create", "update", "delete"];
-                })[key][number][]; };
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly organization: readonly ["update", "delete"];
+                    readonly member: readonly ["create", "update", "delete"];
+                    readonly invitation: readonly ["create", "cancel"];
+                    readonly team: readonly ["create", "update", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permission?: never;
+            }) & {
+                role: R;
             }) => boolean;
         };
     };
@@ -121,7 +150,7 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
                 slug: string;
                 metadata?: any;
                 logo?: string | null | undefined;
-            } & Record<string, any> & {
+            } & {
                 members: (Member & {
                     user: {
                         id: string;
@@ -138,7 +167,14 @@ declare const organizationClient: <O extends OrganizationClientOptions>(options?
             refetch: () => void;
         }> & object;
         listOrganizations: nanostores.PreinitializedWritableAtom<{
-            data: Organization[] | null;
+            data: {
+                id: string;
+                name: string;
+                createdAt: Date;
+                slug: string;
+                metadata?: any;
+                logo?: string | null | undefined;
+            }[] | null;
             error: null | _better_fetch_fetch.BetterFetchError;
             isPending: boolean;
             isRefetching: boolean;
@@ -453,15 +489,35 @@ declare const adminClient: <O extends AdminClientOptions>(options?: O) => {
         admin: {
             checkRolePermission: <R extends O extends {
                 roles: any;
-            } ? keyof O["roles"] : "admin" | "user">(data: {
-                role: R;
+            } ? keyof O["roles"] : "admin" | "user">(data: ({
+                /**
+                 * @deprecated Use `permissions` instead
+                 */
                 permission: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
                     readonly session: readonly ["list", "revoke", "delete"];
-                })]?: (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
                     readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
                     readonly session: readonly ["list", "revoke", "delete"];
-                })[key][number][]; };
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permissions?: never;
+            } | {
+                permissions: { [key in keyof (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })]?: ((O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key] extends readonly unknown[] ? (O["ac"] extends AccessControl<infer S extends Statements> ? S : {
+                    readonly user: readonly ["create", "list", "set-role", "ban", "impersonate", "delete", "set-password"];
+                    readonly session: readonly ["list", "revoke", "delete"];
+                })[key][number] : never)[] | undefined; };
+                permission?: never;
+            }) & {
+                role: R;
             }) => boolean;
         };
     };
@@ -531,11 +587,11 @@ interface GoogleOneTapOptions {
      */
     uxMode?: "popup" | "redirect";
     /**
-     * The context to use for the Google One Tap flow
+     * The context to use for the Google One Tap flow. See https://developers.google.com/identity/gsi/web/reference/js-reference
      *
      * @default "signin"
      */
-    context?: string;
+    context?: "signin" | "signup" | "use";
     /**
      * Additional configuration options to pass to the Google One Tap API.
      */
@@ -618,4 +674,9 @@ declare const apiKeyClient: () => {
     };
 };
 
-export { type GoogleOneTapActionOptions, type GoogleOneTapOptions, InferServerPlugin, adminClient, anonymousClient, apiKeyClient, customSessionClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, jwtClient, magicLinkClient, multiSessionClient, oidcClient, oneTapClient, organizationClient, passkeyClient, phoneNumberClient, ssoClient, usernameClient };
+declare const oneTimeTokenClient: () => {
+    id: "one-time-token";
+    $InferServerPlugin: ReturnType<typeof oneTimeToken>;
+};
+
+export { type GoogleOneTapActionOptions, type GoogleOneTapOptions, InferServerPlugin, adminClient, anonymousClient, apiKeyClient, customSessionClient, emailOTPClient, genericOAuthClient, getPasskeyActions, inferAdditionalFields, jwtClient, magicLinkClient, multiSessionClient, oidcClient, oneTapClient, oneTimeTokenClient, organizationClient, passkeyClient, phoneNumberClient, ssoClient, usernameClient };