better-auth 1.7.0-beta.2 → 1.7.0-beta.4

package/dist/plugins/organization/client.d.mts

@@ -238,6 +238,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
     INVITATION_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"INVITATION_NOT_FOUND">;
     YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: _better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION">;
     EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: _better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION">;
+    EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: _better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION">;
     YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: _better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION">;
     INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: _better_auth_core_utils_error_codes0.RawError<"INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION">;
     YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: _better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE">;
@@ -272,6 +273,7 @@ declare const organizationClient: <CO extends OrganizationClientOptions>(options
     ROLE_NAME_IS_ALREADY_TAKEN: _better_auth_core_utils_error_codes0.RawError<"ROLE_NAME_IS_ALREADY_TAKEN">;
     CANNOT_DELETE_A_PRE_DEFINED_ROLE: _better_auth_core_utils_error_codes0.RawError<"CANNOT_DELETE_A_PRE_DEFINED_ROLE">;
     ROLE_IS_ASSIGNED_TO_MEMBERS: _better_auth_core_utils_error_codes0.RawError<"ROLE_IS_ASSIGNED_TO_MEMBERS">;
+    INVALID_TEAM_ID: _better_auth_core_utils_error_codes0.RawError<"INVALID_TEAM_ID">;
   };
 };
 declare const inferOrgAdditionalFields: <O extends {
@@ -370,4 +372,4 @@ declare const inferOrgAdditionalFields: <O extends {
   additionalFields: unknown;
 } ? K : never]: S_1[K] } : undefined : undefined : undefined : S;
 //#endregion
-export { clientSideHasPermission, inferOrgAdditionalFields, organizationClient };
+export { OrganizationClientOptions, clientSideHasPermission, inferOrgAdditionalFields, organizationClient };

package/dist/plugins/organization/client.mjs

@@ -71,7 +71,7 @@ const organizationClient = (options) => {
 			},
 			{
 				matcher(path) {
-					return path.startsWith("/organization");
+					return path === "/sign-out" || path.startsWith("/organization");
 				},
 				signal: "$activeOrgSignal"
 			},

package/dist/plugins/organization/error-codes.d.mts

@@ -25,6 +25,7 @@ declare const ORGANIZATION_ERROR_CODES: {
   INVITATION_NOT_FOUND: _better_auth_core_utils_error_codes0.RawError<"INVITATION_NOT_FOUND">;
   YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: _better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION">;
   EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: _better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION">;
+  EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: _better_auth_core_utils_error_codes0.RawError<"EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION">;
   YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: _better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION">;
   INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: _better_auth_core_utils_error_codes0.RawError<"INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION">;
   YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: _better_auth_core_utils_error_codes0.RawError<"YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE">;
@@ -59,6 +60,7 @@ declare const ORGANIZATION_ERROR_CODES: {
   ROLE_NAME_IS_ALREADY_TAKEN: _better_auth_core_utils_error_codes0.RawError<"ROLE_NAME_IS_ALREADY_TAKEN">;
   CANNOT_DELETE_A_PRE_DEFINED_ROLE: _better_auth_core_utils_error_codes0.RawError<"CANNOT_DELETE_A_PRE_DEFINED_ROLE">;
   ROLE_IS_ASSIGNED_TO_MEMBERS: _better_auth_core_utils_error_codes0.RawError<"ROLE_IS_ASSIGNED_TO_MEMBERS">;
+  INVALID_TEAM_ID: _better_auth_core_utils_error_codes0.RawError<"INVALID_TEAM_ID">;
 };
 //#endregion
 export { ORGANIZATION_ERROR_CODES };

package/dist/plugins/organization/error-codes.mjs

@@ -24,6 +24,7 @@ const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	INVITATION_NOT_FOUND: "Invitation not found",
 	YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION: "You are not the recipient of the invitation",
 	EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION: "Email verification required before accepting or rejecting invitation",
+	EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION: "Email verification required to view or list invitations for the session email",
 	YOU_ARE_NOT_ALLOWED_TO_CANCEL_THIS_INVITATION: "You are not allowed to cancel this invitation",
 	INVITER_IS_NO_LONGER_A_MEMBER_OF_THE_ORGANIZATION: "Inviter is no longer a member of the organization",
 	YOU_ARE_NOT_ALLOWED_TO_INVITE_USER_WITH_THIS_ROLE: "You are not allowed to invite a user with this role",
@@ -57,7 +58,8 @@ const ORGANIZATION_ERROR_CODES = defineErrorCodes({
 	INVALID_RESOURCE: "The provided permission includes an invalid resource",
 	ROLE_NAME_IS_ALREADY_TAKEN: "That role name is already taken",
 	CANNOT_DELETE_A_PRE_DEFINED_ROLE: "Cannot delete a pre-defined role",
-	ROLE_IS_ASSIGNED_TO_MEMBERS: "Cannot delete a role that is assigned to members. Please reassign the members to a different role first"
+	ROLE_IS_ASSIGNED_TO_MEMBERS: "Cannot delete a role that is assigned to members. Please reassign the members to a different role first",
+	INVALID_TEAM_ID: "Team id contains a reserved character"
 });
 //#endregion
 export { ORGANIZATION_ERROR_CODES };

package/dist/plugins/organization/routes/crud-access-control.d.mts

@@ -1,5 +1,5 @@
 import { InferAdditionalFieldsFromPluginOptions } from "../../../db/field.mjs";
-import { Statements, Subset } from "../../access/types.mjs";
+import { ExactRoleStatements } from "../../access/types.mjs";
 import { OrganizationOptions } from "../types.mjs";
 import { OrganizationRole } from "../schema.mjs";
 import * as better_call0 from "better-call";
@@ -91,7 +91,7 @@ declare const createOrgRole: <O extends OrganizationOptions>(options: O) => bett
     createdAt: Date;
     updatedAt?: Date | undefined;
   } & InferAdditionalFieldsFromPluginOptions<"organizationRole", O, false>;
-  statements: Subset<string, Statements>;
+  statements: ExactRoleStatements<Record<string, string[]>>;
 }>;
 declare const deleteOrgRole: <O extends OrganizationOptions>(options: O) => better_call0.StrictEndpoint<"/organization/delete-role", {
   method: "POST";

package/dist/plugins/organization/routes/crud-invites.d.mts

@@ -4,11 +4,18 @@ import { OrganizationOptions } from "../types.mjs";
 import { InferOrganizationRolesFromOption, InvitationStatus } from "../schema.mjs";
 import { defaultRoles } from "../access/statement.mjs";
 import * as _better_auth_core0 from "@better-auth/core";
+import { LiteralString } from "@better-auth/core";
 import * as _better_auth_core_db0 from "@better-auth/core/db";
 import * as better_call0 from "better-call";
 import * as z from "zod";
 
 //#region src/plugins/organization/routes/crud-invites.d.ts
+type DynamicOrganizationRole<O extends OrganizationOptions> = O extends {
+  dynamicAccessControl: {
+    enabled: true;
+  };
+} ? LiteralString : never;
+type OrganizationInvitationRole<O extends OrganizationOptions> = InferOrganizationRolesFromOption<O> | DynamicOrganizationRole<O>;
 declare const createInvitation: <O extends OrganizationOptions>(option: O) => better_call0.StrictEndpoint<"/organization/invite-member", {
   method: "POST";
   requireHeaders: true;
@@ -109,7 +116,7 @@ declare const createInvitation: <O extends OrganizationOptions>(option: O) => be
         /**
          * The role to assign to the user
          */
-        role: InferOrganizationRolesFromOption<O> | InferOrganizationRolesFromOption<O>[];
+        role: OrganizationInvitationRole<O> | OrganizationInvitationRole<O>[];
         /**
          * The organization ID to invite
          * the user to

package/dist/plugins/organization/routes/crud-invites.mjs

@@ -114,7 +114,7 @@ const createInvitation = (option) => {
 			email,
 			organizationId
 		});
-		if (alreadyInvited.length && !ctx.body.resend) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.USER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION);
+		if (alreadyInvited.length && !ctx.body.resend && !ctx.context.orgOptions.cancelPendingInvitationsOnReInvite) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.USER_IS_ALREADY_INVITED_TO_THIS_ORGANIZATION);
 		const organization = await adapter.findOrganizationById(organizationId);
 		if (!organization) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.ORGANIZATION_NOT_FOUND);
 		if (alreadyInvited.length && ctx.body.resend) {
@@ -155,6 +155,9 @@ const createInvitation = (option) => {
 			member
 		}, ctx.context) : ctx.context.orgOptions.invitationLimit ?? 100;
 		if ((await adapter.findPendingInvitations({ organizationId })).length >= invitationLimit) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.INVITATION_LIMIT_REACHED);
+		if (ctx.context.orgOptions.teams?.enabled && "teamId" in ctx.body && ctx.body.teamId) {
+			if ((typeof ctx.body.teamId === "string" ? [ctx.body.teamId] : ctx.body.teamId).some((id) => id.includes(","))) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.INVALID_TEAM_ID);
+		}
 		if (ctx.context.orgOptions.teams && ctx.context.orgOptions.teams.enabled && typeof ctx.context.orgOptions.teams.maximumMembersPerTeam !== "undefined" && "teamId" in ctx.body && ctx.body.teamId) {
 			const teamIds = typeof ctx.body.teamId === "string" ? [ctx.body.teamId] : ctx.body.teamId;
 			for (const teamId of teamIds) {
@@ -244,7 +247,7 @@ const acceptInvitation = (options) => createAuthEndpoint("/organization/accept-i
 	const invitation = await adapter.findInvitationById(ctx.body.invitationId);
 	if (!invitation || invitation.expiresAt < /* @__PURE__ */ new Date() || invitation.status !== "pending") throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.INVITATION_NOT_FOUND);
 	if (invitation.email.toLowerCase() !== session.user.email.toLowerCase()) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION);
-	if (ctx.context.orgOptions.requireEmailVerificationOnInvitation && !session.user.emailVerified) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION);
+	if ((ctx.context.orgOptions.requireEmailVerificationOnInvitation ?? true) && !session.user.emailVerified) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION);
 	const membershipLimit = ctx.context.orgOptions?.membershipLimit || 100;
 	const membersCount = await adapter.countMembers({ organizationId: invitation.organizationId });
 	const organization = await adapter.findOrganizationById(invitation.organizationId);
@@ -333,7 +336,7 @@ const rejectInvitation = (options) => createAuthEndpoint("/organization/reject-i
 		code: "INVITATION_NOT_FOUND"
 	});
 	if (invitation.email.toLowerCase() !== session.user.email.toLowerCase()) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION);
-	if (ctx.context.orgOptions.requireEmailVerificationOnInvitation && !session.user.emailVerified) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION);
+	if ((ctx.context.orgOptions.requireEmailVerificationOnInvitation ?? true) && !session.user.emailVerified) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.EMAIL_VERIFICATION_REQUIRED_BEFORE_ACCEPTING_OR_REJECTING_INVITATION);
 	const organization = await adapter.findOrganizationById(invitation.organizationId);
 	if (!organization) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.ORGANIZATION_NOT_FOUND);
 	if (options?.organizationHooks?.beforeRejectInvitation) await options?.organizationHooks.beforeRejectInvitation({
@@ -452,6 +455,7 @@ const getInvitation = (options) => createAuthEndpoint("/organization/get-invitat
 	const invitation = await adapter.findInvitationById(ctx.query.id);
 	if (!invitation || invitation.status !== "pending" || invitation.expiresAt < /* @__PURE__ */ new Date()) throw APIError.fromStatus("BAD_REQUEST", { message: "Invitation not found!" });
 	if (invitation.email.toLowerCase() !== session.user.email.toLowerCase()) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.YOU_ARE_NOT_THE_RECIPIENT_OF_THE_INVITATION);
+	if ((ctx.context.orgOptions.requireEmailVerificationOnInvitation ?? true) && !session.user.emailVerified) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION);
 	const organization = await adapter.findOrganizationById(invitation.organizationId);
 	if (!organization) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.ORGANIZATION_NOT_FOUND);
 	const member = await adapter.findMemberByOrgId({
@@ -537,6 +541,7 @@ const listUserInvitations = (options) => createAuthEndpoint("/organization/list-
 }, async (ctx) => {
 	const session = await getSessionFromCtx(ctx);
 	if (ctx.request && ctx.query?.email) throw APIError.fromStatus("BAD_REQUEST", { message: "User email cannot be passed for client side API calls." });
+	if (session && (ctx.context.orgOptions.requireEmailVerificationOnInvitation ?? true) && !session.user.emailVerified) throw APIError.from("FORBIDDEN", ORGANIZATION_ERROR_CODES.EMAIL_VERIFICATION_REQUIRED_FOR_INVITATION);
 	const userEmail = session?.user.email || ctx.query?.email;
 	if (!userEmail) throw APIError.fromStatus("BAD_REQUEST", { message: "Missing session headers, or email query parameter." });
 	const pendingInvitations = (await getOrgAdapter(ctx.context, options).listUserInvitations(userEmail)).filter((inv) => inv.status === "pending");

package/dist/plugins/organization/routes/crud-org.d.mts

@@ -15,7 +15,7 @@ declare const createOrganization: <O extends OrganizationOptions>(options?: O |
     name: z.ZodString;
     slug: z.ZodString;
     userId: z.ZodOptional<z.ZodCoercedString<unknown>>;
-    logo: z.ZodOptional<z.ZodString>;
+    logo: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     keepCurrentActiveOrganization: z.ZodOptional<z.ZodBoolean>;
   }, z.core.$strip>;
@@ -55,7 +55,7 @@ declare const createOrganization: <O extends OrganizationOptions>(options?: O |
         name: string;
         slug: string;
         userId?: string | undefined;
-        logo?: string | undefined;
+        logo?: string | null | undefined;
         metadata?: Record<string, any> | undefined;
         keepCurrentActiveOrganization?: boolean | undefined;
       };
@@ -165,7 +165,7 @@ declare const updateOrganization: <O extends OrganizationOptions>(options?: O |
     data: z.ZodObject<{
       name: z.ZodOptional<z.ZodOptional<z.ZodString>>;
       slug: z.ZodOptional<z.ZodOptional<z.ZodString>>;
-      logo: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+      logo: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodString>>>;
       metadata: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>>;
     }, z.core.$strip>;
     organizationId: z.ZodOptional<z.ZodString>;
@@ -207,7 +207,7 @@ declare const updateOrganization: <O extends OrganizationOptions>(options?: O |
         data: {
           name?: string | undefined;
           slug?: string | undefined;
-          logo?: string | undefined;
+          logo?: string | null | undefined;
           metadata?: Record<string, any> | undefined;
         } & Partial<InferAdditionalFieldsFromPluginOptions<"organization", O>>;
         organizationId?: string | undefined;

package/dist/plugins/organization/routes/crud-org.mjs

@@ -13,7 +13,7 @@ const baseOrganizationSchema = z.object({
 	name: z.string().min(1).meta({ description: "The name of the organization" }),
 	slug: z.string().min(1).meta({ description: "The slug of the organization" }),
 	userId: z.coerce.string().meta({ description: "The user id of the organization creator. If not provided, the current user will be used. Should only be used by admins or when called by the server. server-only. Eg: \"user-id\"" }).optional(),
-	logo: z.string().meta({ description: "The logo of the organization" }).optional(),
+	logo: z.string().meta({ description: "The logo of the organization" }).nullish(),
 	metadata: z.record(z.string(), z.any()).meta({ description: "The metadata of the organization" }).optional(),
 	keepCurrentActiveOrganization: z.boolean().meta({ description: "Whether to keep the current active organization active after creating a new one. Eg: true" }).optional()
 });
@@ -160,7 +160,7 @@ const checkOrganizationSlug = (options) => createAuthEndpoint("/organization/che
 const baseUpdateOrganizationSchema = z.object({
 	name: z.string().min(1).meta({ description: "The name of the organization" }).optional(),
 	slug: z.string().min(1).meta({ description: "The slug of the organization" }).optional(),
-	logo: z.string().meta({ description: "The logo of the organization" }).optional(),
+	logo: z.string().meta({ description: "The logo of the organization" }).nullish(),
 	metadata: z.record(z.string(), z.any()).meta({ description: "The metadata of the organization" }).optional()
 });
 const updateOrganization = (options) => {

package/dist/plugins/organization/routes/crud-team.mjs

@@ -376,7 +376,7 @@ const setActiveTeam = (options) => createAuthEndpoint("/organization/set-active-
 	requireHeaders: true,
 	use: [orgSessionMiddleware, orgMiddleware],
 	metadata: { openapi: {
-		description: "Set the active team",
+		description: "Set the active team for the current active organization",
 		responses: { "200": {
 			description: "Success",
 			content: { "application/json": { schema: {
@@ -403,7 +403,12 @@ const setActiveTeam = (options) => createAuthEndpoint("/organization/set-active-
 		if (!sessionTeamId) return ctx.json(null);
 		else teamId = sessionTeamId;
 	} else teamId = ctx.body.teamId;
-	const team = await adapter.findTeamById({ teamId });
+	const activeOrganizationId = session.session.activeOrganizationId;
+	if (!activeOrganizationId) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.NO_ACTIVE_ORGANIZATION);
+	const team = await adapter.findTeamById({
+		teamId,
+		organizationId: activeOrganizationId
+	});
 	if (!team) throw APIError.from("BAD_REQUEST", ORGANIZATION_ERROR_CODES.TEAM_NOT_FOUND);
 	if (!await adapter.findTeamMember({
 		teamId,

package/dist/plugins/organization/schema.d.mts

@@ -294,7 +294,7 @@ type InvitationInput = z.input<typeof invitationSchema>;
 type MemberInput = z.input<typeof memberSchema>;
 type TeamMemberInput = z.input<typeof teamMemberSchema>;
 type OrganizationInput = z.input<typeof organizationSchema>;
-type TeamInput = z.infer<typeof teamSchema>;
+type TeamInput = z.input<typeof teamSchema>;
 type OrganizationRole = z.infer<typeof organizationRoleSchema>;
 declare const defaultRolesSchema: z.ZodUnion<readonly [z.ZodEnum<{
   admin: "admin";

package/dist/plugins/organization/types.d.mts

@@ -165,9 +165,19 @@ interface OrganizationOptions {
    */
   cancelPendingInvitationsOnReInvite?: boolean | undefined;
   /**
-   * Require email verification on accepting or rejecting an invitation
+   * Require email verification on session-authenticated recipient invitation
+   * calls (accept, reject, get, list). Defaults to `true` so unverified
+   * accounts registered against a victim's email cannot accept, read, or
+   * enumerate invitations targeted at that email. Server-side
+   * `listUserInvitations` calls without a session (caller passes
+   * `ctx.query.email`) continue to bypass the gate because the caller is
+   * trusted. Set to `false` for backward compatibility on apps that do not
+   * require email verification; understand the takeover risk before doing so.
    *
-   * @default false
+   * @default true
+   *
+   * @deprecated The option will be removed on the next minor; the gate will
+   * become unconditional. Plan to verify emails before invitation acceptance.
    */
   requireEmailVerificationOnInvitation?: boolean | undefined;
   /**
@@ -307,7 +317,7 @@ interface OrganizationOptions {
       organization: {
         name?: string;
         slug?: string;
-        logo?: string;
+        logo?: string | null;
         metadata?: Record<string, any>;
         [key: string]: any;
       };
@@ -338,7 +348,7 @@ interface OrganizationOptions {
       organization: {
         name?: string;
         slug?: string;
-        logo?: string;
+        logo?: string | null;
         metadata?: Record<string, any>;
         [key: string]: any;
       };
@@ -348,7 +358,7 @@ interface OrganizationOptions {
       data: {
         name?: string;
         slug?: string;
-        logo?: string;
+        logo?: string | null;
         metadata?: Record<string, any>;
         [key: string]: any;
       };

package/dist/plugins/phone-number/routes.mjs

@@ -470,7 +470,7 @@ const resetPasswordPhoneNumber = (opts) => createAuthEndpoint("/phone-number/res
 	else await ctx.context.internalAdapter.updatePassword(user.id, hashedPassword);
 	await ctx.context.internalAdapter.deleteVerificationByIdentifier(phoneResetIdentifier);
 	if (ctx.context.options.emailAndPassword?.onPasswordReset) await ctx.context.options.emailAndPassword.onPasswordReset({ user }, ctx.request);
-	if (ctx.context.options.emailAndPassword?.revokeSessionsOnPasswordReset) await ctx.context.internalAdapter.deleteSessions(user.id);
+	if (ctx.context.options.emailAndPassword?.revokeSessionsOnPasswordReset) await ctx.context.internalAdapter.deleteUserSessions(user.id);
 	return ctx.json({ status: true });
 });
 function generateOTP(size) {

package/dist/plugins/siwe/client.d.mts

@@ -5,6 +5,10 @@ declare const siweClient: () => {
   id: "siwe";
   version: string;
   $InferServerPlugin: ReturnType<typeof siwe>;
+  pathMethods: {
+    "/siwe/nonce": "POST";
+    "/siwe/get-nonce": "POST";
+  };
 };
 //#endregion
 export { siweClient };

package/dist/plugins/siwe/client.mjs

@@ -4,7 +4,11 @@ const siweClient = () => {
 	return {
 		id: "siwe",
 		version: PACKAGE_VERSION,
-		$InferServerPlugin: {}
+		$InferServerPlugin: {},
+		pathMethods: {
+			"/siwe/nonce": "POST",
+			"/siwe/get-nonce": "POST"
+		}
 	};
 };
 //#endregion

package/dist/plugins/siwe/index.d.mts

@@ -26,10 +26,21 @@ declare const siwe: (options: SIWEPluginOptions) => {
   version: string;
   schema: WalletAddressSchema;
   endpoints: {
-    getSiweNonce: better_call0.StrictEndpoint<"/siwe/nonce", {
+    getSiweNonce: better_call0.StrictEndpoint<"/siwe/nonce" | "/siwe/get-nonce", {
       method: "POST";
       body: z.ZodObject<{
-        walletAddress: z.ZodString;
+        walletAddress: z.ZodOptional<z.ZodString>;
+        address: z.ZodOptional<z.ZodString>;
+        chainId: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+      }, z.core.$strip>;
+    }, {
+      nonce: string;
+    }>;
+    getNonce: better_call0.StrictEndpoint<"/siwe/nonce" | "/siwe/get-nonce", {
+      method: "POST";
+      body: z.ZodObject<{
+        walletAddress: z.ZodOptional<z.ZodString>;
+        address: z.ZodOptional<z.ZodString>;
         chainId: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
       }, z.core.$strip>;
     }, {