application registry

[EvgenKoshevoy]

Hey, I built a plugin for better-auth that adds an application registry — basically the same idea as Atlassian where you have Jira, Confluence, Bitbucket all under one auth system, each with its own roles and access rules.
Each app gets its own role hierarchy, and you can grant access to individual users, whole organizations, or OAuth clients. There’s a deny-override model so you can explicitly block a user even if their org has access.
Also supports CASL rules stored right in the app metadata, so you can update permissions without redeploying anything.
Still early but works. Would love some feedback if anyone’s been looking for something like this with better-auth.
npm: @evgenkoshevoy/better-auth-application