@antasphere/chassis-contract 0.0.0-stage → 1.0.1

package/dist/schemas/teams.d.ts

@@ -0,0 +1,100 @@
+import { z } from 'zod';
+/**
+ * Teams: named groups of the workspace's people, on BOTH editions with the
+ * same routes and screens; only the source differs (PRDCT-2813). On the
+ * self-hosted edition, and in a cloud-local workspace, owners and admins
+ * make and shape them here; in a hub-origin workspace they are the hub's
+ * projection, read here and managed on the account site (every write answers
+ * `hub_managed`). Every non-guest member reads the teams and a team's
+ * members. A team holds the workspace's MEMBERSHIPS, so it can never hold an
+ * outsider, and a person leaves every team with their membership.
+ *
+ * The shapes mirror the hub's own teams contract (its `schemas/teams.ts`), so
+ * the two Teams pages read the same; a person is named by their user id or
+ * their email, as on this tool's project routes.
+ */
+/** A team's slug: lowercase words joined by single dashes, unique within a workspace. */
+export declare const teamSlugSchema: z.ZodString;
+export declare const teamSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    name: z.ZodString;
+    membersCount: z.ZodNumber;
+    isMember: z.ZodBoolean;
+    hubTeamId: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type Team = z.infer<typeof teamSchema>;
+export declare const teamsListSchema: z.ZodObject<{
+    teams: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        name: z.ZodString;
+        membersCount: z.ZodNumber;
+        isMember: z.ZodBoolean;
+        hubTeamId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TeamsList = z.infer<typeof teamsListSchema>;
+export declare const teamsListQuerySchema: z.ZodObject<{
+    cursor: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const teamCreateSchema: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type TeamCreate = z.infer<typeof teamCreateSchema>;
+export declare const teamUpdateSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    slug: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type TeamUpdate = z.infer<typeof teamUpdateSchema>;
+export declare const teamMemberSchema: z.ZodObject<{
+    userId: z.ZodString;
+    email: z.ZodString;
+    name: z.ZodString;
+    role: z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        member: "member";
+    }>;
+    isActive: z.ZodBoolean;
+    addedAt: z.ZodString;
+}, z.core.$strip>;
+export type TeamMemberInfo = z.infer<typeof teamMemberSchema>;
+export declare const teamMembersListSchema: z.ZodObject<{
+    members: z.ZodArray<z.ZodObject<{
+        userId: z.ZodString;
+        email: z.ZodString;
+        name: z.ZodString;
+        role: z.ZodEnum<{
+            owner: "owner";
+            admin: "admin";
+            member: "member";
+        }>;
+        isActive: z.ZodBoolean;
+        addedAt: z.ZodString;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TeamMembersList = z.infer<typeof teamMembersListSchema>;
+/**
+ * Seat one of the workspace's OWN active non-guest members, named by user id
+ * or by email: exactly one of the two. Nothing is invited or minted here.
+ */
+export declare const teamMemberAddSchema: z.ZodObject<{
+    userId: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodEmail>;
+}, z.core.$strip>;
+export type TeamMemberAdd = z.infer<typeof teamMemberAddSchema>;
+/** `{id}` the team (a uuid); `{userId}` Better Auth's text id: bounded free text, no control characters. */
+export declare const teamMemberParamsSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    userId: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=teams.d.ts.map

package/dist/schemas/teams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams.d.ts","sourceRoot":"","sources":["../../src/schemas/teams.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;;GAaG;AAEH,yFAAyF;AACzF,eAAO,MAAM,cAAc,aAIjB,CAAC;AAEX,eAAO,MAAM,UAAU;;;;;;;;;iBAcrB,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C,eAAO,MAAM,eAAe;;;;;;;;;;;;iBAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,oBAAoB;;;iBAAwB,CAAC;AAE1D,eAAO,MAAM,gBAAgB;;;iBAI3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,gBAAgB;;;iBAKiE,CAAC;AAC/F,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,gBAAgB;;;;;;;;;;;iBAQ3B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;iBAO5B,CAAC;AACL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,4GAA4G;AAC5G,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC"}

package/dist/schemas/teams.js

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+import { cursorPageQuerySchema, noControlChars, plainText, workspaceRoleSchema } from './common.js';
+/**
+ * Teams: named groups of the workspace's people, on BOTH editions with the
+ * same routes and screens; only the source differs (PRDCT-2813). On the
+ * self-hosted edition, and in a cloud-local workspace, owners and admins
+ * make and shape them here; in a hub-origin workspace they are the hub's
+ * projection, read here and managed on the account site (every write answers
+ * `hub_managed`). Every non-guest member reads the teams and a team's
+ * members. A team holds the workspace's MEMBERSHIPS, so it can never hold an
+ * outsider, and a person leaves every team with their membership.
+ *
+ * The shapes mirror the hub's own teams contract (its `schemas/teams.ts`), so
+ * the two Teams pages read the same; a person is named by their user id or
+ * their email, as on this tool's project routes.
+ */
+/** A team's slug: lowercase words joined by single dashes, unique within a workspace. */
+export const teamSlugSchema = z
+    .string()
+    .regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, 'lowercase letters and digits, joined by single dashes')
+    .min(1)
+    .max(60);
+export const teamSchema = z.object({
+    id: z.string(),
+    slug: z.string(),
+    name: z.string(),
+    membersCount: z.number().int(),
+    /** The caller belongs to this team. */
+    isMember: z.boolean(),
+    /**
+     * The hub's team id when the team is the account site's projection (the
+     * Manage link opens it there); null for a team the tool owns.
+     */
+    hubTeamId: z.string().nullable(),
+    createdAt: z.string(),
+    updatedAt: z.string()
+});
+export const teamsListSchema = z.object({
+    teams: z.array(teamSchema),
+    nextCursor: z.string().nullable()
+});
+export const teamsListQuerySchema = cursorPageQuerySchema;
+export const teamCreateSchema = z.object({
+    name: plainText(1, 80),
+    /** Absent: derived from the name (lowercased, non-alphanumerics to dashes, cut to 60). */
+    slug: teamSlugSchema.optional()
+});
+export const teamUpdateSchema = z
+    .object({
+    name: plainText(1, 80).optional(),
+    slug: teamSlugSchema.optional()
+})
+    .refine((b) => b.name !== undefined || b.slug !== undefined, { error: 'nothing to change' });
+export const teamMemberSchema = z.object({
+    userId: z.string(),
+    email: z.string(),
+    name: z.string(),
+    /** The person's role in the WORKSPACE (a team has no roles of its own). */
+    role: workspaceRoleSchema,
+    isActive: z.boolean(),
+    addedAt: z.string()
+});
+export const teamMembersListSchema = z.object({
+    members: z.array(teamMemberSchema),
+    nextCursor: z.string().nullable()
+});
+/**
+ * Seat one of the workspace's OWN active non-guest members, named by user id
+ * or by email: exactly one of the two. Nothing is invited or minted here.
+ */
+export const teamMemberAddSchema = z
+    .object({
+    userId: plainText(1, 200).optional(),
+    email: z.email().optional()
+})
+    .refine((v) => (v.userId === undefined) !== (v.email === undefined), {
+    error: 'exactly one of userId or email is required'
+});
+/** `{id}` the team (a uuid); `{userId}` Better Auth's text id: bounded free text, no control characters. */
+export const teamMemberParamsSchema = z.object({
+    id: z.uuid(),
+    userId: noControlChars(z.string().min(1).max(200))
+});
+//# sourceMappingURL=teams.js.map

package/dist/schemas/teams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/schemas/teams.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEpG;;;;;;;;;;;;;GAaG;AAEH,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,KAAK,CAAC,4BAA4B,EAAE,uDAAuD,CAAC;KAC5F,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC,CAAC;AAEX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC9B,uCAAuC;IACvC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAE1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;IACtB,0FAA0F;IAC1F,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAG/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,2EAA2E;IAC3E,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE;IACnE,KAAK,EAAE,4CAA4C;CACpD,CAAC,CAAC;AAGL,4GAA4G;AAC5G,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;CACnD,CAAC,CAAC"}

package/dist/schemas/workspaces.d.ts

@@ -0,0 +1,99 @@
+import { z } from 'zod';
+export declare const workspaceLookSchema: z.ZodObject<{
+    theme: z.ZodNullable<z.ZodString>;
+    pattern: z.ZodNullable<z.ZodString>;
+    field: z.ZodNullable<z.ZodNumber>;
+    grain: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type WorkspaceLook = z.infer<typeof workspaceLookSchema>;
+/**
+ * POST /api/v1/workspaces — a signed-in person creates ANOTHER workspace from
+ * inside the product (PRDCT-2444 self-hosted, PRDCT-2443 cloud). One route,
+ * one body, one answer on both editions; the dashboard keys off
+ * `/me.canCreateWorkspace` and never sniffs the edition.
+ *
+ *  - Self-hosted: the workspace is created locally with the caller as its
+ *    active owner, under the operator's per-person cap
+ *    (`MAX_WORKSPACES_PER_USER`).
+ *  - Cloud: the organization is created at Antasphere AS THE CALLER, then
+ *    projected locally before the answer — `workspace.id` is always the
+ *    LOCAL workspace id, the one `X-Workspace-Id` selects.
+ *
+ * Sessions only: API keys and OAuth bearers are refused (the route is
+ * deliberately absent from the machine scope allowlist). The name is trimmed
+ * server-side; a name that is blank once trimmed answers 400. The look the
+ * person picked in the dialog rides along, so the workspace is born with it
+ * on every member's screen.
+ */
+export declare const workspaceCreateSchema: z.ZodObject<{
+    name: z.ZodString;
+    look: z.ZodOptional<z.ZodObject<{
+        theme: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        pattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        field: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        grain: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type WorkspaceCreate = z.infer<typeof workspaceCreateSchema>;
+export declare const workspaceCreatedSchema: z.ZodObject<{
+    workspace: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        look: z.ZodObject<{
+            theme: z.ZodNullable<z.ZodString>;
+            pattern: z.ZodNullable<z.ZodString>;
+            field: z.ZodNullable<z.ZodNumber>;
+            grain: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type WorkspaceCreated = z.infer<typeof workspaceCreatedSchema>;
+/**
+ * PUT /api/v1/me/default-workspace — the workspace a request naming none
+ * resolves to, chosen by the person for themselves (PRDCT-2815). `null`
+ * clears the choice: the oldest active membership answers again. On the
+ * cloud edition the default is a setting of the person's Antasphere account,
+ * projected here at every sign-in: the route answers 403 `hub_managed` with
+ * the account site to set it on.
+ */
+export declare const defaultWorkspaceSetSchema: z.ZodObject<{
+    workspaceId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type DefaultWorkspaceSet = z.infer<typeof defaultWorkspaceSetSchema>;
+export declare const defaultWorkspaceSchema: z.ZodObject<{
+    defaultWorkspaceId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type DefaultWorkspace = z.infer<typeof defaultWorkspaceSchema>;
+/**
+ * PATCH /api/v1/workspace — the ACTIVE workspace's own settings (its name,
+ * its look), by an owner or an admin of it, from a browser session. The
+ * route names no id: a request works in exactly one workspace (ADR 014),
+ * and that is the one it edits. On the cloud edition a hub-origin
+ * workspace's NAME is the hub's (P7): a rename answers 403 `hub_managed`
+ * with the console to do it at; its look stays a local fact and is
+ * accepted.
+ */
+export declare const workspaceUpdateSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    look: z.ZodOptional<z.ZodObject<{
+        theme: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        pattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        field: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        grain: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type WorkspaceUpdate = z.infer<typeof workspaceUpdateSchema>;
+export declare const workspaceUpdatedSchema: z.ZodObject<{
+    workspace: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        look: z.ZodObject<{
+            theme: z.ZodNullable<z.ZodString>;
+            pattern: z.ZodNullable<z.ZodString>;
+            field: z.ZodNullable<z.ZodNumber>;
+            grain: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type WorkspaceUpdated = z.infer<typeof workspaceUpdatedSchema>;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/schemas/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/schemas/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB,eAAO,MAAM,mBAAmB;;;;;iBAK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;iBAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAOjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,sBAAsB;;iBAGjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;iBAK8D,CAAC;AACjG,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAMjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/schemas/workspaces.js

@@ -0,0 +1,96 @@
+import { z } from 'zod';
+import { plainText } from './common.js';
+/**
+ * A workspace's look: one of the dashboard's theme keys and one pattern key
+ * of the brand's library. A fact of the WORKSPACE (every member sees the
+ * same tile), kept as two short slugs the server does not interpret: the
+ * dashboard owns the catalogue and falls back to its defaults on a key it
+ * does not know, so retiring a theme never breaks a workspace. null = the
+ * dashboard's default for this workspace.
+ */
+const lookKey = z
+    .string()
+    .regex(/^[a-z][a-z0-9-]{0,31}$/, 'a short lowercase key')
+    .nullable();
+/**
+ * How much of the field's gradient reaches the page, and how much grain sits
+ * on it: 0..1, the workspace's too (they were each browser's until
+ * 2026-09-19, so two members never saw the same page). null = the brand's
+ * constant.
+ */
+const lookLevel = z.number().min(0).max(1).nullable();
+export const workspaceLookSchema = z.object({
+    theme: lookKey,
+    pattern: lookKey,
+    field: lookLevel,
+    grain: lookLevel
+});
+/**
+ * POST /api/v1/workspaces — a signed-in person creates ANOTHER workspace from
+ * inside the product (PRDCT-2444 self-hosted, PRDCT-2443 cloud). One route,
+ * one body, one answer on both editions; the dashboard keys off
+ * `/me.canCreateWorkspace` and never sniffs the edition.
+ *
+ *  - Self-hosted: the workspace is created locally with the caller as its
+ *    active owner, under the operator's per-person cap
+ *    (`MAX_WORKSPACES_PER_USER`).
+ *  - Cloud: the organization is created at Antasphere AS THE CALLER, then
+ *    projected locally before the answer — `workspace.id` is always the
+ *    LOCAL workspace id, the one `X-Workspace-Id` selects.
+ *
+ * Sessions only: API keys and OAuth bearers are refused (the route is
+ * deliberately absent from the machine scope allowlist). The name is trimmed
+ * server-side; a name that is blank once trimmed answers 400. The look the
+ * person picked in the dialog rides along, so the workspace is born with it
+ * on every member's screen.
+ */
+export const workspaceCreateSchema = z.object({
+    name: plainText(1, 120),
+    look: workspaceLookSchema.partial().optional()
+});
+export const workspaceCreatedSchema = z.object({
+    workspace: z.object({
+        /** The LOCAL workspace id — pass it as `X-Workspace-Id` to work in it. */
+        id: z.string(),
+        name: z.string(),
+        look: workspaceLookSchema
+    })
+});
+/**
+ * PUT /api/v1/me/default-workspace — the workspace a request naming none
+ * resolves to, chosen by the person for themselves (PRDCT-2815). `null`
+ * clears the choice: the oldest active membership answers again. On the
+ * cloud edition the default is a setting of the person's Antasphere account,
+ * projected here at every sign-in: the route answers 403 `hub_managed` with
+ * the account site to set it on.
+ */
+export const defaultWorkspaceSetSchema = z.object({
+    workspaceId: z.string().uuid().nullable()
+});
+export const defaultWorkspaceSchema = z.object({
+    /** The LOCAL id of the person's default workspace, or null when none is chosen. */
+    defaultWorkspaceId: z.string().nullable()
+});
+/**
+ * PATCH /api/v1/workspace — the ACTIVE workspace's own settings (its name,
+ * its look), by an owner or an admin of it, from a browser session. The
+ * route names no id: a request works in exactly one workspace (ADR 014),
+ * and that is the one it edits. On the cloud edition a hub-origin
+ * workspace's NAME is the hub's (P7): a rename answers 403 `hub_managed`
+ * with the console to do it at; its look stays a local fact and is
+ * accepted.
+ */
+export const workspaceUpdateSchema = z
+    .object({
+    name: plainText(1, 120).optional(),
+    look: workspaceLookSchema.partial().optional()
+})
+    .refine((b) => b.name !== undefined || b.look !== undefined, { message: 'nothing to change' });
+export const workspaceUpdatedSchema = z.object({
+    workspace: z.object({
+        id: z.string(),
+        name: z.string(),
+        look: workspaceLookSchema
+    })
+});
+//# sourceMappingURL=workspaces.js.map

package/dist/schemas/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../src/schemas/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,CAAC;KACd,MAAM,EAAE;KACR,KAAK,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;KACxD,QAAQ,EAAE,CAAC;AACd;;;;;GAKG;AACH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,SAAS;CACjB,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;IACvB,IAAI,EAAE,mBAAmB,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,0EAA0E;QAC1E,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,mBAAmB;KAC1B,CAAC;CACH,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,mFAAmF;IACnF,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,mBAAmB,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAGjG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,mBAAmB;KAC1B,CAAC;CACH,CAAC,CAAC"}

package/dist/seams.d.ts

@@ -0,0 +1,185 @@
+/**
+ * The central-rail seam: three small interfaces wired through the boot-time
+ * module registry. The central account/credits service is NOT part of the
+ * template — these interfaces are the socket it plugs into later with zero
+ * refactor. Template defaults: LocalIdentityProvider, AllowAllEntitlements,
+ * a no-op UsageSink.
+ */
+/** Structural Headers so the contract stays lib-agnostic (works in DOM and Node). */
+export interface HeaderReader {
+    get(name: string): string | null;
+}
+export interface RequestContext {
+    /** Raw request headers (credential material lives here). */
+    headers: HeaderReader;
+    path: string;
+    method: string;
+    requestId: string;
+}
+/**
+ * The universal per-request workspace selector (user-scoped credential
+ * model). EVERY credential kind — session, API key, OAuth bearer — MAY send
+ * it to name which of the caller's workspaces this request targets; the
+ * resolvers verify an ACTIVE membership of that workspace and resolve to
+ * null otherwise (fail closed — no oracle about the workspace's existence).
+ * Absent, the user's DEFAULT membership is used, else the deterministic
+ * fallback (oldest active membership). The one exception is a PINNED API
+ * key (an optional least-privilege pin, and the grandfathered binding of
+ * keys minted under the old per-workspace model): it always resolves its
+ * pinned workspace, and a header naming a DIFFERENT one is rejected
+ * outright (403 workspace_mismatch).
+ */
+export declare const ACTIVE_WORKSPACE_HEADER = "x-workspace-id";
+/**
+ * The resolved caller of ONE request. A credential identifies a USER; the
+ * Principal is still scoped to exactly ONE workspace per request (ADR 014):
+ * `workspaceId` is the workspace this request SELECTED via
+ * {@link ACTIVE_WORKSPACE_HEADER} (or the user's default), authorized
+ * against the caller's own live memberships. A user's OTHER memberships are
+ * deliberately not represented here; a request never spans workspaces.
+ */
+export interface Principal {
+    userId: string;
+    email: string;
+    name: string;
+    workspaceId: string;
+    role: 'owner' | 'admin' | 'member';
+    /**
+     * How the resolved membership came to exist (D2, internal/federation.md §P6):
+     * 'local' = ordinary membership (setup, workspace invitation), 'hub' = a
+     * hub-org projection (cloud SSO), 'guest' = an external per-resource
+     * collaborator minted by the claim path. Origin is a CAPABILITY axis, not
+     * a role: a guest resolves like any member but is refused resource creation
+     * and workspace-level surfaces (requireNonGuest) on BOTH editions — their
+     * access is the per-resource grant (ADR 013), which stays untouched. Every
+     * credential path (session, API key, OAuth bearer) reads it live from the
+     * membership row backing the request's workspace.
+     */
+    origin: 'local' | 'hub' | 'guest';
+    via: 'session' | 'api_key' | 'oauth';
+    /** Scope allowlist for machine principals; null = full role-based (session). */
+    scopes: ReadonlySet<string> | null;
+    apiKeyId?: string;
+    /** Expiry of the presented API key (ISO 8601) — absent for non-expiring keys. */
+    apiKeyExpiresAt?: string;
+    /** Central account id — undefined in local mode. */
+    accountRef?: string;
+    /**
+     * The credential itself fixed the workspace (an API key pinned to one):
+     * the request's selector was checked against the pin, and no default of
+     * the person ever moves the request elsewhere. Absent on every credential
+     * whose workspace the request selected, or the person's default chose.
+     */
+    pinned?: true;
+}
+/**
+ * Sign-in methods an instance can advertise in discovery. The set is OPEN
+ * (ADR 003 reserved this): clients must IGNORE entries they do not
+ * recognize, so an edition can add a method — like the cloud edition's
+ * 'antasphere' hub SSO — without breaking older SDKs/CLIs. This list is the
+ * known vocabulary, not a closed enum.
+ */
+export declare const KNOWN_AUTH_METHODS: readonly ["password", "email-otp", "google", "api-key", "oauth", "antasphere"];
+export type KnownAuthMethod = (typeof KNOWN_AUTH_METHODS)[number];
+export interface InstanceAuthDescriptor {
+    /** Open set — known values in {@link KNOWN_AUTH_METHODS}; ignore unknown entries. */
+    methods: Array<KnownAuthMethod | (string & {})>;
+    /** Self-serve password reset is available (requires a configured email driver). */
+    passwordReset: boolean;
+    /** Self-serve email change is available (requires a configured email driver). */
+    emailChange: boolean;
+    /** Opt-in per-user 2FA (TOTP + backup codes) is available on this instance. */
+    twoFactor: boolean;
+}
+export interface IdentityProvider {
+    /** Resolve a request to a live principal (fresh membership check) or null. */
+    resolve(ctx: RequestContext): Promise<Principal | null>;
+    /** Feeds the instance discovery endpoint. */
+    describe(): InstanceAuthDescriptor;
+}
+export interface MeteredAction {
+    /** The action key, e.g. 'files.upload' (the route's `meter.key`, namespaced by the tool's price book). */
+    key: string;
+    quantity: number;
+    unit: string;
+}
+export type EntitlementDecision = {
+    allowed: true;
+} | {
+    allowed: false;
+    reason: string;
+};
+/** Per-principal general-API request quota, enforced by the server's quota middleware. */
+export interface RequestQuota {
+    /** Sustained allowance per principal per minute. 0 = unlimited (the limiter is skipped). */
+    perMinute: number;
+    /** Spike cap per principal per second inside the minute window. 0 = no burst smoothing. */
+    burstPerSecond: number;
+}
+export interface EntitlementService {
+    check(principal: Principal, action: MeteredAction, ctx?: Record<string, unknown>): Promise<EntitlementDecision>;
+    /**
+     * Request-rate quota for this principal. The template default returns the
+     * instance-level env caps for everyone; a plan-aware edition varies it per
+     * account/plan. The quota is enforced per authenticated principal identity
+     * (API key id / OAuth subject / session user id), never per client header.
+     */
+    getRequestQuota(principal: Principal): Promise<RequestQuota>;
+}
+/**
+ * One metered action, as the tool emits it and the hub ingests it (the
+ * billing rail spec, §5 `POST /usage/events`). At-least-once from the tool;
+ * exactly-once at the hub by `id`. Paid by the account, reported per user.
+ */
+export interface UsageEvent {
+    /** ULID — the idempotency key; receivers dedupe on it (at-least-once emission). */
+    id: string;
+    /** The action key (`meter` is its historical name; the two carry the same value). */
+    meter: string;
+    actionKey: string;
+    quantity: number;
+    unit: string;
+    occurredAt: string;
+    workspaceId: string;
+    /** The paying account (the workspace's central account id). */
+    accountRef?: string;
+    /** The reported user; null when the actor is a resource owner the tool could not name. */
+    userId: string | null;
+    /** How the action arrived: a session (the dashboard), an API key (the CLI), an OAuth client (an MCP connector). */
+    via: 'session' | 'api_key' | 'oauth';
+    /** The resource the handler recorded (its audit `resourceType` / `resourceId`), when it recorded one. */
+    resourceType?: string;
+    resourceId?: string;
+    source: {
+        instanceId: string;
+        edition: string;
+        version: string;
+    };
+}
+export interface UsageSink {
+    emit(event: UsageEvent): Promise<void>;
+}
+/**
+ * What a downstream says about a batch it took: the events it did NOT post
+ * because the hub would refuse them on their date (PRDCT-2644), each with
+ * its reason. The worker sends those to the held queue instead of leaving
+ * them counted as rejections at the hub; an empty list, or no outcome at
+ * all, means the whole batch was handled.
+ */
+export interface UsageBatchOutcome {
+    held: ReadonlyArray<{
+        id: string;
+        reason: string;
+    }>;
+}
+/**
+ * Where the durable queue hands the events it drained: the no-op locally,
+ * the hub poster on cloud. A downstream that takes whole batches gets them
+ * as the worker drained them (fifty at most); one that only takes single
+ * events is called once per event. A batch downstream may answer an outcome
+ * naming the events it held back.
+ */
+export interface UsageDownstream extends UsageSink {
+    emitBatch?(events: readonly UsageEvent[]): Promise<void | UsageBatchOutcome>;
+}
+//# sourceMappingURL=seams.d.ts.map

package/dist/seams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seams.d.ts","sourceRoot":"","sources":["../src/seams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,qFAAqF;AACrF,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACnC;;;;;;;;;;OAUG;IACH,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC;IAClC,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACrC,gFAAgF;IAChF,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,IAAI,CAAC;CACf;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,gFAOrB,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,qFAAqF;IACrF,OAAO,EAAE,KAAK,CAAC,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IAChD,mFAAmF;IACnF,aAAa,EAAE,OAAO,CAAC;IACvB,iFAAiF;IACjF,WAAW,EAAE,OAAO,CAAC;IACrB,+EAA+E;IAC/E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACxD,6CAA6C;IAC7C,QAAQ,IAAI,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,0GAA0G;IAC1G,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,mBAAmB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzF,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC3B,4FAA4F;IAC5F,SAAS,EAAE,MAAM,CAAC;IAClB,2FAA2F;IAC3F,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CACH,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,aAAa,EACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChC;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC9D;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,mFAAmF;IACnF,EAAE,EAAE,MAAM,CAAC;IACX,qFAAqF;IACrF,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mHAAmH;IACnH,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;IACrC,yGAAyG;IACzG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,SAAS,CAAC,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC;CAC9E"}

package/dist/seams.js

@@ -0,0 +1,37 @@
+/**
+ * The central-rail seam: three small interfaces wired through the boot-time
+ * module registry. The central account/credits service is NOT part of the
+ * template — these interfaces are the socket it plugs into later with zero
+ * refactor. Template defaults: LocalIdentityProvider, AllowAllEntitlements,
+ * a no-op UsageSink.
+ */
+/**
+ * The universal per-request workspace selector (user-scoped credential
+ * model). EVERY credential kind — session, API key, OAuth bearer — MAY send
+ * it to name which of the caller's workspaces this request targets; the
+ * resolvers verify an ACTIVE membership of that workspace and resolve to
+ * null otherwise (fail closed — no oracle about the workspace's existence).
+ * Absent, the user's DEFAULT membership is used, else the deterministic
+ * fallback (oldest active membership). The one exception is a PINNED API
+ * key (an optional least-privilege pin, and the grandfathered binding of
+ * keys minted under the old per-workspace model): it always resolves its
+ * pinned workspace, and a header naming a DIFFERENT one is rejected
+ * outright (403 workspace_mismatch).
+ */
+export const ACTIVE_WORKSPACE_HEADER = 'x-workspace-id';
+/**
+ * Sign-in methods an instance can advertise in discovery. The set is OPEN
+ * (ADR 003 reserved this): clients must IGNORE entries they do not
+ * recognize, so an edition can add a method — like the cloud edition's
+ * 'antasphere' hub SSO — without breaking older SDKs/CLIs. This list is the
+ * known vocabulary, not a closed enum.
+ */
+export const KNOWN_AUTH_METHODS = [
+    'password',
+    'email-otp',
+    'google',
+    'api-key',
+    'oauth',
+    'antasphere'
+];
+//# sourceMappingURL=seams.js.map

package/dist/seams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seams.js","sourceRoot":"","sources":["../src/seams.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AA6CxD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,UAAU;IACV,WAAW;IACX,QAAQ;IACR,SAAS;IACT,OAAO;IACP,YAAY;CACJ,CAAC"}