@antasphere/chassis-server 1.0.0

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,2BAA2B,EAC3B,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EACL,KAAK,kBAAkB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,iBAAiB,CAAC"}

package/dist/api/index.js

@@ -0,0 +1,17 @@
+export { registerApiKeyRoutes } from './apikeys.js';
+export { registerAuditRoutes } from './audit.js';
+export { registerBreakGlassRoutes } from './break-glass.js';
+export { registerCliAuthRoutes } from './cli-auth.js';
+export { demoSessionJudge, demoSignInOn, registerDemoPassRoutes } from './demo-passes.js';
+export { registerExportRoutes, resolveExportEntries, sanitizeEntryName, RESERVED_EXPORT_ENTRY_NAMES } from './export.js';
+export { registerFileRoutes } from './files.js';
+export { registerInvitationRoutes } from './invitations.js';
+export { registerMemberRoutes } from './members.js';
+export { registerOnboardingRoutes } from './onboarding.js';
+export { registerOpenApiDoc } from './openapi-doc.js';
+export { registerProjectRoutes } from './projects.js';
+export { registerSsoConnectRoutes } from './sso-connect.js';
+export { registerSsoLogoutRoutes } from './sso-logout.js';
+export { registerTeamRoutes } from './teams.js';
+export { registerWorkspaceRoutes, workspaceCreateWallClosed, workspaceCreationPolicy, workspaceCreationRefusal } from './workspaces.js';
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,iBAAiB,EACjB,2BAA2B,EAG5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAEL,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,iBAAiB,CAAC"}

package/dist/api/invitations.d.ts

@@ -0,0 +1,50 @@
+import type { OpenAPIHono } from '@hono/zod-openapi';
+import { type Db } from '@antasphere/chassis-db';
+import type { Env } from '../env.js';
+import type { Logger } from '../logger.js';
+import type { Auth } from '../identity/better-auth.js';
+import type { EmailDriver } from '../email/driver.js';
+import type { PlatformRegistry } from '../platform/registry.js';
+import type { AuditService } from '../audit/service.js';
+import type { MailBrand } from '../email/shell.js';
+import type { DemoSessionVerdict } from '../identity/demo-pass.js';
+export interface InvitationRouteDeps {
+    db: Db;
+    env: Pick<Env, 'PUBLIC_BASE_URL'>;
+    auth: Auth;
+    email: EmailDriver;
+    audit: AuditService;
+    registry: PlatformRegistry;
+    logger: Logger;
+    /** The product's name and footer line in the invitation mail (`identity.displayName`, `copy.mail.tagline`). */
+    mailBrand: MailBrand;
+    /** The invitation's two phrases that are the tool's own (`copy.mail.invitePitch`, `copy.mail.invitePreheader`). */
+    inviteMail: {
+        pitch: string;
+        preheader: string;
+    };
+    /**
+     * Cloud edition only (P7, internal/federation.md): when set, invitation
+     * MUTATIONS targeting a hub-origin workspace answer 403 `hub_managed`
+     * with this pointer. undefined on oss — zero behavior change there.
+     */
+    hubManaged?: {
+        manageUrl: string;
+    } | undefined;
+    /**
+     * Cloud edition only (CLOUD-5, PRDCT-1356): the accept path's
+     * account-creation branch is CLOSED — a local-password account minted
+     * here would be a permanent non-SSO entrance. The invitee signs in with
+     * Antasphere first (JIT), then accepts as an existing account.
+     */
+    ssoOnly?: boolean | undefined;
+    /**
+     * Demo sign-in, while its switch is on (identity/demo-pass.ts
+     * `judgeSession`): the accept is public, so the session it would accept as
+     * is judged here on the cookie. A session a demo link opened accepts no
+     * invitation: a membership it made would outlive the pass.
+     */
+    demoSession?: ((headers: Headers) => Promise<DemoSessionVerdict>) | undefined;
+}
+export declare function registerInvitationRoutes(api: OpenAPIHono, deps: InvitationRouteDeps): void;
+//# sourceMappingURL=invitations.d.ts.map

package/dist/api/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../src/api/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AASrD,OAAO,EAA8C,KAAK,EAAE,EAAmB,MAAM,wBAAwB,CAAC;AAE9G,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAMnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAenE,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,EAAE,CAAC;IACP,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClC,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,+GAA+G;IAC/G,SAAS,EAAE,SAAS,CAAC;IACrB,mHAAmH;IACnH,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD;;;;OAIG;IACH,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC/C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,SAAS,CAAC;CAC/E;AAWD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CA0T1F"}

package/dist/api/invitations.js

@@ -0,0 +1,313 @@
+import { and, desc, eq, sql } from 'drizzle-orm';
+import { invitationAcceptRoute, invitationCreateRoute, invitationLookupRoute, invitationRevokeRoute, invitationsListRoute } from '@antasphere/chassis-contract/routes';
+import { invitations, workspaces, user as userTable } from '@antasphere/chassis-db';
+import { isDuplicateAccountError } from '../accounts/signup-duplicate.js';
+import { buildInviteEmail } from '../email/templates.js';
+import { InvitationError, InvitationService } from '../invitations/service.js';
+import { cursorRowId, keysetBefore, pageOf } from '../pagination.js';
+import { requireRole } from '../middleware/auth-context.js';
+import { hubManagedMembershipGate } from '../middleware/hub-managed.js';
+const err = (code, message) => ({ error: { code, message } });
+const toWire = (i) => ({
+    id: i.id,
+    email: i.email,
+    role: i.role,
+    invitedBy: i.invitedBy,
+    expiresAt: i.expiresAt.toISOString(),
+    acceptedAt: i.acceptedAt?.toISOString() ?? null,
+    revokedAt: i.revokedAt?.toISOString() ?? null,
+    createdAt: i.createdAt.toISOString()
+});
+/** Method-exact public-shape check shared by the admin and P7 gates:
+ * GET /invitations/lookup and POST /invitations/accept are the only public
+ * shapes — a DELETE /invitations/lookup must still hit the gates, and a
+ * deeper future path that merely ENDS in a public-looking segment
+ * (e.g. /invitations/:id/accept) must too, hence the full-suffix match. */
+const isPublicInvitationShape = (path, method) => (method === 'GET' && path.endsWith('/invitations/lookup')) ||
+    (method === 'POST' && path.endsWith('/invitations/accept'));
+export function registerInvitationRoutes(api, deps) {
+    const { db, env, auth, email, audit, registry, logger, hubManaged, ssoOnly } = deps;
+    const service = new InvitationService(db);
+    // P7 (cloud only): a hub-origin workspace takes its membership from the
+    // hub, so LOCAL invitation mutations there answer the `hub_managed`
+    // pointer. Method-keyed, so GET /invitations (list) stays a real read.
+    // ONE wildcard mount covers the whole subtree (root create, :id revoke,
+    // and any FUTURE mutation under /invitations) — fail-closed by
+    // construction. The public accept/lookup shapes are skipped — their
+    // target workspace is the INVITATION's, not the caller's, so the accept
+    // handler runs its own hub-origin check on the invitation's workspace
+    // below.
+    if (hubManaged) {
+        const gate = hubManagedMembershipGate(hubManaged.manageUrl);
+        api.use('/invitations/*', async (c, next) => {
+            if (isPublicInvitationShape(c.req.path, c.req.method))
+                return next();
+            return gate(c, next);
+        });
+    }
+    api.use('/invitations', requireRole('admin'));
+    // /invitations/lookup and /invitations/accept are public by design (the
+    // invitee has no account yet): rate-limited in api/index.ts and gated by
+    // the unguessable 256-bit token. The :id pattern would swallow them, so the
+    // admin gate skips exactly those two segments.
+    const adminGate = requireRole('admin');
+    api.use('/invitations/:id', async (c, next) => {
+        if (isPublicInvitationShape(c.req.path, c.req.method))
+            return next();
+        return adminGate(c, next);
+    });
+    api.openapi(invitationsListRoute, async (c) => {
+        const principal = c.get('principal');
+        const { cursor, limit } = c.req.valid('query');
+        const cursorId = cursorRowId(cursor);
+        const rows = await db
+            .select()
+            .from(invitations)
+            .where(and(eq(invitations.workspaceId, principal.workspaceId), ...(cursorId
+            ? [
+                keysetBefore({
+                    table: invitations,
+                    id: invitations.id,
+                    createdAt: invitations.createdAt,
+                    workspaceId: invitations.workspaceId,
+                    cursorId,
+                    workspace: principal.workspaceId
+                })
+            ]
+            : [])))
+            .orderBy(desc(invitations.createdAt), desc(invitations.id))
+            .limit(limit + 1);
+        const { page, nextCursor } = pageOf(rows, limit);
+        return c.json({ invitations: page.map(toWire), nextCursor }, 200);
+    });
+    api.openapi(invitationCreateRoute, async (c) => {
+        const principal = c.get('principal');
+        const body = c.req.valid('json');
+        // Only owners can invite owners.
+        if (body.role === 'owner' && principal.role !== 'owner') {
+            return c.json(err('forbidden', 'Only an owner can invite an owner'), 403);
+        }
+        let created;
+        try {
+            created = await service.create({
+                workspaceId: principal.workspaceId,
+                email: body.email,
+                role: body.role,
+                invitedBy: principal.userId
+            });
+        }
+        catch (e) {
+            if (e instanceof InvitationError)
+                return c.json(err(e.code, e.message), 409);
+            throw e;
+        }
+        // The copyable link is the product; email is best-effort on top. The
+        // mail carries the invitation's SECOND token — one the inviter never
+        // sees — so an accept with it proves control of the invited mailbox
+        // (that accept path may honestly set emailVerified; ADR 009).
+        const acceptUrl = `${env.PUBLIC_BASE_URL}/invite/${created.token}`;
+        let emailSent = false;
+        if (email.delivers) {
+            const [ws] = await db
+                .select({ name: workspaces.name })
+                .from(workspaces)
+                .where(eq(workspaces.id, principal.workspaceId))
+                .limit(1);
+            try {
+                const msg = buildInviteEmail({
+                    brand: deps.mailBrand,
+                    pitch: deps.inviteMail.pitch,
+                    preheader: deps.inviteMail.preheader,
+                    inviteeEmail: created.invitation.email,
+                    inviterName: principal.name,
+                    workspaceName: ws?.name ?? 'the workspace',
+                    acceptUrl: `${env.PUBLIC_BASE_URL}/invite/${created.emailToken}`,
+                    expiresAt: created.invitation.expiresAt
+                });
+                await email.send({ to: created.invitation.email, ...msg });
+                emailSent = true;
+            }
+            catch (e) {
+                logger.error({ err: e }, 'invitation email failed (link still valid)');
+            }
+        }
+        registry.events.emit('invitation.created', {
+            workspaceId: principal.workspaceId,
+            invitationId: created.invitation.id
+        });
+        c.set('audit', {
+            action: 'invitation.create',
+            resourceType: 'invitation',
+            resourceId: created.invitation.id,
+            metadata: { email: created.invitation.email, role: created.invitation.role }
+        });
+        return c.json({ invitation: toWire(created.invitation), acceptUrl, emailSent }, 201);
+    });
+    api.openapi(invitationRevokeRoute, async (c) => {
+        const principal = c.get('principal');
+        const { id } = c.req.valid('param');
+        const [invitation] = await db
+            .select()
+            .from(invitations)
+            .where(and(eq(invitations.id, id), eq(invitations.workspaceId, principal.workspaceId)))
+            .limit(1);
+        if (!invitation)
+            return c.json(err('not_found', 'Invitation not found'), 404);
+        if (!invitation.revokedAt && !invitation.acceptedAt) {
+            await db
+                .update(invitations)
+                .set({ revokedAt: sql `now()` })
+                .where(eq(invitations.id, id));
+        }
+        const [updated] = await db.select().from(invitations).where(eq(invitations.id, id)).limit(1);
+        c.set('audit', { action: 'invitation.revoke', resourceType: 'invitation', resourceId: id });
+        return c.json(toWire(updated), 200);
+    });
+    api.openapi(invitationLookupRoute, async (c) => {
+        const { token } = c.req.valid('query');
+        const match = await service.findLiveByToken(token);
+        if (!match)
+            return c.json(err('not_found', 'Invitation not found or no longer valid'), 404);
+        const { invitation } = match;
+        const [ws] = await db
+            .select({ name: workspaces.name })
+            .from(workspaces)
+            .where(eq(workspaces.id, invitation.workspaceId))
+            .limit(1);
+        // NO account-existence signal (PRDCT-1437, the collaborator-lookup rule):
+        // the admin who created the invitation holds the copyable accept URL, so
+        // an `accountExists` here answered "does this email have an account
+        // anywhere on the instance?" for any address, free and revocable. The
+        // accept page offers both paths neutrally; the accept endpoint answers
+        // `account_exists` only when a create actually collides.
+        return c.json({
+            email: invitation.email,
+            role: invitation.role,
+            workspaceName: ws?.name ?? '',
+            expiresAt: invitation.expiresAt.toISOString()
+        }, 200);
+    });
+    api.openapi(invitationAcceptRoute, async (c) => {
+        const body = c.req.valid('json');
+        const match = await service.findLiveByToken(body.token);
+        if (!match)
+            return c.json(err('not_found', 'Invitation not found or no longer valid'), 404);
+        const { invitation, viaEmailToken } = match;
+        // P7 defense in depth (cloud only): the path gate above already refuses
+        // CREATING invitations on hub-origin workspaces, so a live one here
+        // means seeded/legacy rows — still refuse BEFORE any account or session
+        // work: accepting would mint a local membership the next SSO login /
+        // hub re-assertion fights. Keyed on the INVITATION's workspace (this is
+        // a public endpoint — the caller's own workspace is irrelevant here).
+        if (hubManaged) {
+            const [ws] = await db
+                .select({ centralAccountId: workspaces.centralAccountId })
+                .from(workspaces)
+                .where(eq(workspaces.id, invitation.workspaceId))
+                .limit(1);
+            if (ws?.centralAccountId) {
+                return c.json({
+                    error: {
+                        code: 'hub_managed',
+                        message: 'Membership of this workspace is managed at the Antasphere hub — ask for an invitation there',
+                        details: { manageUrl: hubManaged.manageUrl }
+                    }
+                }, 403);
+            }
+        }
+        // A dead pass's session was ended by the judge, so the library below sees
+        // none; a live one is refused before it is read.
+        if (deps.demoSession) {
+            const verdict = await deps.demoSession(c.req.raw.headers);
+            if (verdict && verdict !== 'ended') {
+                return c.json(err('demo_session', 'A session opened by a demo link cannot accept an invitation: sign in with your password'), 403);
+            }
+        }
+        let userId;
+        let alreadyVerified = false;
+        const session = await auth.api.getSession({ headers: c.req.raw.headers });
+        if (session?.user && session.user.email === invitation.email) {
+            // Signed in AS the invitee: accept against that existing account. The
+            // session proves the account exists — no public account lookup, so
+            // nothing here reveals existence to a caller who is not the invitee.
+            userId = session.user.id;
+            const [self] = await db
+                .select({ emailVerified: userTable.emailVerified })
+                .from(userTable)
+                .where(eq(userTable.id, userId))
+                .limit(1);
+            alreadyVerified = self?.emailVerified ?? false;
+        }
+        else {
+            // PRDCT-1437 door 2 (owner-reachable existence oracle): the SSO and
+            // credential gates are refused BEFORE any account-existence lookup, so a
+            // credential-less accept answers identically whether or not the address
+            // has an account. Existence surfaces ONLY after real credentials are
+            // committed, via the signUpEmail collision below — the inherent signup
+            // residual (a fresh address creates, a taken one fails), not a free
+            // pre-credential probe.
+            if (ssoOnly) {
+                return c.json(err('sso_required', 'This instance signs in with Antasphere — sign in first, then open the invitation link again'), 409);
+            }
+            if (!body.name || !body.password) {
+                return c.json(err('credentials_required', 'Provide name and password to create your account'), 400);
+            }
+            try {
+                // `user.created` is emitted by the identity layer's database hook
+                // (identity/better-auth.ts) — never from call sites like this one.
+                const created = await auth.api.signUpEmail({
+                    body: { email: invitation.email, password: body.password, name: body.name }
+                });
+                userId = created.user.id;
+            }
+            catch (e) {
+                // The address already has an account, or a concurrent accept won the
+                // unique-email race — the guided 409, never an uncaught 500. The only
+                // place existence surfaces, and only to a credential-committing caller.
+                if (isDuplicateAccountError(e)) {
+                    return c.json(err('account_exists', 'An account with this email exists — sign in with it, then accept again'), 409);
+                }
+                throw e;
+            }
+        }
+        const accepted = await service.accept(invitation, userId);
+        if (!accepted)
+            return c.json(err('already_accepted', 'This invitation was already used'), 410);
+        // Email-verification honesty (ADR 009): the emailed token was delivered
+        // ONLY to the invited address, so presenting it proves mailbox control —
+        // mark the account verified. The admin-visible copyable link proves
+        // nothing: never flip the flag for it; instead, when an email driver
+        // delivers, fire Better Auth's verification mail (M6 plumbing) so the
+        // address can still be proven — best-effort, acceptance already stands.
+        let emailVerified = alreadyVerified;
+        if (viaEmailToken && !alreadyVerified) {
+            await db.update(userTable).set({ emailVerified: true }).where(eq(userTable.id, userId));
+            emailVerified = true;
+        }
+        else if (!viaEmailToken && !alreadyVerified && email.delivers) {
+            try {
+                await auth.api.sendVerificationEmail({ body: { email: invitation.email, callbackURL: '/' } });
+            }
+            catch (e) {
+                logger.error({ err: e }, 'post-accept verification email failed (membership unaffected)');
+            }
+        }
+        registry.events.emit('invitation.accepted', {
+            workspaceId: invitation.workspaceId,
+            invitationId: invitation.id,
+            userId
+        });
+        // Public endpoint: no principal in context, write the audit row directly.
+        await audit.write({
+            workspaceId: invitation.workspaceId,
+            principal: null,
+            action: 'invitation.accept',
+            resourceType: 'invitation',
+            resourceId: invitation.id,
+            requestId: c.get('requestId'),
+            metadata: { email: invitation.email, userId, viaEmailToken, emailVerified }
+        });
+        return c.json({ workspaceId: invitation.workspaceId, userId, role: invitation.role }, 200);
+    });
+}
+//# sourceMappingURL=invitations.js.map

package/dist/api/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../src/api/invitations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,IAAI,SAAS,EAA4B,MAAM,wBAAwB,CAAC;AAC9G,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAQ1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAGxE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAE9E,MAAM,MAAM,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,KAAK,EAAE,CAAC,CAAC,KAAK;IACd,IAAI,EAAE,CAAC,CAAC,IAAI;IACZ,SAAS,EAAE,CAAC,CAAC,SAAS;IACtB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;IAC/C,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;IAC7C,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC;AAoCH;;;;2EAI2E;AAC3E,MAAM,uBAAuB,GAAG,CAAC,IAAY,EAAE,MAAc,EAAW,EAAE,CACxE,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IAC1D,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAE9D,MAAM,UAAU,wBAAwB,CAAC,GAAgB,EAAE,IAAyB;IAClF,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAE1C,wEAAwE;IACxE,oEAAoE;IACpE,uEAAuE;IACvE,wEAAwE;IACxE,+DAA+D;IAC/D,oEAAoE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,SAAS;IACT,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,wBAAwB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YAC1C,IAAI,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC5C,IAAI,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,EAClD,GAAG,CAAC,QAAQ;YACV,CAAC,CAAC;gBACE,YAAY,CAAC;oBACX,KAAK,EAAE,WAAW;oBAClB,EAAE,EAAE,WAAW,CAAC,EAAE;oBAClB,SAAS,EAAE,WAAW,CAAC,SAAS;oBAChC,WAAW,EAAE,WAAW,CAAC,WAAW;oBACpC,QAAQ;oBACR,SAAS,EAAE,SAAS,CAAC,WAAW;iBACjC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC,CACR,CACF;aACA,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;aAC1D,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACpB,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,iCAAiC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACxD,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,mCAAmC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,OAAyD,CAAC;QAC9D,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;gBAC7B,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,SAAS,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,eAAe;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;QAED,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,eAAe,WAAW,OAAO,CAAC,KAAK,EAAE,CAAC;QACnE,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;iBACjC,IAAI,CAAC,UAAU,CAAC;iBAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;iBAC/C,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,gBAAgB,CAAC;oBAC3B,KAAK,EAAE,IAAI,CAAC,SAAS;oBACrB,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;oBAC5B,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;oBACpC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK;oBACtC,WAAW,EAAE,SAAS,CAAC,IAAI;oBAC3B,aAAa,EAAE,EAAE,EAAE,IAAI,IAAI,eAAe;oBAC1C,SAAS,EAAE,GAAG,GAAG,CAAC,eAAe,WAAW,OAAO,CAAC,UAAU,EAAE;oBAChE,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;iBACxC,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;gBAC3D,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,4CAA4C,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YACzC,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;SACpC,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE;YACb,MAAM,EAAE,mBAAmB;YAC3B,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;YACjC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;SAC7E,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;QACtC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;aACtF,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9E,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACpD,MAAM,EAAE;iBACL,MAAM,CAAC,WAAW,CAAC;iBACnB,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,CAAA,OAAO,EAAE,CAAC;iBAC9B,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,yCAAyC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5F,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;aACjC,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;aAChD,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,0EAA0E;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,yDAAyD;QACzD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,aAAa,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE;YAC7B,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;SAC9C,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,yCAAyC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5F,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;QAE5C,wEAAwE;QACxE,oEAAoE;QACpE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,EAAE,CAAC;iBACzD,IAAI,CAAC,UAAU,CAAC;iBAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;iBAChD,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,EAAE,EAAE,gBAAgB,EAAE,CAAC;gBACzB,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE;wBACL,IAAI,EAAE,aAAa;wBACnB,OAAO,EACL,6FAA6F;wBAC/F,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE;qBAC7C;iBACF,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,iDAAiD;QACjD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACnC,OAAO,CAAC,CAAC,IAAI,CACX,GAAG,CACD,cAAc,EACd,yFAAyF,CAC1F,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAc,CAAC;QACnB,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;YAC7D,sEAAsE;YACtE,mEAAmE;YACnE,qEAAqE;YACrE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;iBACpB,MAAM,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;iBAClD,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;iBAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,eAAe,GAAG,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,yEAAyE;YACzE,wEAAwE;YACxE,qEAAqE;YACrE,uEAAuE;YACvE,oEAAoE;YACpE,wBAAwB;YACxB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC,IAAI,CACX,GAAG,CACD,cAAc,EACd,6FAA6F,CAC9F,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,kDAAkD,CAAC,EAAE,GAAG,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,CAAC;gBACH,kEAAkE;gBAClE,mEAAmE;gBACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;oBACzC,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;iBAC5E,CAAC,CAAC;gBACH,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,qEAAqE;gBACrE,sEAAsE;gBACtE,wEAAwE;gBACxE,IAAI,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,GAAG,CAAC,gBAAgB,EAAE,wEAAwE,CAAC,EAC/F,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,EAAE,GAAG,CAAC,CAAC;QAE/F,wEAAwE;QACxE,yEAAyE;QACzE,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,aAAa,GAAG,eAAe,CAAC;QACpC,IAAI,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;YACtC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACxF,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAChG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,+DAA+D,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE;YAC1C,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,MAAM;SACP,CAAC,CAAC;QACH,0EAA0E;QAC1E,MAAM,KAAK,CAAC,KAAK,CAAC;YAChB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,mBAAmB;YAC3B,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,UAAU,CAAC,EAAE;YACzB,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;YAC7B,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE;SAC5E,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/members.d.ts

@@ -0,0 +1,25 @@
+import type { OpenAPIHono } from '@hono/zod-openapi';
+import { type Db } from '@antasphere/chassis-db';
+import type { Auth } from '../identity/better-auth.js';
+import { type AccountDeletionService } from '../accounts/deletion.js';
+import { type MembershipRemovalHook } from '../members/removal.js';
+export interface MemberRouteDeps {
+    db: Db;
+    auth: Auth;
+    publicBaseUrl: string;
+    accountDeletion: AccountDeletionService;
+    /**
+     * Cloud edition only (P7, internal/federation.md): when set, every membership
+     * MUTATION on a hub-origin workspace answers 403 `hub_managed` with this
+     * pointer. undefined on oss — zero behavior change there.
+     */
+    hubManaged?: {
+        manageUrl: string;
+    } | undefined;
+    /** The tool's `guest_target` sentence (`copy.guestTarget`). */
+    guestTargetMessage: string;
+    /** The tool's half of a removal (the `membershipRemoval` slot), run in the removal's transaction. */
+    onMembershipRemoval?: MembershipRemovalHook | undefined;
+}
+export declare function registerMemberRoutes(api: OpenAPIHono, deps: MemberRouteDeps): void;
+//# sourceMappingURL=members.d.ts.map

package/dist/api/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../src/api/members.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAYrD,OAAO,EAAuC,KAAK,EAAE,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAsC,KAAK,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAK1G,OAAO,EAGL,KAAK,qBAAqB,EAE3B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,EAAE,CAAC;IACP,IAAI,EAAE,IAAI,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,sBAAsB,CAAC;IACxC;;;;OAIG;IACH,UAAU,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC/C,+DAA+D;IAC/D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qGAAqG;IACrG,mBAAmB,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACzD;AAwBD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CAuiBlF"}