@atlasauth/backend 0.24.0 → 0.26.0

package/dist/client/org-role-grants.d.ts

@@ -0,0 +1,57 @@
+import { type RequestFn } from './request';
+import type { ListPage } from './types';
+export interface OrgRoleGrant {
+    object: 'org_role_grant';
+    id: string;
+    grantor_org_id: string;
+    grantee_org_id: string;
+    role_keys: string[];
+    status: 'active' | 'revoked';
+    created_at: number;
+    revoked_at: number | null;
+}
+export interface OrgRoleDelegation {
+    object: 'org_role_delegation';
+    id: string;
+    grant_id: string;
+    user_id: string;
+    role_key: string;
+    created_at: number;
+}
+export interface EffectiveDelegatedRole {
+    organization_id: string;
+    grant_id: string;
+    role_key: string;
+    permissions: string[];
+}
+export declare function orgRoleGrantsResource(request: RequestFn): {
+    list(query?: {
+        grantor_org_id?: string;
+        grantee_org_id?: string;
+        status?: "active";
+    }): Promise<ListPage<OrgRoleGrant>>;
+    create(body: {
+        grantor_org_id: string;
+        grantee_org_id: string;
+        role_keys: string[];
+    }): Promise<OrgRoleGrant>;
+    get(id: string): Promise<OrgRoleGrant>;
+    update(id: string, body: {
+        role_keys: string[];
+    }): Promise<OrgRoleGrant>;
+    revoke(id: string): Promise<OrgRoleGrant>;
+    listDelegations(id: string): Promise<ListPage<OrgRoleDelegation>>;
+    delegate(id: string, body: {
+        user_id: string;
+        role_key: string;
+    }): Promise<OrgRoleDelegation>;
+    undelegate(id: string, delegationId: string): Promise<{
+        object: "org_role_delegation";
+        id: string;
+        deleted: true;
+    }>;
+    effective(query: {
+        user_id: string;
+        organization_id?: string;
+    }): Promise<ListPage<EffectiveDelegatedRole>>;
+};

package/dist/client/org-role-grants.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.orgRoleGrantsResource = orgRoleGrantsResource;
+const request_1 = require("./request");
+const qs = (query) => {
+    const q = new URLSearchParams(Object.entries(query).filter((e) => e[1] !== undefined)).toString();
+    return q ? `?${q}` : '';
+};
+function orgRoleGrantsResource(request) {
+    return {
+        list(query = {}) {
+            return request({ method: 'GET', path: `/v1/org_role_grants${qs(query)}` });
+        },
+        create(body) {
+            return request({ method: 'POST', path: '/v1/org_role_grants', body });
+        },
+        get(id) {
+            return request({ method: 'GET', path: `/v1/org_role_grants/${(0, request_1.enc)(id)}` });
+        },
+        update(id, body) {
+            return request({ method: 'PATCH', path: `/v1/org_role_grants/${(0, request_1.enc)(id)}`, body });
+        },
+        revoke(id) {
+            return request({ method: 'DELETE', path: `/v1/org_role_grants/${(0, request_1.enc)(id)}` });
+        },
+        listDelegations(id) {
+            return request({ method: 'GET', path: `/v1/org_role_grants/${(0, request_1.enc)(id)}/delegations` });
+        },
+        delegate(id, body) {
+            return request({ method: 'POST', path: `/v1/org_role_grants/${(0, request_1.enc)(id)}/delegations`, body });
+        },
+        undelegate(id, delegationId) {
+            return request({ method: 'DELETE', path: `/v1/org_role_grants/${(0, request_1.enc)(id)}/delegations/${(0, request_1.enc)(delegationId)}` });
+        },
+        effective(query) {
+            return request({ method: 'GET', path: `/v1/org_role_grants/effective${qs(query)}` });
+        },
+    };
+}
+//# sourceMappingURL=org-role-grants.js.map

package/dist/client/org-role-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-role-grants.js","sourceRoot":"","sources":["../../src/client/org-role-grants.ts"],"names":[],"mappings":";;AAmCA,sDA8BC;AAjED,uCAAgD;AA8BhD,MAAM,EAAE,GAAG,CAAC,KAAyC,EAAE,EAAE;IACvD,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzH,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1B,CAAC,CAAC;AAEF,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,OAAO;QACL,IAAI,CAAC,QAAiF,EAAE;YACtF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,CAAC,IAA6E;YAClF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA6B;YAC9C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,eAAe,CAAC,EAAU;YACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,QAAQ,CAAC,EAAU,EAAE,IAA2C;YAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,UAAU,CAAC,EAAU,EAAE,YAAoB;YACzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB,IAAA,aAAG,EAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,SAAS,CAAC,KAAoD;YAC5D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/organizations.d.ts

@@ -1,4 +1,5 @@
 import { type RequestFn } from './request';
+import type { WebhookDelivery, WebhookEndpoint, WebhookEndpointWithSecret } from './webhooks';
 import type { CursorPage, CursorParams, DataList, DeletedObject, ListPage, Metadata } from './types';
 export interface Organization {
     object: 'organization';
@@ -56,6 +57,16 @@ export interface OrganizationEndUserPoolPolicy {
     /** Readers may sign up on the hosted pages. */
     allowHostedSignup?: boolean;
 }
+/** Tighten-only password rules an org layers over the instance policy. */
+export interface OrgPasswordPolicyOverride {
+    minLength?: number;
+    checkBreaches?: true;
+    requireUppercase?: true;
+    requireLowercase?: true;
+    requireNumber?: true;
+    requireSymbol?: true;
+    bannedPasswords?: string[];
+}
 /**
  * The organization's security policy overrides. Keys are camelCase on this
  * route, and only overrides that are set appear. Unknown keys from a newer API
@@ -63,6 +74,10 @@ export interface OrganizationEndUserPoolPolicy {
  */
 export interface OrganizationPolicySettings {
     requireMfa?: boolean;
+    /** Factor classes every member must have used; implies an MFA session. */
+    requiredFactors?: Array<'totp' | 'sms' | 'passkey' | 'push'>;
+    /** Tighten-only password rules for members. */
+    passwordPolicyOverride?: OrgPasswordPolicyOverride;
     ssoRequired?: boolean;
     sessionIdleOverrideMs?: number;
     /**
@@ -230,6 +245,8 @@ export interface ReplaceOrganizationMetadataBody {
  */
 export interface OrganizationPolicyPatch {
     requireMfa?: boolean | null;
+    requiredFactors?: Array<'totp' | 'sms' | 'passkey' | 'push'> | null;
+    passwordPolicyOverride?: OrgPasswordPolicyOverride | null;
     ssoRequired?: boolean | null;
     sessionIdleOverrideMs?: number | null;
     /** Restrict member sign-in methods; `null` clears (all methods). Unknown method → 400. */
@@ -245,6 +262,14 @@ export interface OrganizationPolicyPatch {
     endUserPool?: OrganizationEndUserPoolPolicy | null;
     [key: string]: unknown;
 }
+/** Fields an organization's endpoint accepts. */
+export interface OrganizationWebhookEndpointBody {
+    url?: string;
+    /** Event types, or ["*"]; only this organization's events are ever delivered. */
+    enabled_events?: string[];
+    description?: string | null;
+    active?: boolean;
+}
 export declare function organizationsResource(request: RequestFn): {
     list(params?: CursorParams): Promise<CursorPage<Organization>>;
     get(id: string): Promise<Organization>;
@@ -356,6 +381,33 @@ export declare function organizationsResource(request: RequestFn): {
             deleted: true;
         }>;
     };
+    /**
+     * The organization's own webhook endpoints. They receive only that
+     * organization's events and are hidden from the instance's endpoint list;
+     * the org's admins manage the same endpoints from the app.
+     */
+    webhookEndpoints: {
+        list(orgId: string): Promise<ListPage<WebhookEndpoint>>;
+        get(orgId: string, endpointId: string): Promise<WebhookEndpoint>;
+        /** The signing secret is in this response only. */
+        create(orgId: string, body: OrganizationWebhookEndpointBody & {
+            url: string;
+        }, idempotencyKey?: string): Promise<WebhookEndpointWithSecret>;
+        update(orgId: string, endpointId: string, body: OrganizationWebhookEndpointBody): Promise<WebhookEndpoint>;
+        delete(orgId: string, endpointId: string): Promise<{
+            object: "webhook_endpoint";
+            id: string;
+            deleted: true;
+        }>;
+        /** Returns the new secret once; the previous one keeps signing for 24 hours. */
+        rotateSecret(orgId: string, endpointId: string): Promise<{
+            object: "webhook_secret";
+            secret: string;
+            overlap_seconds: number;
+            previous_secret_expires_at: number | null;
+        }>;
+        deliveries(orgId: string, endpointId: string, query?: Record<string, string | number | undefined>): Promise<ListPage<WebhookDelivery>>;
+    };
     /** The organization's hosted-page branding overlay. */
     branding: {
         get(orgId: string): Promise<OrganizationBranding>;

package/dist/client/organizations.js

@@ -164,6 +164,50 @@ function organizationsResource(request) {
                 });
             },
         },
+        /**
+         * The organization's own webhook endpoints. They receive only that
+         * organization's events and are hidden from the instance's endpoint list;
+         * the org's admins manage the same endpoints from the app.
+         */
+        webhookEndpoints: {
+            list(orgId) {
+                return request({ method: 'GET', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/webhook_endpoints` });
+            },
+            get(orgId, endpointId) {
+                return request({ method: 'GET', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/webhook_endpoints/${(0, request_1.enc)(endpointId)}` });
+            },
+            /** The signing secret is in this response only. */
+            create(orgId, body, idempotencyKey) {
+                return request({ method: 'POST', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/webhook_endpoints`, body, idempotencyKey });
+            },
+            update(orgId, endpointId, body) {
+                return request({
+                    method: 'PATCH',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/webhook_endpoints/${(0, request_1.enc)(endpointId)}`,
+                    body,
+                });
+            },
+            delete(orgId, endpointId) {
+                return request({
+                    method: 'DELETE',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/webhook_endpoints/${(0, request_1.enc)(endpointId)}`,
+                });
+            },
+            /** Returns the new secret once; the previous one keeps signing for 24 hours. */
+            rotateSecret(orgId, endpointId) {
+                return request({
+                    method: 'POST',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/webhook_endpoints/${(0, request_1.enc)(endpointId)}/rotate_secret`,
+                });
+            },
+            deliveries(orgId, endpointId, query = {}) {
+                return request({
+                    method: 'GET',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/webhook_endpoints/${(0, request_1.enc)(endpointId)}/deliveries`,
+                    query,
+                });
+            },
+        },
         /** The organization's hosted-page branding overlay. */
         branding: {
             get(orgId) {

package/dist/client/organizations.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../src/client/organizations.ts"],"names":[],"mappings":";;AAqQA,sDAkVC;AAvlBD,uCAAgD;AAqQhD,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,OAAO;QACL,IAAI,CAAC,SAAuB,EAAE;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA4B,EAAE,cAAuB;YAC1D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA4B;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,gFAAgF;QAChF,cAAc,CAAC,EAAU,EAAE,IAAqC;YAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,4CAA4C;QAC5C,YAAY,CAAC,EAAU,EAAE,IAA6B;YACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD;;;;WAIG;QACH,SAAS,CAAC,EAAU,EAAE,IAA+C;YACnE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,gGAAgG;QAChG,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QACpF,CAAC;QACD;;;WAGG;QACH,YAAY,CAAC,EAAU;YACrB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,GAAG,CACD,KAAa,EACb,IAAwC,EACxC,cAAuB;gBAOvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc,EACd,IAAsB;gBAEtB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;oBAClE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc;gBAEd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACnE,CAAC,CAAC;YACL,CAAC;SACF;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8D,EAC9D,cAAuB;gBASvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,YAAoB;gBAEpB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,YAAY,CAAC,SAAS;iBAChF,CAAC,CAAC;YACL,CAAC;SACF;QAED,OAAO,EAAE;YACP,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8E,EAC9E,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU;oBAC/C,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa,EAAE,QAAgB;gBACpC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,QAAgB;gBAEhB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;SACF;QAED,4FAA4F;QAC5F,QAAQ,EAAE;YACR,0DAA0D;YAC1D,GAAG,CAAC,KAAa;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,iFAAiF;YACjF,OAAO,CACL,KAAa,EACb,MAA+B,EAC/B,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW;oBAChD,IAAI,EAAE,EAAE,MAAM,EAAE;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD;;;eAGG;YACH,MAAM,CACJ,KAAa,EACb,MAA+B,EAC/B,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW;oBAChD,IAAI,EAAE,EAAE,MAAM,EAAE;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QAED,yFAAyF;QACzF,YAAY,EAAE;YACZ,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAAuC,EACvC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB;oBACrD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,QAAgB;gBAEhB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,kBAAkB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;SACF;QAED,uDAAuD;QACvD,QAAQ,EAAE;YACR,GAAG,CAAC,KAAa;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,yFAAyF;YACzF,MAAM,CAAC,KAAa,EAAE,IAAoC;gBACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;SACF;QAED,qFAAqF;QACrF,QAAQ,EAAE;YACR,IAAI,CACF,KAAa,EACb,SAAyC,EAAE;gBAE3C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;oBACjD,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,2FAA2F;YAC3F,GAAG,CACD,KAAa,EACb,IAAgC,EAChC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;oBACjD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,8DAA8D;YAC9D,MAAM,CACJ,KAAa,EACb,MAAc,EACd,IAA2C;gBAE3C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;oBAChE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc;gBAEd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;SACF;QAED,wEAAwE;QACxE,YAAY,EAAE;YACZ,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,mFAAmF;YACnF,MAAM,CACJ,KAAa,EACb,IAAsB,EACtB,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB;oBACrD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC9F,CAAC;SACF;QAED,uEAAuE;QACvE,UAAU,EAAE;YACV,KAAK,CACH,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../src/client/organizations.ts"],"names":[],"mappings":";;AAgSA,sDAsYC;AAtqBD,uCAAgD;AAgShD,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,OAAO;QACL,IAAI,CAAC,SAAuB,EAAE;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA4B,EAAE,cAAuB;YAC1D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA4B;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,gFAAgF;QAChF,cAAc,CAAC,EAAU,EAAE,IAAqC;YAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,4CAA4C;QAC5C,YAAY,CAAC,EAAU,EAAE,IAA6B;YACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD;;;;WAIG;QACH,SAAS,CAAC,EAAU,EAAE,IAA+C;YACnE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,gGAAgG;QAChG,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QACpF,CAAC;QACD;;;WAGG;QACH,YAAY,CAAC,EAAU;YACrB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,GAAG,CACD,KAAa,EACb,IAAwC,EACxC,cAAuB;gBAOvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc,EACd,IAAsB;gBAEtB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;oBAClE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc;gBAEd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACnE,CAAC,CAAC;YACL,CAAC;SACF;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8D,EAC9D,cAAuB;gBASvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,YAAoB;gBAEpB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,YAAY,CAAC,SAAS;iBAChF,CAAC,CAAC;YACL,CAAC;SACF;QAED,OAAO,EAAE;YACP,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8E,EAC9E,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU;oBAC/C,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa,EAAE,QAAgB;gBACpC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,QAAgB;gBAEhB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;SACF;QAED,4FAA4F;QAC5F,QAAQ,EAAE;YACR,0DAA0D;YAC1D,GAAG,CAAC,KAAa;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,iFAAiF;YACjF,OAAO,CACL,KAAa,EACb,MAA+B,EAC/B,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW;oBAChD,IAAI,EAAE,EAAE,MAAM,EAAE;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD;;;eAGG;YACH,MAAM,CACJ,KAAa,EACb,MAA+B,EAC/B,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW;oBAChD,IAAI,EAAE,EAAE,MAAM,EAAE;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QAED,yFAAyF;QACzF,YAAY,EAAE;YACZ,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAAuC,EACvC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB;oBACrD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,QAAgB;gBAEhB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,kBAAkB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;SACF;QAED;;;;WAIG;QACH,gBAAgB,EAAE;YAChB,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,GAAG,CAAC,KAAa,EAAE,UAAkB;gBACnC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,sBAAsB,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,mDAAmD;YACnD,MAAM,CACJ,KAAa,EACb,IAAuD,EACvD,cAAuB;gBAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACtH,CAAC;YACD,MAAM,CAAC,KAAa,EAAE,UAAkB,EAAE,IAAqC;gBAC7E,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,sBAAsB,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE;oBAC5E,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa,EAAE,UAAkB;gBACtC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,sBAAsB,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,gFAAgF;YAChF,YAAY,CACV,KAAa,EACb,UAAkB;gBAElB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,sBAAsB,IAAA,aAAG,EAAC,UAAU,CAAC,gBAAgB;iBAC3F,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,KAAa,EAAE,UAAkB,EAAE,QAAqD,EAAE;gBACnG,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,sBAAsB,IAAA,aAAG,EAAC,UAAU,CAAC,aAAa;oBACvF,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;SACF;QAED,uDAAuD;QACvD,QAAQ,EAAE;YACR,GAAG,CAAC,KAAa;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,yFAAyF;YACzF,MAAM,CAAC,KAAa,EAAE,IAAoC;gBACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;SACF;QAED,qFAAqF;QACrF,QAAQ,EAAE;YACR,IAAI,CACF,KAAa,EACb,SAAyC,EAAE;gBAE3C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;oBACjD,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,2FAA2F;YAC3F,GAAG,CACD,KAAa,EACb,IAAgC,EAChC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;oBACjD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,8DAA8D;YAC9D,MAAM,CACJ,KAAa,EACb,MAAc,EACd,IAA2C;gBAE3C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;oBAChE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc;gBAEd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;SACF;QAED,wEAAwE;QACxE,YAAY,EAAE;YACZ,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,mFAAmF;YACnF,MAAM,CACJ,KAAa,EACb,IAAsB,EACtB,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB;oBACrD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC9F,CAAC;SACF;QAED,uEAAuE;QACvE,UAAU,EAAE;YACV,KAAK,CACH,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/client/page-templates.d.ts

@@ -0,0 +1,78 @@
+import { type RequestFn } from './request';
+import type { ListPage } from './types';
+export type PageTemplatePage = 'sign-in' | 'sign-up' | 'user-profile';
+export type TemplateTone = 'default' | 'muted' | 'accent' | 'success' | 'danger';
+type Align = 'left' | 'center' | 'right';
+/** One component. Strings are escaped; links are https, mailto: or a path; there is no raw HTML, CSS or script. */
+export type TemplateNode = {
+    type: 'heading';
+    text: string;
+    level?: 2 | 3;
+    align?: Align;
+} | {
+    type: 'text';
+    text: string;
+    tone?: TemplateTone;
+    size?: 'sm' | 'md';
+    align?: Align;
+} | {
+    type: 'image';
+    src?: string;
+    asset_id?: string;
+    alt: string;
+    width?: number;
+    align?: Align;
+} | {
+    type: 'link';
+    label: string;
+    href: string;
+} | {
+    type: 'button_link';
+    label: string;
+    href: string;
+} | {
+    type: 'list';
+    items: string[];
+} | {
+    type: 'divider';
+} | {
+    type: 'spacer';
+    size?: 'sm' | 'md' | 'lg';
+} | {
+    type: 'columns';
+    columns: TemplateNode[][];
+};
+export interface PageTemplateDefinition {
+    version?: 1;
+    regions: Partial<Record<'header' | 'above_form' | 'below_form' | 'footer', TemplateNode[]>>;
+}
+export interface PageTemplateSlot {
+    version: number;
+    updated_at: number;
+    definition: PageTemplateDefinition;
+}
+export interface PageTemplate {
+    object: 'page_template';
+    page: PageTemplatePage;
+    live: PageTemplateSlot | null;
+    draft: PageTemplateSlot | null;
+}
+export interface PageTemplatePreview {
+    object: 'page_template_preview';
+    page: PageTemplatePage;
+    url: string;
+    expires_at: number;
+}
+export declare function pageTemplatesResource(request: RequestFn): {
+    list(): Promise<ListPage<PageTemplate>>;
+    get(page: PageTemplatePage): Promise<PageTemplate>;
+    /** Save the page's draft. The live page is unchanged until you promote. */
+    saveDraft(page: PageTemplatePage, definition: PageTemplateDefinition): Promise<PageTemplate>;
+    /** A signed link (one hour) to the hosted page with the draft applied. */
+    preview(page: PageTemplatePage): Promise<PageTemplatePreview>;
+    /** Make the draft the live template. */
+    promote(page: PageTemplatePage): Promise<PageTemplate>;
+    /** Drop the draft, or take the live template down. */
+    discard(page: PageTemplatePage, status: "draft" | "live"): Promise<PageTemplate>;
+};
+export {};

package/dist/client/page-templates.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pageTemplatesResource = pageTemplatesResource;
+const request_1 = require("./request");
+function pageTemplatesResource(request) {
+    return {
+        list() {
+            return request({ method: 'GET', path: '/v1/instance/page_templates' });
+        },
+        get(page) {
+            return request({ method: 'GET', path: `/v1/instance/page_templates/${(0, request_1.enc)(page)}` });
+        },
+        /** Save the page's draft. The live page is unchanged until you promote. */
+        saveDraft(page, definition) {
+            return request({ method: 'PUT', path: `/v1/instance/page_templates/${(0, request_1.enc)(page)}`, body: { definition } });
+        },
+        /** A signed link (one hour) to the hosted page with the draft applied. */
+        preview(page) {
+            return request({ method: 'POST', path: `/v1/instance/page_templates/${(0, request_1.enc)(page)}/preview` });
+        },
+        /** Make the draft the live template. */
+        promote(page) {
+            return request({ method: 'POST', path: `/v1/instance/page_templates/${(0, request_1.enc)(page)}/promote` });
+        },
+        /** Drop the draft, or take the live template down. */
+        discard(page, status) {
+            return request({ method: 'DELETE', path: `/v1/instance/page_templates/${(0, request_1.enc)(page)}`, query: { status } });
+        },
+    };
+}
+//# sourceMappingURL=page-templates.js.map

package/dist/client/page-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-templates.js","sourceRoot":"","sources":["../../src/client/page-templates.ts"],"names":[],"mappings":";;AA4CA,sDAyBC;AArED,uCAAgD;AA4ChD,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,GAAG,CAAC,IAAsB;YACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,2EAA2E;QAC3E,SAAS,CAAC,IAAsB,EAAE,UAAkC;YAClE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,0EAA0E;QAC1E,OAAO,CAAC,IAAsB;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,IAAA,aAAG,EAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,wCAAwC;QACxC,OAAO,CAAC,IAAsB;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,IAAA,aAAG,EAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,sDAAsD;QACtD,OAAO,CAAC,IAAsB,EAAE,MAAwB;YACtD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,+BAA+B,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5G,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/passkey-api.d.ts

@@ -0,0 +1,73 @@
+import { type RequestFn } from './request';
+import type { ListPage } from './types';
+export interface ExternalPasskey {
+    object: 'external_passkey';
+    id: string;
+    user_id: string;
+    credential_id: string;
+    name: string | null;
+    aaguid: string | null;
+    backed_up: boolean;
+    transports: string[];
+    last_used_at: number | null;
+    created_at: number;
+}
+export interface PasskeyRegistrationFinalize {
+    user_id: string;
+    challenge: string;
+    attestation_object: string;
+    client_data_json: string;
+    name?: string;
+    transports?: string[];
+}
+export interface PasskeyLoginFinalize {
+    handle: string;
+    challenge: string;
+    credential_id: string;
+    authenticator_data: string;
+    client_data_json: string;
+    signature: string;
+    /** Require the passkey to belong to this user. */
+    user_id?: string;
+}
+/**
+ * Passkeys for a user store you own: Atlas runs the WebAuthn ceremony, you keep
+ * the users and the session. Pass `options` to navigator.credentials.create()/get().
+ */
+export declare function passkeyApiResource(request: RequestFn): {
+    registrationInit(body: {
+        user_id: string;
+        username?: string;
+        display_name?: string;
+    }): Promise<{
+        object: "passkey_registration_options";
+        options: Record<string, unknown>;
+    }>;
+    registrationFinalize(body: PasskeyRegistrationFinalize): Promise<ExternalPasskey>;
+    loginInit(body?: {
+        user_id?: string;
+    }): Promise<{
+        object: "passkey_login_options";
+        handle: string;
+        options: Record<string, unknown>;
+    }>;
+    loginFinalize(body: PasskeyLoginFinalize): Promise<{
+        object: "passkey_login_result";
+        verified: true;
+        user_id: string;
+        credential_id: string;
+        passkey_id: string;
+        user_verified: boolean;
+        cloned_warning: boolean;
+    }>;
+    list(userId: string): Promise<ListPage<ExternalPasskey>>;
+    delete(userId: string, id: string): Promise<{
+        object: "external_passkey";
+        id: string;
+        deleted: true;
+    }>;
+    usage(): Promise<{
+        object: "passkey_api_usage";
+        passkeys: number;
+    }>;
+};

package/dist/client/passkey-api.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.passkeyApiResource = passkeyApiResource;
+const request_1 = require("./request");
+/**
+ * Passkeys for a user store you own: Atlas runs the WebAuthn ceremony, you keep
+ * the users and the session. Pass `options` to navigator.credentials.create()/get().
+ */
+function passkeyApiResource(request) {
+    return {
+        registrationInit(body) {
+            return request({ method: 'POST', path: '/v1/passkey_api/registration/init', body });
+        },
+        registrationFinalize(body) {
+            return request({ method: 'POST', path: '/v1/passkey_api/registration/finalize', body });
+        },
+        loginInit(body = {}) {
+            return request({ method: 'POST', path: '/v1/passkey_api/login/init', body });
+        },
+        loginFinalize(body) {
+            return request({ method: 'POST', path: '/v1/passkey_api/login/finalize', body });
+        },
+        list(userId) {
+            return request({ method: 'GET', path: `/v1/passkey_api/users/${(0, request_1.enc)(userId)}/passkeys` });
+        },
+        delete(userId, id) {
+            return request({ method: 'DELETE', path: `/v1/passkey_api/users/${(0, request_1.enc)(userId)}/passkeys/${(0, request_1.enc)(id)}` });
+        },
+        usage() {
+            return request({ method: 'GET', path: '/v1/passkey_api/usage' });
+        },
+    };
+}
+//# sourceMappingURL=passkey-api.js.map

package/dist/client/passkey-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-api.js","sourceRoot":"","sources":["../../src/client/passkey-api.ts"],"names":[],"mappings":";;AAwCA,gDAgCC;AAxED,uCAAgD;AAoChD;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,OAAkB;IACnD,OAAO;QACL,gBAAgB,CAAC,IAAmE;YAClF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,oBAAoB,CAAC,IAAiC;YACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,SAAS,CAAC,OAA6B,EAAE;YACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,aAAa,CAAC,IAA0B;YAStC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,MAAc;YACjB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,IAAA,aAAG,EAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,CAAC,MAAc,EAAE,EAAU;YAC/B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,IAAA,aAAG,EAAC,MAAM,CAAC,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,KAAK;YACH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/policy-bundles.d.ts

@@ -0,0 +1,105 @@
+import { type RequestFn } from './request';
+/**
+ * Signed policy bundles: the instance's ABAC policies and FGA authorization
+ * models as one versioned tar.gz with a manifest of file digests, signed with the
+ * instance signing key (detached JWS). Export, verify, and import with a dry-run
+ * diff. To check a bundle WITHOUT calling Atlas, use `verifyPolicyBundle`.
+ */
+export interface PolicyBundle {
+    object: 'policy_bundle';
+    /** A digest of the bundle CONTENT (`rev_…`): the same policy has the same revision everywhere. */
+    revision: string;
+    sha256: string;
+    size: number;
+    key_id: string;
+    algorithm: 'RS256' | 'ES256';
+    /** Detached compact JWS (`header..signature`) over the archive bytes. */
+    signature: string;
+    origin: 'export' | 'import';
+    manifest: Record<string, unknown>;
+    /** The tar.gz, base64. Present on export and get; omitted from lists. */
+    bundle?: string;
+    media_type?: 'application/gzip';
+    created_at: number;
+}
+export interface PolicyBundleUpload {
+    /** The tar.gz, base64 (a `Uint8Array` is encoded for you). */
+    bundle: string | Uint8Array;
+    signature: string;
+    /** Public keys to trust in addition to this instance's, e.g. the staging instance when promoting to production. */
+    trusted_jwks?: {
+        keys: Array<Record<string, unknown>>;
+    };
+}
+export interface PolicyBundleVerification {
+    object: 'policy_bundle_verification';
+    /** Signature AND integrity both check out. */
+    valid: boolean;
+    signature: {
+        valid: boolean;
+        key_id: string | null;
+        algorithm: string | null;
+        error?: string;
+    };
+    integrity: {
+        valid: boolean;
+        code?: string;
+        error?: string;
+    };
+    revision: string | null;
+    manifest: Record<string, unknown> | null;
+}
+export interface PolicyBundleDiffSection {
+    create: string[];
+    update: Array<{
+        name: string;
+        changed: string[];
+    }>;
+    /** On the instance, absent from the bundle. ABAC policies are deleted only with `prune`; FGA stores never. */
+    absent: string[];
+    unchanged: number;
+}
+export interface PolicyBundleDiff {
+    abac_policies: PolicyBundleDiffSection;
+    fga_stores: PolicyBundleDiffSection;
+    abac_templates: PolicyBundleDiffSection;
+    abac_links: PolicyBundleDiffSection;
+    /** `absent`: the instance has a schema and the bundle does not (removed only with `prune`). */
+    abac_schema: 'create' | 'update' | 'absent' | 'unchanged';
+    identical: boolean;
+}
+export interface PolicyBundleImport {
+    object: 'policy_bundle_import';
+    dry_run: boolean;
+    applied: boolean;
+    prune: boolean;
+    revision: string;
+    diff: PolicyBundleDiff;
+}
+export declare function policyBundlesResource(request: RequestFn): {
+    /** The stored bundles, newest first (without archives). */
+    list(): Promise<{
+        object: "list";
+        data: PolicyBundle[];
+        has_more: boolean;
+    }>;
+    /** The revision the instance policy is at right now — compare with a deployed bundle's to detect drift. */
+    current(): Promise<{
+        object: "policy_bundle_revision";
+        revision: string;
+    }>;
+    /** Export the current policy as a signed bundle. */
+    export(): Promise<PolicyBundle>;
+    get(revision: string): Promise<PolicyBundle>;
+    /** Check a bundle's signature and integrity on Atlas. */
+    verify(body: PolicyBundleUpload): Promise<PolicyBundleVerification>;
+    /**
+     * Import a signed bundle. `dryRun` returns what would change and applies
+     * nothing; a real import applies everything in one transaction. A bundle whose
+     * signature or integrity fails is refused with 422 before anything changes.
+     */
+    import(body: PolicyBundleUpload & {
+        dry_run?: boolean;
+        prune?: boolean;
+    }): Promise<PolicyBundleImport>;
+};

package/dist/client/policy-bundles.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.policyBundlesResource = policyBundlesResource;
+const request_1 = require("./request");
+const toBase64 = (b) => typeof b === 'string' ? b : btoa(Array.from(b, (c) => String.fromCharCode(c)).join(''));
+function policyBundlesResource(request) {
+    const upload = (u) => ({ ...u, bundle: toBase64(u.bundle) });
+    return {
+        /** The stored bundles, newest first (without archives). */
+        list() {
+            return request({ method: 'GET', path: '/v1/policy_bundles' });
+        },
+        /** The revision the instance policy is at right now — compare with a deployed bundle's to detect drift. */
+        current() {
+            return request({ method: 'GET', path: '/v1/policy_bundles/current' });
+        },
+        /** Export the current policy as a signed bundle. */
+        export() {
+            return request({ method: 'POST', path: '/v1/policy_bundles' });
+        },
+        get(revision) {
+            return request({ method: 'GET', path: `/v1/policy_bundles/${(0, request_1.enc)(revision)}` });
+        },
+        /** Check a bundle's signature and integrity on Atlas. */
+        verify(body) {
+            return request({ method: 'POST', path: '/v1/policy_bundles/verify', body: upload(body) });
+        },
+        /**
+         * Import a signed bundle. `dryRun` returns what would change and applies
+         * nothing; a real import applies everything in one transaction. A bundle whose
+         * signature or integrity fails is refused with 422 before anything changes.
+         */
+        import(body) {
+            return request({ method: 'POST', path: '/v1/policy_bundles/import', body: upload(body) });
+        },
+    };
+}
+//# sourceMappingURL=policy-bundles.js.map

package/dist/client/policy-bundles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-bundles.js","sourceRoot":"","sources":["../../src/client/policy-bundles.ts"],"names":[],"mappings":";;AA2EA,sDA+BC;AA1GD,uCAAgD;AAwEhD,MAAM,QAAQ,GAAG,CAAC,CAAsB,EAAU,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1F,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,MAAM,MAAM,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO;QACL,2DAA2D;QAC3D,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,2GAA2G;QAC3G,OAAO;YACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,oDAAoD;QACpD,MAAM;YACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,GAAG,CAAC,QAAgB;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,yDAAyD;QACzD,MAAM,CAAC,IAAwB;YAC7B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD;;;;WAIG;QACH,MAAM,CAAC,IAAiE;YACtE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;KACF,CAAC;AACJ,CAAC"}