@bitvea/feedback-toolbar 0.0.1

package/dist/vendor/types/invite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../../../types/src/invite.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,kBAAkB;;;;;EAK7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,kBAAkB;;;;;;;iBAG7B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEnE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;iBAOvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEnE,6DAA6D;AAC7D,eAAO,MAAM,eAAe,KAAK,CAAC"}

package/dist/vendor/types/invite.js

@@ -0,0 +1,30 @@
+// Team invitation schemas. Create input validates the form submission; the
+// Invite row itself is created server-side with a random token and
+// expiresAt = now + 14 days. The public invite shape is returned by
+// `/v1/team` so the UI can list pending invites.
+import { z } from "zod";
+import { roleSchema } from "./role.js";
+export const inviteStatusSchema = z.enum([
+    "PENDING",
+    "ACCEPTED",
+    "REVOKED",
+    "EXPIRED",
+]);
+export const inviteCreateSchema = z.object({
+    email: z.string().email(),
+    role: roleSchema,
+});
+export const inviteSchema = z.object({
+    id: z.string(),
+    email: z.string().email(),
+    role: roleSchema,
+    status: inviteStatusSchema,
+    expiresAt: z.coerce.date(),
+    createdAt: z.coerce.date(),
+});
+export const acceptInviteSchema = z.object({
+    token: z.string().min(1),
+});
+/** Invite TTL in days. 14 is generous but not indefinite. */
+export const INVITE_TTL_DAYS = 14;
+//# sourceMappingURL=invite.js.map

package/dist/vendor/types/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../../../types/src/invite.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,mEAAmE;AACnE,oEAAoE;AACpE,iDAAiD;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,SAAS;IACT,UAAU;IACV,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,IAAI,EAAE,UAAU;CACjB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,kBAAkB;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAGH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC"}

package/dist/vendor/types/mcpToken.d.ts

@@ -0,0 +1,38 @@
+import { z } from "zod";
+/** Every issued MCP token starts with this, so one is recognisable on sight. */
+export declare const MCP_TOKEN_PREFIX = "bvm_";
+/** Characters of the secret kept in the clear, for telling tokens apart. */
+export declare const MCP_TOKEN_DISPLAY_PREFIX_LENGTH = 12;
+export declare const mcpTokenCreateSchema: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strip>;
+export type McpTokenCreateInput = z.infer<typeof mcpTokenCreateSchema>;
+/** A token as the dashboard lists it. Never carries the secret. */
+export declare const mcpTokenSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    prefix: z.ZodString;
+    createdAt: z.ZodString;
+    lastUsedAt: z.ZodNullable<z.ZodString>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type McpTokenDTO = z.infer<typeof mcpTokenSchema>;
+/**
+ * The response to minting a token: the row, plus the secret exactly once.
+ *
+ * Only the hash is stored, so this is the only moment the plaintext exists
+ * anywhere we control. The UI has to say so.
+ */
+export declare const mcpTokenCreatedSchema: z.ZodObject<{
+    token: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        prefix: z.ZodString;
+        createdAt: z.ZodString;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        revokedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    secret: z.ZodString;
+}, z.core.$strip>;
+export type McpTokenCreatedDTO = z.infer<typeof mcpTokenCreatedSchema>;
+//# sourceMappingURL=mcpToken.d.ts.map

package/dist/vendor/types/mcpToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpToken.d.ts","sourceRoot":"","sources":["../../../../types/src/mcpToken.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAElD,eAAO,MAAM,oBAAoB;;iBAG/B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE,mEAAmE;AACnE,eAAO,MAAM,cAAc;;;;;;;iBAOzB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;iBAGhC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/vendor/types/mcpToken.js

@@ -0,0 +1,39 @@
+// Personal access tokens for the MCP server.
+//
+// A deliberately separate credential from the deploy key in `./apiKey`. The two
+// look alike on the wire - both are bearer secrets shown once - and that is
+// exactly why they must not be the same model. A deploy key is copied into
+// every CI environment and can only upsert an empty project; an MCP token reads
+// every piece of feedback its owner can reach and writes replies in their name.
+// One model with a scope column would put the read-write credential one
+// misconfiguration away from every build. Two models, two prefixes, two
+// verifiers, and neither is accepted where the other belongs.
+import { z } from "zod";
+/** Every issued MCP token starts with this, so one is recognisable on sight. */
+export const MCP_TOKEN_PREFIX = "bvm_";
+/** Characters of the secret kept in the clear, for telling tokens apart. */
+export const MCP_TOKEN_DISPLAY_PREFIX_LENGTH = 12;
+export const mcpTokenCreateSchema = z.object({
+    // Named by a human so the list is readable a year later: whose agent this is.
+    name: z.string().trim().min(1, "Name is required").max(80),
+});
+/** A token as the dashboard lists it. Never carries the secret. */
+export const mcpTokenSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    prefix: z.string(),
+    createdAt: z.string(),
+    lastUsedAt: z.string().nullable(),
+    revokedAt: z.string().nullable(),
+});
+/**
+ * The response to minting a token: the row, plus the secret exactly once.
+ *
+ * Only the hash is stored, so this is the only moment the plaintext exists
+ * anywhere we control. The UI has to say so.
+ */
+export const mcpTokenCreatedSchema = z.object({
+    token: mcpTokenSchema,
+    secret: z.string(),
+});
+//# sourceMappingURL=mcpToken.js.map

package/dist/vendor/types/mcpToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpToken.js","sourceRoot":"","sources":["../../../../types/src/mcpToken.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,wEAAwE;AACxE,8DAA8D;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAElD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,8EAA8E;IAC9E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAC3D,CAAC,CAAC;AAGH,mEAAmE;AACnE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,cAAc;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC"}

package/dist/vendor/types/organization.d.ts

@@ -0,0 +1,13 @@
+import { z } from "zod";
+export declare const organizationSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    createdAt: z.ZodCoercedDate<unknown>;
+}, z.core.$strip>;
+export type Organization = z.infer<typeof organizationSchema>;
+export declare const updateOrganizationSchema: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strip>;
+export type UpdateOrganizationInput = z.infer<typeof updateOrganizationSchema>;
+//# sourceMappingURL=organization.d.ts.map

package/dist/vendor/types/organization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.d.ts","sourceRoot":"","sources":["../../../../types/src/organization.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB;;;;;iBAK7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/vendor/types/organization.js

@@ -0,0 +1,12 @@
+// Organization (tenant) schemas.
+import { z } from "zod";
+export const organizationSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    slug: z.string(),
+    createdAt: z.coerce.date(),
+});
+export const updateOrganizationSchema = z.object({
+    name: z.string().trim().min(1).max(120),
+});
+//# sourceMappingURL=organization.js.map

package/dist/vendor/types/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sourceRoot":"","sources":["../../../../types/src/organization.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACxC,CAAC,CAAC"}

package/dist/vendor/types/project.d.ts

@@ -0,0 +1,73 @@
+import { z } from "zod";
+/**
+ * Reduce a deployment URL to the identity two installs of the same deployment
+ * must agree on: scheme, lowercased host, and a non-default port. Path, query,
+ * fragment, credentials and the trailing slash are all dropped, because
+ * `https://app.example.com/dashboard?x=1` and `https://app.example.com` are the
+ * same deployment and must not become two projects.
+ *
+ * Returns null when the input is not a syntactically valid http(s) URL, which
+ * the route turns into a rejection rather than a nonsense project.
+ */
+export declare function normalizeProjectUrl(raw: string): string | null;
+/**
+ * What a toolbar install reports about itself on a project's first deploy.
+ * The git fields are the values Vercel populates from the repo's own remote;
+ * `packageName` is the fallback for a local or non-Vercel build, where neither
+ * is set.
+ */
+export declare const projectRegisterSchema: z.ZodObject<{
+    url: z.ZodString;
+    repoOwner: z.ZodOptional<z.ZodString>;
+    repoSlug: z.ZodOptional<z.ZodString>;
+    packageName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ProjectRegisterInput = z.infer<typeof projectRegisterSchema>;
+export declare const projectSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    url: z.ZodNullable<z.ZodString>;
+    repoOwner: z.ZodNullable<z.ZodString>;
+    repoSlug: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    memberCount: z.ZodNumber;
+}, z.core.$strip>;
+export type ProjectDTO = z.infer<typeof projectSchema>;
+export declare const projectUpdateSchema: z.ZodObject<{
+    name: z.ZodString;
+}, z.core.$strip>;
+export type ProjectUpdateInput = z.infer<typeof projectUpdateSchema>;
+/**
+ * Name a project from what the installer could tell us, best source first:
+ * the git remote Vercel exposes, then the installing app's package name, then
+ * the host itself so a project is never nameless.
+ */
+export declare function deriveProjectName(input: {
+    repoOwner?: string | undefined;
+    repoSlug?: string | undefined;
+    packageName?: string | undefined;
+    normalizedUrl: string;
+}): string;
+/** What the toolbar posts to ask for a sign-in link. */
+export declare const toolbarSignInSchema: z.ZodObject<{
+    email: z.ZodString;
+    callbackUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ToolbarSignInInput = z.infer<typeof toolbarSignInSchema>;
+/**
+ * The four answers to "can this visitor act on this project", each mapping to
+ * a different screen in the toolbar:
+ *   signed_out - ask for a magic link
+ *   no_project - this deployment has not registered yet, so wait for a build
+ *   no_access  - signed in, but not invited here: ask an admin
+ *   ready      - start writing
+ */
+export declare const toolbarSessionStateSchema: z.ZodEnum<{
+    signed_out: "signed_out";
+    no_project: "no_project";
+    no_access: "no_access";
+    ready: "ready";
+}>;
+export type ToolbarSessionState = z.infer<typeof toolbarSessionStateSchema>;
+//# sourceMappingURL=project.d.ts.map

package/dist/vendor/types/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../../../types/src/project.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW9D;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEzE,eAAO,MAAM,aAAa;;;;;;;;;iBAoCxB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEvD,eAAO,MAAM,mBAAmB;;iBAE9B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CAST;AAED,wDAAwD;AACxD,eAAO,MAAM,mBAAmB;;;iBAI9B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB;;;;;EAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/vendor/types/project.js

@@ -0,0 +1,117 @@
+// Project (Organization) schemas for the deploy-time auto-registration
+// endpoint and the admin screens that manage what it created.
+import { z } from "zod";
+/**
+ * Reduce a deployment URL to the identity two installs of the same deployment
+ * must agree on: scheme, lowercased host, and a non-default port. Path, query,
+ * fragment, credentials and the trailing slash are all dropped, because
+ * `https://app.example.com/dashboard?x=1` and `https://app.example.com` are the
+ * same deployment and must not become two projects.
+ *
+ * Returns null when the input is not a syntactically valid http(s) URL, which
+ * the route turns into a rejection rather than a nonsense project.
+ */
+export function normalizeProjectUrl(raw) {
+    let parsed;
+    try {
+        parsed = new URL(raw.trim());
+    }
+    catch {
+        return null;
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:")
+        return null;
+    if (parsed.hostname.length === 0)
+        return null;
+    const port = parsed.port.length > 0 ? `:${parsed.port}` : "";
+    return `${parsed.protocol}//${parsed.hostname.toLowerCase()}${port}`;
+}
+/**
+ * What a toolbar install reports about itself on a project's first deploy.
+ * The git fields are the values Vercel populates from the repo's own remote;
+ * `packageName` is the fallback for a local or non-Vercel build, where neither
+ * is set.
+ */
+export const projectRegisterSchema = z.object({
+    url: z.string().trim().min(1, "A project URL is required."),
+    repoOwner: z.string().trim().max(200).optional(),
+    repoSlug: z.string().trim().max(200).optional(),
+    packageName: z.string().trim().max(200).optional(),
+});
+export const projectSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    slug: z.string(),
+    url: z.string().nullable(),
+    /**
+     * The GitHub repository behind the deployment, as the installer's build
+     * environment reported it. Both nullable and INDEPENDENTLY so: a hand-made
+     * project has neither, and a link needs both, so every consumer checks the
+     * pair rather than assuming one implies the other.
+     *
+     * There is no provider field. Every install this product has is GitHub, and
+     * a GitLab one would want a different URL shape rather than a different
+     * host - a change to make when there is one to test against, not a column to
+     * guess at now.
+     */
+    repoOwner: z.string().nullable(),
+    repoSlug: z.string().nullable(),
+    createdAt: z.string(),
+    /**
+     * How many people hold a Membership in this project.
+     *
+     * REQUIRED, not `.optional()`, and that is the whole decision. Zero is a real
+     * answer here - an unadopted project genuinely has nobody on it, which is the
+     * fact the "waiting to be adopted" section exists to report - so an optional
+     * field would make "nobody is on this project" indistinguishable from "this
+     * response did not count". The projects list renders those two differently
+     * (a literal `0 reviewers` versus a rail cell that is dropped entirely), so
+     * the contract has to be able to tell them apart, and requiring the field is
+     * what forces every door that answers with a project to select the count
+     * rather than quietly omit it.
+     *
+     * `.int().nonnegative()` because it is a row count, same as
+     * `roleDefinitionSchema.memberCount`.
+     */
+    memberCount: z.number().int().nonnegative(),
+});
+export const projectUpdateSchema = z.object({
+    name: z.string().trim().min(1, "A name is required.").max(120),
+});
+/**
+ * Name a project from what the installer could tell us, best source first:
+ * the git remote Vercel exposes, then the installing app's package name, then
+ * the host itself so a project is never nameless.
+ */
+export function deriveProjectName(input) {
+    const { repoOwner, repoSlug, packageName, normalizedUrl } = input;
+    if (repoSlug && repoSlug.length > 0) {
+        return repoOwner && repoOwner.length > 0
+            ? `${repoOwner}/${repoSlug}`
+            : repoSlug;
+    }
+    if (packageName && packageName.length > 0)
+        return packageName;
+    return new URL(normalizedUrl).hostname;
+}
+/** What the toolbar posts to ask for a sign-in link. */
+export const toolbarSignInSchema = z.object({
+    email: z.string().email("Enter a valid email address."),
+    /** Where the emailed link should land. Defaults to the dashboard. */
+    callbackUrl: z.string().trim().max(2000).optional(),
+});
+/**
+ * The four answers to "can this visitor act on this project", each mapping to
+ * a different screen in the toolbar:
+ *   signed_out - ask for a magic link
+ *   no_project - this deployment has not registered yet, so wait for a build
+ *   no_access  - signed in, but not invited here: ask an admin
+ *   ready      - start writing
+ */
+export const toolbarSessionStateSchema = z.enum([
+    "signed_out",
+    "no_project",
+    "no_access",
+    "ready",
+]);
+//# sourceMappingURL=project.js.map

package/dist/vendor/types/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../../../types/src/project.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,8DAA8D;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B;;;;;;;;;;OAUG;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC/D,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAKjC;IACC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAClE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE;YAC5B,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC;IACD,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC;IAC9D,OAAO,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC;AACzC,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC;IACvD,qEAAqE;IACrE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,OAAO;CACR,CAAC,CAAC"}

package/dist/vendor/types/role.d.ts

@@ -0,0 +1,12 @@
+import { z } from "zod";
+export declare const roleSchema: z.ZodEnum<{
+    OWNER: "OWNER";
+    ADMIN: "ADMIN";
+    MEMBER: "MEMBER";
+}>;
+export type Role = z.infer<typeof roleSchema>;
+/** Ordered for UI display — owner first, member last. */
+export declare const ROLE_ORDER: readonly Role[];
+export declare const ROLE_LABELS: Record<Role, string>;
+export declare const ROLE_DESCRIPTIONS: Record<Role, string>;
+//# sourceMappingURL=role.d.ts.map

package/dist/vendor/types/role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.d.ts","sourceRoot":"","sources":["../../../../types/src/role.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,UAAU;;;;EAAuC,CAAC;AAC/D,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C,yDAAyD;AACzD,eAAO,MAAM,UAAU,EAAE,SAAS,IAAI,EAAiC,CAAC;AAExE,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAI5C,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAIlD,CAAC"}

package/dist/vendor/types/role.js

@@ -0,0 +1,20 @@
+// Team roles within an organization, gated by a fixed permission matrix
+// (see `@bitvea/auth/permissions`).
+//
+// Source of truth; the Prisma `Role` enum is kept in agreement by the drift
+// guard in `packages/api/src/__tests__/enum-drift-guard.test.ts`.
+import { z } from "zod";
+export const roleSchema = z.enum(["OWNER", "ADMIN", "MEMBER"]);
+/** Ordered for UI display — owner first, member last. */
+export const ROLE_ORDER = ["OWNER", "ADMIN", "MEMBER"];
+export const ROLE_LABELS = {
+    OWNER: "Owner",
+    ADMIN: "Admin",
+    MEMBER: "Member",
+};
+export const ROLE_DESCRIPTIONS = {
+    OWNER: "Full access - manage the organization, members, and all resources.",
+    ADMIN: "Manage members and resources, but not delete the organization.",
+    MEMBER: "Standard access. Cannot manage members.",
+};
+//# sourceMappingURL=role.js.map

package/dist/vendor/types/role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.js","sourceRoot":"","sources":["../../../../types/src/role.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,oCAAoC;AACpC,EAAE;AACF,4EAA4E;AAC5E,kEAAkE;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG/D,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,WAAW,GAAyB;IAC/C,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAyB;IACrD,KAAK,EAAE,oEAAoE;IAC3E,KAAK,EAAE,gEAAgE;IACvE,MAAM,EAAE,yCAAyC;CAClD,CAAC"}

package/dist/vendor/types/roleDefinition.d.ts

@@ -0,0 +1,61 @@
+import { z } from "zod";
+/** Create a custom role with an initial permission set. */
+export declare const roleDefinitionCreateSchema: z.ZodObject<{
+    name: z.ZodString;
+    permissions: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        entity: z.ZodEnum<{
+            feedback: "feedback";
+            pin: "pin";
+            member: "member";
+            setting: "setting";
+        }>;
+        canRead: z.ZodBoolean;
+        canWrite: z.ZodBoolean;
+    }, z.core.$strip>>>>;
+}, z.core.$strip>;
+export type RoleDefinitionCreateInput = z.infer<typeof roleDefinitionCreateSchema>;
+/** Update a custom role's name and/or its full permission set. */
+export declare const roleDefinitionUpdateSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        entity: z.ZodEnum<{
+            feedback: "feedback";
+            pin: "pin";
+            member: "member";
+            setting: "setting";
+        }>;
+        canRead: z.ZodBoolean;
+        canWrite: z.ZodBoolean;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type RoleDefinitionUpdateInput = z.infer<typeof roleDefinitionUpdateSchema>;
+/** Assign (or clear, with null) a custom role on a member. */
+export declare const assignRoleDefinitionSchema: z.ZodObject<{
+    roleDefinitionId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type AssignRoleDefinitionInput = z.infer<typeof assignRoleDefinitionSchema>;
+/** Wire shape returned by the roles list/detail endpoints. */
+export declare const roleDefinitionSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    isSystem: z.ZodBoolean;
+    systemRole: z.ZodNullable<z.ZodEnum<{
+        OWNER: "OWNER";
+        ADMIN: "ADMIN";
+        MEMBER: "MEMBER";
+    }>>;
+    permissions: z.ZodArray<z.ZodObject<{
+        entity: z.ZodEnum<{
+            feedback: "feedback";
+            pin: "pin";
+            member: "member";
+            setting: "setting";
+        }>;
+        canRead: z.ZodBoolean;
+        canWrite: z.ZodBoolean;
+    }, z.core.$strip>>;
+    memberCount: z.ZodNumber;
+}, z.core.$strip>;
+export type RoleDefinitionDTO = z.infer<typeof roleDefinitionSchema>;
+//# sourceMappingURL=roleDefinition.d.ts.map

package/dist/vendor/types/roleDefinition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleDefinition.d.ts","sourceRoot":"","sources":["../../../../types/src/roleDefinition.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAIrC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,0BAA0B,CAClC,CAAC;AAEF,kEAAkE;AAClE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;iBAQpC,CAAC;AACJ,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,0BAA0B,CAClC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,0BAA0B,CAClC,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/vendor/types/roleDefinition.js

@@ -0,0 +1,45 @@
+// DTOs for the role-management API (`/api/v1/roles`).
+//
+// A RoleDefinition is a named bundle of per-entity read/write permissions scoped
+// to one organization. Three are seeded per org as `isSystem` mirrors of the
+// OWNER/ADMIN/MEMBER enum roles (their permissions are read-only in the UI);
+// owners can create additional custom roles and assign them to members to refine
+// entity access beyond the system defaults.
+import { z } from "zod";
+import { entityPermissionSchema } from "./entity.js";
+import { roleSchema } from "./role.js";
+/** Role name: human label. Slug is derived server-side. */
+const roleNameSchema = z
+    .string()
+    .trim()
+    .min(2, "Name must be at least 2 characters.")
+    .max(50, "Name must be at most 50 characters.");
+/** Create a custom role with an initial permission set. */
+export const roleDefinitionCreateSchema = z.object({
+    name: roleNameSchema,
+    // Permissions are optional on create — omitted ⇒ no access until edited.
+    permissions: z.array(entityPermissionSchema).optional().default([]),
+});
+/** Update a custom role's name and/or its full permission set. */
+export const roleDefinitionUpdateSchema = z
+    .object({
+    name: roleNameSchema.optional(),
+    permissions: z.array(entityPermissionSchema).optional(),
+})
+    .refine((v) => v.name !== undefined || v.permissions !== undefined, "Provide a name or permissions to update.");
+/** Assign (or clear, with null) a custom role on a member. */
+export const assignRoleDefinitionSchema = z.object({
+    roleDefinitionId: z.string().min(1).nullable(),
+});
+/** Wire shape returned by the roles list/detail endpoints. */
+export const roleDefinitionSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    slug: z.string(),
+    isSystem: z.boolean(),
+    // For system roles, which enum role this mirrors; null for custom roles.
+    systemRole: roleSchema.nullable(),
+    permissions: z.array(entityPermissionSchema),
+    memberCount: z.number().int().nonnegative(),
+});
+//# sourceMappingURL=roleDefinition.js.map

package/dist/vendor/types/roleDefinition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleDefinition.js","sourceRoot":"","sources":["../../../../types/src/roleDefinition.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,iFAAiF;AACjF,6EAA6E;AAC7E,6EAA6E;AAC7E,iFAAiF;AACjF,4CAA4C;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,2DAA2D;AAC3D,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,EAAE,qCAAqC,CAAC;KAC7C,GAAG,CAAC,EAAE,EAAE,qCAAqC,CAAC,CAAC;AAElD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,cAAc;IACpB,yEAAyE;IACzE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACpE,CAAC,CAAC;AAKH,kEAAkE;AAClE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC/B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAC1D,0CAA0C,CAC3C,CAAC;AAKJ,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAKH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,yEAAyE;IACzE,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC5C,CAAC,CAAC"}

package/dist/vendor/types/team.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+/** A member of the active organization, returned by `/v1/team`. */
+export declare const memberSchema: z.ZodObject<{
+    membershipId: z.ZodString;
+    userId: z.ZodString;
+    email: z.ZodString;
+    name: z.ZodString;
+    image: z.ZodNullable<z.ZodString>;
+    role: z.ZodEnum<{
+        OWNER: "OWNER";
+        ADMIN: "ADMIN";
+        MEMBER: "MEMBER";
+    }>;
+    createdAt: z.ZodCoercedDate<unknown>;
+}, z.core.$strip>;
+export type Member = z.infer<typeof memberSchema>;
+export declare const updateMemberRoleSchema: z.ZodObject<{
+    role: z.ZodEnum<{
+        OWNER: "OWNER";
+        ADMIN: "ADMIN";
+        MEMBER: "MEMBER";
+    }>;
+}, z.core.$strip>;
+export type UpdateMemberRoleInput = z.infer<typeof updateMemberRoleSchema>;
+//# sourceMappingURL=team.d.ts.map

package/dist/vendor/types/team.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.d.ts","sourceRoot":"","sources":["../../../../types/src/team.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,mEAAmE;AACnE,eAAO,MAAM,YAAY;;;;;;;;;;;;iBAQvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,eAAO,MAAM,sBAAsB;;;;;;iBAEjC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/vendor/types/team.js

@@ -0,0 +1,17 @@
+// Team membership schemas — the members of an organization.
+import { z } from "zod";
+import { roleSchema } from "./role.js";
+/** A member of the active organization, returned by `/v1/team`. */
+export const memberSchema = z.object({
+    membershipId: z.string(),
+    userId: z.string(),
+    email: z.string().email(),
+    name: z.string(),
+    image: z.string().nullable(),
+    role: roleSchema,
+    createdAt: z.coerce.date(),
+});
+export const updateMemberRoleSchema = z.object({
+    role: roleSchema,
+});
+//# sourceMappingURL=team.js.map

package/dist/vendor/types/team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../../../../types/src/team.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,mEAAmE;AACnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,UAAU;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC3B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,UAAU;CACjB,CAAC,CAAC"}

package/dist/vendor/types/util.d.ts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+/**
+ * Read a text field out of a `FormData`.
+ *
+ * `FormData.get` is typed `string | File | null`, so `String(fd.get("name"))`
+ * on a field the browser filled with a file yields the literal
+ * `"[object Object]"` and that string goes on to be validated and stored. A
+ * file where text was expected is a malformed submission, so it reads as
+ * absent rather than as nonsense.
+ */
+export declare function formText(form: FormData, field: string): string;
+/** Discriminated result for Server Actions. */
+export type ActionResult<T = void> = {
+    ok: true;
+    data?: T;
+} | {
+    ok: false;
+    error: string;
+    fieldErrors?: Record<string, string>;
+};
+/** Standard error wire shape returned by the API (`{ error: code }`). */
+export declare const apiErrorSchema: z.ZodObject<{
+    error: z.ZodString;
+}, z.core.$strip>;
+export type ApiError = z.infer<typeof apiErrorSchema>;
+/** Reusable cursor/offset pagination query. */
+export declare const paginationQuerySchema: z.ZodObject<{
+    page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    pageSize: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export type PaginationQuery = z.infer<typeof paginationQuerySchema>;
+/** Generic paginated envelope. */
+export declare const paginated: <T extends z.ZodTypeAny>(item: T) => z.ZodObject<{
+    items: z.ZodArray<T>;
+    page: z.ZodNumber;
+    pageSize: z.ZodNumber;
+    total: z.ZodNumber;
+}, z.core.$strip>;
+//# sourceMappingURL=util.d.ts.map

package/dist/vendor/types/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../types/src/util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED,+CAA+C;AAC/C,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,IAAI,IAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAEvE,yEAAyE;AACzE,eAAO,MAAM,cAAc;;iBAEzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,+CAA+C;AAC/C,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,kCAAkC;AAClC,eAAO,MAAM,SAAS,GAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC;;;;;iBAMrD,CAAC"}