@braidhq/server 0.1.0 → 0.2.0

package/dist/routes/_shared.d.ts

@@ -1,70 +1,36 @@
 import { z } from '@hono/zod-openapi';
 export declare const WorkspaceIdParam: z.ZodObject<{
-    workspaceId: z.ZodBranded<z.ZodString, "WorkspaceId">;
-}, "strip", z.ZodTypeAny, {
-    workspaceId: string & z.BRAND<"WorkspaceId">;
-}, {
-    workspaceId: string;
-}>;
+    workspaceId: z.core.$ZodBranded<z.ZodString, "WorkspaceId", "out">;
+}, z.core.$strip>;
 export declare const ProblemJsonResponseContent: {
     'application/problem+json': {
         schema: z.ZodObject<{
             type: z.ZodString;
             title: z.ZodString;
             status: z.ZodNumber;
-            code: z.ZodString;
+            code: z.ZodEnum<{
+                "BRAID-VALIDATION": "BRAID-VALIDATION";
+                "BRAID-UNAUTHORIZED": "BRAID-UNAUTHORIZED";
+                "BRAID-NOT-FOUND": "BRAID-NOT-FOUND";
+                "BRAID-CONFLICT": "BRAID-CONFLICT";
+                "BRAID-FORBIDDEN": "BRAID-FORBIDDEN";
+                "BRAID-UNAVAILABLE": "BRAID-UNAVAILABLE";
+                "BRAID-INTERNAL": "BRAID-INTERNAL";
+            }>;
             detail: z.ZodOptional<z.ZodString>;
             issues: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                code: z.ZodBranded<z.ZodString, "ValidationCode">;
-                severity: z.ZodEnum<["error", "warning", "info"]>;
+                code: z.core.$ZodBranded<z.ZodString, "ValidationCode", "out">;
+                severity: z.ZodEnum<{
+                    error: "error";
+                    warning: "warning";
+                    info: "info";
+                }>;
                 message: z.ZodString;
-                nodeId: z.ZodOptional<z.ZodBranded<z.ZodString, "NodeId">>;
-                edgeId: z.ZodOptional<z.ZodBranded<z.ZodString, "EdgeId">>;
+                nodeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "NodeId", "out">>;
+                edgeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "EdgeId", "out">>;
                 path: z.ZodOptional<z.ZodString>;
-            }, "strip", z.ZodTypeAny, {
-                code: string & z.BRAND<"ValidationCode">;
-                message: string;
-                severity: "error" | "warning" | "info";
-                path?: string | undefined;
-                nodeId?: (string & z.BRAND<"NodeId">) | undefined;
-                edgeId?: (string & z.BRAND<"EdgeId">) | undefined;
-            }, {
-                code: string;
-                message: string;
-                severity: "error" | "warning" | "info";
-                path?: string | undefined;
-                nodeId?: string | undefined;
-                edgeId?: string | undefined;
-            }>, "many">>;
-        }, "strip", z.ZodTypeAny, {
-            code: string;
-            type: string;
-            title: string;
-            status: number;
-            issues?: {
-                code: string & z.BRAND<"ValidationCode">;
-                message: string;
-                severity: "error" | "warning" | "info";
-                path?: string | undefined;
-                nodeId?: (string & z.BRAND<"NodeId">) | undefined;
-                edgeId?: (string & z.BRAND<"EdgeId">) | undefined;
-            }[] | undefined;
-            detail?: string | undefined;
-        }, {
-            code: string;
-            type: string;
-            title: string;
-            status: number;
-            issues?: {
-                code: string;
-                message: string;
-                severity: "error" | "warning" | "info";
-                path?: string | undefined;
-                nodeId?: string | undefined;
-                edgeId?: string | undefined;
-            }[] | undefined;
-            detail?: string | undefined;
-        }>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>;
     };
 };
 export declare const NotFoundResponse: {
@@ -75,59 +41,63 @@ export declare const NotFoundResponse: {
                 type: z.ZodString;
                 title: z.ZodString;
                 status: z.ZodNumber;
-                code: z.ZodString;
+                code: z.ZodEnum<{
+                    "BRAID-VALIDATION": "BRAID-VALIDATION";
+                    "BRAID-UNAUTHORIZED": "BRAID-UNAUTHORIZED";
+                    "BRAID-NOT-FOUND": "BRAID-NOT-FOUND";
+                    "BRAID-CONFLICT": "BRAID-CONFLICT";
+                    "BRAID-FORBIDDEN": "BRAID-FORBIDDEN";
+                    "BRAID-UNAVAILABLE": "BRAID-UNAVAILABLE";
+                    "BRAID-INTERNAL": "BRAID-INTERNAL";
+                }>;
                 detail: z.ZodOptional<z.ZodString>;
                 issues: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                    code: z.ZodBranded<z.ZodString, "ValidationCode">;
-                    severity: z.ZodEnum<["error", "warning", "info"]>;
+                    code: z.core.$ZodBranded<z.ZodString, "ValidationCode", "out">;
+                    severity: z.ZodEnum<{
+                        error: "error";
+                        warning: "warning";
+                        info: "info";
+                    }>;
                     message: z.ZodString;
-                    nodeId: z.ZodOptional<z.ZodBranded<z.ZodString, "NodeId">>;
-                    edgeId: z.ZodOptional<z.ZodBranded<z.ZodString, "EdgeId">>;
+                    nodeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "NodeId", "out">>;
+                    edgeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "EdgeId", "out">>;
                     path: z.ZodOptional<z.ZodString>;
-                }, "strip", z.ZodTypeAny, {
-                    code: string & z.BRAND<"ValidationCode">;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: (string & z.BRAND<"NodeId">) | undefined;
-                    edgeId?: (string & z.BRAND<"EdgeId">) | undefined;
-                }, {
-                    code: string;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: string | undefined;
-                    edgeId?: string | undefined;
-                }>, "many">>;
-            }, "strip", z.ZodTypeAny, {
-                code: string;
-                type: string;
-                title: string;
-                status: number;
-                issues?: {
-                    code: string & z.BRAND<"ValidationCode">;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: (string & z.BRAND<"NodeId">) | undefined;
-                    edgeId?: (string & z.BRAND<"EdgeId">) | undefined;
-                }[] | undefined;
-                detail?: string | undefined;
-            }, {
-                code: string;
-                type: string;
-                title: string;
-                status: number;
-                issues?: {
-                    code: string;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: string | undefined;
-                    edgeId?: string | undefined;
-                }[] | undefined;
-                detail?: string | undefined;
-            }>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
+        };
+    };
+};
+export declare const ForbiddenResponse: {
+    readonly description: "The caller lacks permission for this action.";
+    readonly content: {
+        'application/problem+json': {
+            schema: z.ZodObject<{
+                type: z.ZodString;
+                title: z.ZodString;
+                status: z.ZodNumber;
+                code: z.ZodEnum<{
+                    "BRAID-VALIDATION": "BRAID-VALIDATION";
+                    "BRAID-UNAUTHORIZED": "BRAID-UNAUTHORIZED";
+                    "BRAID-NOT-FOUND": "BRAID-NOT-FOUND";
+                    "BRAID-CONFLICT": "BRAID-CONFLICT";
+                    "BRAID-FORBIDDEN": "BRAID-FORBIDDEN";
+                    "BRAID-UNAVAILABLE": "BRAID-UNAVAILABLE";
+                    "BRAID-INTERNAL": "BRAID-INTERNAL";
+                }>;
+                detail: z.ZodOptional<z.ZodString>;
+                issues: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    code: z.core.$ZodBranded<z.ZodString, "ValidationCode", "out">;
+                    severity: z.ZodEnum<{
+                        error: "error";
+                        warning: "warning";
+                        info: "info";
+                    }>;
+                    message: z.ZodString;
+                    nodeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "NodeId", "out">>;
+                    edgeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "EdgeId", "out">>;
+                    path: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
         };
     };
 };
@@ -139,59 +109,29 @@ export declare const ValidationFailureResponse: {
                 type: z.ZodString;
                 title: z.ZodString;
                 status: z.ZodNumber;
-                code: z.ZodString;
+                code: z.ZodEnum<{
+                    "BRAID-VALIDATION": "BRAID-VALIDATION";
+                    "BRAID-UNAUTHORIZED": "BRAID-UNAUTHORIZED";
+                    "BRAID-NOT-FOUND": "BRAID-NOT-FOUND";
+                    "BRAID-CONFLICT": "BRAID-CONFLICT";
+                    "BRAID-FORBIDDEN": "BRAID-FORBIDDEN";
+                    "BRAID-UNAVAILABLE": "BRAID-UNAVAILABLE";
+                    "BRAID-INTERNAL": "BRAID-INTERNAL";
+                }>;
                 detail: z.ZodOptional<z.ZodString>;
                 issues: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                    code: z.ZodBranded<z.ZodString, "ValidationCode">;
-                    severity: z.ZodEnum<["error", "warning", "info"]>;
+                    code: z.core.$ZodBranded<z.ZodString, "ValidationCode", "out">;
+                    severity: z.ZodEnum<{
+                        error: "error";
+                        warning: "warning";
+                        info: "info";
+                    }>;
                     message: z.ZodString;
-                    nodeId: z.ZodOptional<z.ZodBranded<z.ZodString, "NodeId">>;
-                    edgeId: z.ZodOptional<z.ZodBranded<z.ZodString, "EdgeId">>;
+                    nodeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "NodeId", "out">>;
+                    edgeId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "EdgeId", "out">>;
                     path: z.ZodOptional<z.ZodString>;
-                }, "strip", z.ZodTypeAny, {
-                    code: string & z.BRAND<"ValidationCode">;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: (string & z.BRAND<"NodeId">) | undefined;
-                    edgeId?: (string & z.BRAND<"EdgeId">) | undefined;
-                }, {
-                    code: string;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: string | undefined;
-                    edgeId?: string | undefined;
-                }>, "many">>;
-            }, "strip", z.ZodTypeAny, {
-                code: string;
-                type: string;
-                title: string;
-                status: number;
-                issues?: {
-                    code: string & z.BRAND<"ValidationCode">;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: (string & z.BRAND<"NodeId">) | undefined;
-                    edgeId?: (string & z.BRAND<"EdgeId">) | undefined;
-                }[] | undefined;
-                detail?: string | undefined;
-            }, {
-                code: string;
-                type: string;
-                title: string;
-                status: number;
-                issues?: {
-                    code: string;
-                    message: string;
-                    severity: "error" | "warning" | "info";
-                    path?: string | undefined;
-                    nodeId?: string | undefined;
-                    edgeId?: string | undefined;
-                }[] | undefined;
-                detail?: string | undefined;
-            }>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
         };
     };
 };

package/dist/routes/_shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAErC,eAAO,MAAM,gBAAgB;;;;;;EAK3B,CAAA;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAEtC,CAAA;AAED,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGnB,CAAA;AAEV,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAG5B,CAAA"}
+{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAErC,eAAO,MAAM,gBAAgB;;iBAK3B,CAAA;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAEtC,CAAA;AAED,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGnB,CAAA;AAEV,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAGpB,CAAA;AAEV,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAG5B,CAAA"}

package/dist/routes/_shared.js

@@ -1,11 +1,11 @@
 /**
  * Shared OpenAPI building blocks used across workspace-scoped routes.
  *
- * Path parameters declared on parent app.route() mounts are NOT
- * automatically merged into child routes' OpenAPI definitions. Each
- * route under `/workspaces/:workspaceId/*` must therefore re-declare
- * `workspaceId` in its `request.params`. Use `WorkspaceIdParam` to
- * keep the declaration consistent.
+ * Path parameters on parent app.route() mounts do not merge,
+ * into a child route's OpenAPI definitions.
+ * So each route under `/workspaces/:workspaceId/*` must re-declare it,
+ * naming `workspaceId` in its own `request.params`.
+ * Use `WorkspaceIdParam` to keep the declaration consistent.
  */
 import { BraidProblemJson, WorkspaceId } from '@braidhq/schema';
 import { z } from '@hono/zod-openapi';
@@ -22,6 +22,10 @@ export const NotFoundResponse = {
     description: 'The requested entity does not exist.',
     content: ProblemJsonResponseContent,
 };
+export const ForbiddenResponse = {
+    description: 'The caller lacks permission for this action.',
+    content: ProblemJsonResponseContent,
+};
 export const ValidationFailureResponse = {
     description: 'Request body or query failed validation.',
     content: ProblemJsonResponseContent,

package/dist/routes/_shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"_shared.js","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAErC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE;QAC1C,OAAO,EAAE,cAAc;KACxB,CAAC;CACH,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,0BAA0B,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;CACzD,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,WAAW,EAAE,sCAAsC;IACnD,OAAO,EAAE,0BAA0B;CAC3B,CAAA;AAEV,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,WAAW,EAAE,0CAA0C;IACvD,OAAO,EAAE,0BAA0B;CAC3B,CAAA"}
+{"version":3,"file":"_shared.js","sourceRoot":"","sources":["../../src/routes/_shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAErC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE;QAC1C,OAAO,EAAE,cAAc;KACxB,CAAC;CACH,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,0BAA0B,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;CACzD,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,WAAW,EAAE,sCAAsC;IACnD,OAAO,EAAE,0BAA0B;CAC3B,CAAA;AAEV,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,8CAA8C;IAC3D,OAAO,EAAE,0BAA0B;CAC3B,CAAA;AAEV,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,WAAW,EAAE,0CAA0C;IACvD,OAAO,EAAE,0BAA0B;CAC3B,CAAA"}

package/dist/routes/admin.d.ts

@@ -1,7 +1,7 @@
 import type { WorkspaceService } from '@braidhq/core';
 import type { AccessPolicy } from '../infrastructure/auth/AccessPolicy.js';
-import type { WorkspaceRegistryFile } from '../infrastructure/fs/WorkspaceRegistryFile.js';
 import type { UserRegistryFile } from '../infrastructure/users/UserRegistryFile.js';
+import type { WorkspaceRegistryFile } from '../infrastructure/workspace/WorkspaceRegistryFile.js';
 import { OpenAPIHono } from '@hono/zod-openapi';
 export interface AdminRouterDeps {
     userRegistry: UserRegistryFile;

package/dist/routes/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAErD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAA;AAC1F,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAA;AAGnF,OAAO,EAAe,WAAW,EAAK,MAAM,mBAAmB,CAAA;AA6C/D,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,gBAAgB,CAAA;IAC9B,YAAY,EAAE,YAAY,CAAA;IAC1B,iBAAiB,EAAE,qBAAqB,CAAA;IACxC,gBAAgB,EAAE,gBAAgB,CAAA;CACnC;AAqHD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CA0FpE"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAErD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sDAAsD,CAAA;AAGjG,OAAO,EAAe,WAAW,EAAK,MAAM,mBAAmB,CAAA;AA6C/D,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,gBAAgB,CAAA;IAC9B,YAAY,EAAE,YAAY,CAAA;IAC1B,iBAAiB,EAAE,qBAAqB,CAAA;IACxC,gBAAgB,EAAE,gBAAgB,CAAA;CACnC;AAqHD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CA2FpE"}

package/dist/routes/admin.js

@@ -1,8 +1,8 @@
 import { NotFoundError } from '@braidhq/core';
 import { ServerRole, User, UserId, WorkspaceId, WorkspaceRole } from '@braidhq/schema';
 import { createRoute, OpenAPIHono, z } from '@hono/zod-openapi';
-import { requireAdmin } from '../middleware/requireAdmin.js';
-import { getUserId } from '../middleware/userId.js';
+import { getUserId } from '../middleware/auth.js';
+import { requireServerCapability } from '../middleware/workspaceAccess.js';
 import { NotFoundResponse, ValidationFailureResponse } from './_shared.js';
 const Invite = z.object({
     email: z.string().email(),
@@ -129,7 +129,7 @@ const deleteUserRoute = createRoute({
     method: 'delete',
     path: '/users/{userId}',
     operationId: 'deleteUserAdmin',
-    summary: 'Delete a user record. Admin only. Idempotent. Does NOT clean up workspace memberships referencing this userId; those rows become orphans.',
+    summary: 'Delete a user record. Admin only. Idempotent. Does NOT clean up workspace memberships referencing this userId. Those rows become orphans.',
     tags: ['admin'],
     request: { params: UserIdParam },
     responses: {
@@ -146,7 +146,7 @@ const deleteUserRoute = createRoute({
 });
 export function createAdminRouter(deps) {
     const router = new OpenAPIHono();
-    router.use('*', requireAdmin(deps.userRegistry));
+    router.use('*', requireServerCapability('server.admin', deps.userRegistry));
     router.openapi(listInvitesRoute, async (context) => {
         const items = await deps.accessPolicy.listInvites();
         return context.json({ items }, 200);
@@ -170,8 +170,8 @@ export function createAdminRouter(deps) {
             deps.workspaceService.list(),
             deps.workspaceRegistry.listAllWithMembers(),
         ]);
-        // Build rootPath → workspaceId so we can attach a human id to each
-        // membership without exposing rootPath to the client.
+        // Map rootPath to workspaceId so each membership carries a human id,
+        // without exposing rootPath to the client.
         const idByRoot = new Map(workspaces.map(w => [w.rootPath, w.id]));
         const membershipByUser = new Map();
         for (const entry of entries) {
@@ -202,8 +202,8 @@ export function createAdminRouter(deps) {
     router.openapi(deleteUserRoute, async (context) => {
         const { userId } = context.req.valid('param');
         const callerId = getUserId(context);
-        // Don't let an admin delete themselves; a single-admin server
-        // would lock itself out otherwise.
+        // Don't let an admin delete themselves,
+        // a single-admin server would lock itself out otherwise.
         if (userId === callerId) {
             return context.json({
                 type: 'about:blank',
@@ -212,10 +212,11 @@ export function createAdminRouter(deps) {
                 detail: 'You cannot delete your own user record.',
             }, 400, { 'Content-Type': 'application/problem+json' });
         }
-        // Revoke persistent sign-in approval alongside the user record so
-        // the same email can't sneak back in next time they hit /auth/google.
-        // (They'd need a fresh invite from an admin.) Read the user first to
-        // grab their email; tolerated when missing for idempotency.
+        // Revoke persistent sign-in approval alongside the user record,
+        // so the same email can't sneak back in at the next /auth/google,
+        // without a fresh invite from an admin.
+        // Read the user first to grab their email,
+        // tolerated when missing for idempotency.
         const existing = await deps.userRegistry.get(userId);
         if (existing?.email)
             await deps.accessPolicy.revokeApproval(existing.email);

package/dist/routes/admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACtF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAE1E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChD,UAAU,EAAE,UAAU;CACvB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEpB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;CACvB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAEhC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;AAEzB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;CAC5E,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;CAClE,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU;CACvB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAE5B,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,WAAW,EAAE,WAAW;IACxB,IAAI,EAAE,aAAa;CACpB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAEhC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;AAE3B,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CAC9B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;AASnC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IACnC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,mCAAmC;IAC5C,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,oBAAoB;YACjC,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE;SAChE;QACD,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,WAAW,CAAC;IACjC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,WAAW;IACxB,OAAO,EAAE,0DAA0D;IACnE,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;IAC/E,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,qBAAqB;YAClC,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;SACpD;QACD,GAAG,EAAE,yBAAyB;QAC9B,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,WAAW,CAAC;IACpC,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,kDAAkD;IAC3D,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;IAC/B,SAAS,EAAE;QACT,GAAG,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;QAC1D,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,WAAW,CAAC;IACjC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,4CAA4C;IACrD,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,kBAAkB;YAC/B,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE;SAC9D;QACD,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,WAAW,CAAC;IAClC,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,yCAAyC;IAClD,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE;QACP,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE;KACtE;IACD,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;SAClD;QACD,GAAG,EAAE,gBAAgB;QACrB,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,WAAW,CAAC;IAClC,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,2IAA2I;IACpJ,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;IAChC,SAAS,EAAE;QACT,GAAG,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE;QACxD,GAAG,EAAE;YACH,WAAW,EAAE,wCAAwC;YACrD,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;QACD,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;IAEhD,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAA;QACnD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;YAChD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;YACxB,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE;YAC5B,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE;SAC5C,CAAC,CAAA;QACF,mEAAmE;QACnE,sDAAsD;QACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACjE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA4E,CAAA;QAC5G,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAChD,IAAI,CAAC,WAAW;gBACd,SAAQ;YACV,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBACtD,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC7C,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,GAAG,CAAC;YACJ,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;SAC7C,CAAC,CAAC,CAAA;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACpD,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;QACxF,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QACnC,8DAA8D;QAC9D,mCAAmC;QACnC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC,IAAI,CACjB;gBACE,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,yCAAyC;aAClD,EACD,GAAG,EACH,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAC/C,CAAA;QACH,CAAC;QACD,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACpD,IAAI,QAAQ,EAAE,KAAK;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACtC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACtF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAA;AAC1E,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAE1E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChD,UAAU,EAAE,UAAU;CACvB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEpB,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;CACvB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAEhC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;AAEzB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;CAC5E,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;CAClE,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,UAAU,EAAE,UAAU;CACvB,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAE5B,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,WAAW,EAAE,WAAW;IACxB,IAAI,EAAE,aAAa;CACpB,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAEhC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;AAE3B,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CAC9B,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;AASnC,MAAM,gBAAgB,GAAG,WAAW,CAAC;IACnC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,mCAAmC;IAC5C,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,oBAAoB;YACjC,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE;SAChE;QACD,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,WAAW,CAAC;IACjC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,WAAW;IACxB,OAAO,EAAE,0DAA0D;IACnE,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;IAC/E,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,qBAAqB;YAClC,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;SACpD;QACD,GAAG,EAAE,yBAAyB;QAC9B,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,WAAW,CAAC;IACpC,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,kDAAkD;IAC3D,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE;IAC/B,SAAS,EAAE;QACT,GAAG,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE;QAC1D,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,WAAW,CAAC;IACjC,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,gBAAgB;IAC7B,OAAO,EAAE,4CAA4C;IACrD,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,kBAAkB;YAC/B,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE;SAC9D;QACD,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,WAAW,CAAC;IAClC,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,yCAAyC;IAClD,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE;QACP,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE;KACtE;IACD,SAAS,EAAE;QACT,GAAG,EAAE;YACH,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;SAClD;QACD,GAAG,EAAE,gBAAgB;QACrB,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,eAAe,GAAG,WAAW,CAAC;IAClC,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,2IAA2I;IACpJ,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;IAChC,SAAS,EAAE;QACT,GAAG,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE;QACxD,GAAG,EAAE;YACH,WAAW,EAAE,wCAAwC;YACrD,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;QACD,GAAG,EAAE;YACH,WAAW,EAAE,yBAAyB;YACtC,OAAO,EAAE,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;SAChF;KACF;CACF,CAAC,CAAA;AAEF,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAA;IAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,uBAAuB,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;IAE3E,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAA;QACnD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;YAChD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAA;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/C,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;YACxB,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE;YAC5B,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE;SAC5C,CAAC,CAAA;QACF,qEAAqE;QACrE,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACjE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA4E,CAAA;QAC5G,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAChD,IAAI,CAAC,WAAW;gBACd,SAAQ;YACV,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBACtD,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC7C,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,GAAG,CAAC;YACJ,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;SAC7C,CAAC,CAAC,CAAA;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACpD,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,aAAa,CAAC,SAAS,MAAM,aAAa,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;QACxF,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;QACnC,wCAAwC;QACxC,yDAAyD;QACzD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC,IAAI,CACjB;gBACE,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,aAAa;gBACpB,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,yCAAyC;aAClD,EACD,GAAG,EACH,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAC/C,CAAA;QACH,CAAC;QACD,gEAAgE;QAChE,kEAAkE;QAClE,wCAAwC;QACxC,2CAA2C;QAC3C,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACpD,IAAI,QAAQ,EAAE,KAAK;YACjB,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACtC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/routes/auth.d.ts

@@ -10,24 +10,26 @@ export interface AuthRouterDeps {
     accessPolicy: AccessPolicy;
     userRegistry: UserRegistryFile;
     /**
-     * When undefined, `/auth/google/*` respond with 503 so the operator
-     * knows the server is missing OAuth env config rather than failing
-     * silently mid-flow.
+     * When undefined, `/auth/google/*` respond with 503,
+     * so the operator knows the server is missing OAuth env config,
+     * rather than failing silently mid-flow.
      */
     googleOAuth?: GoogleOAuth;
     /**
-     * Where the Studio bundle is served from. Login redirects land here
-     * with `#token=...` in the fragment; Studio reads, stores, navigates.
+     * Where the Studio bundle is served from.
+     * Login redirects land here, with `#token=...` in the fragment.
+     * Studio reads, stores, navigates.
      * Defaults to the Vite dev server origin when unset.
      */
     studioUrl: string;
     /**
-     * Mirrored into `/auth/config.requiresAuth` so the Studio knows
-     * whether to gate behind the Login page. `true` means anonymous
-     * sessions fall through to `local-user` — fine for embedded
-     * sidecar / dev; `false` means the Login page is mandatory.
+     * Whether a caller must authenticate.
+     * Mirrored into `/auth/config.requiresAuth`,
+     * telling the Studio whether to gate behind the Login page.
+     * When false, anonymous sessions fall through, fine for a sidecar or dev.
+     * When true, the Login page is mandatory.
      */
-    localTrust: boolean;
+    requiresAuth: boolean;
 }
 export declare function createAuthRouter(deps: AuthRouterDeps): Hono;
 //# sourceMappingURL=auth.d.ts.map

package/dist/routes/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AAG1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wCAAwC,CAAA;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAA;AAEnF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAY3B,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,YAAY,EAAE,YAAY,CAAA;IAC1B,YAAY,EAAE,gBAAgB,CAAA;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAA;CACpB;AAaD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CA4J3D"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/routes/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AAG1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wCAAwC,CAAA;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAA;AAEnF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAY3B,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,KAAK,CAAA;IACZ,YAAY,EAAE,YAAY,CAAA;IAC1B,YAAY,EAAE,YAAY,CAAA;IAC1B,YAAY,EAAE,gBAAgB,CAAA;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;OAMG;IACH,YAAY,EAAE,OAAO,CAAA;CACtB;AAaD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAuJ3D"}