@byline/admin 0.10.2 → 0.10.4

package/dist/abilities.d.ts

@@ -19,4 +19,3 @@ import type { AbilityRegistry } from '@byline/auth';
  * call is an opt-in at the composition root.
  */
 export declare function registerAdminAbilities(registry: AbilityRegistry): void;
-//# sourceMappingURL=abilities.d.ts.map

package/dist/abilities.js

@@ -26,4 +26,3 @@ export function registerAdminAbilities(registry) {
     registerAdminPermissionsAbilities(registry);
     // registerAccountAbilities(registry) — added when that module lands
 }
-//# sourceMappingURL=abilities.js.map

package/dist/index.d.ts

@@ -28,4 +28,3 @@ export * from './modules/admin-roles/index.js';
 export * from './modules/admin-users/index.js';
 export * from './modules/auth/index.js';
 export type { AdminStore } from './store.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -27,4 +27,3 @@ export * from './modules/admin-permissions/index.js';
 export * from './modules/admin-roles/index.js';
 export * from './modules/admin-users/index.js';
 export * from './modules/auth/index.js';
-//# sourceMappingURL=index.js.map

package/dist/lib/assert-admin-actor.d.ts

@@ -55,4 +55,3 @@ export declare function assertAdminActor(context: RequestContext | undefined, ab
  * — the helper has no `ability` argument to fall back on.
  */
 export declare function requireAdminActor(context: RequestContext | undefined, reasonForLog: string): AdminAuth;
-//# sourceMappingURL=assert-admin-actor.d.ts.map

package/dist/lib/assert-admin-actor.js

@@ -79,4 +79,3 @@ export function requireAdminActor(context, reasonForLog) {
     }
     return actor;
 }
-//# sourceMappingURL=assert-admin-actor.js.map

package/dist/modules/admin-account/commands.d.ts

@@ -27,4 +27,3 @@ export interface AdminAccountCommandDeps {
 export declare function getAccountCommand(context: RequestContext | undefined, input: unknown, deps: AdminAccountCommandDeps): Promise<AccountResponse>;
 export declare function updateAccountCommand(context: RequestContext | undefined, input: unknown, deps: AdminAccountCommandDeps): Promise<AccountResponse>;
 export declare function changeAccountPasswordCommand(context: RequestContext | undefined, input: unknown, deps: AdminAccountCommandDeps): Promise<AccountResponse>;
-//# sourceMappingURL=commands.d.ts.map

package/dist/modules/admin-account/commands.js

@@ -33,4 +33,3 @@ export async function changeAccountPasswordCommand(context, input, deps) {
     const result = await serviceOf(deps).changePassword(actor.id, parsed);
     return adminUserResponseSchema.parse(result);
 }
-//# sourceMappingURL=commands.js.map

package/dist/modules/admin-account/errors.d.ts

@@ -49,4 +49,3 @@ export declare const ERR_ADMIN_ACCOUNT_NOT_FOUND: (options?: AdminAccountErrorOp
  * timing or existence signals.
  */
 export declare const ERR_ADMIN_ACCOUNT_INVALID_CURRENT_PASSWORD: (options?: AdminAccountErrorOptions) => AdminAccountError;
-//# sourceMappingURL=errors.d.ts.map

package/dist/modules/admin-account/errors.js

@@ -49,4 +49,3 @@ export const ERR_ADMIN_ACCOUNT_NOT_FOUND = make(AdminAccountErrorCodes.NOT_FOUND
  * timing or existence signals.
  */
 export const ERR_ADMIN_ACCOUNT_INVALID_CURRENT_PASSWORD = make(AdminAccountErrorCodes.INVALID_CURRENT_PASSWORD, 'current password is incorrect');
-//# sourceMappingURL=errors.js.map

package/dist/modules/admin-account/index.d.ts

@@ -34,4 +34,3 @@ export { accountResponseSchema, changeAccountPasswordRequestSchema, getAccountRe
 export { AdminAccountService } from './service.js';
 export type { AdminAccountCommandDeps } from './commands.js';
 export type { AccountResponse, ChangeAccountPasswordRequest, GetAccountRequest, OkResponse, UpdateAccountRequest, } from './schemas.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/admin-account/index.js

@@ -32,4 +32,3 @@ export { changeAccountPasswordCommand, getAccountCommand, updateAccountCommand,
 export { AdminAccountError, AdminAccountErrorCodes, ERR_ADMIN_ACCOUNT_INVALID_CURRENT_PASSWORD, ERR_ADMIN_ACCOUNT_NOT_FOUND, } from './errors.js';
 export { accountResponseSchema, changeAccountPasswordRequestSchema, getAccountRequestSchema, okResponseSchema, updateAccountRequestSchema, } from './schemas.js';
 export { AdminAccountService } from './service.js';
-//# sourceMappingURL=index.js.map

package/dist/modules/admin-account/schemas.d.ts

@@ -28,4 +28,3 @@ export declare const changeAccountPasswordRequestSchema: z.ZodObject<{
 export type ChangeAccountPasswordRequest = z.infer<typeof changeAccountPasswordRequestSchema>;
 export { adminUserResponseSchema as accountResponseSchema, okResponseSchema };
 export type { AdminUserResponse as AccountResponse, OkResponse } from '../admin-users/schemas.js';
-//# sourceMappingURL=schemas.d.ts.map

package/dist/modules/admin-account/schemas.js

@@ -66,4 +66,3 @@ export const changeAccountPasswordRequestSchema = z.object({
 // Responses (re-exports — same shape as the admin-users module)
 // ---------------------------------------------------------------------------
 export { adminUserResponseSchema as accountResponseSchema, okResponseSchema };
-//# sourceMappingURL=schemas.js.map

package/dist/modules/admin-account/service.d.ts

@@ -41,4 +41,3 @@ export declare class AdminAccountService {
     updateAccount(actorId: string, request: UpdateAccountRequest): Promise<AccountResponse>;
     changePassword(actorId: string, request: ChangeAccountPasswordRequest): Promise<AccountResponse>;
 }
-//# sourceMappingURL=service.d.ts.map

package/dist/modules/admin-account/service.js

@@ -73,4 +73,3 @@ export class AdminAccountService {
         return toAdminUser(row);
     }
 }
-//# sourceMappingURL=service.js.map

package/dist/modules/admin-permissions/abilities.d.ts

@@ -24,4 +24,3 @@ export declare const ADMIN_PERMISSIONS_ABILITIES: {
 };
 export type AdminPermissionsAbilityKey = (typeof ADMIN_PERMISSIONS_ABILITIES)[keyof typeof ADMIN_PERMISSIONS_ABILITIES];
 export declare function registerAdminPermissionsAbilities(registry: AbilityRegistry): void;
-//# sourceMappingURL=abilities.d.ts.map

package/dist/modules/admin-permissions/abilities.js

@@ -37,4 +37,3 @@ export function registerAdminPermissionsAbilities(registry) {
         source: 'admin',
     });
 }
-//# sourceMappingURL=abilities.js.map

package/dist/modules/admin-permissions/commands.d.ts

@@ -27,4 +27,3 @@ export declare function listRegisteredAbilitiesCommand(context: RequestContext |
 export declare function whoHasAbilityCommand(context: RequestContext | undefined, input: unknown, deps: AdminPermissionsCommandDeps): Promise<WhoHasAbilityResponse>;
 export declare function getRoleAbilitiesCommand(context: RequestContext | undefined, input: unknown, deps: AdminPermissionsCommandDeps): Promise<GetRoleAbilitiesResponse>;
 export declare function setRoleAbilitiesCommand(context: RequestContext | undefined, input: unknown, deps: AdminPermissionsCommandDeps): Promise<SetRoleAbilitiesResponse>;
-//# sourceMappingURL=commands.d.ts.map

package/dist/modules/admin-permissions/commands.js

@@ -36,4 +36,3 @@ export async function setRoleAbilitiesCommand(context, input, deps) {
     const result = await serviceOf(deps).setRoleAbilities(parsed);
     return setRoleAbilitiesResponseSchema.parse(result);
 }
-//# sourceMappingURL=commands.js.map

package/dist/modules/admin-permissions/dto.d.ts

@@ -15,4 +15,3 @@ import type { AbilityDescriptorResponse } from './schemas.js';
  * default.
  */
 export declare function toAbilityDescriptor(descriptor: AbilityDescriptor): AbilityDescriptorResponse;
-//# sourceMappingURL=dto.d.ts.map

package/dist/modules/admin-permissions/dto.js

@@ -21,4 +21,3 @@ export function toAbilityDescriptor(descriptor) {
         source: descriptor.source ?? null,
     };
 }
-//# sourceMappingURL=dto.js.map

package/dist/modules/admin-permissions/errors.d.ts

@@ -31,4 +31,3 @@ export declare class AdminPermissionsError extends Error {
 }
 export declare const ERR_ADMIN_PERMISSIONS_ROLE_NOT_FOUND: (options?: AdminPermissionsErrorOptions) => AdminPermissionsError;
 export declare const ERR_ADMIN_PERMISSIONS_ABILITY_UNREGISTERED: (options?: AdminPermissionsErrorOptions) => AdminPermissionsError;
-//# sourceMappingURL=errors.d.ts.map

package/dist/modules/admin-permissions/errors.js

@@ -31,4 +31,3 @@ const make = (code, defaultMessage) => (options) => new AdminPermissionsError(co
 });
 export const ERR_ADMIN_PERMISSIONS_ROLE_NOT_FOUND = make(AdminPermissionsErrorCodes.ROLE_NOT_FOUND, 'admin role not found');
 export const ERR_ADMIN_PERMISSIONS_ABILITY_UNREGISTERED = make(AdminPermissionsErrorCodes.ABILITY_UNREGISTERED, 'one or more abilities are not registered');
-//# sourceMappingURL=errors.js.map

package/dist/modules/admin-permissions/index.d.ts

@@ -27,4 +27,3 @@ export { AdminPermissionsService } from './service.js';
 export type { AdminPermissionsCommandDeps } from './commands.js';
 export type { AdminPermissionsRepository } from './repository.js';
 export type { AbilityDescriptorResponse, AbilityGroupResponse, AbilityHolderRole, AbilityHolderUser, GetRoleAbilitiesRequest, GetRoleAbilitiesResponse, ListRegisteredAbilitiesRequest, ListRegisteredAbilitiesResponse, SetRoleAbilitiesRequest, SetRoleAbilitiesResponse, WhoHasAbilityRequest, WhoHasAbilityResponse, } from './schemas.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/admin-permissions/index.js

@@ -24,4 +24,3 @@ export { toAbilityDescriptor } from './dto.js';
 export { AdminPermissionsError, AdminPermissionsErrorCodes, ERR_ADMIN_PERMISSIONS_ABILITY_UNREGISTERED, ERR_ADMIN_PERMISSIONS_ROLE_NOT_FOUND, } from './errors.js';
 export { abilityDescriptorResponseSchema, abilityGroupResponseSchema, abilityHolderRoleSchema, abilityHolderUserSchema, getRoleAbilitiesRequestSchema, getRoleAbilitiesResponseSchema, listRegisteredAbilitiesRequestSchema, listRegisteredAbilitiesResponseSchema, setRoleAbilitiesRequestSchema, setRoleAbilitiesResponseSchema, whoHasAbilityRequestSchema, whoHasAbilityResponseSchema, } from './schemas.js';
 export { AdminPermissionsService } from './service.js';
-//# sourceMappingURL=index.js.map

package/dist/modules/admin-permissions/repository.d.ts

@@ -45,4 +45,3 @@ export interface AdminPermissionsRepository {
      */
     listUsersForAbility(ability: string): Promise<string[]>;
 }
-//# sourceMappingURL=repository.d.ts.map

package/dist/modules/admin-permissions/repository.js

@@ -6,4 +6,3 @@
  * Copyright (c) Infonomic Company Limited
  */
 export {};
-//# sourceMappingURL=repository.js.map

package/dist/modules/admin-permissions/schemas.d.ts

@@ -134,4 +134,3 @@ export declare const setRoleAbilitiesResponseSchema: z.ZodObject<{
     abilities: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
 export type SetRoleAbilitiesResponse = z.infer<typeof setRoleAbilitiesResponseSchema>;
-//# sourceMappingURL=schemas.d.ts.map

package/dist/modules/admin-permissions/schemas.js

@@ -96,4 +96,3 @@ export const setRoleAbilitiesResponseSchema = z.object({
     roleId: z.string(),
     abilities: z.array(z.string()),
 });
-//# sourceMappingURL=schemas.js.map

package/dist/modules/admin-permissions/service.d.ts

@@ -39,4 +39,3 @@ export declare class AdminPermissionsService {
     setRoleAbilities(request: SetRoleAbilitiesRequest): Promise<SetRoleAbilitiesResponse>;
     whoHasAbility(request: WhoHasAbilityRequest): Promise<WhoHasAbilityResponse>;
 }
-//# sourceMappingURL=service.d.ts.map

package/dist/modules/admin-permissions/service.js

@@ -111,4 +111,3 @@ export class AdminPermissionsService {
         };
     }
 }
-//# sourceMappingURL=service.js.map

package/dist/modules/admin-roles/abilities.d.ts

@@ -30,4 +30,3 @@ export type AdminRolesAbilityKey = (typeof ADMIN_ROLES_ABILITIES)[keyof typeof A
  * the webapp wires into `initBylineCore()`.
  */
 export declare function registerAdminRolesAbilities(registry: AbilityRegistry): void;
-//# sourceMappingURL=abilities.d.ts.map

package/dist/modules/admin-roles/abilities.js

@@ -53,4 +53,3 @@ export function registerAdminRolesAbilities(registry) {
         source: 'admin',
     });
 }
-//# sourceMappingURL=abilities.js.map

package/dist/modules/admin-roles/commands.d.ts

@@ -34,4 +34,3 @@ export declare function deleteAdminRoleCommand(context: RequestContext | undefin
 export declare function reorderAdminRolesCommand(context: RequestContext | undefined, input: unknown, deps: AdminRolesCommandDeps): Promise<OkResponse>;
 export declare function getRolesForUserCommand(context: RequestContext | undefined, input: unknown, deps: AdminRolesCommandDeps): Promise<UserRolesResponse>;
 export declare function setRolesForUserCommand(context: RequestContext | undefined, input: unknown, deps: AdminRolesCommandDeps): Promise<UserRolesResponse>;
-//# sourceMappingURL=commands.d.ts.map

package/dist/modules/admin-roles/commands.js

@@ -67,4 +67,3 @@ export async function setRolesForUserCommand(context, input, deps) {
     const result = await serviceOf(deps).setRolesForUser(parsed);
     return userRolesResponseSchema.parse(result);
 }
-//# sourceMappingURL=commands.js.map

package/dist/modules/admin-roles/dto.d.ts

@@ -15,4 +15,3 @@ import type { AdminRoleResponse } from './schemas.js';
  * shape by default.
  */
 export declare function toAdminRole(row: AdminRoleRow): AdminRoleResponse;
-//# sourceMappingURL=dto.d.ts.map

package/dist/modules/admin-roles/dto.js

@@ -24,4 +24,3 @@ export function toAdminRole(row) {
         updated_at: row.updated_at,
     };
 }
-//# sourceMappingURL=dto.js.map

package/dist/modules/admin-roles/errors.d.ts

@@ -46,4 +46,3 @@ export declare const ERR_ADMIN_ROLE_VERSION_CONFLICT: (options?: AdminRolesError
  * error codes — keeps the modules decoupled.
  */
 export declare const ERR_ADMIN_ROLE_USER_NOT_FOUND: (options?: AdminRolesErrorOptions) => AdminRolesError;
-//# sourceMappingURL=errors.d.ts.map

package/dist/modules/admin-roles/errors.js

@@ -46,4 +46,3 @@ export const ERR_ADMIN_ROLE_VERSION_CONFLICT = make(AdminRolesErrorCodes.VERSION
  * error codes — keeps the modules decoupled.
  */
 export const ERR_ADMIN_ROLE_USER_NOT_FOUND = make(AdminRolesErrorCodes.USER_NOT_FOUND, 'admin user not found');
-//# sourceMappingURL=errors.js.map

package/dist/modules/admin-roles/index.d.ts

@@ -27,4 +27,3 @@ export { AdminRolesService } from './service.js';
 export type { AdminRolesCommandDeps } from './commands.js';
 export type { AdminRoleRow, AdminRolesRepository, CreateAdminRoleInput, UpdateAdminRoleInput, } from './repository.js';
 export type { AdminRoleListResponse, AdminRoleResponse, CreateAdminRoleRequest, DeleteAdminRoleRequest, GetAdminRoleRequest, GetRolesForUserRequest, ListAdminRolesRequest, ReorderAdminRolesRequest, SetRolesForUserRequest, UpdateAdminRoleRequest, UserRolesResponse, } from './schemas.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/admin-roles/index.js

@@ -24,4 +24,3 @@ export { toAdminRole } from './dto.js';
 export { AdminRolesError, AdminRolesErrorCodes, ERR_ADMIN_ROLE_MACHINE_NAME_IN_USE, ERR_ADMIN_ROLE_NOT_FOUND, ERR_ADMIN_ROLE_USER_NOT_FOUND, ERR_ADMIN_ROLE_VERSION_CONFLICT, } from './errors.js';
 export { adminRoleListResponseSchema, adminRoleResponseSchema, createAdminRoleRequestSchema, deleteAdminRoleRequestSchema, getAdminRoleRequestSchema, getRolesForUserRequestSchema, listAdminRolesRequestSchema, reorderAdminRolesRequestSchema, setRolesForUserRequestSchema, updateAdminRoleRequestSchema, userRolesResponseSchema, } from './schemas.js';
 export { AdminRolesService } from './service.js';
-//# sourceMappingURL=index.js.map

package/dist/modules/admin-roles/repository.d.ts

@@ -88,4 +88,3 @@ export interface AdminRolesRepository {
      */
     setRolesForUser(userId: string, roleIds: readonly string[]): Promise<void>;
 }
-//# sourceMappingURL=repository.d.ts.map

package/dist/modules/admin-roles/repository.js

@@ -6,4 +6,3 @@
  * Copyright (c) Infonomic Company Limited
  */
 export {};
-//# sourceMappingURL=repository.js.map

package/dist/modules/admin-roles/schemas.d.ts

@@ -96,4 +96,3 @@ export declare const okResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
 }, z.core.$strip>;
 export type OkResponse = z.infer<typeof okResponseSchema>;
-//# sourceMappingURL=schemas.d.ts.map

package/dist/modules/admin-roles/schemas.js

@@ -102,4 +102,3 @@ export const userRolesResponseSchema = z.object({
 });
 /** Empty response for void-returning mutations (delete, reorder). */
 export const okResponseSchema = z.object({ ok: z.literal(true) });
-//# sourceMappingURL=schemas.js.map

package/dist/modules/admin-roles/service.d.ts

@@ -46,4 +46,3 @@ export declare class AdminRolesService {
     getRolesForUser(request: GetRolesForUserRequest): Promise<UserRolesResponse>;
     setRolesForUser(request: SetRolesForUserRequest): Promise<UserRolesResponse>;
 }
-//# sourceMappingURL=service.d.ts.map

package/dist/modules/admin-roles/service.js

@@ -107,4 +107,3 @@ export class AdminRolesService {
         return { userId: request.userId, roles: stored.map(toAdminRole) };
     }
 }
-//# sourceMappingURL=service.js.map

package/dist/modules/admin-users/abilities.d.ts

@@ -38,4 +38,3 @@ export type AdminUsersAbilityKey = (typeof ADMIN_USERS_ABILITIES)[keyof typeof A
  * the webapp wires into `initBylineCore()`.
  */
 export declare function registerAdminUsersAbilities(registry: AbilityRegistry): void;
-//# sourceMappingURL=abilities.d.ts.map

package/dist/modules/admin-users/abilities.js

@@ -67,4 +67,3 @@ export function registerAdminUsersAbilities(registry) {
         source: 'admin',
     });
 }
-//# sourceMappingURL=abilities.js.map

package/dist/modules/admin-users/commands.d.ts

@@ -42,4 +42,3 @@ export declare function setAdminUserPasswordCommand(context: RequestContext | un
 export declare function enableAdminUserCommand(context: RequestContext | undefined, input: unknown, deps: AdminUsersCommandDeps): Promise<OkResponse>;
 export declare function disableAdminUserCommand(context: RequestContext | undefined, input: unknown, deps: AdminUsersCommandDeps): Promise<OkResponse>;
 export declare function deleteAdminUserCommand(context: RequestContext | undefined, input: unknown, deps: AdminUsersCommandDeps): Promise<OkResponse>;
-//# sourceMappingURL=commands.d.ts.map

package/dist/modules/admin-users/commands.js

@@ -60,4 +60,3 @@ export async function deleteAdminUserCommand(context, input, deps) {
     await serviceOf(deps).deleteUser(actor, parsed);
     return okResponseSchema.parse({ ok: true });
 }
-//# sourceMappingURL=commands.js.map

package/dist/modules/admin-users/dto.d.ts

@@ -17,4 +17,3 @@ import type { AdminUserResponse } from './schemas.js';
  * shape here rather than leaking by default.
  */
 export declare function toAdminUser(row: AdminUserRow): AdminUserResponse;
-//# sourceMappingURL=dto.d.ts.map

package/dist/modules/admin-users/dto.js

@@ -33,4 +33,3 @@ export function toAdminUser(row) {
         updated_at: row.updated_at,
     };
 }
-//# sourceMappingURL=dto.js.map

package/dist/modules/admin-users/errors.d.ts

@@ -50,4 +50,3 @@ export declare const ERR_ADMIN_USER_SELF_DISABLE: (options?: AdminUsersErrorOpti
  * response is to reload the edit form with the current values.
  */
 export declare const ERR_ADMIN_USER_VERSION_CONFLICT: (options?: AdminUsersErrorOptions) => AdminUsersError;
-//# sourceMappingURL=errors.d.ts.map

package/dist/modules/admin-users/errors.js

@@ -50,4 +50,3 @@ export const ERR_ADMIN_USER_SELF_DISABLE = make(AdminUsersErrorCodes.SELF_DISABL
  * response is to reload the edit form with the current values.
  */
 export const ERR_ADMIN_USER_VERSION_CONFLICT = make(AdminUsersErrorCodes.VERSION_CONFLICT, 'admin user has been modified elsewhere — please reload and try again');
-//# sourceMappingURL=errors.js.map

package/dist/modules/admin-users/index.d.ts

@@ -28,4 +28,3 @@ export { AdminUsersService } from './service.js';
 export type { AdminUsersCommandDeps } from './commands.js';
 export type { AdminUserListOrder, AdminUserRow, AdminUsersRepository, AdminUserWithPasswordRow, CountAdminUsersOptions, CreateAdminUserInput, ListAdminUsersOptions, UpdateAdminUserInput, } from './repository.js';
 export type { AdminUserListResponse, AdminUserResponse, CreateAdminUserRequest, DeleteAdminUserRequest, DisableAdminUserRequest, EnableAdminUserRequest, GetAdminUserRequest, ListAdminUsersRequest, OkResponse, SetAdminUserPasswordRequest, UpdateAdminUserRequest, } from './schemas.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/admin-users/index.js

@@ -25,4 +25,3 @@ export { AdminUsersError, AdminUsersErrorCodes, ERR_ADMIN_USER_EMAIL_IN_USE, ERR
 export { adminUserListResponseSchema, adminUserResponseSchema, createAdminUserRequestSchema, deleteAdminUserRequestSchema, disableAdminUserRequestSchema, enableAdminUserRequestSchema, getAdminUserRequestSchema, listAdminUsersRequestSchema, okResponseSchema, setAdminUserPasswordRequestSchema, updateAdminUserRequestSchema, } from './schemas.js';
 export { seedSuperAdmin, } from './seed-super-admin.js';
 export { AdminUsersService } from './service.js';
-//# sourceMappingURL=index.js.map

package/dist/modules/admin-users/repository.d.ts

@@ -144,4 +144,3 @@ export interface AdminUsersRepository {
      */
     delete(id: string, expectedVid: number): Promise<void>;
 }
-//# sourceMappingURL=repository.d.ts.map

package/dist/modules/admin-users/repository.js

@@ -6,4 +6,3 @@
  * Copyright (c) Infonomic Company Limited
  */
 export {};
-//# sourceMappingURL=repository.js.map

package/dist/modules/admin-users/schemas.d.ts

@@ -133,4 +133,3 @@ export declare const okResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
 }, z.core.$strip>;
 export type OkResponse = z.infer<typeof okResponseSchema>;
-//# sourceMappingURL=schemas.d.ts.map

package/dist/modules/admin-users/schemas.js

@@ -134,4 +134,3 @@ export const adminUserListResponseSchema = z.object({
 });
 /** Empty response for void-returning mutations (set-password, enable, disable, delete). */
 export const okResponseSchema = z.object({ ok: z.literal(true) });
-//# sourceMappingURL=schemas.js.map

package/dist/modules/admin-users/seed-super-admin.d.ts

@@ -41,4 +41,3 @@ export interface SeedSuperAdminResult {
  * usable account.
  */
 export declare function seedSuperAdmin(store: AdminStore, input: SeedSuperAdminInput): Promise<SeedSuperAdminResult>;
-//# sourceMappingURL=seed-super-admin.d.ts.map

package/dist/modules/admin-users/seed-super-admin.js

@@ -67,4 +67,3 @@ export async function seedSuperAdmin(store, input) {
         },
     };
 }
-//# sourceMappingURL=seed-super-admin.js.map

package/dist/modules/admin-users/service.d.ts

@@ -50,4 +50,3 @@ export declare class AdminUsersService {
     disableUser(actor: AdminAuth, request: DisableAdminUserRequest): Promise<void>;
     deleteUser(actor: AdminAuth, request: DeleteAdminUserRequest): Promise<void>;
 }
-//# sourceMappingURL=service.d.ts.map

package/dist/modules/admin-users/service.js

@@ -140,4 +140,3 @@ export class AdminUsersService {
         await this.#repo.delete(request.id, request.vid);
     }
 }
-//# sourceMappingURL=service.js.map

package/dist/modules/auth/index.d.ts

@@ -23,4 +23,3 @@ export { JwtSessionProvider, type JwtSessionProviderConfig } from './jwt-session
 export { hashPassword, verifyPassword } from './password.js';
 export { resolveActor } from './resolve-actor.js';
 export type { IssueRefreshTokenInput, RefreshTokenRow, RefreshTokensRepository, } from './refresh-tokens-repository.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/modules/auth/index.js

@@ -22,4 +22,3 @@
 export { JwtSessionProvider } from './jwt-session-provider.js';
 export { hashPassword, verifyPassword } from './password.js';
 export { resolveActor } from './resolve-actor.js';
-//# sourceMappingURL=index.js.map

package/dist/modules/auth/jwt-session-provider.d.ts

@@ -44,4 +44,3 @@ export declare class JwtSessionProvider implements SessionProvider {
     revokeSession(refreshToken: string): Promise<void>;
     resolveActor(adminUserId: string): Promise<AdminAuth | null>;
 }
-//# sourceMappingURL=jwt-session-provider.d.ts.map

package/dist/modules/auth/jwt-session-provider.js

@@ -212,4 +212,3 @@ function hashToken(token) {
  * first sign-in call doesn't pay the generation cost.
  */
 const DUMMY_HASH_FOR_TIMING = '$argon2id$v=19$m=19456,t=2,p=1$c2lkZS1jaGFubmVsLW1pdGlnYXRpb24$0Hqf2vQKZqSfZZ4nJRr7K5IOjn9ngjzaQjV+yTG6iNY';
-//# sourceMappingURL=jwt-session-provider.js.map

package/dist/modules/auth/password.d.ts

@@ -13,4 +13,3 @@ export declare function hashPassword(plaintext: string): Promise<string>;
  * hash strings or underlying library errors so those get surfaced.
  */
 export declare function verifyPassword(plaintext: string, phc: string): Promise<boolean>;
-//# sourceMappingURL=password.d.ts.map

package/dist/modules/auth/password.js

@@ -86,4 +86,3 @@ export async function verifyPassword(plaintext, phc) {
     });
     return timingSafeEqual(candidate, decoded.hash);
 }
-//# sourceMappingURL=password.js.map

package/dist/modules/auth/phc.d.ts

@@ -42,4 +42,3 @@ export declare function decodeArgon2idPhc(s: string): Argon2idPhc;
  * same length and every byte matches. Intended for hash verification.
  */
 export declare function timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean;
-//# sourceMappingURL=phc.d.ts.map

package/dist/modules/auth/phc.js

@@ -85,4 +85,3 @@ export function timingSafeEqual(a, b) {
         diff |= a[i] ^ b[i];
     return diff === 0;
 }
-//# sourceMappingURL=phc.js.map

package/dist/modules/auth/refresh-tokens-repository.d.ts

@@ -68,4 +68,3 @@ export interface RefreshTokensRepository {
     /** All tokens descended from `startId` via the rotation chain. Utility for tests. */
     listRotationChain(startId: string): Promise<RefreshTokenRow[]>;
 }
-//# sourceMappingURL=refresh-tokens-repository.d.ts.map

package/dist/modules/auth/refresh-tokens-repository.js

@@ -6,4 +6,3 @@
  * Copyright (c) Infonomic Company Limited
  */
 export {};
-//# sourceMappingURL=refresh-tokens-repository.js.map

package/dist/modules/auth/resolve-actor.d.ts

@@ -22,4 +22,3 @@ import type { AdminStore } from '../../store.js';
  * `AdminStore` bundle; adapter-agnostic.
  */
 export declare function resolveActor(store: AdminStore, adminUserId: string): Promise<AdminAuth | null>;
-//# sourceMappingURL=resolve-actor.d.ts.map

package/dist/modules/auth/resolve-actor.js

@@ -33,4 +33,3 @@ export async function resolveActor(store, adminUserId) {
         isSuperAdmin: user.is_super_admin,
     });
 }
-//# sourceMappingURL=resolve-actor.js.map

package/dist/store.d.ts

@@ -28,4 +28,3 @@ export interface AdminStore {
     adminPermissions: AdminPermissionsRepository;
     refreshTokens: RefreshTokensRepository;
 }
-//# sourceMappingURL=store.d.ts.map

package/dist/store.js

@@ -6,4 +6,3 @@
  * Copyright (c) Infonomic Company Limited
  */
 export {};
-//# sourceMappingURL=store.js.map

package/dist/vendor/noble-argon2/_blake.d.ts

@@ -18,4 +18,3 @@ export type Num4 = {
 };
 export declare function G1s(a: number, b: number, c: number, d: number, x: number): Num4;
 export declare function G2s(a: number, b: number, c: number, d: number, x: number): Num4;
-//# sourceMappingURL=_blake.d.ts.map

package/dist/vendor/noble-argon2/_blake.js

@@ -50,4 +50,3 @@ export function G2s(a, b, c, d, x) {
     b = rotr(b ^ c, 7);
     return { a, b, c, d };
 }
-//# sourceMappingURL=_blake.js.map

package/dist/vendor/noble-argon2/_md.d.ts

@@ -96,4 +96,3 @@ export declare const SHA384_IV: TRet<Uint32Array>;
  * eight prime numbers. Exported as a shared table; callers must treat it as read-only because
  * constructors copy halves from it by index. */
 export declare const SHA512_IV: TRet<Uint32Array>;
-//# sourceMappingURL=_md.d.ts.map

package/dist/vendor/noble-argon2/_md.js

@@ -200,4 +200,3 @@ export const SHA512_IV = /* @__PURE__ */ Uint32Array.from([
     0x6a09e667, 0xf3bcc908, 0xbb67ae85, 0x84caa73b, 0x3c6ef372, 0xfe94f82b, 0xa54ff53a, 0x5f1d36f1,
     0x510e527f, 0xade682d1, 0x9b05688c, 0x2b3e6c1f, 0x1f83d9ab, 0xfb41bd6b, 0x5be0cd19, 0x137e2179,
 ]);
-//# sourceMappingURL=_md.js.map

package/dist/vendor/noble-argon2/_u64.d.ts

@@ -60,4 +60,3 @@ declare const u64: {
     add5L: (Al: number, Bl: number, Cl: number, Dl: number, El: number) => number;
 };
 export default u64;
-//# sourceMappingURL=_u64.d.ts.map

package/dist/vendor/noble-argon2/_u64.js

@@ -81,4 +81,3 @@ const u64 = {
 };
 // Default export mirrors named `u64` for compatibility with object-style imports.
 export default u64;
-//# sourceMappingURL=_u64.js.map

package/dist/vendor/noble-argon2/argon2.d.ts

@@ -109,4 +109,3 @@ export declare const argon2iAsync: (password: TArg<KDFInput>, salt: TArg<KDFInpu
  * ```
  */
 export declare const argon2idAsync: (password: TArg<KDFInput>, salt: TArg<KDFInput>, opts: TArg<ArgonOpts>) => Promise<TRet<Uint8Array>>;
-//# sourceMappingURL=argon2.d.ts.map

package/dist/vendor/noble-argon2/argon2.js

@@ -515,4 +515,3 @@ export const argon2iAsync = (password, salt, opts) => argon2Async(AT.Argon2i, pa
  * ```
  */
 export const argon2idAsync = (password, salt, opts) => argon2Async(AT.Argon2id, password, salt, opts);
-//# sourceMappingURL=argon2.js.map

package/dist/vendor/noble-argon2/blake2.d.ts

@@ -181,4 +181,3 @@ export declare class _BLAKE2s extends _BLAKE2<_BLAKE2s> {
  * ```
  */
 export declare const blake2s: TRet<CHash<_BLAKE2s, Blake2Opts>>;
-//# sourceMappingURL=blake2.d.ts.map

package/dist/vendor/noble-argon2/blake2.js

@@ -499,4 +499,3 @@ export class _BLAKE2s extends _BLAKE2 {
  * ```
  */
 export const blake2s = /* @__PURE__ */ createHasher((opts) => new _BLAKE2s(opts));
-//# sourceMappingURL=blake2.js.map

package/dist/vendor/noble-argon2/utils.d.ts

@@ -516,4 +516,3 @@ export declare function randomBytes(bytesLength?: number): TRet<Uint8Array>;
  */
 export declare const oidNist: (suffix: number) => TRet<Required<HashInfo>>;
 export {};
-//# sourceMappingURL=utils.d.ts.map

package/dist/vendor/noble-argon2/utils.js

@@ -575,4 +575,3 @@ export const oidNist = (suffix) => ({
     // Larger suffix values would need base-128 OID encoding and a different length byte.
     oid: Uint8Array.from([0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, suffix]),
 });
-//# sourceMappingURL=utils.js.map