@deadair/sdk 0.59.0 → 0.60.0

package/dist/users/invitations.client.d.ts

@@ -0,0 +1,40 @@
+import type { Invitation, InvitationAccept, InvitationAcceptStart, InvitationAcceptStartResponse, InvitationAccepted, InvitationCreate, InvitationDetails, InvitationList, InvitationToken } from './types/invitations.types.js';
+import type { SdkFetch } from '../sdk-options.js';
+/**
+ * generated from [invitations.ck](../../../../apps/api/data/contracts/users/invitations.ck)
+ */
+export declare class UsersInvitationsClient {
+    private fetch;
+    constructor(fetch: SdkFetch);
+    /**
+     * @name List invitations
+     * @description Every invitation, newest first, with the link of each one still open
+     */
+    listInvitations(): Promise<InvitationList>;
+    /**
+     * @name Create invitation
+     * @description Invite somebody into a role. An open invitation to the same address is withdrawn first, so this is also how one is sent again. Refused for an address that already has an account
+     */
+    createInvitation(body: InvitationCreate): Promise<Invitation>;
+    /**
+     * @name Revoke invitation
+     * @description Withdraw an invitation. Its link stops working at once. Nothing is deleted: it stays in the list as withdrawn
+     */
+    revokeInvitation(id: string): Promise<Invitation>;
+    /**
+     * @name Read invitation
+     * @description What an open invitation is for: the address, the role and the station. Changes nothing
+     */
+    readInvitation(body: InvitationToken): Promise<InvitationDetails>;
+    /**
+     * @name Start accepting invitation
+     * @description Check the password and start setting up the second step. Nothing is saved, and starting again replaces the setup
+     */
+    startAcceptingInvitation(body: InvitationAcceptStart): Promise<InvitationAcceptStartResponse>;
+    /**
+     * @name Accept invitation
+     * @description Accept: make the account with its password, its second step and its role, all at once, and spend the invitation
+     */
+    acceptInvitation(body: InvitationAccept): Promise<InvitationAccepted>;
+}
+//# sourceMappingURL=invitations.client.d.ts.map

package/dist/users/invitations.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.client.d.ts","sourceRoot":"","sources":["../../src/users/invitations.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,UAAU,EACV,gBAAgB,EAChB,qBAAqB,EACrB,6BAA6B,EAC7B,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EAClB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAGlD;;GAEG;AACH,qBAAa,sBAAsB;IACnB,OAAO,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAEnC;;;OAGG;IACG,eAAe,IAAI,OAAO,CAAC,cAAc,CAAC;IAKhD;;;OAGG;IACG,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IASnE;;;OAGG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAKvD;;;OAGG;IACG,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IASvE;;;OAGG;IACG,wBAAwB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IASnG;;;OAGG;IACG,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAQ9E"}

package/dist/users/types/index.d.ts

@@ -0,0 +1,3 @@
+export * from './invitations.types.js';
+export * from './users.types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/users/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/users/types/index.ts"],"names":[],"mappings":"AACA,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC"}

package/dist/users/types/invitations.types.d.ts

@@ -0,0 +1,178 @@
+import { DateTime } from 'luxon';
+import type { FidoFactorAttestation } from '../../authentication/types/registration.types.js';
+import type { PlatformRole } from '../../authentication/types/authentication.types.js';
+import type { PublicKeyCredentialWithAttestation } from '../../authentication/types/authentication.types.js';
+/**
+ * Where an invitation stands. `expired` is a pending invitation whose time ran out
+ * generated from [InvitationState](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export type InvitationState = 'pending' | 'accepted' | 'revoked' | 'expired';
+/**
+ * Invite somebody by their address
+ * generated from [InvitationCreate](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationCreate {
+    /** The address the account will have */
+    email: string;
+    /** The role the account will hold */
+    role: PlatformRole;
+    /** Email the link to the address too. Refused with a 503, and nothing made, when the station has no mail server */
+    send?: boolean;
+}
+/**
+ * An invitation's link token, as it appears after `#` on the invite page
+ * generated from [InvitationToken](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationToken {
+    /** The token */
+    token: string;
+}
+/**
+ * What an open invitation is for, shown to the person before they accept
+ * generated from [InvitationDetails](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationDetails {
+    /** The address the account will have */
+    email: string;
+    /** The role it will hold */
+    role: PlatformRole;
+    /** What the station calls itself */
+    stationName: string;
+    /** When the link stops working */
+    expiresAt: DateTime;
+}
+/** Rehydrates every wire-encoded scalar in a InvitationDetails into its runtime type. Mutates and returns `raw`. */
+export declare function reviveInvitationDetails(raw: InvitationDetails): InvitationDetails;
+/**
+ * How the person will prove it is them after their password: an authenticator app, or a passkey
+ * generated from [InvitationSecondStep](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export type InvitationSecondStep = 'authenticator' | 'fido';
+/**
+ * An authenticator app to scan, for an invitation being accepted
+ * generated from [InvitationAuthenticatorSetup](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationAuthenticatorSetup {
+    /** Discriminator */
+    method: 'authenticator';
+    /** Send this back with the first code */
+    registrationId: string;
+    /** The key, for an app that cannot scan */
+    secret: string;
+    /** The `otpauth://` address the QR code holds */
+    uri: string;
+    /** The QR code, as a data URL */
+    qrCode: string;
+}
+/**
+ * A passkey to make, for an invitation being accepted
+ * generated from [InvitationPasskeySetup](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationPasskeySetup {
+    /** Discriminator */
+    method: 'fido';
+    /** Send this back with the credential */
+    registrationId: string;
+    /** What to hand `navigator.credentials.create` */
+    attestation: FidoFactorAttestation;
+}
+/**
+ * Accept with the first code from the authenticator app
+ * generated from [InvitationAcceptWithAuthenticator](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationAcceptWithAuthenticator {
+    /** Discriminator */
+    method: 'authenticator';
+    /** The invitation's token */
+    token: string;
+    /** The same password as at the start */
+    password: string;
+    /** From the start */
+    registrationId: string;
+    /** The first code the app shows */
+    code: string;
+}
+/**
+ * Accept with the passkey the browser just made
+ * generated from [InvitationAcceptWithPasskey](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationAcceptWithPasskey {
+    /** Discriminator */
+    method: 'fido';
+    /** The invitation's token */
+    token: string;
+    /** The same password as at the start */
+    password: string;
+    /** From the start */
+    registrationId: string;
+    /** What `navigator.credentials.create` answered */
+    credential: PublicKeyCredentialWithAttestation;
+}
+/**
+ * The account made from an invitation. Sign in with it as usual
+ * generated from [InvitationAccepted](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationAccepted {
+    /** The address to sign in with */
+    email: string;
+    /** The role it holds */
+    role: PlatformRole;
+}
+/**
+ * An invitation for somebody to take an account on the station
+ * generated from [Invitation](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface Invitation {
+    /** The invitation's id */
+    id: string;
+    /** The address the account will have. The person cannot change it while accepting */
+    email: string;
+    /** The role the account will hold */
+    role: PlatformRole;
+    /** Where it stands */
+    state: InvitationState;
+    /** When it was made */
+    createdAt: DateTime;
+    /** When the link stops working, if nobody has used it */
+    expiresAt: DateTime;
+    /** The address of the admin who made it. Absent once their account is gone */
+    invitedBy?: string;
+    /** When somebody accepted it */
+    acceptedAt?: DateTime;
+    /** When it was withdrawn, by an admin or by a newer invitation to the same address */
+    revokedAt?: DateTime;
+    /** The invitation itself, only while it is pending. Put it after `#` on the station's `/invite` page, as `/invite#<token>`. Anyone holding it can claim the account, so show it only to the person invited */
+    token?: string;
+}
+/** Rehydrates every wire-encoded scalar in a Invitation into its runtime type. Mutates and returns `raw`. */
+export declare function reviveInvitation(raw: Invitation): Invitation;
+/**
+ * Choose a password and a second step. Nothing is saved yet
+ * generated from [InvitationAcceptStart](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationAcceptStart {
+    /** The invitation's token */
+    token: string;
+    /** The password the account will have. Refused here if it is too weak, so the person learns before setting anything else up */
+    password: string;
+    /** The second step to set up */
+    method: InvitationSecondStep;
+}
+/**
+ * generated from [InvitationAcceptStartResponse](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export type InvitationAcceptStartResponse = InvitationAuthenticatorSetup | InvitationPasskeySetup;
+/**
+ * generated from [InvitationAccept](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export type InvitationAccept = InvitationAcceptWithAuthenticator | InvitationAcceptWithPasskey;
+/**
+ * The station's invitations, newest first
+ * generated from [InvitationList](../../../../../apps/api/data/contracts/users/invitations.types.ck)
+ */
+export interface InvitationList {
+    data: Invitation[];
+}
+/** Rehydrates every wire-encoded scalar in a InvitationList into its runtime type. Mutates and returns `raw`. */
+export declare function reviveInvitationList(raw: InvitationList): InvitationList;
+//# sourceMappingURL=invitations.types.d.ts.map

package/dist/users/types/invitations.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.types.d.ts","sourceRoot":"","sources":["../../../src/users/types/invitations.types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kDAAkD,CAAC;AAC9F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oDAAoD,CAAC;AACvF,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,oDAAoD,CAAC;AAW7G;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7E;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC7B,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,mHAAmH;IACnH,IAAI,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC5B,gBAAgB;IAChB,KAAK,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAC9B,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,SAAS,EAAE,QAAQ,CAAC;CACvB;AAED,oHAAoH;AACpH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,iBAAiB,GAAG,iBAAiB,CAIjF;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,eAAe,GAAG,MAAM,CAAC;AAE5D;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IACzC,oBAAoB;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACnC,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,WAAW,EAAE,qBAAqB,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAiC;IAC9C,oBAAoB;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IACxC,oBAAoB;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,UAAU,EAAE,kCAAkC,CAAC;CAClD;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAC/B,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,IAAI,EAAE,YAAY,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACvB,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,qFAAqF;IACrF,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,sBAAsB;IACtB,KAAK,EAAE,eAAe,CAAC;IACvB,uBAAuB;IACvB,SAAS,EAAE,QAAQ,CAAC;IACpB,yDAAyD;IACzD,SAAS,EAAE,QAAQ,CAAC;IACpB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,UAAU,CAAC,EAAE,QAAQ,CAAC;IACtB,sFAAsF;IACtF,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,8MAA8M;IAC9M,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAW5D;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IAClC,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,+HAA+H;IAC/H,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,MAAM,EAAE,oBAAoB,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,MAAM,6BAA6B,GAAG,4BAA4B,GAAG,sBAAsB,CAAC;AAElG;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,iCAAiC,GAAG,2BAA2B,CAAC;AAE/F;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,iHAAiH;AACjH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,GAAG,cAAc,CASxE"}

package/dist/users/types/users.types.d.ts

@@ -0,0 +1,123 @@
+import { DateTime } from 'luxon';
+import type { Pagination } from '../../shared/types/pagination.js';
+import type { PaginationInput } from '../../shared/types/pagination.js';
+import type { PaginationWithActive } from '../../shared/types/pagination.js';
+import type { PaginationWithActiveInput } from '../../shared/types/pagination.js';
+import type { PlatformRole } from '../../authentication/types/authentication.types.js';
+import type { Session } from '../../authentication/types/authentication.types.js';
+import type { SessionInput } from '../../authentication/types/authentication.types.js';
+/**
+ * Which people to list
+ * generated from [UserQuery](../../../../../apps/api/data/contracts/users/users.types.ck)
+ */
+export interface UserQuery extends PaginationWithActive {
+    /** Part of an email address */
+    search?: string;
+    /** Only people holding this role */
+    role?: PlatformRole;
+}
+export interface UserQueryInput extends PaginationWithActiveInput {
+    /** Part of an email address */
+    search?: string;
+    /** Only people holding this role */
+    role?: PlatformRole;
+}
+/**
+ * A person with an account on the station
+ * generated from [UserSummary](../../../../../apps/api/data/contracts/users/users.types.ck)
+ */
+export interface UserSummary {
+    /** The person's account id */
+    id: string;
+    /** The address they sign in with. Absent for an account that has none, such as one made through a provider that shared no address */
+    email?: string;
+    /** The one role they hold. Absent for an account nobody has granted one */
+    role?: PlatformRole;
+    /** False once the account has been switched off. A switched-off person cannot sign in, and every session they held has ended */
+    active: boolean;
+    /** When the account was made */
+    createdAt: DateTime;
+    /** When they last signed in. Absent if they never have */
+    lastSignInAt?: DateTime;
+    /** Whether they have an authenticator app or a passkey, which the phone apps need to sign in with */
+    hasStrongFactor: boolean;
+}
+/** Rehydrates every wire-encoded scalar in a UserSummary into its runtime type. Mutates and returns `raw`. */
+export declare function reviveUserSummary(raw: UserSummary): UserSummary;
+/**
+ * One way a person signs in. Never the secret itself
+ * generated from [UserFactor](../../../../../apps/api/data/contracts/users/users.types.ck)
+ */
+export interface UserFactor {
+    /** What kind of factor it is */
+    method: 'email' | 'password' | 'authenticator' | 'fido' | 'oidc' | 'phone';
+    /** Which factor of that kind */
+    methodId: string;
+    /** What it proves */
+    kind: 'knowledge' | 'possession' | 'biometric';
+    /** How it is shown, such as a masked address or the authenticator's name */
+    label?: string;
+}
+/**
+ * One time a person signed in
+ * generated from [UserSignIn](../../../../../apps/api/data/contracts/users/users.types.ck)
+ */
+export interface UserSignIn {
+    /** When */
+    occurredAt: DateTime;
+    /** The factor they signed in with */
+    method: string;
+    /** Whether a second factor was proved */
+    mfaSatisfied: boolean;
+    /** The address the request came from */
+    ip?: string;
+    /** The app or browser that asked */
+    userAgent?: string;
+}
+/** Rehydrates every wire-encoded scalar in a UserSignIn into its runtime type. Mutates and returns `raw`. */
+export declare function reviveUserSignIn(raw: UserSignIn): UserSignIn;
+/**
+ * The role a person should hold
+ * generated from [UserRoleChange](../../../../../apps/api/data/contracts/users/users.types.ck)
+ */
+export interface UserRoleChange {
+    /** Replaces whatever role they held */
+    role: PlatformRole;
+}
+/**
+ * One page of people
+ * generated from [UserPage](../../../../../apps/api/data/contracts/users/users.types.ck)
+ */
+export interface UserPage {
+    meta: Pagination;
+    data: UserSummary[];
+}
+export interface UserPageInput {
+    meta: PaginationInput;
+    data: UserSummary[];
+}
+/** Rehydrates every wire-encoded scalar in a UserPage into its runtime type. Mutates and returns `raw`. */
+export declare function reviveUserPage(raw: UserPage): UserPage;
+/**
+ * A person, with how they sign in and where they are signed in
+ * generated from [UserDetail](../../../../../apps/api/data/contracts/users/users.types.ck)
+ */
+export interface UserDetail extends UserSummary {
+    /** Every way they can sign in */
+    factors: UserFactor[];
+    /** Where they are signed in now */
+    sessions: Session[];
+    /** Their most recent sign-ins, newest first */
+    signIns: UserSignIn[];
+}
+export interface UserDetailInput extends UserSummary {
+    /** Every way they can sign in */
+    factors: UserFactor[];
+    /** Where they are signed in now */
+    sessions: SessionInput[];
+    /** Their most recent sign-ins, newest first */
+    signIns: UserSignIn[];
+}
+/** Rehydrates every wire-encoded scalar in a UserDetail into its runtime type. Mutates and returns `raw`. */
+export declare function reviveUserDetail(raw: UserDetail): UserDetail;
+//# sourceMappingURL=users.types.d.ts.map

package/dist/users/types/users.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.types.d.ts","sourceRoot":"","sources":["../../../src/users/types/users.types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oDAAoD,CAAC;AACvF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oDAAoD,CAAC;AAElF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oDAAoD,CAAC;AAWvF;;;GAGG;AACH,MAAM,WAAW,SAAU,SAAQ,oBAAoB;IACnD,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,IAAI,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,cAAe,SAAQ,yBAAyB;IAC7D,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,IAAI,CAAC,EAAE,YAAY,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,qIAAqI;IACrI,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,gIAAgI;IAChI,MAAM,EAAE,OAAO,CAAC;IAChB,gCAAgC;IAChC,SAAS,EAAE,QAAQ,CAAC;IACpB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,QAAQ,CAAC;IACxB,qGAAqG;IACrG,eAAe,EAAE,OAAO,CAAC;CAC5B;AAED,8GAA8G;AAC9G,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,WAAW,GAAG,WAAW,CAO/D;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACvB,gCAAgC;IAChC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3E,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,IAAI,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;IAC/C,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACvB,WAAW;IACX,UAAU,EAAE,QAAQ,CAAC;IACrB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,YAAY,EAAE,OAAO,CAAC;IACtB,wCAAwC;IACxC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAI5D;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC3B,uCAAuC;IACvC,IAAI,EAAE,YAAY,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,2GAA2G;AAC3G,wBAAgB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,QAAQ,CAStD;AAED;;;GAGG;AACH,MAAM,WAAW,UAAW,SAAQ,WAAW;IAC3C,iCAAiC;IACjC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,mCAAmC;IACnC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,+CAA+C;IAC/C,OAAO,EAAE,UAAU,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAChD,iCAAiC;IACjC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,mCAAmC;IACnC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,+CAA+C;IAC/C,OAAO,EAAE,UAAU,EAAE,CAAC;CACzB;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAgB5D"}

package/dist/users/users.client.d.ts

@@ -0,0 +1,44 @@
+import type { SdkFetch } from '../sdk-options.js';
+import type { UserDetail, UserPage, UserQueryInput, UserRoleChange, UserSummary } from './types/users.types.js';
+import { UsersInvitationsClient } from './invitations.client.js';
+export declare class UsersClient {
+    private fetch;
+    readonly invitations: UsersInvitationsClient;
+    constructor(fetch: SdkFetch);
+    /**
+     * @name List users
+     * @description The station's people, one page at a time, ordered by when their account was made
+     */
+    listUsers(query?: UserQueryInput): Promise<UserPage>;
+    /**
+     * @name Get user
+     * @description One person, with every way they sign in, where they are signed in and their recent sign-ins
+     */
+    getUser(id: string): Promise<UserDetail>;
+    /**
+     * @name Change user role
+     * @description Give a person a different role. They hold exactly one, so the role they had is taken away. Refused for your own account, and for the last admin
+     */
+    changeUserRole(id: string, body: UserRoleChange): Promise<UserSummary>;
+    /**
+     * @name Deactivate user
+     * @description Switch a person off. They are signed out everywhere and cannot sign in, and their API keys, connected apps and chat links stop working, until they are switched back on. Nothing is deleted. Refused for your own account, and for the last admin
+     */
+    deactivateUser(id: string): Promise<UserSummary>;
+    /**
+     * @name Reactivate user
+     * @description Switch a person back on. They sign in as they did before, and their API keys, connected apps and chat links work again
+     */
+    reactivateUser(id: string): Promise<UserSummary>;
+    /**
+     * @name Sign out user
+     * @description Sign a person out everywhere. They can sign straight back in
+     */
+    signOutUser(id: string): Promise<void>;
+    /**
+     * @name Reset user MFA
+     * @description Remove a person's authenticator apps and passkeys and sign them out everywhere, for when they have lost the device. They sign in with their password and set a new one up
+     */
+    resetUserMFA(id: string): Promise<void>;
+}
+//# sourceMappingURL=users.client.d.ts.map

package/dist/users/users.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.client.d.ts","sourceRoot":"","sources":["../../src/users/users.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEhH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,qBAAa,WAAW;IAGR,OAAO,CAAC,KAAK;IAFzB,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;gBAEzB,KAAK,EAAE,QAAQ;IAInC;;;OAGG;IACG,SAAS,CAAC,KAAK,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC;IAQ1D;;;OAGG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAK9C;;;OAGG;IACG,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC;IAS5E;;;OAGG;IACG,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAKtD;;;OAGG;IACG,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAKtD;;;OAGG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C;;;OAGG;IACG,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deadair/sdk",
-  "version": "0.59.0",
+  "version": "0.60.0",
   "description": "A typed client for the deadair station's HTTP API, generated from the same contracts the station serves.",
   "keywords": [
     "deadair",