@happyvertical/smrt-users 0.37.1 → 0.37.3

package/dist/playground.js

@@ -1,139 +1,117 @@
 import { USERS_MODULE_META } from "./ui.js";
-const noop = () => {
+//#region src/svelte/playground.ts
+var noop = () => {};
+var sampleTenant = {
+	id: "tenant-riverstone",
+	name: "Riverstone Newsroom",
+	slug: "riverstone-newsroom",
+	status: "active"
 };
-const sampleTenant = {
-  id: "tenant-riverstone",
-  name: "Riverstone Newsroom",
-  slug: "riverstone-newsroom",
-  status: "active"
+var sampleRoles = [{
+	id: "role-member",
+	slug: "member",
+	name: "Member",
+	description: "Can collaborate on editorial work."
+}, {
+	id: "role-editor",
+	slug: "editor",
+	name: "Editor",
+	description: "Can approve and publish content."
+}];
+var sampleUsers = [{
+	user: {
+		id: "user-taylor",
+		email: "taylor@example.com",
+		status: "active"
+	},
+	profile: {
+		id: "profile-taylor",
+		name: "Taylor Rowan",
+		email: "taylor@example.com"
+	},
+	role: "Editor"
+}, {
+	user: {
+		id: "user-jordan",
+		email: "jordan@example.com",
+		status: "pending"
+	},
+	profile: {
+		id: "profile-jordan",
+		name: "Jordan Lee",
+		email: "jordan@example.com"
+	},
+	role: "Contributor"
+}];
+var loadInviteUserModal = () => import("./svelte/components/InviteUserModal.svelte");
+var loadUserForm = () => import("./svelte/components/UserForm.svelte");
+var loadUserList = () => import("./svelte/components/UserList.svelte");
+var loadUserMenu = () => import("./svelte/components/UserMenu.svelte");
+var playground_default = {
+	packageName: "@happyvertical/smrt-users",
+	displayName: USERS_MODULE_META.displayName,
+	description: USERS_MODULE_META.description,
+	moduleMeta: USERS_MODULE_META,
+	entries: [
+		{
+			id: "user-list",
+			title: "User List",
+			description: "Role-aware list of users with selection and profile display.",
+			loadComponent: loadUserList,
+			order: 1,
+			props: {
+				users: sampleUsers,
+				selectedId: "user-taylor",
+				onselect: noop
+			},
+			modes: { mock: { label: "Mock" } }
+		},
+		{
+			id: "user-form",
+			title: "User Form",
+			description: "Create and edit form for user records and account status.",
+			loadComponent: loadUserForm,
+			order: 2,
+			props: {
+				user: sampleUsers[0].user,
+				profile: sampleUsers[0].profile,
+				onsubmit: noop,
+				oncancel: noop
+			},
+			modes: { mock: { label: "Mock" } }
+		},
+		{
+			id: "invite-user-modal",
+			title: "Invite User Modal",
+			description: "Invitation flow for adding a tenant member with a role assignment.",
+			loadComponent: loadInviteUserModal,
+			order: 3,
+			props: {
+				open: false,
+				tenant: sampleTenant,
+				roles: sampleRoles,
+				onsubmit: noop,
+				onclose: noop
+			},
+			modes: { mock: { label: "Mock" } }
+		},
+		{
+			id: "user-menu",
+			title: "User Menu",
+			description: "Authenticated account menu for profile, settings, and sign-out actions.",
+			loadComponent: loadUserMenu,
+			order: 4,
+			props: {
+				profile: sampleUsers[0].profile,
+				profileUrl: "/settings/profile",
+				settingsUrl: "/settings",
+				signoutUrl: "/auth/signout"
+			},
+			modes: { mock: { label: "Mock" } }
+		}
+	]
 };
-const sampleRoles = [
-  {
-    id: "role-member",
-    slug: "member",
-    name: "Member",
-    description: "Can collaborate on editorial work."
-  },
-  {
-    id: "role-editor",
-    slug: "editor",
-    name: "Editor",
-    description: "Can approve and publish content."
-  }
-];
-const sampleUsers = [
-  {
-    user: {
-      id: "user-taylor",
-      email: "taylor@example.com",
-      status: "active"
-    },
-    profile: {
-      id: "profile-taylor",
-      name: "Taylor Rowan",
-      email: "taylor@example.com"
-    },
-    role: "Editor"
-  },
-  {
-    user: {
-      id: "user-jordan",
-      email: "jordan@example.com",
-      status: "pending"
-    },
-    profile: {
-      id: "profile-jordan",
-      name: "Jordan Lee",
-      email: "jordan@example.com"
-    },
-    role: "Contributor"
-  }
-];
-const loadInviteUserModal = () => import("./svelte/components/InviteUserModal.svelte");
-const loadUserForm = () => import("./svelte/components/UserForm.svelte");
-const loadUserList = () => import("./svelte/components/UserList.svelte");
-const loadUserMenu = () => import("./svelte/components/UserMenu.svelte");
-const playground = {
-  packageName: "@happyvertical/smrt-users",
-  displayName: USERS_MODULE_META.displayName,
-  description: USERS_MODULE_META.description,
-  moduleMeta: USERS_MODULE_META,
-  entries: [
-    {
-      id: "user-list",
-      title: "User List",
-      description: "Role-aware list of users with selection and profile display.",
-      loadComponent: loadUserList,
-      order: 1,
-      props: {
-        users: sampleUsers,
-        selectedId: "user-taylor",
-        onselect: noop
-      },
-      modes: {
-        mock: {
-          label: "Mock"
-        }
-      }
-    },
-    {
-      id: "user-form",
-      title: "User Form",
-      description: "Create and edit form for user records and account status.",
-      loadComponent: loadUserForm,
-      order: 2,
-      props: {
-        user: sampleUsers[0].user,
-        profile: sampleUsers[0].profile,
-        onsubmit: noop,
-        oncancel: noop
-      },
-      modes: {
-        mock: {
-          label: "Mock"
-        }
-      }
-    },
-    {
-      id: "invite-user-modal",
-      title: "Invite User Modal",
-      description: "Invitation flow for adding a tenant member with a role assignment.",
-      loadComponent: loadInviteUserModal,
-      order: 3,
-      props: {
-        open: false,
-        tenant: sampleTenant,
-        roles: sampleRoles,
-        onsubmit: noop,
-        onclose: noop
-      },
-      modes: {
-        mock: {
-          label: "Mock"
-        }
-      }
-    },
-    {
-      id: "user-menu",
-      title: "User Menu",
-      description: "Authenticated account menu for profile, settings, and sign-out actions.",
-      loadComponent: loadUserMenu,
-      order: 4,
-      props: {
-        profile: sampleUsers[0].profile,
-        profileUrl: "/settings/profile",
-        settingsUrl: "/settings",
-        signoutUrl: "/auth/signout"
-      },
-      modes: {
-        mock: {
-          label: "Mock"
-        }
-      }
-    }
-  ]
-};
-export {
-  playground as default
-};
-//# sourceMappingURL=playground.js.map
+//#endregion
+export { playground_default as default };
+
+//# sourceMappingURL=playground.js.map

package/dist/playground.js.map

@@ -1 +1 @@
-{"version":3,"file":"playground.js","sources":["../src/svelte/playground.ts"],"sourcesContent":["import { USERS_MODULE_META } from '../ui.js';\n\nconst noop = () => {};\n\nconst sampleTenant = {\n  id: 'tenant-riverstone',\n  name: 'Riverstone Newsroom',\n  slug: 'riverstone-newsroom',\n  status: 'active',\n};\n\nconst sampleRoles = [\n  {\n    id: 'role-member',\n    slug: 'member',\n    name: 'Member',\n    description: 'Can collaborate on editorial work.',\n  },\n  {\n    id: 'role-editor',\n    slug: 'editor',\n    name: 'Editor',\n    description: 'Can approve and publish content.',\n  },\n];\n\nconst sampleUsers = [\n  {\n    user: {\n      id: 'user-taylor',\n      email: 'taylor@example.com',\n      status: 'active',\n    },\n    profile: {\n      id: 'profile-taylor',\n      name: 'Taylor Rowan',\n      email: 'taylor@example.com',\n    },\n    role: 'Editor',\n  },\n  {\n    user: {\n      id: 'user-jordan',\n      email: 'jordan@example.com',\n      status: 'pending',\n    },\n    profile: {\n      id: 'profile-jordan',\n      name: 'Jordan Lee',\n      email: 'jordan@example.com',\n    },\n    role: 'Contributor',\n  },\n];\n\nconst loadInviteUserModal = () => import('./components/InviteUserModal.svelte');\nconst loadUserForm = () => import('./components/UserForm.svelte');\nconst loadUserList = () => import('./components/UserList.svelte');\nconst loadUserMenu = () => import('./components/UserMenu.svelte');\n\nexport default {\n  packageName: '@happyvertical/smrt-users',\n  displayName: USERS_MODULE_META.displayName,\n  description: USERS_MODULE_META.description,\n  moduleMeta: USERS_MODULE_META,\n  entries: [\n    {\n      id: 'user-list',\n      title: 'User List',\n      description:\n        'Role-aware list of users with selection and profile display.',\n      loadComponent: loadUserList,\n      order: 1,\n      props: {\n        users: sampleUsers,\n        selectedId: 'user-taylor',\n        onselect: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n    {\n      id: 'user-form',\n      title: 'User Form',\n      description: 'Create and edit form for user records and account status.',\n      loadComponent: loadUserForm,\n      order: 2,\n      props: {\n        user: sampleUsers[0].user,\n        profile: sampleUsers[0].profile,\n        onsubmit: noop,\n        oncancel: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n    {\n      id: 'invite-user-modal',\n      title: 'Invite User Modal',\n      description:\n        'Invitation flow for adding a tenant member with a role assignment.',\n      loadComponent: loadInviteUserModal,\n      order: 3,\n      props: {\n        open: false,\n        tenant: sampleTenant,\n        roles: sampleRoles,\n        onsubmit: noop,\n        onclose: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n    {\n      id: 'user-menu',\n      title: 'User Menu',\n      description:\n        'Authenticated account menu for profile, settings, and sign-out actions.',\n      loadComponent: loadUserMenu,\n      order: 4,\n      props: {\n        profile: sampleUsers[0].profile,\n        profileUrl: '/settings/profile',\n        settingsUrl: '/settings',\n        signoutUrl: '/auth/signout',\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n  ],\n};\n"],"names":[],"mappings":";AAEA,MAAM,OAAO,MAAM;AAAC;AAEpB,MAAM,eAAe;AAAA,EACnB,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,QAAQ;AACV;AAEA,MAAM,cAAc;AAAA,EAClB;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,EAAA;AAEjB;AAEA,MAAM,cAAc;AAAA,EAClB;AAAA,IACE,MAAM;AAAA,MACJ,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,IAAA;AAAA,IAEV,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,IAAA;AAAA,IAET,MAAM;AAAA,EAAA;AAAA,EAER;AAAA,IACE,MAAM;AAAA,MACJ,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,QAAQ;AAAA,IAAA;AAAA,IAEV,SAAS;AAAA,MACP,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,IAAA;AAAA,IAET,MAAM;AAAA,EAAA;AAEV;AAEA,MAAM,sBAAsB,MAAM,OAAO,4CAAqC;AAC9E,MAAM,eAAe,MAAM,OAAO,qCAA8B;AAChE,MAAM,eAAe,MAAM,OAAO,qCAA8B;AAChE,MAAM,eAAe,MAAM,OAAO,qCAA8B;AAEhE,MAAA,aAAe;AAAA,EACb,aAAa;AAAA,EACb,aAAa,kBAAkB;AAAA,EAC/B,aAAa,kBAAkB;AAAA,EAC/B,YAAY;AAAA,EACZ,SAAS;AAAA,IACP;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,eAAe;AAAA,MACf,OAAO;AAAA,MACP,OAAO;AAAA,QACL,OAAO;AAAA,QACP,YAAY;AAAA,QACZ,UAAU;AAAA,MAAA;AAAA,MAEZ,OAAO;AAAA,QACL,MAAM;AAAA,UACJ,OAAO;AAAA,QAAA;AAAA,MACT;AAAA,IACF;AAAA,IAEF;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,aAAa;AAAA,MACb,eAAe;AAAA,MACf,OAAO;AAAA,MACP,OAAO;AAAA,QACL,MAAM,YAAY,CAAC,EAAE;AAAA,QACrB,SAAS,YAAY,CAAC,EAAE;AAAA,QACxB,UAAU;AAAA,QACV,UAAU;AAAA,MAAA;AAAA,MAEZ,OAAO;AAAA,QACL,MAAM;AAAA,UACJ,OAAO;AAAA,QAAA;AAAA,MACT;AAAA,IACF;AAAA,IAEF;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,eAAe;AAAA,MACf,OAAO;AAAA,MACP,OAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS;AAAA,MAAA;AAAA,MAEX,OAAO;AAAA,QACL,MAAM;AAAA,UACJ,OAAO;AAAA,QAAA;AAAA,MACT;AAAA,IACF;AAAA,IAEF;AAAA,MACE,IAAI;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,eAAe;AAAA,MACf,OAAO;AAAA,MACP,OAAO;AAAA,QACL,SAAS,YAAY,CAAC,EAAE;AAAA,QACxB,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,YAAY;AAAA,MAAA;AAAA,MAEd,OAAO;AAAA,QACL,MAAM;AAAA,UACJ,OAAO;AAAA,QAAA;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEJ;"}
+{"version":3,"file":"playground.js","names":[],"sources":["../src/svelte/playground.ts"],"sourcesContent":["import { USERS_MODULE_META } from '../ui.js';\n\nconst noop = () => {};\n\nconst sampleTenant = {\n  id: 'tenant-riverstone',\n  name: 'Riverstone Newsroom',\n  slug: 'riverstone-newsroom',\n  status: 'active',\n};\n\nconst sampleRoles = [\n  {\n    id: 'role-member',\n    slug: 'member',\n    name: 'Member',\n    description: 'Can collaborate on editorial work.',\n  },\n  {\n    id: 'role-editor',\n    slug: 'editor',\n    name: 'Editor',\n    description: 'Can approve and publish content.',\n  },\n];\n\nconst sampleUsers = [\n  {\n    user: {\n      id: 'user-taylor',\n      email: 'taylor@example.com',\n      status: 'active',\n    },\n    profile: {\n      id: 'profile-taylor',\n      name: 'Taylor Rowan',\n      email: 'taylor@example.com',\n    },\n    role: 'Editor',\n  },\n  {\n    user: {\n      id: 'user-jordan',\n      email: 'jordan@example.com',\n      status: 'pending',\n    },\n    profile: {\n      id: 'profile-jordan',\n      name: 'Jordan Lee',\n      email: 'jordan@example.com',\n    },\n    role: 'Contributor',\n  },\n];\n\nconst loadInviteUserModal = () => import('./components/InviteUserModal.svelte');\nconst loadUserForm = () => import('./components/UserForm.svelte');\nconst loadUserList = () => import('./components/UserList.svelte');\nconst loadUserMenu = () => import('./components/UserMenu.svelte');\n\nexport default {\n  packageName: '@happyvertical/smrt-users',\n  displayName: USERS_MODULE_META.displayName,\n  description: USERS_MODULE_META.description,\n  moduleMeta: USERS_MODULE_META,\n  entries: [\n    {\n      id: 'user-list',\n      title: 'User List',\n      description:\n        'Role-aware list of users with selection and profile display.',\n      loadComponent: loadUserList,\n      order: 1,\n      props: {\n        users: sampleUsers,\n        selectedId: 'user-taylor',\n        onselect: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n    {\n      id: 'user-form',\n      title: 'User Form',\n      description: 'Create and edit form for user records and account status.',\n      loadComponent: loadUserForm,\n      order: 2,\n      props: {\n        user: sampleUsers[0].user,\n        profile: sampleUsers[0].profile,\n        onsubmit: noop,\n        oncancel: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n    {\n      id: 'invite-user-modal',\n      title: 'Invite User Modal',\n      description:\n        'Invitation flow for adding a tenant member with a role assignment.',\n      loadComponent: loadInviteUserModal,\n      order: 3,\n      props: {\n        open: false,\n        tenant: sampleTenant,\n        roles: sampleRoles,\n        onsubmit: noop,\n        onclose: noop,\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n    {\n      id: 'user-menu',\n      title: 'User Menu',\n      description:\n        'Authenticated account menu for profile, settings, and sign-out actions.',\n      loadComponent: loadUserMenu,\n      order: 4,\n      props: {\n        profile: sampleUsers[0].profile,\n        profileUrl: '/settings/profile',\n        settingsUrl: '/settings',\n        signoutUrl: '/auth/signout',\n      },\n      modes: {\n        mock: {\n          label: 'Mock',\n        },\n      },\n    },\n  ],\n};\n"],"mappings":";;AAEA,IAAM,aAAa,CAAC;AAEpB,IAAM,eAAe;CACnB,IAAI;CACJ,MAAM;CACN,MAAM;CACN,QAAQ;AACV;AAEA,IAAM,cAAc,CAClB;CACE,IAAI;CACJ,MAAM;CACN,MAAM;CACN,aAAa;AACf,GACA;CACE,IAAI;CACJ,MAAM;CACN,MAAM;CACN,aAAa;AACf,CACF;AAEA,IAAM,cAAc,CAClB;CACE,MAAM;EACJ,IAAI;EACJ,OAAO;EACP,QAAQ;CACV;CACA,SAAS;EACP,IAAI;EACJ,MAAM;EACN,OAAO;CACT;CACA,MAAM;AACR,GACA;CACE,MAAM;EACJ,IAAI;EACJ,OAAO;EACP,QAAQ;CACV;CACA,SAAS;EACP,IAAI;EACJ,MAAM;EACN,OAAO;CACT;CACA,MAAM;AACR,CACF;AAEA,IAAM,4BAA4B,OAAO;AACzC,IAAM,qBAAqB,OAAO;AAClC,IAAM,qBAAqB,OAAO;AAClC,IAAM,qBAAqB,OAAO;AAElC,IAAA,qBAAe;CACb,aAAa;CACb,aAAa,kBAAkB;CAC/B,aAAa,kBAAkB;CAC/B,YAAY;CACZ,SAAS;EACP;GACE,IAAI;GACJ,OAAO;GACP,aACE;GACF,eAAe;GACf,OAAO;GACP,OAAO;IACL,OAAO;IACP,YAAY;IACZ,UAAU;GACZ;GACA,OAAO,EACL,MAAM,EACJ,OAAO,OACT,EACF;EACF;EACA;GACE,IAAI;GACJ,OAAO;GACP,aAAa;GACb,eAAe;GACf,OAAO;GACP,OAAO;IACL,MAAM,YAAY,EAAC,CAAE;IACrB,SAAS,YAAY,EAAC,CAAE;IACxB,UAAU;IACV,UAAU;GACZ;GACA,OAAO,EACL,MAAM,EACJ,OAAO,OACT,EACF;EACF;EACA;GACE,IAAI;GACJ,OAAO;GACP,aACE;GACF,eAAe;GACf,OAAO;GACP,OAAO;IACL,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,SAAS;GACX;GACA,OAAO,EACL,MAAM,EACJ,OAAO,OACT,EACF;EACF;EACA;GACE,IAAI;GACJ,OAAO;GACP,aACE;GACF,eAAe;GACf,OAAO;GACP,OAAO;IACL,SAAS,YAAY,EAAC,CAAE;IACxB,YAAY;IACZ,aAAa;IACb,YAAY;GACd;GACA,OAAO,EACL,MAAM,EACJ,OAAO,OACT,EACF;EACF;CACF;AACF"}

package/dist/services/AccessRequestService.d.ts

@@ -0,0 +1,326 @@
+import { SmrtClassOptions } from '@happyvertical/smrt-core';
+import { AccessRequestCollection } from '../collections/AccessRequestCollection.js';
+import { AccessRequest } from '../models/AccessRequest.js';
+import { Membership } from '../models/Membership.js';
+import { Tenant } from '../models/Tenant.js';
+import { User } from '../models/User.js';
+import { AccessRequestStatus, TenantStatus, UserStatus } from '../types/index.js';
+/**
+ * Capabilities that gate the operator-facing methods of
+ * {@link AccessRequestService}.
+ */
+export declare const ACCESS_REQUEST_CAPABILITIES: {
+    /** Read the access-request queue (`list` / `get`). */
+    readonly READ: "access-requests:read";
+    /** Decide requests (`approve` / `decline` / `cancel` / `graduate`). */
+    readonly MANAGE: "access-requests:manage";
+};
+/**
+ * One of the capability slugs in {@link ACCESS_REQUEST_CAPABILITIES}.
+ */
+export type AccessRequestCapability = (typeof ACCESS_REQUEST_CAPABILITIES)[keyof typeof ACCESS_REQUEST_CAPABILITIES];
+/**
+ * Context passed to an {@link AccessRequestAuthorizer} before an operator method
+ * runs.
+ */
+export interface AccessRequestAuthorizationContext {
+    /** The capability the operation requires. */
+    capability: AccessRequestCapability;
+    /** The operator user id supplied to the method (`by`), if any. */
+    by?: string | null;
+    /** The target access-request id, when the operation targets a specific row. */
+    accessRequestId?: string;
+}
+/**
+ * Hook that authorizes an operator action. Throw (or reject) to deny — the
+ * thrown error propagates to the caller unchanged. Resolve/return to allow.
+ *
+ * Wire this to your permission system, e.g. resolve the operator's permissions
+ * and assert the required capability:
+ *
+ * ```typescript
+ * const service = await AccessRequestService.create({
+ *   db,
+ *   authorize: async ({ capability, by }) => {
+ *     if (!by || !(await isPlatformOperator(by, capability))) {
+ *       throw new Error(`Missing capability: ${capability}`);
+ *     }
+ *   },
+ * });
+ * ```
+ */
+export type AccessRequestAuthorizer = (context: AccessRequestAuthorizationContext) => void | Promise<void>;
+/**
+ * Lifecycle event types emitted by {@link AccessRequestService}.
+ */
+export type AccessRequestEventType = 'access-request.created' | 'access-request.approved' | 'access-request.declined' | 'access-request.canceled' | 'access-request.graduated';
+/**
+ * Payload delivered to an {@link AccessRequestEventHandler}.
+ */
+export interface AccessRequestEvent {
+    /** Which lifecycle transition fired. */
+    type: AccessRequestEventType;
+    /** The access request after the transition. */
+    accessRequest: AccessRequest;
+    /** When the event was emitted. */
+    at: Date;
+    /** Operator user id responsible, for operator-driven transitions. */
+    by?: string | null;
+    /** Graduated user (only on `access-request.graduated`). */
+    user?: User;
+    /** Membership created/linked on graduation, when a tenant was attached. */
+    membership?: Membership;
+    /** Tenant created/linked on graduation, when a tenant was attached. */
+    tenant?: Tenant;
+}
+/**
+ * Event hook apps provide to react to access-request lifecycle changes.
+ * Delivery is best-effort: a throwing handler is logged and swallowed so it
+ * never rolls back an already-persisted transition. Do not rely on it for
+ * critical-path work that must share the request's transaction.
+ */
+export type AccessRequestEventHandler = (event: AccessRequestEvent) => void | Promise<void>;
+/**
+ * Options for {@link AccessRequestService}.
+ */
+export interface AccessRequestServiceOptions extends SmrtClassOptions {
+    /** Optional capability gate for operator methods (see {@link AccessRequestAuthorizer}). */
+    authorize?: AccessRequestAuthorizer;
+    /** Optional lifecycle event hook (see {@link AccessRequestEventHandler}). */
+    onEvent?: AccessRequestEventHandler;
+}
+/**
+ * Input for {@link AccessRequestService.createAccessRequest}. Only `email` is
+ * required.
+ */
+export interface CreateAccessRequestInput {
+    /** Requester email (validated + normalized to lowercase). */
+    email: string;
+    /** Requester display name. */
+    name?: string | null;
+    /** Where the request came from, e.g. `www`, `sdk`. */
+    source?: string;
+    /** Free-form metadata (intended use, company, message, referrer, …). */
+    context?: Record<string, unknown>;
+    /** Optional requested org/tenant hint (advisory). */
+    tenantHint?: Record<string, unknown> | null;
+    /** Optional initial note. */
+    note?: string | null;
+}
+/**
+ * Filter for {@link AccessRequestService.listAccessRequests}.
+ */
+export interface ListAccessRequestsFilter {
+    /** Restrict to one status or any of several. */
+    status?: AccessRequestStatus | AccessRequestStatus[];
+    /** Restrict to a single (normalized) email. */
+    email?: string;
+    /** Restrict to a single source. */
+    source?: string;
+    /** Operator user id, forwarded to the authorizer as `by`. */
+    by?: string | null;
+    /** Max rows to return. */
+    limit?: number;
+    /** Rows to skip. */
+    offset?: number;
+    /** Order-by clause (defaults to `created_at DESC`). */
+    orderBy?: string;
+}
+/**
+ * Options shared by the operator decision methods.
+ */
+export interface DecideAccessRequestOptions {
+    /** Operator user id recorded as `decidedBy` and forwarded to the authorizer. */
+    by?: string | null;
+}
+/**
+ * Options for {@link AccessRequestService.approveAccessRequest}.
+ */
+export interface ApproveAccessRequestOptions extends DecideAccessRequestOptions {
+    /** Operator note stored on the request. */
+    note?: string | null;
+}
+/**
+ * Options for {@link AccessRequestService.declineAccessRequest}.
+ */
+export interface DeclineAccessRequestOptions extends DecideAccessRequestOptions {
+    /** Decision reason stored as the request's note. */
+    reason?: string | null;
+}
+/**
+ * Options for {@link AccessRequestService.cancelAccessRequest}.
+ */
+export interface CancelAccessRequestOptions extends DecideAccessRequestOptions {
+    /** Cancellation reason stored as the request's note. */
+    reason?: string | null;
+}
+/**
+ * Graduate into a **new** tenant, enrolling the requester (owner by default).
+ */
+export interface GraduateNewTenantOption {
+    /** New tenant attributes — `name` is required. */
+    create: {
+        name: string;
+        slug?: string;
+        description?: string;
+        status?: TenantStatus;
+    };
+    /** Role slug for the requester's membership (default `owner`). */
+    role?: string;
+}
+/**
+ * Graduate into an **existing** tenant, enrolling the requester.
+ */
+export interface GraduateExistingTenantOption {
+    /** Target tenant id. */
+    tenantId: string;
+    /** Role slug for the requester's membership (default `member`). */
+    role?: string;
+}
+/**
+ * Tenant handling at graduation: create a new tenant, attach to an existing
+ * one, or `'none'` (user only, no membership).
+ */
+export type GraduateTenantOption = GraduateNewTenantOption | GraduateExistingTenantOption | 'none';
+/**
+ * Options for {@link AccessRequestService.graduateAccessRequest}.
+ */
+export interface GraduateAccessRequestOptions extends DecideAccessRequestOptions {
+    /** Tenant handling (default `'none'`). */
+    tenant?: GraduateTenantOption;
+    /** Status applied to the user produced/linked by graduation (default `ACTIVE`). */
+    activate?: UserStatus;
+    /**
+     * Convenience: allow graduating directly from `REQUESTED` (skipping the
+     * `APPROVED` step). Defaults to `false`.
+     */
+    allowFromRequested?: boolean;
+    /** Operator note stored on the request. */
+    note?: string | null;
+}
+/**
+ * Result of {@link AccessRequestService.graduateAccessRequest}.
+ */
+export interface GraduateAccessRequestResult {
+    /** The graduated (created or linked) user. */
+    user: User;
+    /** The membership, when a tenant was attached. */
+    membership?: Membership;
+    /** The tenant, when one was created or attached. */
+    tenant?: Tenant;
+    /** The access request, now `GRADUATED`. */
+    accessRequest: AccessRequest;
+    /** Whether a brand-new user was created (`false` when an existing one was linked). */
+    created: boolean;
+}
+/**
+ * Error codes raised by {@link AccessRequestError}.
+ */
+export type AccessRequestErrorCode = 'INVALID_EMAIL' | 'NOT_FOUND' | 'INVALID_TRANSITION' | 'TENANT_NOT_FOUND' | 'ROLE_NOT_FOUND';
+/**
+ * Error thrown for access-request domain failures the caller is expected to
+ * surface (invalid email, unknown id, illegal state transition, …). Authorizer
+ * denials are not wrapped — those propagate from the supplied authorizer
+ * unchanged.
+ */
+export declare class AccessRequestError extends Error {
+    readonly code: AccessRequestErrorCode;
+    constructor(message: string, code: AccessRequestErrorCode);
+}
+/**
+ * High-level orchestration for the access-request lifecycle and graduation.
+ */
+export declare class AccessRequestService {
+    #private;
+    constructor(options: AccessRequestServiceOptions);
+    /**
+     * Initialize the backing collections (creates/verifies their tables).
+     */
+    initialize(): Promise<void>;
+    /**
+     * Static factory — construct and initialize in one call.
+     */
+    static create(options: AccessRequestServiceOptions): Promise<AccessRequestService>;
+    /**
+     * The underlying collection, for advanced read scenarios. Prefer the service
+     * methods, which apply normalization, the state machine, capability gating,
+     * and events.
+     */
+    get collection(): AccessRequestCollection;
+    /**
+     * Create an access request. **Public-safe**: no capability check — meant to be
+     * callable unauthenticated by apps (which add their own rate-limiting).
+     *
+     * Validates and normalizes the email, then de-duplicates: if an open
+     * (`REQUESTED`) request already exists for the email, this merges any newly
+     * supplied context/name/source/hint into it and returns it instead of
+     * creating a duplicate (no second `created` event).
+     *
+     * @remarks
+     * De-duplication is **best-effort, not atomic**: it is a read-then-write
+     * (`findOpenByEmail` → `create`) with no DB-level partial-unique constraint
+     * (the table is append-style, keyed on `id`, because the same email may
+     * accumulate many requests over its lifetime). Two requests for the same
+     * email racing concurrently can therefore both create an open row. This is by
+     * design — the spec makes dedup configurable and pushes abuse control to the
+     * app (rate-limiting on the public endpoint). Operators triaging two open rows
+     * for one email is benign; apps needing a hard single-open-request guarantee
+     * should add a partial unique index (`UNIQUE(email) WHERE status='requested'`)
+     * in their migration.
+     *
+     * @throws {@link AccessRequestError} (`INVALID_EMAIL`) when the email is invalid.
+     */
+    createAccessRequest(input: CreateAccessRequestInput): Promise<AccessRequest>;
+    /**
+     * List access requests (operator-facing). Requires the `access-requests:read`
+     * capability when an authorizer is configured.
+     */
+    listAccessRequests(filter?: ListAccessRequestsFilter): Promise<AccessRequest[]>;
+    /**
+     * Get a single access request by id (operator-facing). Requires the
+     * `access-requests:read` capability when an authorizer is configured.
+     */
+    getAccessRequest(id: string, options?: {
+        by?: string | null;
+    }): Promise<AccessRequest | null>;
+    /**
+     * Approve a request: `REQUESTED → APPROVED`. Idempotent (re-approving an
+     * already-`APPROVED` request is a no-op returning it). Requires
+     * `access-requests:manage`.
+     *
+     * @throws {@link AccessRequestError} (`INVALID_TRANSITION`) from a terminal state.
+     */
+    approveAccessRequest(id: string, options?: ApproveAccessRequestOptions): Promise<AccessRequest>;
+    /**
+     * Decline a request: `REQUESTED | APPROVED → DECLINED`. Idempotent. Requires
+     * `access-requests:manage`.
+     *
+     * @throws {@link AccessRequestError} (`INVALID_TRANSITION`) from a terminal state.
+     */
+    declineAccessRequest(id: string, options?: DeclineAccessRequestOptions): Promise<AccessRequest>;
+    /**
+     * Cancel a request: `REQUESTED | APPROVED → CANCELED`. Idempotent. Requires
+     * `access-requests:manage`.
+     *
+     * @throws {@link AccessRequestError} (`INVALID_TRANSITION`) from a terminal state.
+     */
+    cancelAccessRequest(id: string, options?: CancelAccessRequestOptions): Promise<AccessRequest>;
+    /**
+     * Graduate an approved request into a `User`, optionally attaching a tenant.
+     *
+     * Valid from `APPROVED` (or from `REQUESTED` when
+     * {@link GraduateAccessRequestOptions.allowFromRequested} is set). Creates a
+     * user when none exists for the email, or **links** the existing one
+     * otherwise (reusing {@link UserCollection}). Idempotent: a second call on an
+     * already-`GRADUATED` request returns the same user (and an existing
+     * membership for the requested tenant, if any) without re-creating anything.
+     *
+     * Requires `access-requests:manage`.
+     *
+     * @throws {@link AccessRequestError} — `NOT_FOUND` (unknown id),
+     *   `INVALID_TRANSITION` (terminal/declined/canceled or `REQUESTED` without
+     *   `allowFromRequested`), `TENANT_NOT_FOUND`, or `ROLE_NOT_FOUND`.
+     */
+    graduateAccessRequest(id: string, options?: GraduateAccessRequestOptions): Promise<GraduateAccessRequestResult>;
+}
+//# sourceMappingURL=AccessRequestService.d.ts.map

package/dist/services/AccessRequestService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessRequestService.d.ts","sourceRoot":"","sources":["../../src/services/AccessRequestService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAC;AAKpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EACL,mBAAmB,EAGnB,KAAK,YAAY,EACjB,UAAU,EACX,MAAM,mBAAmB,CAAC;AAI3B;;;GAGG;AACH,eAAO,MAAM,2BAA2B;IACtC,sDAAsD;;IAEtD,uEAAuE;;CAE/D,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAEjF;;;GAGG;AACH,MAAM,WAAW,iCAAiC;IAChD,6CAA6C;IAC7C,UAAU,EAAE,uBAAuB,CAAC;IACpC,kEAAkE;IAClE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,uBAAuB,GAAG,CACpC,OAAO,EAAE,iCAAiC,KACvC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAC9B,wBAAwB,GACxB,yBAAyB,GACzB,yBAAyB,GACzB,yBAAyB,GACzB,0BAA0B,CAAC;AAE/B;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,wCAAwC;IACxC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,+CAA+C;IAC/C,aAAa,EAAE,aAAa,CAAC;IAC7B,kCAAkC;IAClC,EAAE,EAAE,IAAI,CAAC;IACT,qEAAqE;IACrE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,2EAA2E;IAC3E,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,GAAG,CACtC,KAAK,EAAE,kBAAkB,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B;;GAEG;AACH,MAAM,WAAW,2BAA4B,SAAQ,gBAAgB;IACnE,2FAA2F;IAC3F,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC,6EAA6E;IAC7E,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,gDAAgD;IAChD,MAAM,CAAC,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAAC;IACrD,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,0BAA0B;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,gFAAgF;IAChF,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,2BACf,SAAQ,0BAA0B;IAClC,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BACf,SAAQ,0BAA0B;IAClC,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA2B,SAAQ,0BAA0B;IAC5E,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,kDAAkD;IAClD,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,YAAY,CAAC;KACvB,CAAC;IACF,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAC5B,uBAAuB,GACvB,4BAA4B,GAC5B,MAAM,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,4BACf,SAAQ,0BAA0B;IAClC,0CAA0C;IAC1C,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC;IACX,kDAAkD;IAClD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,aAAa,EAAE,aAAa,CAAC;IAC7B,sFAAsF;IACtF,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAC9B,eAAe,GACf,WAAW,GACX,oBAAoB,GACpB,kBAAkB,GAClB,gBAAgB,CAAC;AAErB;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;gBAE1B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB;CAK1D;AAiBD;;GAEG;AACH,qBAAa,oBAAoB;;gBAYnB,OAAO,EAAE,2BAA2B;IAMhD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAWjC;;OAEG;WACU,MAAM,CACjB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,oBAAoB,CAAC;IAMhC;;;;OAIG;IACH,IAAI,UAAU,IAAI,uBAAuB,CAExC;IAID;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,mBAAmB,CACvB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,aAAa,CAAC;IA6DzB;;;OAGG;IACG,kBAAkB,CACtB,MAAM,GAAE,wBAA6B,GACpC,OAAO,CAAC,aAAa,EAAE,CAAC;IAkB3B;;;OAGG;IACG,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAO,GACnC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAUhC;;;;;;OAMG;IACG,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,aAAa,CAAC;IAyBzB;;;;;OAKG;IACG,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,aAAa,CAAC;IAyBzB;;;;;OAKG;IACG,mBAAmB,CACvB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,aAAa,CAAC;IA2BzB;;;;;;;;;;;;;;;OAeG;IACG,qBAAqB,CACzB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,2BAA2B,CAAC;CAuTxC"}

package/dist/services/index.d.ts

@@ -2,6 +2,7 @@
  * Service exports for smrt-users
  * @packageDocumentation
  */
+export { ACCESS_REQUEST_CAPABILITIES, type AccessRequestAuthorizationContext, type AccessRequestAuthorizer, type AccessRequestCapability, AccessRequestError, type AccessRequestErrorCode, type AccessRequestEvent, type AccessRequestEventHandler, type AccessRequestEventType, AccessRequestService, type AccessRequestServiceOptions, type ApproveAccessRequestOptions, type CancelAccessRequestOptions, type CreateAccessRequestInput, type DeclineAccessRequestOptions, type GraduateAccessRequestOptions, type GraduateAccessRequestResult, type GraduateExistingTenantOption, type GraduateNewTenantOption, type GraduateTenantOption, type ListAccessRequestsFilter, } from './AccessRequestService.js';
 export { MagicLinkError, type MagicLinkResult, MagicLinkService, type MagicLinkServiceOptions, type MagicLinkVerifyResult, } from './MagicLinkService.js';
 export { type CreateAuthorizationUrlOptions, decodeOidcTransaction, encodeOidcTransaction, getUsersOidcConfig, type OidcCallbackResult, OidcLoginError, type OidcLoginResult, OidcLoginService, type OidcLoginServiceOptions, type OidcProviderConfig, type OidcProviderKind, type OidcProviderMetadata, type OidcProviderResolution, type OidcProviderResolutionOptions, type OidcTokenEndpointAuthMethod, type OidcTokenSet, type OidcTransaction, type ResolvedOidcProviderConfig, resolveOidcProviderConfig, type UsersOidcConfig, } from './OidcLoginService.js';
 export { type PermissionCatalog, PermissionCatalogService, type PermissionCatalogSource, type PermissionCatalogSyncResult, type PermissionDefinition, type PostgresPermissionAction, type PostgresPermissionBinding, registerPermissionDefinitions, syncPermissionCatalog, type UsersConfig, } from './PermissionCatalogService.js';

package/dist/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,6BAA6B,EAClC,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,eAAe,EACpB,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,WAAW,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,kBAAkB,EAClB,KAAK,iCAAiC,GACvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACxC,6BAA6B,EAC7B,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,GACpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EACpC,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,cAAc,EACnB,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,kBAAkB,EACvB,aAAa,EACb,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,+CAA+C,EAC/C,qCAAqC,EACrC,sCAAsC,EACtC,oCAAoC,EACpC,+BAA+B,EAC/B,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,0BAA0B,GAChC,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,2BAA2B,EAC3B,KAAK,iCAAiC,EACtC,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,kBAAkB,EAClB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,6BAA6B,EAClC,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,eAAe,EACpB,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,2BAA2B,EAChC,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,yBAAyB,EACzB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,WAAW,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,kBAAkB,EAClB,KAAK,iCAAiC,GACvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,KAAK,mCAAmC,EACxC,6BAA6B,EAC7B,KAAK,kCAAkC,EACvC,KAAK,8BAA8B,GACpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EACpC,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,cAAc,EACnB,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,KAAK,kBAAkB,EACvB,aAAa,EACb,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,+CAA+C,EAC/C,qCAAqC,EACrC,sCAAsC,EACtC,oCAAoC,EACpC,+BAA+B,EAC/B,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,0BAA0B,GAChC,MAAM,0BAA0B,CAAC"}