@namera-ai/api 0.0.0

package/dist/routes/auth/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","names":[],"sources":["../../../src/routes/auth/oauth.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA4Ba,mBAAmB"}

package/dist/routes/auth/oauth.js

@@ -0,0 +1,62 @@
+import { CommonErrors } from "../../common.js";
+import { Authorization } from "../../middlewares/auth.js";
+import { HttpApiEndpoint, HttpApiGroup, OpenApi } from "effect/unstable/httpapi";
+import { OAuthAuthorizationError, OAuthAuthorizationRequestError, OAuthDeviceAuthorizationError } from "@namera-ai/protocol";
+import { ApproveOAuthAuthorizationRequest, ApproveOAuthDeviceAuthorizationRequest, DenyOAuthAuthorizationRequest, DenyOAuthDeviceAuthorizationRequest, GetOAuthAuthorizationRequest, GetOAuthAuthorizationRequestRequest, GetOAuthAuthorizationRequestResponse, GetOAuthAuthorizationResponse, GetOAuthDeviceAuthorizationRequest, ListOAuthAuthorizationsResponse, OAuthAuthorizationRedirectResponse, OAuthDeviceAuthorizationDecisionResponse, OAuthDeviceAuthorizationResponse, RevokeOAuthAuthorizationRequest, RevokeOAuthAuthorizationResponse } from "@namera-ai/protocol/dto";
+
+//#region src/routes/auth/oauth.ts
+var OAuthGroup = class extends HttpApiGroup.make("oauth").add(HttpApiEndpoint.get("getOAuthAuthorizationRequest", "/authorization-requests/:requestId", {
+	params: GetOAuthAuthorizationRequestRequest,
+	error: [OAuthAuthorizationRequestError, ...CommonErrors],
+	success: GetOAuthAuthorizationRequestResponse
+}).annotate(OpenApi.Summary, "Get a pending OAuth authorization request"), HttpApiEndpoint.post("approveOAuthAuthorizationRequest", "/authorization-requests/approve", {
+	payload: ApproveOAuthAuthorizationRequest,
+	error: [
+		OAuthAuthorizationRequestError,
+		OAuthAuthorizationError,
+		...CommonErrors
+	],
+	success: OAuthAuthorizationRedirectResponse
+}).annotate(OpenApi.Summary, "Approve an OAuth authorization request"), HttpApiEndpoint.post("denyOAuthAuthorizationRequest", "/authorization-requests/deny", {
+	payload: DenyOAuthAuthorizationRequest,
+	error: [OAuthAuthorizationRequestError, ...CommonErrors],
+	success: OAuthAuthorizationRedirectResponse
+}).annotate(OpenApi.Summary, "Deny an OAuth authorization request"), HttpApiEndpoint.get("getOAuthDeviceAuthorization", "/device-authorizations", {
+	query: GetOAuthDeviceAuthorizationRequest,
+	error: [OAuthDeviceAuthorizationError, ...CommonErrors],
+	success: OAuthDeviceAuthorizationResponse
+}).annotate(OpenApi.Summary, "Get and claim a CLI device authorization request"), HttpApiEndpoint.post("approveOAuthDeviceAuthorization", "/device-authorizations/approve", {
+	payload: ApproveOAuthDeviceAuthorizationRequest,
+	error: [OAuthDeviceAuthorizationError, ...CommonErrors],
+	success: OAuthDeviceAuthorizationDecisionResponse
+}).annotate(OpenApi.Summary, "Approve a CLI device authorization request"), HttpApiEndpoint.post("denyOAuthDeviceAuthorization", "/device-authorizations/deny", {
+	payload: DenyOAuthDeviceAuthorizationRequest,
+	error: [OAuthDeviceAuthorizationError, ...CommonErrors],
+	success: OAuthDeviceAuthorizationDecisionResponse
+}).annotate(OpenApi.Summary, "Deny a CLI device authorization request"), HttpApiEndpoint.get("listMcpAuthorizations", "/authorizations", {
+	error: CommonErrors,
+	success: ListOAuthAuthorizationsResponse
+}).annotate(OpenApi.Summary, "List MCP authorizations for the active organization"), HttpApiEndpoint.get("getMcpAuthorization", "/authorizations/:authorizationId", {
+	params: GetOAuthAuthorizationRequest,
+	error: [OAuthAuthorizationError, ...CommonErrors],
+	success: GetOAuthAuthorizationResponse
+}).annotate(OpenApi.Summary, "Get an MCP authorization"), HttpApiEndpoint.post("revokeMcpAuthorization", "/authorizations/revoke", {
+	payload: RevokeOAuthAuthorizationRequest,
+	error: [OAuthAuthorizationError, ...CommonErrors],
+	success: RevokeOAuthAuthorizationResponse
+}).annotate(OpenApi.Summary, "Revoke an MCP authorization"), HttpApiEndpoint.get("listCliAuthorizations", "/cli-authorizations", {
+	error: CommonErrors,
+	success: ListOAuthAuthorizationsResponse
+}).annotate(OpenApi.Summary, "List CLI authorizations for the active organization"), HttpApiEndpoint.get("getCliAuthorization", "/cli-authorizations/:authorizationId", {
+	params: GetOAuthAuthorizationRequest,
+	error: [OAuthAuthorizationError, ...CommonErrors],
+	success: GetOAuthAuthorizationResponse
+}).annotate(OpenApi.Summary, "Get a CLI authorization"), HttpApiEndpoint.post("revokeCliAuthorization", "/cli-authorizations/revoke", {
+	payload: RevokeOAuthAuthorizationRequest,
+	error: [OAuthAuthorizationError, ...CommonErrors],
+	success: RevokeOAuthAuthorizationResponse
+}).annotate(OpenApi.Summary, "Revoke a CLI authorization")).annotate(OpenApi.Description, "OAuth consent and delegated authorization management").middleware(Authorization).prefix("/oauth") {};
+
+//#endregion
+export { OAuthGroup };
+//# sourceMappingURL=oauth.js.map

package/dist/routes/auth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","names":[],"sources":["../../../src/routes/auth/oauth.ts"],"sourcesContent":["import { HttpApiEndpoint, HttpApiGroup, OpenApi } from \"effect/unstable/httpapi\";\n\nimport {\n  OAuthAuthorizationError,\n  OAuthAuthorizationRequestError,\n  OAuthDeviceAuthorizationError,\n} from \"@namera-ai/protocol\";\nimport {\n  ApproveOAuthDeviceAuthorizationRequest,\n  ApproveOAuthAuthorizationRequest,\n  DenyOAuthDeviceAuthorizationRequest,\n  DenyOAuthAuthorizationRequest,\n  GetOAuthDeviceAuthorizationRequest,\n  OAuthDeviceAuthorizationDecisionResponse,\n  OAuthDeviceAuthorizationResponse,\n  GetOAuthAuthorizationRequest,\n  GetOAuthAuthorizationResponse,\n  GetOAuthAuthorizationRequestRequest,\n  GetOAuthAuthorizationRequestResponse,\n  ListOAuthAuthorizationsResponse,\n  OAuthAuthorizationRedirectResponse,\n  RevokeOAuthAuthorizationRequest,\n  RevokeOAuthAuthorizationResponse,\n} from \"@namera-ai/protocol/dto\";\n\nimport { CommonErrors } from \"#/common\";\nimport { Authorization } from \"#/middlewares/index\";\n\nexport class OAuthGroup extends HttpApiGroup.make(\"oauth\")\n  .add(\n    HttpApiEndpoint.get(\"getOAuthAuthorizationRequest\", \"/authorization-requests/:requestId\", {\n      params: GetOAuthAuthorizationRequestRequest,\n      error: [OAuthAuthorizationRequestError, ...CommonErrors],\n      success: GetOAuthAuthorizationRequestResponse,\n    }).annotate(OpenApi.Summary, \"Get a pending OAuth authorization request\"),\n    HttpApiEndpoint.post(\"approveOAuthAuthorizationRequest\", \"/authorization-requests/approve\", {\n      payload: ApproveOAuthAuthorizationRequest,\n      error: [OAuthAuthorizationRequestError, OAuthAuthorizationError, ...CommonErrors],\n      success: OAuthAuthorizationRedirectResponse,\n    }).annotate(OpenApi.Summary, \"Approve an OAuth authorization request\"),\n    HttpApiEndpoint.post(\"denyOAuthAuthorizationRequest\", \"/authorization-requests/deny\", {\n      payload: DenyOAuthAuthorizationRequest,\n      error: [OAuthAuthorizationRequestError, ...CommonErrors],\n      success: OAuthAuthorizationRedirectResponse,\n    }).annotate(OpenApi.Summary, \"Deny an OAuth authorization request\"),\n    HttpApiEndpoint.get(\"getOAuthDeviceAuthorization\", \"/device-authorizations\", {\n      query: GetOAuthDeviceAuthorizationRequest,\n      error: [OAuthDeviceAuthorizationError, ...CommonErrors],\n      success: OAuthDeviceAuthorizationResponse,\n    }).annotate(OpenApi.Summary, \"Get and claim a CLI device authorization request\"),\n    HttpApiEndpoint.post(\"approveOAuthDeviceAuthorization\", \"/device-authorizations/approve\", {\n      payload: ApproveOAuthDeviceAuthorizationRequest,\n      error: [OAuthDeviceAuthorizationError, ...CommonErrors],\n      success: OAuthDeviceAuthorizationDecisionResponse,\n    }).annotate(OpenApi.Summary, \"Approve a CLI device authorization request\"),\n    HttpApiEndpoint.post(\"denyOAuthDeviceAuthorization\", \"/device-authorizations/deny\", {\n      payload: DenyOAuthDeviceAuthorizationRequest,\n      error: [OAuthDeviceAuthorizationError, ...CommonErrors],\n      success: OAuthDeviceAuthorizationDecisionResponse,\n    }).annotate(OpenApi.Summary, \"Deny a CLI device authorization request\"),\n    HttpApiEndpoint.get(\"listMcpAuthorizations\", \"/authorizations\", {\n      error: CommonErrors,\n      success: ListOAuthAuthorizationsResponse,\n    }).annotate(OpenApi.Summary, \"List MCP authorizations for the active organization\"),\n    HttpApiEndpoint.get(\"getMcpAuthorization\", \"/authorizations/:authorizationId\", {\n      params: GetOAuthAuthorizationRequest,\n      error: [OAuthAuthorizationError, ...CommonErrors],\n      success: GetOAuthAuthorizationResponse,\n    }).annotate(OpenApi.Summary, \"Get an MCP authorization\"),\n    HttpApiEndpoint.post(\"revokeMcpAuthorization\", \"/authorizations/revoke\", {\n      payload: RevokeOAuthAuthorizationRequest,\n      error: [OAuthAuthorizationError, ...CommonErrors],\n      success: RevokeOAuthAuthorizationResponse,\n    }).annotate(OpenApi.Summary, \"Revoke an MCP authorization\"),\n    HttpApiEndpoint.get(\"listCliAuthorizations\", \"/cli-authorizations\", {\n      error: CommonErrors,\n      success: ListOAuthAuthorizationsResponse,\n    }).annotate(OpenApi.Summary, \"List CLI authorizations for the active organization\"),\n    HttpApiEndpoint.get(\"getCliAuthorization\", \"/cli-authorizations/:authorizationId\", {\n      params: GetOAuthAuthorizationRequest,\n      error: [OAuthAuthorizationError, ...CommonErrors],\n      success: GetOAuthAuthorizationResponse,\n    }).annotate(OpenApi.Summary, \"Get a CLI authorization\"),\n    HttpApiEndpoint.post(\"revokeCliAuthorization\", \"/cli-authorizations/revoke\", {\n      payload: RevokeOAuthAuthorizationRequest,\n      error: [OAuthAuthorizationError, ...CommonErrors],\n      success: RevokeOAuthAuthorizationResponse,\n    }).annotate(OpenApi.Summary, \"Revoke a CLI authorization\"),\n  )\n  .annotate(OpenApi.Description, \"OAuth consent and delegated authorization management\")\n  .middleware(Authorization)\n  .prefix(\"/oauth\") {}\n"],"mappings":";;;;;;;AA4BA,IAAa,aAAb,cAAgC,aAAa,KAAK,OAAO,CAAC,CACvD,IACC,gBAAgB,IAAI,gCAAgC,sCAAsC;CACxF,QAAQ;CACR,OAAO,CAAC,gCAAgC,GAAG,YAAY;CACvD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,2CAA2C,GACxE,gBAAgB,KAAK,oCAAoC,mCAAmC;CAC1F,SAAS;CACT,OAAO;EAAC;EAAgC;EAAyB,GAAG;CAAY;CAChF,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,wCAAwC,GACrE,gBAAgB,KAAK,iCAAiC,gCAAgC;CACpF,SAAS;CACT,OAAO,CAAC,gCAAgC,GAAG,YAAY;CACvD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,qCAAqC,GAClE,gBAAgB,IAAI,+BAA+B,0BAA0B;CAC3E,OAAO;CACP,OAAO,CAAC,+BAA+B,GAAG,YAAY;CACtD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,kDAAkD,GAC/E,gBAAgB,KAAK,mCAAmC,kCAAkC;CACxF,SAAS;CACT,OAAO,CAAC,+BAA+B,GAAG,YAAY;CACtD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,4CAA4C,GACzE,gBAAgB,KAAK,gCAAgC,+BAA+B;CAClF,SAAS;CACT,OAAO,CAAC,+BAA+B,GAAG,YAAY;CACtD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,yCAAyC,GACtE,gBAAgB,IAAI,yBAAyB,mBAAmB;CAC9D,OAAO;CACP,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,qDAAqD,GAClF,gBAAgB,IAAI,uBAAuB,oCAAoC;CAC7E,QAAQ;CACR,OAAO,CAAC,yBAAyB,GAAG,YAAY;CAChD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,0BAA0B,GACvD,gBAAgB,KAAK,0BAA0B,0BAA0B;CACvE,SAAS;CACT,OAAO,CAAC,yBAAyB,GAAG,YAAY;CAChD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,6BAA6B,GAC1D,gBAAgB,IAAI,yBAAyB,uBAAuB;CAClE,OAAO;CACP,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,qDAAqD,GAClF,gBAAgB,IAAI,uBAAuB,wCAAwC;CACjF,QAAQ;CACR,OAAO,CAAC,yBAAyB,GAAG,YAAY;CAChD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,yBAAyB,GACtD,gBAAgB,KAAK,0BAA0B,8BAA8B;CAC3E,SAAS;CACT,OAAO,CAAC,yBAAyB,GAAG,YAAY;CAChD,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,4BAA4B,CAC3D,CAAC,CACA,SAAS,QAAQ,aAAa,sDAAsD,CAAC,CACrF,WAAW,aAAa,CAAC,CACzB,OAAO,QAAQ,CAAC,CAAC,CAAC"}

package/dist/routes/auth/organization/index.d.ts

@@ -0,0 +1,4 @@
+import { InvitationGroup } from "./invitation.js";
+import { MemberGroup } from "./members.js";
+import { OrganizationGroup } from "./organization.js";
+export { InvitationGroup, MemberGroup, OrganizationGroup };

package/dist/routes/auth/organization/invitation.d.ts

@@ -0,0 +1,400 @@
+import { Authorization } from "../../../middlewares/auth.js";
+import "../../../middlewares/index.js";
+import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+//#region src/routes/auth/organization/invitation.d.ts
+declare const InvitationGroup_base: HttpApiGroup.HttpApiGroup<"invitation", HttpApiEndpoint.HttpApiEndpoint<"getInvitation", "GET", "/auth/invitation/get-invitation", never, import("effect/Schema").toCodecStringTree<import("effect/Schema").Struct<{
+  readonly invitationId: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+}>>, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+  readonly invitation: import("effect/Schema").Struct<{
+    readonly expiresAt: import("effect/Schema").DateTimeUtcFromDate;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+    readonly organizationId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+    readonly status: import("effect/Schema").Literals<readonly ["pending", "accepted", "rejected", "canceled", "expired"]>;
+    readonly organizationRoleId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly inviterId: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+  }>;
+  readonly inviter: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+      readonly image: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+    readonly lastLoginAt: import("effect/Schema").NullOr<import("effect/Schema").DateTimeUtcFromDate>;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly emailVerified: import("effect/Schema").Boolean;
+  }>;
+  readonly organization: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+  }>;
+  readonly organizationRole: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"system">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").brand<import("effect/Schema").String, "SystemRoleId">;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"custom">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").Null;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>]>;
+}>>, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").Forbidden> | import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").InternalServerError> | typeof import("@namera-ai/protocol").RateLimitExceeded | typeof import("@namera-ai/protocol").InvitationNotFoundError | typeof import("@namera-ai/protocol").InvitationConflictError | typeof import("@namera-ai/protocol").InvitationRecipientMismatchError>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"listInvitations", "GET", "/auth/invitation/list-invitations", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+  readonly invitation: import("effect/Schema").Struct<{
+    readonly expiresAt: import("effect/Schema").DateTimeUtcFromDate;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+    readonly organizationId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+    readonly status: import("effect/Schema").Literals<readonly ["pending", "accepted", "rejected", "canceled", "expired"]>;
+    readonly organizationRoleId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly inviterId: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+  }>;
+  readonly inviter: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+      readonly image: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+    readonly lastLoginAt: import("effect/Schema").NullOr<import("effect/Schema").DateTimeUtcFromDate>;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly emailVerified: import("effect/Schema").Boolean;
+  }>;
+  readonly organization: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+  }>;
+  readonly organizationRole: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"system">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").brand<import("effect/Schema").String, "SystemRoleId">;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"custom">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").Null;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>]>;
+}>>>, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").Forbidden> | import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").InternalServerError> | typeof import("@namera-ai/protocol").RateLimitExceeded | typeof import("@namera-ai/protocol").InvitationNotFoundError | typeof import("@namera-ai/protocol").InvitationConflictError | typeof import("@namera-ai/protocol").InvitationRecipientMismatchError>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"listUserInvitations", "GET", "/auth/invitation/list-user-invitations", never, never, never, never, import("effect/Schema").toCodecJson<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+  readonly invitation: import("effect/Schema").Struct<{
+    readonly expiresAt: import("effect/Schema").DateTimeUtcFromDate;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+    readonly organizationId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+    readonly status: import("effect/Schema").Literals<readonly ["pending", "accepted", "rejected", "canceled", "expired"]>;
+    readonly organizationRoleId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly inviterId: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+  }>;
+  readonly inviter: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+      readonly image: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+    readonly lastLoginAt: import("effect/Schema").NullOr<import("effect/Schema").DateTimeUtcFromDate>;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly emailVerified: import("effect/Schema").Boolean;
+  }>;
+  readonly organization: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+  }>;
+  readonly organizationRole: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"system">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").brand<import("effect/Schema").String, "SystemRoleId">;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"custom">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").Null;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>]>;
+}>>>, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").Forbidden> | import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").InternalServerError> | typeof import("@namera-ai/protocol").RateLimitExceeded | typeof import("@namera-ai/protocol").InvitationNotFoundError | typeof import("@namera-ai/protocol").InvitationConflictError | typeof import("@namera-ai/protocol").InvitationRecipientMismatchError>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"inviteMember", "POST", "/auth/invitation/invite-member", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+  readonly organizationRoleId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+  readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+  readonly invitation: import("effect/Schema").Struct<{
+    readonly expiresAt: import("effect/Schema").DateTimeUtcFromDate;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+    readonly organizationId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+    readonly status: import("effect/Schema").Literals<readonly ["pending", "accepted", "rejected", "canceled", "expired"]>;
+    readonly organizationRoleId: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly inviterId: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+  }>;
+  readonly inviter: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+      readonly image: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "UserId">;
+    readonly lastLoginAt: import("effect/Schema").NullOr<import("effect/Schema").DateTimeUtcFromDate>;
+    readonly email: import("effect/Schema").brand<import("effect/Schema").decodeTo<import("effect/Schema").toType<import("effect/Schema").String>, import("effect/Schema").String, never, never>, "Email">;
+    readonly emailVerified: import("effect/Schema").Boolean;
+  }>;
+  readonly organization: import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationId">;
+  }>;
+  readonly organizationRole: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"system">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").brand<import("effect/Schema").String, "SystemRoleId">;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"custom">;
+    readonly metadata: import("effect/Schema").Struct<{
+      readonly version: import("effect/Schema").Literal<1>;
+      readonly name: import("effect/Schema").String;
+      readonly logo: import("effect/Schema").optionalKey<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"icon">;
+        readonly value: import("effect/Schema").String;
+        readonly color: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"emoji">;
+        readonly value: import("effect/Schema").String;
+      }>, import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literal<"image">;
+        readonly value: import("effect/Schema").String;
+      }>]>>;
+      readonly description: import("effect/Schema").optionalKey<import("effect/Schema").String>;
+    }>;
+    readonly id: import("effect/Schema").brand<import("effect/Schema").String, "OrganizationRoleId">;
+    readonly systemRoleId: import("effect/Schema").Null;
+    readonly key: import("effect/Schema").String;
+    readonly permissions: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["organization:read", "organization:update", "member:read", "member:update", "member:remove", "invitation:read", "invitation:create", "invitation:cancel", "role:read", "role:create", "role:update", "role:delete", "billing:read", "billing:update", "billing:cancel", "wallet:read", "wallet:create", "wallet:update", "session-key:read", "session-key:create", "session-key:revoke", "api-key:read", "api-key:create", "api-key:revoke", "execution:read", "mcp-authorization:read", "mcp-authorization:create", "mcp-authorization:revoke", "cli-authorization:read", "cli-authorization:create", "cli-authorization:revoke"]>>;
+  }>]>;
+}>>, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").Forbidden> | import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").InternalServerError> | typeof import("@namera-ai/protocol").RateLimitExceeded | typeof import("@namera-ai/protocol").BillingLimitExceededError | typeof import("@namera-ai/protocol").InvitationNotFoundError | typeof import("@namera-ai/protocol").InvitationConflictError | typeof import("@namera-ai/protocol").InvitationRecipientMismatchError | typeof import("@namera-ai/protocol").OrganizationNotFoundError | typeof import("@namera-ai/protocol").OrganizationPermissionError>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"acceptInvitation", "POST", "/auth/invitation/accept-invitation", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+  readonly invitationId: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Void>, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").Forbidden> | import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").InternalServerError> | typeof import("@namera-ai/protocol").RateLimitExceeded | typeof import("@namera-ai/protocol").InvitationNotFoundError | typeof import("@namera-ai/protocol").InvitationConflictError | typeof import("@namera-ai/protocol").InvitationRecipientMismatchError | typeof import("@namera-ai/protocol").OrganizationNotFoundError | typeof import("@namera-ai/protocol").OrganizationPermissionError>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"rejectInvitation", "POST", "/auth/invitation/reject-invitation", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+  readonly invitationId: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Void>, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").Forbidden> | import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").InternalServerError> | typeof import("@namera-ai/protocol").RateLimitExceeded | typeof import("@namera-ai/protocol").InvitationNotFoundError | typeof import("@namera-ai/protocol").InvitationConflictError | typeof import("@namera-ai/protocol").InvitationRecipientMismatchError | typeof import("@namera-ai/protocol").OrganizationNotFoundError | typeof import("@namera-ai/protocol").OrganizationPermissionError>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"cancelInvitation", "POST", "/auth/invitation/cancel-invitation", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+  readonly invitationId: import("effect/Schema").brand<import("effect/Schema").String, "InvitationId">;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Void>, import("effect/Schema").toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").Forbidden> | import("effect/unstable/httpapi/HttpApiSchema").asNoContent<typeof import("effect/unstable/httpapi/HttpApiError").InternalServerError> | typeof import("@namera-ai/protocol").RateLimitExceeded | typeof import("@namera-ai/protocol").InvitationNotFoundError | typeof import("@namera-ai/protocol").InvitationConflictError | typeof import("@namera-ai/protocol").InvitationRecipientMismatchError | typeof import("@namera-ai/protocol").OrganizationNotFoundError | typeof import("@namera-ai/protocol").OrganizationPermissionError>, Authorization, never>, false>;
+declare class InvitationGroup extends InvitationGroup_base {}
+//#endregion
+export { InvitationGroup };
+//# sourceMappingURL=invitation.d.ts.map

package/dist/routes/auth/organization/invitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.d.ts","names":[],"sources":["../../../../src/routes/auth/organization/invitation.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAqBa,wBAAwB"}

package/dist/routes/auth/organization/invitation.js

@@ -0,0 +1,55 @@
+import { CommonErrors } from "../../../common.js";
+import { Authorization } from "../../../middlewares/auth.js";
+import { HttpApiEndpoint, HttpApiGroup, OpenApi } from "effect/unstable/httpapi";
+import { BillingErrors, InvitationErrors, OrganizationErrors } from "@namera-ai/protocol";
+import { AcceptInvitationRequest, AcceptInvitationResponse, CancelInvitationRequest, CancelInvitationResponse, GetInvitationRequest, GetInvitationResponse, InviteMemberRequest, InviteMemberResponse, ListOrganizationInvitationsResponse, ListUserInvitationsResponse, RejectInvitationRequest, RejectInvitationResponse } from "@namera-ai/protocol/dto";
+
+//#region src/routes/auth/organization/invitation.ts
+var InvitationGroup = class extends HttpApiGroup.make("invitation").add(HttpApiEndpoint.get("getInvitation", "/get-invitation", {
+	query: GetInvitationRequest,
+	error: [...InvitationErrors, ...CommonErrors],
+	success: GetInvitationResponse
+}).annotate(OpenApi.Summary, "Get an invitation for the current user"), HttpApiEndpoint.get("listInvitations", "/list-invitations", {
+	error: [...InvitationErrors, ...CommonErrors],
+	success: ListOrganizationInvitationsResponse
+}).annotate(OpenApi.Summary, "List invitations for the active organization"), HttpApiEndpoint.get("listUserInvitations", "/list-user-invitations", {
+	error: [...InvitationErrors, ...CommonErrors],
+	success: ListUserInvitationsResponse
+}).annotate(OpenApi.Summary, "List invitations received by the current user"), HttpApiEndpoint.post("inviteMember", "/invite-member", {
+	payload: InviteMemberRequest,
+	error: [
+		...BillingErrors,
+		...InvitationErrors,
+		...OrganizationErrors,
+		...CommonErrors
+	],
+	success: InviteMemberResponse
+}).annotate(OpenApi.Summary, "Invite a member to the active organization"), HttpApiEndpoint.post("acceptInvitation", "/accept-invitation", {
+	payload: AcceptInvitationRequest,
+	error: [
+		...InvitationErrors,
+		...OrganizationErrors,
+		...CommonErrors
+	],
+	success: AcceptInvitationResponse
+}).annotate(OpenApi.Summary, "Accept an organization invitation"), HttpApiEndpoint.post("rejectInvitation", "/reject-invitation", {
+	payload: RejectInvitationRequest,
+	error: [
+		...InvitationErrors,
+		...OrganizationErrors,
+		...CommonErrors
+	],
+	success: RejectInvitationResponse
+}).annotate(OpenApi.Summary, "Reject an organization invitation"), HttpApiEndpoint.post("cancelInvitation", "/cancel-invitation", {
+	payload: CancelInvitationRequest,
+	error: [
+		...InvitationErrors,
+		...OrganizationErrors,
+		...CommonErrors
+	],
+	success: CancelInvitationResponse
+}).annotate(OpenApi.Summary, "Cancel an organization invitation")).annotate(OpenApi.Description, "Organization invitations").middleware(Authorization).prefix("/auth/invitation") {};
+
+//#endregion
+export { InvitationGroup };
+//# sourceMappingURL=invitation.js.map

package/dist/routes/auth/organization/invitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation.js","names":[],"sources":["../../../../src/routes/auth/organization/invitation.ts"],"sourcesContent":["import { HttpApiEndpoint, HttpApiGroup, OpenApi } from \"effect/unstable/httpapi\";\n\nimport { BillingErrors, InvitationErrors, OrganizationErrors } from \"@namera-ai/protocol\";\nimport {\n  AcceptInvitationRequest,\n  AcceptInvitationResponse,\n  CancelInvitationRequest,\n  CancelInvitationResponse,\n  GetInvitationRequest,\n  GetInvitationResponse,\n  InviteMemberRequest,\n  InviteMemberResponse,\n  ListOrganizationInvitationsResponse,\n  ListUserInvitationsResponse,\n  RejectInvitationRequest,\n  RejectInvitationResponse,\n} from \"@namera-ai/protocol/dto\";\n\nimport { CommonErrors } from \"#/common\";\nimport { Authorization } from \"#/middlewares/index\";\n\nexport class InvitationGroup extends HttpApiGroup.make(\"invitation\")\n  .add(\n    HttpApiEndpoint.get(\"getInvitation\", \"/get-invitation\", {\n      query: GetInvitationRequest,\n      error: [...InvitationErrors, ...CommonErrors],\n      success: GetInvitationResponse,\n    }).annotate(OpenApi.Summary, \"Get an invitation for the current user\"),\n    HttpApiEndpoint.get(\"listInvitations\", \"/list-invitations\", {\n      error: [...InvitationErrors, ...CommonErrors],\n      success: ListOrganizationInvitationsResponse,\n    }).annotate(OpenApi.Summary, \"List invitations for the active organization\"),\n    HttpApiEndpoint.get(\"listUserInvitations\", \"/list-user-invitations\", {\n      error: [...InvitationErrors, ...CommonErrors],\n      success: ListUserInvitationsResponse,\n    }).annotate(OpenApi.Summary, \"List invitations received by the current user\"),\n    HttpApiEndpoint.post(\"inviteMember\", \"/invite-member\", {\n      payload: InviteMemberRequest,\n      error: [...BillingErrors, ...InvitationErrors, ...OrganizationErrors, ...CommonErrors],\n      success: InviteMemberResponse,\n    }).annotate(OpenApi.Summary, \"Invite a member to the active organization\"),\n    HttpApiEndpoint.post(\"acceptInvitation\", \"/accept-invitation\", {\n      payload: AcceptInvitationRequest,\n      error: [...InvitationErrors, ...OrganizationErrors, ...CommonErrors],\n      success: AcceptInvitationResponse,\n    }).annotate(OpenApi.Summary, \"Accept an organization invitation\"),\n    HttpApiEndpoint.post(\"rejectInvitation\", \"/reject-invitation\", {\n      payload: RejectInvitationRequest,\n      error: [...InvitationErrors, ...OrganizationErrors, ...CommonErrors],\n      success: RejectInvitationResponse,\n    }).annotate(OpenApi.Summary, \"Reject an organization invitation\"),\n    HttpApiEndpoint.post(\"cancelInvitation\", \"/cancel-invitation\", {\n      payload: CancelInvitationRequest,\n      error: [...InvitationErrors, ...OrganizationErrors, ...CommonErrors],\n      success: CancelInvitationResponse,\n    }).annotate(OpenApi.Summary, \"Cancel an organization invitation\"),\n  )\n  .annotate(OpenApi.Description, \"Organization invitations\")\n  .middleware(Authorization)\n  .prefix(\"/auth/invitation\") {}\n"],"mappings":";;;;;;;AAqBA,IAAa,kBAAb,cAAqC,aAAa,KAAK,YAAY,CAAC,CACjE,IACC,gBAAgB,IAAI,iBAAiB,mBAAmB;CACtD,OAAO;CACP,OAAO,CAAC,GAAG,kBAAkB,GAAG,YAAY;CAC5C,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,wCAAwC,GACrE,gBAAgB,IAAI,mBAAmB,qBAAqB;CAC1D,OAAO,CAAC,GAAG,kBAAkB,GAAG,YAAY;CAC5C,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,8CAA8C,GAC3E,gBAAgB,IAAI,uBAAuB,0BAA0B;CACnE,OAAO,CAAC,GAAG,kBAAkB,GAAG,YAAY;CAC5C,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,+CAA+C,GAC5E,gBAAgB,KAAK,gBAAgB,kBAAkB;CACrD,SAAS;CACT,OAAO;EAAC,GAAG;EAAe,GAAG;EAAkB,GAAG;EAAoB,GAAG;CAAY;CACrF,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,4CAA4C,GACzE,gBAAgB,KAAK,oBAAoB,sBAAsB;CAC7D,SAAS;CACT,OAAO;EAAC,GAAG;EAAkB,GAAG;EAAoB,GAAG;CAAY;CACnE,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,mCAAmC,GAChE,gBAAgB,KAAK,oBAAoB,sBAAsB;CAC7D,SAAS;CACT,OAAO;EAAC,GAAG;EAAkB,GAAG;EAAoB,GAAG;CAAY;CACnE,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,mCAAmC,GAChE,gBAAgB,KAAK,oBAAoB,sBAAsB;CAC7D,SAAS;CACT,OAAO;EAAC,GAAG;EAAkB,GAAG;EAAoB,GAAG;CAAY;CACnE,SAAS;AACX,CAAC,CAAC,CAAC,SAAS,QAAQ,SAAS,mCAAmC,CAClE,CAAC,CACA,SAAS,QAAQ,aAAa,0BAA0B,CAAC,CACzD,WAAW,aAAa,CAAC,CACzB,OAAO,kBAAkB,CAAC,CAAC,CAAC"}