@nexia/sdk 0.5.0

package/dist/index.d.ts

@@ -0,0 +1,42 @@
+export type { ResourceListFilterableEntry, ResourceListSchema, } from "./resources/resource-list";
+export { defineResourceInformationSchema, resourceInformationValue, } from "./resources/resource-information";
+export type { NxResourceInformationFormProps, NxResourceInformationViewProps, ResourceFormLegalEntity, NxResourceFormLegalEntityFieldProps, ResourceInformationControlProjection, ResourceInformationControlSlot, ResourceInformationCustomProjection, ResourceInformationEditProjection, ResourceInformationEditRenderContext, ResourceInformationField, ResourceInformationFieldSpan, ResourceInformationMode, ResourceInformationReadOnlyProjection, ResourceInformationRequirement, ResourceInformationSchema, ResourceInformationSection, ResourceInformationTranslator, ResourceInformationValue, } from "./resources/resource-information";
+export type { DatasetImportConfirmationSummary, ResourceImportPreview, ResourceImportPreviewRow, ResourceImportResponse, ResourceImportRun, ResourceImportRunStatus, ResourceImportSummary, ResourceTransferFormat, ResourceTransferMessage, ResourceTransferMeta, NxResourceImportDialogProps, NxResourceTransferActionsProps, NxDatasetImportWorkspaceProps, NxDatasetExportWorkspaceProps, } from "./resources/resource-transfer";
+export type { NxCalendarActionBinding, NxCalendarActionCommand, NxCalendarActionResult, NxCalendarInteraction, NxCalendarOccurrence, NxCalendarProps, NxCalendarRange, NxCalendarSelection, NxCalendarTemporalRange, NxCalendarView, NxResourceSchedulerActionBinding, NxResourceSchedulerActionCommand, NxResourceSchedulerActionResult, NxResourceSchedulerInteraction, NxResourceSchedulerOccurrence, NxResourceSchedulerProps, NxResourceSchedulerResource, NxResourceSchedulerSelection, NxResourceSchedulerView, ResourceBoardCard, ResourceBoardLabels, ResourceBoardLane, ResourceBoardLoadState, ResourceBoardMoveCommand, ResourceBoardMutationResult, ResourceBoardProjection, ResourceBoardProps, ResourceBoardSummaryField, ResourceProjectionReference, ResourceScheduleActionBinding, ResourceScheduleActionCommand, ResourceScheduleDatePair, ResourceScheduleDateSemantics, ResourceScheduleDependency, ResourceScheduleDependencyType, ResourceScheduleInteraction, ResourceScheduleItem, ResourceScheduleItemType, ResourceScheduleLoadState, ResourceScheduleMutationResult, ResourceScheduleProjection, ResourceScheduleProps, ResourceScheduleTimeUnit, ResourceScheduleView, } from "./resources/resource-projections";
+export type { ContextQueryResult, ContextResponse, LegalEntityContext, PermissionsQueryResult, PermissionsResponse, TenantContext, UserContext, WorkspaceContext, } from "./context";
+export type { DataMigrationBackgroundOperation, DataMigrationBackgroundOperationClient, DataMigrationOperationAccepted, DataMigrationOperationWaitOptions, DataMigrationProviderRegistration, DataMigrationRegistrar, DataMigrationRegistry, DataMigrationRun, DataMigrationRunStatus, DataMigrationSessionCheckpointStore, DataMigrationStageCompletion, DataMigrationStageLoader, DataMigrationStageProps, DataMigrationStageRegistration, DataMigrationTargetRegistration, } from "./data-migration";
+export { createDataMigrationSessionCheckpointStore, dataMigrationUploadAccept, dataMigrationRunPublicId, isDataMigrationOperationAccepted, } from "./data-migration";
+export { projectSignatureCapabilityCatalog, signatureCapabilityIdentity, } from "./signature";
+export type { SignatureDocumentDataBinding, SignatureDocumentDataCandidate, SignatureDocumentDataCardinality, SignatureDocumentDataClassification, SignatureDocumentDataCompatibleSourceBinding, SignatureDocumentDataContractDescriptor, SignatureDocumentDataFieldDescriptor, SignatureDocumentDataFieldMapping, SignatureDocumentDataFieldType, SignatureDocumentDataFixedSourceBinding, SignatureDocumentDataFormatter, SignatureDocumentDataLookupMode, SignatureDocumentDataResourceRef, SignatureDocumentDataSourceCatalog, SignatureDocumentDataSourceCatalogEntry, SignatureDocumentDataSourceDescriptor, SignatureDocumentDataSourceResolution, SignatureDocumentDataStatus, SignatureAuthenticationCapability, SignatureAuthenticationMethod, SignatureAuthenticationMethodSelectorProps, SignatureCapability, SignatureCapabilityCatalog, SignatureCapabilityKind, SignatureCapabilityStatus, SignatureCapabilityUnavailableReason, SignatureInvitationCapability, SignatureInvitationChannel, SignatureInvitationChannelSelectorProps, SignatureRequestPreparationDocument, SignatureRequestPreparationEditorPreparation, SignatureRequestPreparationEditorProps, SignatureRequestPreparationDataSourceCard, SignatureRequestPreparationEditPolicy, SignatureRequestPreparationExactPreviewPreparation, SignatureRequestPreparationExactPreviewProps, SignatureRequestPreparationInputDefinition, SignatureRequestPreparationInputKind, SignatureRequestPreparationInputValueAuthority, SignatureRequestPreparationPlacementEditorProps, SignatureRequestPreparationPlacementElement, SignatureRequestPreparationPlacementFormElement, SignatureRequestPreparationPlacementFormKind, SignatureRequestPreparationPlacementImageAsset, SignatureRequestPreparationPlacementImageElement, SignatureRequestPreparationPlacementParticipant, SignatureRequestPreparationPlacementStaticCheckboxElement, SignatureRequestPreparationPlacementDataSourceElement, SignatureRequestPreparationPlacementStaticTextElement, SignatureRequestPreparationRect, SignatureRequestPreparationRenderStatus, SignatureRequestPreparationStatus, SignatureRequestPreparationTextElement, SignatureRoutingCapability, SignatureRoutingMode, SignatureTemporalDisplayPart, SignatureSingleRequestDialogProps, SignatureSingleRequestParticipant, SignatureSingleRequestParticipantAssignmentSource, SignatureSingleRequestParticipantCandidate, SignatureSingleRequestParticipantSubmission, SignatureSingleRequestPreparationReference, SignatureSingleRequestSubmission, } from "./signature";
+export { SIGNATURE_DOCUMENT_DATA_CLASSIFICATIONS, SIGNATURE_DOCUMENT_DATA_FIELD_TYPES, SIGNATURE_DOCUMENT_DATA_FORMATTERS, SIGNATURE_DOCUMENT_DATA_LOOKUP_MODES, SIGNATURE_DOCUMENT_DATA_STATUSES, } from "./signature";
+export * from "./platform";
+export { organizationTargetQueryParams, parseLegalEntityCreateTargetSearchParams, parseOrganizationTargetListSearchParams, readOrganizationListScope, writeOrganizationListScope, } from "./organization-target";
+export type { NxOrganizationTargetSelectorProps, NxOperatingUnitSelectorProps, OrganizationTarget, OrganizationTargetLegalEntity, OrganizationListScope, OrganizationListScopeMode, OrganizationListScopeResult, OrganizationTargetSelectorOption, LegalEntityCreateTargetQuery, OrganizationTargetOperatingUnit, OrganizationTargetQuery, OrganizationTargetQueryResult, OrganizationTargetSetResponse, } from "./organization-target";
+export { appTestI18n, appTestServer, configureNexiaAppFrontendTestHost, } from "./testing";
+export type { NexiaAppFrontendTestHostBindings } from "./testing";
+export { canForAnyPopulation, canForPopulation } from "./permissions";
+export type { SubjectPopulation } from "./permissions";
+export { formatNumber } from "./number";
+export type { NumberLike } from "./number";
+export { CompositionSpecValidationError, parseCompositionSpec, } from "./resource-composition";
+export type { CompositionSpec, CompositionSpecV3, CompositionSpecV4 } from "./resource-composition";
+export { RESOURCE_PICKER_STALE_TIME_MS, RESOURCE_REFERENCE_STATUSES, allowsManualReferenceFallback, isResourceReferenceBlocked, isResourceReferenceStatus, parseResourceReferenceOptionPage, resourcePickerRevalidation, resourceReferencePickerQueryKey, resourceReferencePickerQueryRoot, resourceReferenceOptionsRoute, savedResourceReferencePresentation, } from "./resource-reference";
+export type { ResourceCreateDestination, ResourceCreateDestinationRegistration, ResourceCreateDestinationRegistry, } from "./resource-create-destination";
+export type { ResourcePickerQueryState, ResourcePickerRefetchOptions, ResourcePickerRevalidation, ResourceReferenceAvailability, ResourceReferenceIdentity, ResourceReferenceOption, ResourceReferenceOptionPage, ResourceReferenceOptionPageMeta, ResourceReferenceOptionsResponse, ResourceReferencePickerQueryScope, ResourceReferenceSelectorContext, ResourceReferenceStatus, } from "./resource-reference";
+export { APP_AVAILABILITY_STATES, isAppAvailabilityState, permitsManualFallback, } from "./app-availability";
+/** @deprecated Use permitsManualFallback. */
+export { allowsManualAppFallback } from "./app-availability";
+export type { AppAvailabilityState } from "./app-availability";
+export { HANDOFF_RESULT_STATES, isHandoffResultState, isRetryableFailure, } from "./handoff-result";
+/** @deprecated Use isRetryableFailure. */
+export { isRetryableHandoffFailure } from "./handoff-result";
+export type { HandoffResultState } from "./handoff-result";
+export type { ApprovalActor, ApprovalBodySnapshot, ApprovalBusinessFormController, ApprovalBusinessFormBinding, ApprovalBusinessFormDraftResult, ApprovalBusinessFormEntryMode, ApprovalBusinessFormRegistration, ApprovalBusinessFormRegistry, ApprovalBusinessFormSlotPropsV2, ApprovalBusinessFormSubmitError, ApprovalBusinessFormSubmitEnvelope, ApprovalBusinessFormSubmitResult, ApprovalBusinessFormSubject, ApprovalBusinessFormTemplate, ApprovalBusinessFormWidgetLoader, ApprovalCase, ApprovalCirculationRecipient, ApprovalDocument, ApprovalDocumentField, ApprovalDocumentSection, ApprovalDocumentView, ApprovalDrafterIdentity, ApprovalResourceSummary, ApprovalResourceSummaryField, ApprovalLineResolutionCategory, ApprovalLineResolutionError, ApprovalLineStages, ApprovalLineStep, ApprovalState, ApprovalStepKind, ApprovalStep, ApprovalSupplementalBodySnapshot, } from "./approval";
+export { APPROVAL_STATES, APPROVAL_STEP_KINDS } from "./approval";
+export type { BpmnEditorDocument, BpmnEditorElement, BpmnEditorNodeType, BpmnEditorProcess, DmnEditorDocument, DmnEditorHitPolicy, DmnEditorInputClause, DmnEditorOutputClause, DmnEditorRule, DmnEditorValueType, ProcessUserTaskFormController, ProcessUserTaskFormRegistrar, ProcessUserTaskFormRegistration, ProcessUserTaskFormRegistry, ProcessUserTaskFormSlotPropsV1, ProcessUserTaskFormWidgetLoader, ProcessUserTaskResourceRef, } from "./process";
+export { DMN_EDITOR_HIT_POLICIES } from "./process";
+export type { AppRouteFrameProps, AppRoutePrefetchContext, AppRoutePrefetcher, AutoRegisterPackageSurfacesOptions, PackageSurfaceLoader, PackageSurfaceOverride, PackageSurfaceOverrideRegistration, FormFieldErrors, InspectorActionProps, InspectorResourceActionsProps, ListLocateRecord, MessageApi, MutationFormError, NxCanonicalRoutePaneProps, NxActionKind, NxIconButtonProps, NxComboboxOption, NxComboboxProps, NxRefreshControlProps, NxColumnBrowserLabels, NxColumnBrowserProps, NxColumnNode, NxColumnPickerLabels, NxColumnPickerProps, NxDatePickerLabels, NxDatePickerProps, NxDateRangePickerProps, NxDateRangeValue, NxDropdownMenuItem, NxHelpTooltipProps, InsightFilterControls, InsightFilterState, InsightQueryLike, InsightRangePreset, UseInsightFilterStateOptions, NxOverviewBandCard, NxSelectOption, NxStatDelta, NxStatDeltaDirection, NxStatDeltaTone, NxTabNavItem, NxTabNavProps, NxTooltipAlign, NxTooltipProps, NxTooltipSide, OpenResourceWorkTab, OpenResourceWorkTabOptions, ResourceCreateCompletion, ResourceCreateCompletionInput, ResourceCreateContinuationTarget, ResourceCreateReceiverRegistration, ResourceInspectorAdapter, ResourceInspectorAdapterLoader, ResourceInspectorAdapterProps, ResourceInspectorAdapterRegistry, ResourceInspectorPanelProps, ResourceInspectorStack, ResourceInspectorStackHostProps, ResourceInspectorStackProviderProps, ResourceInspectorStateProps, ResourceLinkProps, ResourceListFilters, ResourceListFilterValue, ResourceListFooterConfig, ResourceListParams, ResourceListParamsControls, ResourceListRefreshConfig, ResourceListToolbarConfig, ResourceListToolbarMoreMenuProps, ResourceListToolbarViewOption, ResourcePrimaryCellProps, ResourceActionDescriptor, ResourceRef, ResourceRowActionsMenuProps, ResourceStatusBadgeProps, ResourceTableColumn, ResourceTableDensity, ResourceTableProps, ResourceTableStyle, ResourceTableSummaryRow, ResourceTableSort, TabContextActionContext, TabContextActionRegistration, TabContextActionResult, ResourceTextCellProps, ToastOptions, ToastSource, UseRegisterListLocateActionOptions, UseResourceListParamsOptions, WorkSectionProps, FavoriteTarget, WorkTabRef, WorkSurfaceAction, WorkSurfaceLabelInput, WorkSurfaceLabels, WorkSurfaceProps, } from "./shell";
+export { FavoriteButton } from "./host";
+export type { FavoriteButtonProps } from "./host";
+export { createSpreadsheetWorkbook } from "./spreadsheet";
+export type { SpreadsheetWorkbook, SpreadsheetWorksheet, SpreadsheetCell, NxSpreadsheetEditorProps } from "./spreadsheet";

package/dist/index.js

@@ -0,0 +1,21 @@
+export { defineResourceInformationSchema, resourceInformationValue, } from "./resources/resource-information.js";
+export { createDataMigrationSessionCheckpointStore, dataMigrationUploadAccept, dataMigrationRunPublicId, isDataMigrationOperationAccepted, } from "./data-migration.js";
+export { projectSignatureCapabilityCatalog, signatureCapabilityIdentity, } from "./signature.js";
+export { SIGNATURE_DOCUMENT_DATA_CLASSIFICATIONS, SIGNATURE_DOCUMENT_DATA_FIELD_TYPES, SIGNATURE_DOCUMENT_DATA_FORMATTERS, SIGNATURE_DOCUMENT_DATA_LOOKUP_MODES, SIGNATURE_DOCUMENT_DATA_STATUSES, } from "./signature.js";
+export * from "./platform.js";
+export { organizationTargetQueryParams, parseLegalEntityCreateTargetSearchParams, parseOrganizationTargetListSearchParams, readOrganizationListScope, writeOrganizationListScope, } from "./organization-target.js";
+export { appTestI18n, appTestServer, configureNexiaAppFrontendTestHost, } from "./testing.js";
+export { canForAnyPopulation, canForPopulation } from "./permissions.js";
+export { formatNumber } from "./number.js";
+export { CompositionSpecValidationError, parseCompositionSpec, } from "./resource-composition.js";
+export { RESOURCE_PICKER_STALE_TIME_MS, RESOURCE_REFERENCE_STATUSES, allowsManualReferenceFallback, isResourceReferenceBlocked, isResourceReferenceStatus, parseResourceReferenceOptionPage, resourcePickerRevalidation, resourceReferencePickerQueryKey, resourceReferencePickerQueryRoot, resourceReferenceOptionsRoute, savedResourceReferencePresentation, } from "./resource-reference.js";
+export { APP_AVAILABILITY_STATES, isAppAvailabilityState, permitsManualFallback, } from "./app-availability.js";
+/** @deprecated Use permitsManualFallback. */
+export { allowsManualAppFallback } from "./app-availability.js";
+export { HANDOFF_RESULT_STATES, isHandoffResultState, isRetryableFailure, } from "./handoff-result.js";
+/** @deprecated Use isRetryableFailure. */
+export { isRetryableHandoffFailure } from "./handoff-result.js";
+export { APPROVAL_STATES, APPROVAL_STEP_KINDS } from "./approval.js";
+export { DMN_EDITOR_HIT_POLICIES } from "./process.js";
+export { FavoriteButton } from "./host.js";
+export { createSpreadsheetWorkbook } from "./spreadsheet.js";

package/dist/number.d.ts

@@ -0,0 +1,2 @@
+export type NumberLike = number | string | null | undefined;
+export declare function formatNumber(value: NumberLike, locale: string, options?: Intl.NumberFormatOptions): string;

package/dist/number.js

@@ -0,0 +1,9 @@
+export function formatNumber(value, locale, options) {
+    if (value == null || value === '') {
+        return '—';
+    }
+    const numeric = typeof value === 'string' ? Number(value) : value;
+    return Number.isFinite(numeric)
+        ? new Intl.NumberFormat(locale, options).format(numeric)
+        : '—';
+}

package/dist/organization-target.d.ts

@@ -0,0 +1,101 @@
+import type { UseQueryResult } from '@tanstack/react-query';
+import type { ReactNode } from 'react';
+import type { NxComboboxProps } from './shell';
+export interface OrganizationTargetQuery {
+    legalEntityPublicIds?: readonly string[];
+    operatingUnitPublicIds?: readonly string[];
+}
+/** The only page-owned organization list scopes supported by the platform. */
+export type OrganizationListScopeMode = 'legal-entity-list' | 'legal-entity-operating-unit-list';
+export interface OrganizationListScope {
+    query: OrganizationTargetQuery;
+    /** A malformed or unsupported explicit URL selection must not broaden a request. */
+    invalid: boolean;
+}
+export interface OrganizationTargetLegalEntity {
+    public_id: string;
+    code: string;
+    name: string;
+}
+export interface OrganizationTargetOperatingUnit {
+    public_id: string;
+    code: string;
+    name: string;
+}
+/** One exact host-authorized Legal Entity target, optionally paired to one Operating Unit. */
+export interface OrganizationTarget {
+    legal_entity: OrganizationTargetLegalEntity;
+    operating_unit: OrganizationTargetOperatingUnit | null;
+}
+export interface OrganizationTargetSetResponse {
+    data: OrganizationTarget[];
+}
+export type OrganizationTargetQueryResult = UseQueryResult<OrganizationTargetSetResponse, Error>;
+export interface LegalEntityCreateTargetQuery {
+    legalEntityPublicId?: string;
+}
+export interface OrganizationTargetSelectorOption {
+    value: string;
+    label: ReactNode;
+    meta?: ReactNode;
+    searchText?: string;
+    disabled?: boolean;
+}
+interface OrganizationTargetSelectorBaseProps {
+    disabled?: boolean;
+    size?: 'xs' | 'sm' | 'md';
+    testId?: string;
+    /** A non-ready scope is a status summary, never an implicit "all" selector. */
+    status?: 'loading' | 'invalid' | 'unavailable';
+}
+/** Host-localized organization target controls for the supported page-scope modes. */
+export type NxOrganizationTargetSelectorProps = (OrganizationTargetSelectorBaseProps & {
+    mode: 'legal-entity-list';
+    options: readonly OrganizationTargetSelectorOption[];
+    value: readonly string[];
+    onChange: (legalEntityPublicIds: string[]) => void;
+}) | (OrganizationTargetSelectorBaseProps & {
+    mode: 'legal-entity-single';
+    options: readonly OrganizationTargetSelectorOption[];
+    value: string | null;
+    onChange: (legalEntityPublicId: string) => void;
+}) | (OrganizationTargetSelectorBaseProps & {
+    mode: 'legal-entity-operating-unit-list';
+    targets: readonly OrganizationTarget[];
+    value: OrganizationTargetQuery;
+    onChange: (query: OrganizationTargetQuery) => void;
+});
+/** Host-provided page state for a permission-authorized organization list. */
+export interface OrganizationListScopeResult {
+    query: OrganizationTargetQuery;
+    targets: OrganizationTargetQueryResult;
+    selectorProps: NxOrganizationTargetSelectorProps;
+    isLoading: boolean;
+    isError: boolean;
+    /** URL syntax or a resolved explicit selection is invalid. */
+    invalid: boolean;
+    canRead: boolean;
+    valid: boolean;
+    setQuery: (query: OrganizationTargetQuery) => void;
+    /** Ready-only list request parameters; undefined means callers must not fetch. */
+    requestParams: URLSearchParams | undefined;
+}
+/** Serializes the only accepted direct-target wire shape: `*_public_ids[]=uuid`. */
+export declare function organizationTargetQueryParams(query?: OrganizationTargetQuery): URLSearchParams;
+/** Parses the only accepted page-owned list target URL keys. */
+export declare function parseOrganizationTargetListSearchParams(params: URLSearchParams): OrganizationTargetQuery;
+/** Strict URL reader for a route's declared list scope. */
+export declare function readOrganizationListScope(params: URLSearchParams, mode?: OrganizationListScopeMode): OrganizationListScope;
+/** Rewrites only page-owned organization scope keys, preserving every other URL filter. */
+export declare function writeOrganizationListScope(current: URLSearchParams, query: OrganizationTargetQuery): URLSearchParams;
+/** Parses the only accepted page-owned Legal Entity create target URL key. */
+export declare function parseLegalEntityCreateTargetSearchParams(params: URLSearchParams): LegalEntityCreateTargetQuery;
+/** Form input over App-provided authorized options; never changes page or Shell scope. */
+export type NxOperatingUnitSelectorProps = Omit<Extract<NxComboboxProps<string>, {
+    multiple?: false;
+}>, 'multiple' | 'fullWidth' | 'ariaLabel' | 'placeholder'> & {
+    ariaLabel?: string;
+    placeholder?: ReactNode;
+    fullWidth?: true;
+};
+export {};

package/dist/organization-target.js

@@ -0,0 +1,105 @@
+/** Serializes the only accepted direct-target wire shape: `*_public_ids[]=uuid`. */
+export function organizationTargetQueryParams(query = {}) {
+    const params = new URLSearchParams();
+    appendPublicIds(params, 'legal_entity_public_ids[]', query.legalEntityPublicIds);
+    appendPublicIds(params, 'operating_unit_public_ids[]', query.operatingUnitPublicIds);
+    return params;
+}
+/** Parses the only accepted page-owned list target URL keys. */
+export function parseOrganizationTargetListSearchParams(params) {
+    assertNoUnsupportedOrganizationTargetKeys(params, "list");
+    const legalEntityPublicIds = parsePublicIds(params, "legal_entity_public_ids[]");
+    const operatingUnitPublicIds = parsePublicIds(params, "operating_unit_public_ids[]");
+    return {
+        ...(legalEntityPublicIds === undefined ? {} : { legalEntityPublicIds }),
+        ...(operatingUnitPublicIds === undefined ? {} : { operatingUnitPublicIds }),
+    };
+}
+/** Strict URL reader for a route's declared list scope. */
+export function readOrganizationListScope(params, mode = 'legal-entity-list') {
+    try {
+        const query = parseOrganizationTargetListSearchParams(params);
+        if (mode === 'legal-entity-list' &&
+            query.operatingUnitPublicIds !== undefined) {
+            throw new Error('Operating Unit targets are not supported by this list.');
+        }
+        return { query, invalid: false };
+    }
+    catch {
+        return { query: {}, invalid: true };
+    }
+}
+/** Rewrites only page-owned organization scope keys, preserving every other URL filter. */
+export function writeOrganizationListScope(current, query) {
+    const next = new URLSearchParams(current);
+    for (const key of ORGANIZATION_TARGET_KEYS)
+        next.delete(key);
+    for (const [key, value] of organizationTargetQueryParams(query))
+        next.append(key, value);
+    next.delete('page');
+    return next;
+}
+/** Parses the only accepted page-owned Legal Entity create target URL key. */
+export function parseLegalEntityCreateTargetSearchParams(params) {
+    assertNoUnsupportedOrganizationTargetKeys(params, "create");
+    const values = params.getAll("legal_entity_public_id");
+    if (values.length === 0)
+        return {};
+    if (values.length !== 1)
+        throw new Error("legal_entity_public_id cannot be repeated.");
+    return { legalEntityPublicId: normalizePublicId(values[0], "legal_entity_public_id") };
+}
+function appendPublicIds(params, key, values) {
+    if (values === undefined)
+        return;
+    const ids = new Set();
+    for (const value of values) {
+        const id = normalizePublicId(value, key);
+        if (ids.has(id))
+            throw new Error(`${key} cannot contain duplicate UUIDs.`);
+        ids.add(id);
+    }
+    if (ids.size === 0) {
+        throw new Error(`${key} cannot be empty; omit it for all authorized targets.`);
+    }
+    for (const id of [...ids].sort()) {
+        params.append(key, id);
+    }
+}
+function parsePublicIds(params, key) {
+    const values = params.getAll(key);
+    if (values.length === 0)
+        return undefined;
+    const ids = values.map((value) => normalizePublicId(value, key));
+    if (new Set(ids).size !== ids.length)
+        throw new Error(`${key} cannot contain duplicate UUIDs.`);
+    return [...ids].sort();
+}
+function assertNoUnsupportedOrganizationTargetKeys(params, mode) {
+    const allowed = mode === "list"
+        ? new Set(["legal_entity_public_ids[]", "operating_unit_public_ids[]"])
+        : new Set(["legal_entity_public_id"]);
+    const organizationKeys = new Set(ORGANIZATION_TARGET_KEYS);
+    for (const key of params.keys()) {
+        if (organizationKeys.has(key) && !allowed.has(key)) {
+            throw new Error(`${key} is not valid for ${mode} organization targets.`);
+        }
+    }
+}
+function normalizePublicId(value, key) {
+    if (value.trim() !== value || !UUID_PATTERN.test(value)) {
+        throw new Error(`${key} must contain non-empty RFC UUIDs without surrounding whitespace.`);
+    }
+    return value.toLowerCase();
+}
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const ORGANIZATION_TARGET_KEYS = [
+    'legal_entity_public_id',
+    'legal_entity_public_id[]',
+    'legal_entity_public_ids',
+    'legal_entity_public_ids[]',
+    'operating_unit_public_id',
+    'operating_unit_public_id[]',
+    'operating_unit_public_ids',
+    'operating_unit_public_ids[]',
+];

package/dist/permissions.d.ts

@@ -0,0 +1,3 @@
+export type SubjectPopulation = 'all' | 'self' | 'direct_reports' | 'legal_entity' | 'operating_unit';
+export declare function canForPopulation(populations: Record<string, SubjectPopulation[]>, permission: string, population: SubjectPopulation): boolean;
+export declare function canForAnyPopulation(populations: Record<string, SubjectPopulation[]>, permission: string, required: SubjectPopulation[]): boolean;

package/dist/permissions.js

@@ -0,0 +1,12 @@
+function matchesPermission(pattern, target) {
+    return pattern === target
+        || pattern === '*'
+        || (pattern.endsWith('.*') && target.startsWith(pattern.slice(0, -1)));
+}
+export function canForPopulation(populations, permission, population) {
+    return Object.entries(populations).some(([pattern, allowed]) => matchesPermission(pattern, permission)
+        && (allowed.includes('all') || allowed.includes(population)));
+}
+export function canForAnyPopulation(populations, permission, required) {
+    return required.some((population) => canForPopulation(populations, permission, population));
+}