@nexys/user-management-client 0.1.0 → 0.2.0

package/dist/endpoints/passkeys.d.ts

@@ -0,0 +1,39 @@
+import type { Endpoint } from "../endpoint.js";
+import type { ApiError } from "../result.js";
+import type { AuthSuccess, PasskeyItem, WebAuthnCeremonyStart } from "../types.js";
+/**
+ * WebAuthn ceremonies are two round-trips: `start` returns the options
+ * JSON for `navigator.credentials.create()/get()` plus an opaque
+ * `challenge` handle; `finish` echoes the handle with the credential
+ * the browser produced (serialised with base64url fields — see the
+ * webauthn helpers in `@nexys/user-management-web`).
+ */
+export declare const passkeyRegisterStart: Endpoint<void, WebAuthnCeremonyStart, ApiError>;
+export declare const passkeyRegisterFinish: Endpoint<{
+    challenge: string;
+    response: Record<string, unknown>;
+    name?: string;
+}, {
+    id: string;
+}, ApiError>;
+/**
+ * Anonymous. With `email`, `allowCredentials` is scoped to that user's
+ * authenticators; without it the browser offers discoverable
+ * credentials.
+ */
+export declare const passkeySignInStart: Endpoint<{
+    email?: string;
+}, WebAuthnCeremonyStart, ApiError>;
+export declare const passkeySignInFinish: Endpoint<{
+    challenge: string;
+    response: Record<string, unknown>;
+}, AuthSuccess, ApiError>;
+export declare const listPasskeys: Endpoint<void, {
+    passkeys: PasskeyItem[];
+}, ApiError>;
+export declare const deleteOwnPasskey: Endpoint<{
+    id: string;
+}, {
+    ok: true;
+}, ApiError>;
+//# sourceMappingURL=passkeys.d.ts.map

package/dist/endpoints/passkeys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkeys.d.ts","sourceRoot":"","sources":["../../src/endpoints/passkeys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EACV,WAAW,EACX,WAAW,EACX,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAErB;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,EAAE,QAAQ,CAKhF,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAC1C;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACvE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACd,QAAQ,CAOT,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAClB,qBAAqB,EACrB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CACxC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACxD,WAAW,EACX,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;CAAE,EAAE,QAAQ,CAK9E,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EAAE,QAAQ,CAK7E,CAAC"}

package/dist/endpoints/passkeys.js

@@ -0,0 +1,53 @@
+import { parseApiError } from "../result.js";
+/**
+ * WebAuthn ceremonies are two round-trips: `start` returns the options
+ * JSON for `navigator.credentials.create()/get()` plus an opaque
+ * `challenge` handle; `finish` echoes the handle with the credential
+ * the browser produced (serialised with base64url fields — see the
+ * webauthn helpers in `@nexys/user-management-web`).
+ */
+export const passkeyRegisterStart = {
+    method: "POST",
+    path: () => "/api/auth/passkey/register/start",
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const passkeyRegisterFinish = {
+    method: "POST",
+    path: () => "/api/auth/passkey/register/finish",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+/**
+ * Anonymous. With `email`, `allowCredentials` is scoped to that user's
+ * authenticators; without it the browser offers discoverable
+ * credentials.
+ */
+export const passkeySignInStart = {
+    method: "POST",
+    path: () => "/api/auth/passkey/sign-in/start",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const passkeySignInFinish = {
+    method: "POST",
+    path: () => "/api/auth/passkey/sign-in/finish",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const listPasskeys = {
+    method: "GET",
+    path: () => "/api/auth/passkey/list",
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const deleteOwnPasskey = {
+    method: "DELETE",
+    path: (input) => `/api/auth/passkey/${input.id}`,
+    parseOutput: () => ({ ok: true }),
+    parseError: parseApiError,
+};
+//# sourceMappingURL=passkeys.js.map

package/dist/endpoints/passkeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkeys.js","sourceRoot":"","sources":["../../src/endpoints/passkeys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAO7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAoD;IACnF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,kCAAkC;IAC9C,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA6B;IACpD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAI9B;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,mCAAmC;IAC/C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAsB;IAC7C,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAI3B;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,iCAAiC;IAC7C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAA6B;IACpD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAI5B;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,kCAAkC;IAC9C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAmB;IAC1C,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAA0D;IACjF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,wBAAwB;IACpC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAmC;IAC1D,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAqD;IAChF,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,KAAK,CAAC,EAAE,EAAE;IAChD,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjC,UAAU,EAAE,aAAa;CAC1B,CAAC"}

package/dist/endpoints/projects.d.ts

@@ -0,0 +1,69 @@
+import type { Endpoint } from "../endpoint.js";
+import type { ApiError } from "../result.js";
+import type { ProjectRow, TenancyMode, TenantRow } from "../types.js";
+/**
+ * Projects — isolated user-management spaces. One account can run
+ * several independent products, each as its own project with its own
+ * tenancy configuration:
+ *
+ * - `tenancyMode` — `"multi"` (any number of tenants) or `"single"`
+ *   (exactly one; a second create returns `409 single_tenant_limit`).
+ * - `allowTenantCreation` — when true, any authenticated user may
+ *   create a tenant inside the project (self-serve).
+ * - `allowSignup` — when true, project-scoped sign-up
+ *   (`signUp` with a `projectId`) is open.
+ */
+export declare const createProject: Endpoint<{
+    name: string;
+    slug?: string;
+    tenancyMode?: TenancyMode;
+    allowTenantCreation?: boolean;
+    allowSignup?: boolean;
+    metadata?: Record<string, unknown> | null;
+}, ProjectRow, ApiError>;
+/** The caller's projects, tenant counts included (superadmin sees all). */
+export declare const listProjects: Endpoint<void, {
+    projects: ProjectRow[];
+}, ApiError>;
+export declare const getProject: Endpoint<{
+    projectId: string;
+}, ProjectRow, ApiError>;
+/**
+ * Update project settings. Omitted fields keep their current value;
+ * `metadata: null` clears the blob. Narrowing `tenancyMode` to
+ * `"single"` is refused (`409 project_has_multiple_tenants`) while the
+ * project holds more than one tenant. Owner or superadmin only.
+ */
+export declare const updateProject: Endpoint<{
+    projectId: string;
+    name?: string;
+    slug?: string;
+    tenancyMode?: TenancyMode;
+    allowTenantCreation?: boolean;
+    allowSignup?: boolean;
+    metadata?: Record<string, unknown> | null;
+}, ProjectRow, ApiError>;
+/** Delete a project and every tenant inside it (cascade). */
+export declare const deleteProject: Endpoint<{
+    projectId: string;
+}, {
+    ok: true;
+    id: string;
+}, ApiError>;
+/** Tenants inside a project, member counts included. Owner or superadmin. */
+export declare const listProjectTenants: Endpoint<{
+    projectId: string;
+}, {
+    tenants: TenantRow[];
+}, ApiError>;
+/**
+ * Create a tenant inside a project; the caller becomes its owner. The
+ * project owner (or a superadmin) always may; other authenticated users
+ * need the project's `allowTenantCreation` setting.
+ */
+export declare const createProjectTenant: Endpoint<{
+    projectId: string;
+    name: string;
+    slug?: string;
+}, TenantRow, ApiError>;
+//# sourceMappingURL=projects.d.ts.map

package/dist/endpoints/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../src/endpoints/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEtE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C,EACD,UAAU,EACV,QAAQ,CAOT,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;CAAE,EAAE,QAAQ,CAK7E,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,UAAU,EAAE,QAAQ,CAK5E,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C,EACD,UAAU,EACV,QAAQ,CAOT,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxB,QAAQ,CAMT,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EACrB;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,EACxB,QAAQ,CAMT,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CACxC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAClD,SAAS,EACT,QAAQ,CAOT,CAAC"}

package/dist/endpoints/projects.js

@@ -0,0 +1,73 @@
+import { parseApiError } from "../result.js";
+/**
+ * Projects — isolated user-management spaces. One account can run
+ * several independent products, each as its own project with its own
+ * tenancy configuration:
+ *
+ * - `tenancyMode` — `"multi"` (any number of tenants) or `"single"`
+ *   (exactly one; a second create returns `409 single_tenant_limit`).
+ * - `allowTenantCreation` — when true, any authenticated user may
+ *   create a tenant inside the project (self-serve).
+ * - `allowSignup` — when true, project-scoped sign-up
+ *   (`signUp` with a `projectId`) is open.
+ */
+export const createProject = {
+    method: "POST",
+    path: () => "/api/projects",
+    body: (input) => input,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+/** The caller's projects, tenant counts included (superadmin sees all). */
+export const listProjects = {
+    method: "GET",
+    path: () => "/api/projects",
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+export const getProject = {
+    method: "GET",
+    path: (input) => `/api/projects/${encodeURIComponent(input.projectId)}`,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+/**
+ * Update project settings. Omitted fields keep their current value;
+ * `metadata: null` clears the blob. Narrowing `tenancyMode` to
+ * `"single"` is refused (`409 project_has_multiple_tenants`) while the
+ * project holds more than one tenant. Owner or superadmin only.
+ */
+export const updateProject = {
+    method: "PATCH",
+    path: (input) => `/api/projects/${encodeURIComponent(input.projectId)}`,
+    body: ({ projectId: _projectId, ...rest }) => rest,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+/** Delete a project and every tenant inside it (cascade). */
+export const deleteProject = {
+    method: "DELETE",
+    path: (input) => `/api/projects/${encodeURIComponent(input.projectId)}`,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+/** Tenants inside a project, member counts included. Owner or superadmin. */
+export const listProjectTenants = {
+    method: "GET",
+    path: (input) => `/api/projects/${encodeURIComponent(input.projectId)}/tenants`,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+/**
+ * Create a tenant inside a project; the caller becomes its owner. The
+ * project owner (or a superadmin) always may; other authenticated users
+ * need the project's `allowTenantCreation` setting.
+ */
+export const createProjectTenant = {
+    method: "POST",
+    path: (input) => `/api/projects/${encodeURIComponent(input.projectId)}/tenants`,
+    body: ({ projectId: _projectId, ...rest }) => rest,
+    parseOutput: (data) => data,
+    parseError: parseApiError,
+};
+//# sourceMappingURL=projects.js.map

package/dist/endpoints/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/endpoints/projects.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAWtB;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe;IAC3B,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACtB,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAkB;IACzC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,YAAY,GAAyD;IAChF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe;IAC3B,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAkC;IACzD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAA0D;IAC/E,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;IACvE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAkB;IACzC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAYtB;IACF,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;IACvE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI;IAClD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAkB;IACzC,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAItB;IACF,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;IACvE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAgC;IACvD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAI3B;IACF,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU;IAC/E,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAgC;IACvD,UAAU,EAAE,aAAa;CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAI5B;IACF,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU;IAC/E,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI;IAClD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAiB;IACxC,UAAU,EAAE,aAAa;CAC1B,CAAC"}

package/dist/endpoints/tenants.d.ts

@@ -1,28 +1,49 @@
 import type { Endpoint } from "../endpoint.js";
 import type { ApiError } from "../result.js";
-import type { FullOrganization, Invitation, MemberDetail, MyTenant, RoleRow, TenantRole, TenantRow, UserStatus } from "../types.js";
-export type CheckTenantResponse = {
-    exists: false;
-} | {
-    exists: true;
-    id: string;
-    name: string;
-    slug: string;
-};
-/** Public — no auth required. Check if a tenant exists by slug/name. */
-export declare const checkTenant: Endpoint<{
-    name: string;
-}, CheckTenantResponse, ApiError>;
-export declare const listMyTenants: Endpoint<void, {
-    tenants: MyTenant[];
-}, ApiError>;
+import type { FullOrganization, Invitation, Member, MyTenantPermissions, RoleRow, TenantRole, TenantRow } from "../types.js";
 export declare const adminListTenants: Endpoint<void, {
     tenants: TenantRow[];
 }, ApiError>;
 export declare const createTenant: Endpoint<{
     name: string;
     slug?: string;
+    /**
+     * Attach the tenant to a project, gated by the project's settings
+     * (`allowTenantCreation`, `tenancyMode`).
+     */
+    projectId?: string;
 }, TenantRow, ApiError>;
+/**
+ * Update tenant name/slug/logo and the per-tenant `metadata` settings
+ * blob. Omitted fields keep their current value; `metadata: null`
+ * clears the blob. Requires org owner/admin (or a superadmin).
+ */
+export declare const updateTenant: Endpoint<{
+    organizationId: string;
+    data: {
+        name?: string;
+        slug?: string;
+        logo?: string | null;
+        metadata?: Record<string, unknown> | null;
+    };
+}, {
+    id: string;
+    name: string;
+    slug: string;
+    logo: string | null;
+    metadata: Record<string, unknown> | null;
+}, ApiError>;
+/**
+ * Owner self-service tenant delete. Cascades members, invitations, and
+ * roles. Requires the caller to be the org owner (or a superadmin). For
+ * the superadmin system-wide path see {@link adminDeleteTenant}.
+ */
+export declare const deleteTenant: Endpoint<{
+    organizationId: string;
+}, {
+    ok: true;
+    id: string;
+}, ApiError>;
 export declare const setActiveTenant: Endpoint<{
     organizationId: string | null;
 }, {
@@ -52,6 +73,17 @@ export declare const updateMemberRole: Endpoint<{
 }, {
     ok: true;
 }, ApiError>;
+/**
+ * Direct member assignment — no invitation round-trip. The target
+ * user must already exist (lookup by userId or email); requires
+ * tenant owner/admin or a superadmin.
+ */
+export declare const addMember: Endpoint<{
+    organizationId: string;
+    role: TenantRole;
+    userId?: string;
+    email?: string;
+}, Member, ApiError>;
 export declare const removeMember: Endpoint<{
     memberId: string;
     organizationId: string;
@@ -63,11 +95,6 @@ export declare const adminDeleteTenant: Endpoint<{
 }, {
     ok: true;
 }, ApiError>;
-export declare const deleteTenant: Endpoint<{
-    id: string;
-}, {
-    ok: true;
-}, ApiError>;
 export declare const listTenantRoles: Endpoint<{
     orgId: string;
 }, {
@@ -77,6 +104,18 @@ export declare const createTenantRole: Endpoint<{
     orgId: string;
     name: string;
     description?: string;
+    permissions?: string[];
+}, RoleRow, ApiError>;
+/**
+ * Update a role's name/description and, when `permissions` is present,
+ * replace its permission set wholesale.
+ */
+export declare const updateTenantRole: Endpoint<{
+    orgId: string;
+    roleId: string;
+    name?: string;
+    description?: string;
+    permissions?: string[];
 }, RoleRow, ApiError>;
 export declare const deleteTenantRole: Endpoint<{
     orgId: string;
@@ -84,101 +123,31 @@ export declare const deleteTenantRole: Endpoint<{
 }, {
     ok: true;
 }, ApiError>;
-export declare const addTenantMember: Endpoint<{
-    orgId: string;
-    email: string;
-    role?: TenantRole;
-}, {
-    id: string;
-    userId: string;
-    email: string;
-    name: string;
-    role: TenantRole;
-}, ApiError>;
-export declare const getTenantMember: Endpoint<{
-    orgId: string;
-    userId: string;
-}, MemberDetail, ApiError>;
-export declare const getTenantMemberRoles: Endpoint<{
+/** Custom roles assigned to one member (with their permissions). */
+export declare const listMemberRoles: Endpoint<{
     orgId: string;
-    userId: string;
+    memberId: string;
 }, {
     roles: RoleRow[];
 }, ApiError>;
-export declare const getTenantMemberPermissions: Endpoint<{
+export declare const assignMemberRole: Endpoint<{
     orgId: string;
-    userId: string;
-}, {
-    permissions: string[];
-}, ApiError>;
-export declare const getTenantMemberAuthMethods: Endpoint<{
-    orgId: string;
-    userId: string;
-}, {
-    methods: {
-        provider: string;
-        createdAt: string;
-    }[];
-}, ApiError>;
-export declare const assignTenantMemberRole: Endpoint<{
-    orgId: string;
-    userId: string;
+    memberId: string;
     roleId: string;
 }, {
     ok: true;
-}, ApiError>;
-export declare const unassignTenantMemberRole: Endpoint<{
-    orgId: string;
-    userId: string;
     roleId: string;
-}, {
-    ok: true;
-}, ApiError>;
-export declare const updateMemberStatus: Endpoint<{
-    orgId: string;
-    userId: string;
-    status: UserStatus;
-}, {
-    ok: true;
-    status: UserStatus;
-}, ApiError>;
-export declare const addMemberAuthMethod: Endpoint<{
-    orgId: string;
-    userId: string;
-    provider: string;
-    accountId?: string;
-    password?: string;
-}, {
-    ok: true;
-    id: string;
+    memberId: string;
 }, ApiError>;
-export declare const removeMemberAuthMethod: Endpoint<{
+export declare const removeMemberRole: Endpoint<{
     orgId: string;
-    userId: string;
-    methodId: string;
+    memberId: string;
+    roleId: string;
 }, {
     ok: true;
 }, ApiError>;
-export interface RefreshTokenInfo {
-    id: string;
-    ipAddress: string | null;
-    userAgent: string | null;
-    createdAt: string;
-    expiresAt: string;
-    revokedAt: string | null;
-    lastUsedAt: string | null;
-}
-export declare const listMemberTokens: Endpoint<{
-    orgId: string;
-    userId: string;
-}, {
-    tokens: RefreshTokenInfo[];
-}, ApiError>;
-export declare const revokeMemberToken: Endpoint<{
+/** The caller's own effective role/permissions inside a tenant. */
+export declare const myTenantPermissions: Endpoint<{
     orgId: string;
-    userId: string;
-    tokenId: string;
-}, {
-    ok: true;
-}, ApiError>;
+}, MyTenantPermissions, ApiError>;
 //# sourceMappingURL=tenants.d.ts.map

package/dist/endpoints/tenants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenants.d.ts","sourceRoot":"","sources":["../../src/endpoints/tenants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EACV,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,UAAU,EACV,SAAS,EACT,UAAU,EACX,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,GACjB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,wEAAwE;AACxE,eAAO,MAAM,WAAW,EAAE,QAAQ,CAChC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAChB,mBAAmB,EACnB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;CAAE,EAAE,QAAQ,CAK3E,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,EAAE,QAAQ,CAK/E,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC/B,SAAS,EACT,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACjC;IAAE,OAAO,EAAE;QAAE,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CAAE,EACpD,QAAQ,CAQT,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3B,gBAAgB,EAChB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC3D,UAAU,EACV,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,EACxB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,EAC9D,QAAQ,CAQT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC9D;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC5C;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CACtC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACd;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACd;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACjB;IAAE,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,EACpB,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EACrD,OAAO,EACP,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,UAAU,CAAA;CAAE,EACnD;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,EAC7E,QAAQ,CAcT,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjC,YAAY,EACZ,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CACzC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjC;IAAE,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,EACpB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAC/C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjC;IAAE,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,EACzB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAC/C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjC;IAAE,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,EACtD,QAAQ,CAQT,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjD;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAQT,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAC7C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjD;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CACvC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,EACrD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,EAChC,QAAQ,CAQT,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CACxC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1F;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxB,QAAQ,CAYT,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAC3C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACnD;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjC;IAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE,EAC9B,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CACtC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAClD;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC"}
+{"version":3,"file":"tenants.d.ts","sourceRoot":"","sources":["../../src/endpoints/tenants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EACV,gBAAgB,EAChB,UAAU,EACV,MAAM,EACN,mBAAmB,EACnB,OAAO,EACP,UAAU,EACV,SAAS,EACV,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,EAAE,QAAQ,CAK/E,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IACE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,EACD,SAAS,EACT,QAAQ,CAOT,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IACE,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE;QACJ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC3C,CAAC;CACH,EACD;IACE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C,EACD,QAAQ,CAcT,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,EAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACxB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACjC;IAAE,OAAO,EAAE;QAAE,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;CAAE,EACpD,QAAQ,CAQT,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,QAAQ,CAClC;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3B,gBAAgB,EAChB,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC3D,UAAU,EACV,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,EACxB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,EAC9D,QAAQ,CAQT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC9D;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,SAAS,EAAE,QAAQ,CAC9B;IACE,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,EACD,MAAM,EACN,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CACjC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EAC5C;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CACtC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EACd;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACjB;IAAE,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,EACpB,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,EAC7E,OAAO,EACP,QAAQ,CAWT,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IACE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB,EACD,OAAO,EACP,QAAQ,CAWT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACjC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAMT,CAAC;AAEF,oEAAoE;AACpE,eAAO,MAAM,eAAe,EAAE,QAAQ,CACpC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACnC;IAAE,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,EACpB,QAAQ,CAMT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACnD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EAC9C,QAAQ,CAOT,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CACrC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EACnD;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,EACZ,QAAQ,CAOT,CAAC;AAEF,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CACxC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EACjB,mBAAmB,EACnB,QAAQ,CAMT,CAAC"}