@orthacms/users-admin 0.0.0-reserve.0

package/dist/lib/components/MembersSkeleton/index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Section placeholder shown while {@link useWorkspaceOptions} resolves in the
+ * invite wizard's "assign workspaces" step — two mode tiles over a short list of
+ * option rows. Replaces the inline spinner so the step keeps its shape while the
+ * list loads. Owns a single `role="status"`; the tiles are `aria-hidden`.
+ */
+export declare function WorkspaceOptionsSkeleton({ rows }: {
+    rows?: number;
+}): import("react").JSX.Element;
+/**
+ * The members-table placeholder shown while {@link useMembers} resolves. Built
+ * from the real `Table` primitives so column widths and the header match the
+ * loaded table exactly (no reflow on swap). Drops into the page body in place
+ * of the table (header + toolbar stay live), so it owns the single
+ * `role="status"` announcement; the table itself is `aria-hidden`.
+ */
+export declare function MembersTableSkeleton({ rows }: {
+    rows?: number;
+}): import("react").JSX.Element;
+/**
+ * Full-page placeholder for the lazy-route `Suspense` fallback — before
+ * {@link MembersPage} mounts there is no header or toolbar yet, so this sketches
+ * the whole page (header, search toolbar, table) to hold the layout steady
+ * while the chunk loads. Reuses {@link MembersTableSkeleton} for the body.
+ */
+export declare function MembersPageSkeleton(): import("react").JSX.Element;
+/**
+ * Lazy-route `Suspense` fallback for {@link InviteMemberPage}. Wraps the shared
+ * {@link WizardPageSkeleton} so the `sr-only` status stays localized.
+ */
+export declare function InviteMemberPageSkeleton(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/MembersSkeleton/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/MembersSkeleton/index.tsx"],"names":[],"mappings":"AA6BA;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,IAAQ,EAAE,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,+BA0BvE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,IAAQ,EAAE,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,+BAmEnE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,gCAkBlC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,gCAIvC"}

package/dist/lib/components/MembersTable/MemberRoleChip/index.d.ts

@@ -0,0 +1,10 @@
+import type { MemberRole } from '../../../types/member';
+/**
+ * The Role column's read-only chip: the member's role as a labelled badge.
+ * Changing a role happens through the row's edit action (and the server gates
+ * it on `users:update`), so the column itself carries no inline editor.
+ */
+export declare function MemberRoleChip({ role }: {
+    role: MemberRole;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/MembersTable/MemberRoleChip/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/MembersTable/MemberRoleChip/index.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AA2BxD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,+BAW5D"}

package/dist/lib/components/MembersTable/MemberRowActions/index.d.ts

@@ -0,0 +1,16 @@
+import type { Member } from '../../../types/member';
+/**
+ * The row-end kebab menu. It mirrors the user detail page's side rail: an
+ * **Account** group (General / Role / Workspaces) that every reader sees, then
+ * permission-gated **Audit** (Sessions / Activity) and **Access** (Sign-in
+ * access) groups — each item navigates straight to that tab. Below a separator
+ * sit the status quick actions: a pending invite offers Resend / Revoke, an
+ * active member Disable, a disabled member Enable, each shown only with its
+ * `users:*` permission. The guardrailed Disable (yourself, the sole admin)
+ * stays visible but inert with a tooltip. (Clicking the row itself also opens
+ * the member — see {@link MembersTable}.)
+ */
+export declare function MemberRowActions({ member }: {
+    member: Member;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/MembersTable/MemberRowActions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/MembersTable/MemberRowActions/index.tsx"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AA6FpD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,+BAqP9D"}

package/dist/lib/components/MembersTable/MemberStatusBadge/index.d.ts

@@ -0,0 +1,10 @@
+import type { MemberStatus } from '../../../types/member';
+/**
+ * The Status column's pill: a leading colored dot plus the status label —
+ * green "Active", amber "Invited" (a sent, unaccepted invite), muted
+ * "Disabled".
+ */
+export declare function MemberStatusBadge({ status }: {
+    status: MemberStatus;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/MembersTable/MemberStatusBadge/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/MembersTable/MemberStatusBadge/index.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAwC1D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,+BAuBrE"}

package/dist/lib/components/MembersTable/MemberWorkspaces/index.d.ts

@@ -0,0 +1,10 @@
+import type { MemberWorkspace } from '../../../types/member';
+/**
+ * The Workspaces column: a row of overlapping workspace avatars plus a count,
+ * opening a popover that lists every workspace the member belongs to — the
+ * same stack-and-popover treatment as the workspace card's member roster.
+ */
+export declare function MemberWorkspaces({ workspaces }: {
+    workspaces: MemberWorkspace[];
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/MembersTable/MemberWorkspaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/MembersTable/MemberWorkspaces/index.tsx"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAsB7D;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAC7B,UAAU,EACb,EAAE;IACC,UAAU,EAAE,eAAe,EAAE,CAAC;CACjC,+BAsEA"}

package/dist/lib/components/MembersTable/index.d.ts

@@ -0,0 +1,12 @@
+import type { Member } from '../../types/member';
+/**
+ * The members table: avatar + name + email, the role chip, the status pill, the
+ * workspace stack, the joined date (the invite date for Invited rows), and the
+ * per-row actions menu. The whole row is a shortcut to the member's detail page
+ * (the name is a real link for keyboard users); the actions cell stops the
+ * click from bubbling so opening the menu doesn't also navigate.
+ */
+export declare function MembersTable({ members }: {
+    members: Member[];
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/MembersTable/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/MembersTable/index.tsx"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAkCjD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,+BAyF9D"}

package/dist/lib/components/MembersToolbar/index.d.ts

@@ -0,0 +1,13 @@
+import type { ReactNode } from 'react';
+/**
+ * The Members table toolbar: a name/email search box with the advanced-filter
+ * control pinned to the right. Layout lives in the shared `SearchToolbar`; this
+ * wrapper only supplies the localised strings and the page-owned filter control.
+ */
+export declare function MembersToolbar({ search, onSearchChange, filterControl }: {
+    search: string;
+    onSearchChange: (value: string) => void;
+    /** Optional advanced-filter control rendered on the right. */
+    filterControl?: ReactNode;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/MembersToolbar/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/MembersToolbar/index.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAgBvC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAC3B,MAAM,EACN,cAAc,EACd,aAAa,EAChB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,8DAA8D;IAC9D,aAAa,CAAC,EAAE,SAAS,CAAC;CAC7B,+BAYA"}

package/dist/lib/components/RolePicker/index.d.ts

@@ -0,0 +1,18 @@
+import type { MemberRole } from '../../types/member';
+/**
+ * A radio-card selector over the three assignable system roles, with each
+ * role's description and a "Current" badge on the saved one. Controlled: the
+ * parent owns `value` and decides what "apply" does. Used by the detail page's
+ * Role tab (and available to the invite flow).
+ */
+export declare function RolePicker({ value, current, disabled, onChange }: {
+    /** The selected role. */
+    value: MemberRole;
+    /** The member's currently-saved role, badged as "Current". */
+    current?: MemberRole;
+    /** Disables selection (read-only / in-flight). */
+    disabled?: boolean;
+    /** Called with the newly-picked role. */
+    onChange: (role: MemberRole) => void;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/RolePicker/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/RolePicker/index.tsx"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAwCrD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,EACvB,KAAK,EACL,OAAO,EACP,QAAgB,EAChB,QAAQ,EACX,EAAE;IACC,yBAAyB;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yCAAyC;IACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;CACxC,+BAqDA"}

package/dist/lib/components/SessionCard/index.d.ts

@@ -0,0 +1,15 @@
+import type { UserSession } from '../../api/useUserSessions';
+/**
+ * One of a member's live sessions: device/user-agent, originating IP, when it
+ * was last seen, and a Revoke action. The caller's own session is badged and
+ * its Revoke button disabled, so an admin can't sign themselves out from here.
+ */
+export declare function SessionCard({ session, busy, onRevoke }: {
+    /** The session to render. */
+    session: UserSession;
+    /** Whether a revoke for this session is in flight. */
+    busy?: boolean;
+    /** Revoke handler. */
+    onRevoke: (session: UserSession) => void;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/SessionCard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/SessionCard/index.tsx"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAuB7D;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EACxB,OAAO,EACP,IAAY,EACZ,QAAQ,EACX,EAAE;IACC,6BAA6B;IAC7B,OAAO,EAAE,WAAW,CAAC;IACrB,sDAAsD;IACtD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,sBAAsB;IACtB,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC;CAC5C,+BAkDA"}

package/dist/lib/components/UserDetailLayout/UserDetailTabs/index.d.ts

@@ -0,0 +1,13 @@
+import type { Member } from '../../../types/member';
+/**
+ * The detail page's horizontal tab navigation — underline tabs between the
+ * hero and the active section. The account tabs (General, Role, Workspaces)
+ * are always shown; Sessions/Activity and Sign-in access are gated — without
+ * the permission the tab is hidden and its route redirects away, so a
+ * read-only admin never sees a dead link. Links are absolute (`/users/:id/…`)
+ * so active state is unambiguous regardless of the matched tab.
+ */
+export declare function UserDetailTabs({ member }: {
+    member: Member;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/UserDetailLayout/UserDetailTabs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/UserDetailLayout/UserDetailTabs/index.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AA+CpD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,+BAmD5D"}

package/dist/lib/components/UserDetailLayout/UserHero/index.d.ts

@@ -0,0 +1,10 @@
+import type { Member } from '../../../types/member';
+/**
+ * The detail page's identity card: a large initials avatar, the member's name
+ * and email, their status and role badges, and the join date. Read-only — every
+ * edit lives in a tab below.
+ */
+export declare function UserHero({ member }: {
+    member: Member;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/UserDetailLayout/UserHero/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/UserDetailLayout/UserHero/index.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAUpD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,+BAiCtD"}

package/dist/lib/components/UserDetailLayout/UserSideRail/index.d.ts

@@ -0,0 +1,12 @@
+import type { Member } from '../../../types/member';
+/**
+ * The detail page's sticky left navigation. Account sections are always shown;
+ * the Audit (Sessions, Activity) and Access groups are gated — without the
+ * permission the item is hidden and its route redirects away, so a read-only
+ * admin never sees a dead link. Links are absolute (`/users/:id/...`) so active
+ * state is unambiguous regardless of the matched tab.
+ */
+export declare function UserSideRail({ member }: {
+    member: Member;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/UserDetailLayout/UserSideRail/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/UserDetailLayout/UserSideRail/index.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAsEpD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,+BAgE1D"}

package/dist/lib/components/UserDetailLayout/UserStatsStrip/index.d.ts

@@ -0,0 +1,10 @@
+import type { Member } from '../../../types/member';
+/**
+ * A three-tile summary above the detail tabs: when the member joined, how many
+ * workspaces they belong to, and their global role. Sourced entirely from the
+ * shared detail record — no extra requests.
+ */
+export declare function UserStatsStrip({ member }: {
+    member: Member;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/UserDetailLayout/UserStatsStrip/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/UserDetailLayout/UserStatsStrip/index.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AA+CpD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,+BA2B5D"}

package/dist/lib/components/UserDetailLayout/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The user detail page shell, mounted at `/users/:id/*`. Fetches the member
+ * once and shares it with every tab through the Outlet context, so a tab read
+ * is free. Renders the back link, identity hero, stats strip, and the underline
+ * tab bar above the active tab. Loading shows skeletons; a 404 shows a
+ * dedicated "no longer exists" state; any other error is retryable by the
+ * tabs' own queries falling back here.
+ *
+ * Gated on `users:read` (the same permission the roster needs): without it the
+ * page shows the shared no-access state and fetches nothing.
+ */
+export declare function UserDetailLayout(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/UserDetailLayout/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/UserDetailLayout/index.tsx"],"names":[],"mappings":"AAwCA;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,gCAoI/B"}

package/dist/lib/components/UserDetailRouter/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The nested router for one member, mounted by the plugin at `/users/:id/*`.
+ * Mirrors `IdentityRouter`: a single element owning its own `<Routes>`, with
+ * the shared layout wrapping the tab pages and providing the member via Outlet
+ * context.
+ *
+ * The Audit (Sessions, Activity) and Access tabs are permission-gated at the
+ * route level — without the permission the route redirects to General, so a
+ * deep link or stale bookmark can't reach a tab the side rail hides. The index
+ * redirects to General as the default tab.
+ */
+export declare function UserDetailRouter(): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/UserDetailRouter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/UserDetailRouter/index.tsx"],"names":[],"mappings":"AAUA;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,gCA6C/B"}

package/dist/lib/components/WorkspaceMembershipCard/index.d.ts

@@ -0,0 +1,15 @@
+import type { MemberWorkspace } from '../../types/member';
+/**
+ * One workspace the member belongs to: its tinted mark, name, and (when the
+ * viewer can manage members) a Remove action. Removal is confirmed by the
+ * parent page, so this card just signals intent.
+ */
+export declare function WorkspaceMembershipCard({ workspace, onRemove, removing }: {
+    /** The workspace membership to render. */
+    workspace: MemberWorkspace;
+    /** Remove handler; omit to hide the action (read-only). */
+    onRemove?: (workspace: MemberWorkspace) => void;
+    /** Whether a removal for this workspace is in flight. */
+    removing?: boolean;
+}): import("react").JSX.Element;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/components/WorkspaceMembershipCard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/components/WorkspaceMembershipCard/index.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAc1D;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,EACpC,SAAS,EACT,QAAQ,EACR,QAAgB,EACnB,EAAE;IACC,0CAA0C;IAC1C,SAAS,EAAE,eAAe,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,eAAe,KAAK,IAAI,CAAC;IAChD,yDAAyD;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB,+BA2CA"}

package/dist/lib/domain/member/index.d.ts

@@ -0,0 +1,61 @@
+import type { Member } from '../types/member';
+/**
+ * Why a guarded member action is currently vetoed, as a machine key the
+ * presentation maps to a localized reason:
+ * - `self` — you can't disable/suspend your own account, or change your own role.
+ * - `lastAdmin` — the sole active admin can't be demoted or disabled.
+ * - `customRole` — the member holds a role outside the three assignable system
+ *   roles, so the picker cannot represent (or safely replace) it.
+ */
+export type MemberBlockReason = 'self' | 'lastAdmin' | 'customRole';
+/**
+ * The result of a UX-invariant check: `ok` when the action is allowed, else the
+ * machine `reason` the button/menu shows (disabled, with a tooltip/alert). The
+ * server enforces the same rules — this only mirrors them so the control can
+ * explain itself before the request instead of failing on submit.
+ */
+export type MemberInvariant = {
+    ok: true;
+    reason: null;
+} | {
+    ok: false;
+    reason: MemberBlockReason;
+};
+/**
+ * A member wrapped as a thin client entity, exposing the **UX invariants** the
+ * admin mirrors from server-computed facts (`isLastAdmin`, the viewer's id).
+ * The admin stays thin — the server owns business truth (ADR-0003); this only
+ * lets a control disable itself with a reason rather than let the user click
+ * into a guaranteed `409`.
+ *
+ * It wraps the plain {@link Member} view model (the cached, query-serializable
+ * shape) rather than replacing it, so React Query's structural sharing keeps
+ * working; construct one on demand where an invariant is needed.
+ */
+export declare class MemberEntity {
+    private readonly member;
+    private constructor();
+    /** Wraps a {@link Member} view model for invariant checks. */
+    static of(member: Member): MemberEntity;
+    /**
+     * Whether this member's global role may be changed by the viewer. Three
+     * ways it can't: it's **your own** account (the server 409s "You cannot
+     * change your own role"), they are the sole active admin (`isLastAdmin` —
+     * demoting them would leave the system with no administrator), or they hold
+     * a **custom** role the three-way picker can't represent (`role: null`).
+     *
+     * `viewerId` is required for the self check, mirroring
+     * {@link MemberEntity.canBeRemoved}. Without it the control cannot explain
+     * itself and the user is left to discover the rule from a failed request.
+     */
+    canChangeRole(viewerId: string | undefined): MemberInvariant;
+    /**
+     * Whether this member's sign-in access may be removed (disabled/suspended)
+     * by the viewer. You can't disable your own account (`self`), and the sole
+     * active admin can't be disabled (`lastAdmin`). Enabling/reactivating a
+     * disabled member is never vetoed, so callers apply this only to the
+     * suspend direction.
+     */
+    canBeRemoved(viewerId: string | undefined): MemberInvariant;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/member/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/domain/member/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,WAAW,GAAG,YAAY,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAI/C;;;;;;;;;;GAUG;AACH,qBAAa,YAAY;IACD,OAAO,CAAC,QAAQ,CAAC,MAAM;IAA3C,OAAO;IAEP,8DAA8D;IAC9D,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY;IAIvC;;;;;;;;;;OAUG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe;IAa5D;;;;;;OAMG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe;CAS9D"}

package/dist/lib/domain/member/index.js

@@ -0,0 +1,61 @@
+const ALLOWED = { ok: true, reason: null };
+/**
+ * A member wrapped as a thin client entity, exposing the **UX invariants** the
+ * admin mirrors from server-computed facts (`isLastAdmin`, the viewer's id).
+ * The admin stays thin — the server owns business truth (ADR-0003); this only
+ * lets a control disable itself with a reason rather than let the user click
+ * into a guaranteed `409`.
+ *
+ * It wraps the plain {@link Member} view model (the cached, query-serializable
+ * shape) rather than replacing it, so React Query's structural sharing keeps
+ * working; construct one on demand where an invariant is needed.
+ */
+export class MemberEntity {
+    member;
+    constructor(member) {
+        this.member = member;
+    }
+    /** Wraps a {@link Member} view model for invariant checks. */
+    static of(member) {
+        return new MemberEntity(member);
+    }
+    /**
+     * Whether this member's global role may be changed by the viewer. Three
+     * ways it can't: it's **your own** account (the server 409s "You cannot
+     * change your own role"), they are the sole active admin (`isLastAdmin` —
+     * demoting them would leave the system with no administrator), or they hold
+     * a **custom** role the three-way picker can't represent (`role: null`).
+     *
+     * `viewerId` is required for the self check, mirroring
+     * {@link MemberEntity.canBeRemoved}. Without it the control cannot explain
+     * itself and the user is left to discover the rule from a failed request.
+     */
+    canChangeRole(viewerId) {
+        if (viewerId !== undefined && viewerId === this.member.id) {
+            return { ok: false, reason: 'self' };
+        }
+        if (this.member.isLastAdmin) {
+            return { ok: false, reason: 'lastAdmin' };
+        }
+        if (this.member.role === null) {
+            return { ok: false, reason: 'customRole' };
+        }
+        return ALLOWED;
+    }
+    /**
+     * Whether this member's sign-in access may be removed (disabled/suspended)
+     * by the viewer. You can't disable your own account (`self`), and the sole
+     * active admin can't be disabled (`lastAdmin`). Enabling/reactivating a
+     * disabled member is never vetoed, so callers apply this only to the
+     * suspend direction.
+     */
+    canBeRemoved(viewerId) {
+        if (viewerId !== undefined && viewerId === this.member.id) {
+            return { ok: false, reason: 'self' };
+        }
+        if (this.member.isLastAdmin) {
+            return { ok: false, reason: 'lastAdmin' };
+        }
+        return ALLOWED;
+    }
+}

package/dist/lib/domain/types/member/index.d.ts

@@ -0,0 +1,90 @@
+import type { AvatarColor } from '@orthacms/design-system';
+/** The three assignable system roles, by stable key. */
+export type MemberRole = 'admin' | 'contributor' | 'viewer';
+/**
+ * Account lifecycle state, mirroring the server's `user_status` enum.
+ * `pending` renders as the "Invited" pill — an invite that has been sent but
+ * not yet accepted.
+ */
+export type MemberStatus = 'pending' | 'active' | 'disabled';
+/** A workspace a member belongs to, as shown in the Workspaces column. */
+export type MemberWorkspace = {
+    /** Stable workspace id. */
+    id: string;
+    /** Display name. */
+    name: string;
+    /** Short description, or `null` when none is set. */
+    description: string | null;
+    /** Two-letter initials shown in the avatar. */
+    initials: string;
+    /** Accent color tinting the workspace's avatar. */
+    color: AvatarColor;
+};
+/** A member of the system — one row of the Members table. */
+export type Member = {
+    /** Stable user id. */
+    id: string;
+    /** Display name; falls back to the email until the invite is accepted. */
+    name: string;
+    /** Contact email. */
+    email: string;
+    /** Two-letter initials shown in the avatar. */
+    initials: string;
+    /** Accent color tinting the member's avatar (derived, not persisted). */
+    color: AvatarColor;
+    /**
+     * The member's single global role, by key — or `null` when they hold a
+     * custom role outside the three assignable system roles. Never guess a key
+     * for `null`: render {@link Member.roleName} instead and lock any control
+     * that would reassign it.
+     */
+    role: MemberRole | null;
+    /** Human-readable role label (e.g. `Administrator`). */
+    roleName: string;
+    /** Account lifecycle state. */
+    status: MemberStatus;
+    /** When the membership was created; the invite date while `pending`. */
+    joinedAt: Date;
+    /**
+     * Whether this member is the only active administrator, computed
+     * server-side. When set, demote/disable controls are disabled with an
+     * explanatory tooltip — the server rejects those actions regardless.
+     */
+    isLastAdmin: boolean;
+    /** The workspaces this member belongs to. */
+    workspaces: MemberWorkspace[];
+};
+/**
+ * A member the API just issued an invite token for — the response of inviting
+ * and of resending, and nothing else. No mailer sends the link yet, so the
+ * inviting admin is the delivery channel: the token comes back once, is turned
+ * into a link for them to copy, and is never readable again (the server stores
+ * only its hash).
+ */
+export type InvitedMember = Member & {
+    /** The raw invite token, shown to the inviting admin exactly once. */
+    inviteToken: string;
+};
+/**
+ * A member the API just issued a password-reset token for — the response of
+ * `POST /users/:id/password-reset`, and nothing else. No mailer sends the link
+ * yet, so the issuing admin is the delivery channel: the token comes back once,
+ * is turned into a link for them to hand over, and is never readable again (the
+ * server stores only its hash).
+ */
+export type MemberWithResetToken = Member & {
+    /** The raw password-reset token, shown to the issuing admin exactly once. */
+    resetToken: string;
+};
+/** One page of members plus the pagination envelope. */
+export type MemberList = {
+    /** The members on this page. */
+    items: Member[];
+    /** Total members matching the search, across all pages. */
+    total: number;
+    /** 1-based page number. */
+    page: number;
+    /** Rows per page. */
+    pageSize: number;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/types/member/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/domain/types/member/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,wDAAwD;AACxD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAE5D;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE7D,0EAA0E;AAC1E,MAAM,MAAM,eAAe,GAAG;IAC1B,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,KAAK,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,MAAM,GAAG;IACjB,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,EAAE,WAAW,CAAC;IACnB;;;;;OAKG;IACH,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,wEAAwE;IACxE,QAAQ,EAAE,IAAI,CAAC;IACf;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,UAAU,EAAE,eAAe,EAAE,CAAC;CACjC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IACjC,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG;IACxC,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,UAAU,GAAG;IACrB,gCAAgC;IAChC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/lib/domain/types/member/index.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/domain/types/session/index.d.ts

@@ -0,0 +1,18 @@
+/** A live session as the user-detail Sessions tab renders it. */
+export type UserSession = {
+    /** Revocation handle (the session row id). */
+    id: string;
+    /** Originating `User-Agent`, or `null` if it was never captured. */
+    userAgent: string | null;
+    /** Originating IP, or `null` if it was never captured. */
+    ipAddress: string | null;
+    /** When the session was opened. */
+    createdAt: Date;
+    /** Last authenticated request seen on this session. */
+    lastSeenAt: Date;
+    /** Absolute expiry. */
+    expiresAt: Date;
+    /** Whether this is the viewer's own session (never revocable from here). */
+    current: boolean;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/types/session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/domain/types/session/index.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,MAAM,MAAM,WAAW,GAAG;IACtB,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mCAAmC;IACnC,SAAS,EAAE,IAAI,CAAC;IAChB,uDAAuD;IACvD,UAAU,EAAE,IAAI,CAAC;IACjB,uBAAuB;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC"}

package/dist/lib/domain/types/session/index.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/domain/types/workspaceOption/index.d.ts

@@ -0,0 +1,15 @@
+import type { AvatarColor } from '@orthacms/design-system';
+/** A workspace as the invite wizard's assignment step (and the add-to-workspaces dialog) render it. */
+export type WorkspaceOption = {
+    /** Stable workspace id. */
+    id: string;
+    /** Display name. */
+    name: string;
+    /** Short description, or `null` when none is set. */
+    description: string | null;
+    /** Two-letter initials shown in the avatar. */
+    initials: string;
+    /** Accent color tinting the workspace's avatar. */
+    color: AvatarColor;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/types/workspaceOption/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/domain/types/workspaceOption/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,uGAAuG;AACvG,MAAM,MAAM,eAAe,GAAG;IAC1B,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,KAAK,EAAE,WAAW,CAAC;CACtB,CAAC"}

package/dist/lib/domain/types/workspaceOption/index.js

@@ -0,0 +1 @@
+export {};

package/dist/lib/domain/value-objects/email/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A member's email address — a client-side value object mirroring the server's
+ * invite-email rule. It exists so the invite form's email field and its submit
+ * guard validate one rule rather than each re-testing an inline `z.email()` /
+ * regex literal. Format only — whether the address is already taken is a server
+ * concern surfaced as a `409` on submit.
+ */
+export declare class Email {
+    private readonly email;
+    private constructor();
+    /**
+     * Whether `value` is a well-shaped email, without throwing — the check the
+     * invite form's field uses for instant, per-keystroke feedback.
+     */
+    static isValid(value: string): boolean;
+    /**
+     * Builds an {@link Email}, throwing on an empty, over-long, or wrongly-shaped
+     * value. Used by the invite use-case as a last guard before the request.
+     */
+    static create(value: string): Email;
+    /** The underlying email string. */
+    get value(): string;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/domain/value-objects/email/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/domain/value-objects/email/index.ts"],"names":[],"mappings":"AAWA;;;;;;GAMG;AACH,qBAAa,KAAK;IACM,OAAO,CAAC,QAAQ,CAAC,KAAK;IAA1C,OAAO;IAEP;;;OAGG;IACH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAQtC;;;OAGG;IACH,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK;IAOnC,mCAAmC;IACnC,IAAI,KAAK,IAAI,MAAM,CAElB;CACJ"}