@pisti-paypiller/backend 0.0.0-stage → 0.7.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Pisti
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,134 @@
-# Temporary Holding Version
+# @pisti-paypiller/backend
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The framework-free Pisti server SDK, shaped like `@clerk/backend`: authenticate any Fetch API
+`Request` (session cookies with the handshake, session tokens, API keys, M2M and OAuth tokens),
+call the backend API and verify webhooks. Express apps should use
+[`@pisti-paypiller/express`](../express/README.md), which is built on this package.
+
+```ts
+import { createPistiClient } from "@pisti-paypiller/backend";
+
+const pisti = createPistiClient({
+    secretKey: process.env.PISTI_SECRET_KEY,
+    publishableKey: process.env.PISTI_PUBLISHABLE_KEY,
+});
+
+// Next.js route handler, Hono, Bun.serve, Deno, Cloudflare Workers…
+export async function GET(request: Request) {
+    const state = await pisti.authenticateRequest(request, {
+        authorizedParties: ["https://app.example.com"],
+    });
+    if (state.status === "handshake") return new Response(null, { status: 307, headers: state.headers });
+    if (!state.isAuthenticated) return new Response("Unauthorized", { status: 401 });
+    const { userId } = state.toAuth();
+    return Response.json(await pisti.users.getUser(userId));
+}
+```
+
+| Export | What it does | Clerk equivalent |
+| --- | --- | --- |
+| `createPistiClient(options?)` | A `PistiClient` with `authenticateRequest()`, `verifyToken()` and the backend API resources | `createClerkClient()` |
+| `authenticateRequest(request, options?)` | Returns a `RequestState`: `status` (`signed-in`, `signed-out`, `handshake`), `isAuthenticated`, `reason`, `headers`, `toAuth()`. Never throws for a bad token. | `authenticateRequest()` |
+| `verifyToken(token, options?)` | Verifies a session token and returns its claims, or throws `PistiError` (401, `token_expired` or `invalid_token`) | `verifyToken()` |
+| `verifyWebhook(request, options?)` | Verifies a webhook from a Fetch `Request` (or `{ body, headers }`) and returns a typed event | `verifyWebhook()` |
+| `parsePublishableKey(key)` | Decodes the Frontend API URL from a publishable key | — |
+
+Requires Node.js 22.12 or later, or any runtime with `fetch` and Web Crypto.
+
+## Configuration
+
+Every option falls back to an environment variable:
+
+| Option | Variable | Used for |
+| --- | --- | --- |
+| `publishableKey` | `PISTI_PUBLISHABLE_KEY` | Finding the issuer and checking the token's environment. Required. |
+| `secretKey` | `PISTI_SECRET_KEY` | The backend API and verifying API keys |
+| `jwtKey` | `PISTI_JWT_KEY` | Networkless verification with the PEM public key from the console (API keys → JWT public key). Without it, signing keys are fetched once and cached. |
+| `authorizedParties` | `PISTI_AUTHORIZED_PARTIES` (comma-separated) | Origins allowed to have requested session tokens. Recommended in production. |
+| `signingSecret` (webhooks) | `PISTI_WEBHOOK_SIGNING_SECRET` | Webhook signatures |
+
+## Authenticating requests
+
+`authenticateRequest` reads `Authorization: Bearer` first, then the `__session` cookie.
+
+**Session cookies and the handshake.** `@pisti-paypiller/react` keeps `__session` (a 60-second session
+token) and `__client_uat` (the last sign-in time) on your origin. When a page request arrives
+with an expired or missing session cookie but `__client_uat` says the visitor is signed in, the
+state is `status: "handshake"`: respond with a `307` and `state.headers`. The browser goes through
+your environment's Frontend API, which refreshes the cookie and returns to the same URL, so
+server-rendered pages never show a signed-in visitor as signed out. API requests are never
+redirected; they are signed out until the browser SDK refreshes the cookie.
+
+**Token types.** `acceptsToken` chooses what a route accepts, like Clerk:
+
+| `acceptsToken` | Token | `toAuth()` |
+| --- | --- | --- |
+| `"session_token"` (default) | Session token from `@pisti-paypiller/react` | `userId`, `sessionId`, `orgId`, `orgRole`, `orgSlug`, `orgPermissions`, `sessionClaims`, `factorVerificationAge`, `has()`, `getToken()` |
+| `"api_key"` | An end user's `ak_…` key, created with `<APIKeys />`; verified with the backend API, and a successful verification is reused for up to 10 seconds per process | `id`, `name`, `subject`, `userId`, `scopes`, `claims` |
+| `"m2m_token"` | Client-credentials token from a confidential OAuth application | `id`, `subject`, `machineId`, `scopes`, `claims` |
+| `"oauth_token"` | Access token Pisti issued to an OAuth application for a user | `id`, `userId`, `clientId`, `scopes`, `claims` |
+| an array or `"any"` | Any of those | Narrow with `tokenType` |
+
+A token of a type the route doesn't accept is signed out with `reason: "token-type-mismatch"`.
+
+`has({ permission, role, reverification })` on session auth objects matches Clerk's, including
+the reverification presets `"strict_mfa"`, `"strict"`, `"moderate"` and `"lax"` or
+`{ level, afterMinutes }`.
+
+## Backend API
+
+```ts
+import { createPistiClient, PistiManagementError } from "@pisti-paypiller/backend";
+
+const pisti = createPistiClient();
+const user = await pisti.users.getUser(userId);
+const { items, nextCursor } = await pisti.users.getUserList({ limit: 50, search: "alex" });
+const total = await pisti.users.getCount({ status: "active" });
+const { items: sessions } = await pisti.sessions.getSessionList({ userId, status: "active" });
+await pisti.apiKeys.revokeApiKey(keyId, { revocationReason: "Leaked in a log" });
+```
+
+| Resource | Methods |
+| --- | --- |
+| `users` | `getUserList`, `getUserListAll`, `getCount`, `getUser`, `createUser`, `updateUser`, `deleteUser`, `banUser`, `unbanUser`, `lockUser`, `unlockUser`, `getUserEmailAddressList`, `addEmailAddress`, `setEmailVerification`, `setPrimaryEmail`, `removeEmailAddress`, `getUserExternalAccountList` |
+| `sessions` | `getSessionList({ userId, status })`, `getSession`, `revokeSession` |
+| `apiKeys` | `getApiKeyList({ userId, includeRevoked })`, `getApiKey`, `updateApiKey(id, { scopes, claims })`, `revokeApiKey`, `verifySecret` |
+| `organizations` | `getOrganizationList`, `getOrganization`, `createOrganization`, `updateOrganization`, `deleteOrganization`, `getOrganizationMembershipList`, `updateOrganizationMembership`, `deleteOrganizationMembership`, `getOrganizationInvitationList`, `createOrganizationInvitation`, `reissueOrganizationInvitation`, `revokeOrganizationInvitation`, `getRoleList`, `createRole`, `updateRole`, `deleteRole`, `getPermissionList` |
+| `webhooks` | `catalog`, `endpoints`, `createEndpoint`, `updateEndpoint`, `archiveEndpoint`, `rotateSecret`, `sendTest`, `deliveries`, `delivery`, `replay` |
+| `externalProviders` | `list`, `create`, `update`, `delete` |
+
+`getUser`, `getUserList` and `createUser` return the same `User`: `id`, `firstName`, `lastName`,
+`fullName`, `imageUrl`, `hasImage`, `primaryEmailAddressId`, `emailAddresses`, `status`,
+`banned`, `locked`, the metadata objects and timestamps. `getInstance()` returns the
+environment, including its `jwtKey`.
+
+Pass `{ signal }` to cancel; `timeoutMs` defaults to 10 seconds; mutations are never retried
+automatically. Errors are `PistiManagementError` with `status`, `requestId`, `code`,
+`fieldErrors`, `blockers` and `retryAfterSeconds`. The client refuses to run in a browser.
+Secret keys cannot create API keys, confidential OAuth applications or client secrets; those
+need a signed-in user or console member.
+
+## Webhooks
+
+```ts
+import { verifyWebhook } from "@pisti-paypiller/backend/webhooks";
+
+export async function POST(request: Request) {
+    try {
+        const event = await verifyWebhook(request);
+        if (event.type === "organizationMembership.created") await addMember(event.data.organization_id, event.data.user_id);
+        return new Response(null, { status: 204 });
+    } catch {
+        return new Response("Invalid signature", { status: 400 });
+    }
+}
+```
+
+`PistiWebhookEvent` is a union keyed by `type`, so checking `event.type` narrows `event.data`.
+Events are thin: `data` holds the resource's ID and references; read the current state with
+the backend API. Verification checks the HMAC-SHA256 signature and timestamp (five minutes'
+tolerance) on the raw body. Pass `{ signingSecret: [current, previous] }` while rotating and
+`{ expectedInstanceId }` to pin events to one environment. Store `event.id` to ignore
+duplicates.
+
+See `sdk.md` in the pisti-docs repository for how the pieces fit.

package/dist/errors.d.ts

@@ -0,0 +1,6 @@
+export declare class PistiError extends Error {
+    readonly status: number;
+    readonly code: string | null;
+    constructor(status: number, message: string, code?: string | null);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,qBAAa,UAAW,SAAQ,KAAK;aAEb,MAAM,EAAE,MAAM;aAEd,IAAI,EAAE,MAAM,GAAG,IAAI;IAHvC,YACoB,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM,EACC,IAAI,GAAE,MAAM,GAAG,IAAW,EAI7C;CACJ"}

package/dist/errors.js

@@ -0,0 +1,11 @@
+export class PistiError extends Error {
+    status;
+    code;
+    constructor(status, message, code = null) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = "PistiError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AACA,MAAM,OAAO,UAAW,SAAQ,KAAK;IAEb,MAAM;IAEN,IAAI;IAHxB,YACoB,MAAc,EAC9B,OAAe,EACC,IAAI,GAAkB,IAAI;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;sBAJC,MAAM;oBAEN,IAAI;QAGpB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC7B,CAAC;CACJ"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { createPistiClient, PistiClient, PistiManagementError } from "./management.js";
+export { verifyToken, authenticateRequest, authObject, signedOutAuthObject, unauthenticatedObject, acceptedTokenTypes, tokenFrom, readCookie, SESSION_COOKIE, CLIENT_UAT_COOKIE, HANDSHAKE_PARAMETER, } from "./tokens.js";
+export { verifyWebhook, verifyWebhookPayload, PistiWebhookError } from "./webhooks.js";
+export type { PistiWebhookEvent, VerifyWebhookOptions, UserEventData, SessionEventData, OrganizationEventData, OrganizationMembershipEventData, OrganizationInvitationEventData, } from "./webhooks.js";
+export { parsePublishableKey } from "./keys.js";
+export type { PublishableKeyInfo } from "./keys.js";
+export { PistiError } from "./errors.js";
+export type * from "./management-types.js";
+export type { AuthObject, SignedInAuthObject, SignedOutAuthObject, SessionClaims, CheckAuthorizationParams, ReverificationLevel, RequestState, VerifyTokenOptions, AuthenticateRequestOptions, TokenType, AcceptsToken, AnyAuthObject, AuthObjectFor, ApiKeyAuthObject, M2MAuthObject, OAuthAuthObject, AuthenticatedApiKey, AuthenticatedM2MToken, AuthenticatedOAuthToken, UnauthenticatedMachineObject, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EACH,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,mBAAmB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvF,YAAY,EACR,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,+BAA+B,EAC/B,+BAA+B,GAClC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,mBAAmB,uBAAuB,CAAC;AAC3C,YAAY,EACR,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,wBAAwB,EACxB,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,0BAA0B,EAC1B,SAAS,EACT,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,4BAA4B,GAC/B,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { createPistiClient, PistiClient, PistiManagementError } from "./management.js";
+export { verifyToken, authenticateRequest, authObject, signedOutAuthObject, unauthenticatedObject, acceptedTokenTypes, tokenFrom, readCookie, SESSION_COOKIE, CLIENT_UAT_COOKIE, HANDSHAKE_PARAMETER, } from "./tokens.js";
+export { verifyWebhook, verifyWebhookPayload, PistiWebhookError } from "./webhooks.js";
+export { parsePublishableKey } from "./keys.js";
+export { PistiError } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvF,OAAO,EACH,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,SAAS,EACT,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,mBAAmB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAUvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,12 @@
+export interface PublishableKeyInfo {
+    environment: "test" | "live";
+    /** The environment's Frontend API, for example https://api.pisti.com/v1/fapi/fa_123. */
+    frontendApi: URL;
+    frontendApiId: string;
+    /** The token issuer whose published keys sign session tokens. */
+    issuer: URL;
+}
+/** Publishable keys are `pk_test_` or `pk_live_` followed by the base64url Frontend API URL and a `$`. */
+export declare function parsePublishableKey(key: string): PublishableKeyInfo;
+export declare function trustedUrl(value: string, development: boolean): URL;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IAC/B,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,wFAAwF;IACxF,WAAW,EAAE,GAAG,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,MAAM,EAAE,GAAG,CAAC;CACf;AAED,0GAA0G;AAC1G,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAqCnE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,GAAG,CAmBnE"}

package/dist/keys.js

@@ -0,0 +1,45 @@
+/** Publishable keys are `pk_test_` or `pk_live_` followed by the base64url Frontend API URL and a `$`. */
+export function parsePublishableKey(key) {
+    const match = typeof key === "string"
+        ? /^pk_(test|live)_([A-Za-z0-9_-]+)$/.exec(key.trim())
+        : null;
+    if (!match)
+        throw new Error("Provide a Pisti publishable key that starts with pk_test_ or pk_live_.");
+    let decoded;
+    try {
+        decoded = Buffer.from(match[2], "base64url").toString("utf8");
+    }
+    catch {
+        throw new Error("The publishable key is malformed.");
+    }
+    if (!decoded.endsWith("$"))
+        throw new Error("The publishable key is malformed.");
+    const frontendApi = new URL(decoded.slice(0, -1));
+    const segments = frontendApi.pathname.split("/").filter(Boolean);
+    const frontendApiId = segments.at(-1) ?? "";
+    if (segments.length < 3 ||
+        segments.at(-2) !== "fapi" ||
+        segments.at(-3) !== "v1" ||
+        !/^[A-Za-z0-9_-]{3,64}$/.test(frontendApiId))
+        throw new Error("The publishable key is malformed.");
+    const environment = match[1];
+    trustedUrl(frontendApi.origin, environment === "test");
+    const issuer = new URL(frontendApi.pathname.slice(0, frontendApi.pathname.length - `v1/fapi/${frontendApiId}`.length), frontendApi.origin);
+    return { environment, frontendApi, frontendApiId, issuer };
+}
+export function trustedUrl(value, development) {
+    if (typeof value !== "string" || value.length > 2048)
+        throw new Error("Provide a URL of at most 2048 characters.");
+    const url = new URL(value);
+    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname) ||
+        url.hostname.endsWith(".localhost");
+    if (url.username ||
+        url.password ||
+        url.search ||
+        url.hash ||
+        (url.protocol !== "https:" &&
+            !(development && loopback && url.protocol === "http:")))
+        throw new Error("Pisti URLs must use HTTPS; development keys also allow http://localhost.");
+    return url;
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AASA,0GAA0G;AAC1G,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC3C,MAAM,KAAK,GACP,OAAO,GAAG,KAAK,QAAQ;QACnB,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtD,CAAC,CAAC,IAAI,CAAC;IACf,IAAI,CAAC,KAAK;QACN,MAAM,IAAI,KAAK,CACX,wEAAwE,CAC3E,CAAC;IACN,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IACI,QAAQ,CAAC,MAAM,GAAG,CAAC;QACnB,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM;QAC1B,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QACxB,CAAC,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC;QAE5C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAoB,CAAC;IAChD,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CAClB,WAAW,CAAC,QAAQ,CAAC,KAAK,CACtB,CAAC,EACD,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,WAAW,aAAa,EAAE,CAAC,MAAM,CAClE,EACD,WAAW,CAAC,MAAM,CACrB,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,WAAoB;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,QAAQ,GACV,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxC,IACI,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI;QACR,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACtB,CAAC,CAAC,WAAW,IAAI,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QAE3D,MAAM,IAAI,KAAK,CACX,0EAA0E,CAC7E,CAAC;IACN,OAAO,GAAG,CAAC;AACf,CAAC"}

package/dist/management-types.d.ts

@@ -0,0 +1,311 @@
+export interface ManagementClientOptions {
+    /** Defaults to `PISTI_SECRET_KEY`. Needed only for the management API. Never expose it in browser code. */
+    secretKey?: string | undefined;
+    /** Defaults to `PISTI_PUBLISHABLE_KEY`; it tells the client where Pisti is. */
+    publishableKey?: string | undefined;
+    /** Origins allowed to have requested session tokens. Defaults to `PISTI_AUTHORIZED_PARTIES`. */
+    authorizedParties?: string[] | undefined;
+    timeoutMs?: number | undefined;
+}
+export interface ManagedInstance {
+    id: string;
+    name: string;
+    environment: "development" | "staging" | "production";
+    audience: string;
+    publishableKey: string;
+    /** PEM public key for networkless session token verification (`jwtKey`). */
+    jwtKey: string;
+    signupEnabled: boolean;
+}
+/** An end user's API key. Users create their own with `<APIKeys />`; your backend lists them, grants scopes and
+ * claims, revokes and verifies them. A key created before its owner's last credential change reads as revoked. */
+export interface ApiKey {
+    id: string;
+    object: "api_key";
+    type: "api_key";
+    name: string;
+    description: string | null;
+    /** The user who owns the key. */
+    subject: string;
+    userId: string;
+    /** The first characters of the secret, to help users recognise a key. */
+    keyPrefix: string;
+    scopes: string[];
+    claims: Record<string, unknown> | null;
+    revoked: boolean;
+    revocationReason: string | null;
+    expired: boolean;
+    expiresAt: string | null;
+    lastUsedAt: string | null;
+    createdAt: string;
+}
+/** Replaces a key's scopes and claims. */
+export interface UpdateApiKeyInput {
+    scopes: string[];
+    /** A JSON object of at most 4096 bytes. */
+    claims?: Record<string, unknown> | null;
+}
+export interface ApiKeyListOptions extends ManagementRequestOptions {
+    userId?: string;
+    includeRevoked?: boolean;
+    limit?: number;
+    cursor?: string;
+}
+export interface ManagementRequestOptions {
+    signal?: AbortSignal;
+}
+export interface ManagementListOptions extends ManagementRequestOptions {
+    limit?: number;
+    cursor?: string;
+    search?: string;
+}
+export interface ManagementPage<T> {
+    items: T[];
+    nextCursor: string | null;
+    hasMore: boolean;
+}
+export type UserStatus = "active" | "disabled" | "locked";
+export type Metadata = Record<string, unknown>;
+export interface EmailAddress {
+    id: string;
+    object: "email_address";
+    emailAddress: string;
+    verification: {
+        status: "verified" | "unverified";
+        verifiedAt: string | null;
+    };
+}
+/** The same shape from getUser(), getUserList() and createUser(), like Clerk's User. */
+export interface User {
+    id: string;
+    object: "user";
+    instanceId: string;
+    firstName: string;
+    lastName: string;
+    fullName: string | null;
+    imageUrl: string | null;
+    hasImage: boolean;
+    primaryEmailAddressId: string | null;
+    emailAddresses: EmailAddress[];
+    status: UserStatus;
+    banned: boolean;
+    locked: boolean;
+    publicMetadata: Metadata;
+    privateMetadata: Metadata;
+    unsafeMetadata: Metadata;
+    lastSignInAt: string | null;
+    tokensValidAfter: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CreateUserInput {
+    email: string;
+    /** Set true only when your trusted source has already verified ownership. Defaults to false. */
+    emailVerified?: boolean;
+    /** Required for verified creation. Describe the trusted verification source (10–500 characters). */
+    verificationReason?: string;
+    firstName?: string;
+    lastName?: string;
+    password?: string;
+    imageUrl?: string | null;
+    publicMetadata?: Metadata;
+    privateMetadata?: Metadata;
+    unsafeMetadata?: Metadata;
+}
+export interface UpdateUserInput {
+    expectedUpdatedAt: string;
+    firstName: string;
+    lastName: string;
+    imageUrl?: string | null;
+    publicMetadata: Metadata;
+    privateMetadata: Metadata;
+    unsafeMetadata: Metadata;
+}
+export interface DirectoryExternalAccount {
+    id: string;
+    provider: string;
+    providerAccountId: string;
+    email: string | null;
+    createdAt: string;
+}
+export type SessionStatus = "active" | "revoked" | "expired";
+export interface Session {
+    id: string;
+    object: "session";
+    userId: string;
+    status: SessionStatus;
+    lastActiveAt: string;
+    /** When the session ends if it stays idle. */
+    expireAt: string;
+    /** When the session ends regardless of activity. */
+    abandonAt: string;
+    authenticatedAt: string;
+    mfaAuthenticatedAt: string | null;
+    revokedAt: string | null;
+    createdAt: string;
+}
+export interface SessionListOptions extends ManagementRequestOptions {
+    userId?: string;
+    status?: SessionStatus;
+    limit?: number;
+    cursor?: string;
+}
+export interface ManagedOrganization {
+    id: string;
+    instanceId: string;
+    name: string;
+    slug: string;
+    imageUrl: string | null;
+    maxMemberships: number | null;
+    publicMetadata: Metadata;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CreateOrganizationInput {
+    name: string;
+    slug: string;
+    imageUrl?: string | null;
+    maxMemberships?: number | null;
+    publicMetadata?: Metadata;
+    privateMetadata?: Metadata;
+}
+export interface UpdateOrganizationInput extends CreateOrganizationInput {
+    expectedUpdatedAt: string;
+}
+export interface ManagedOrganizationMember {
+    id: string;
+    userId: string;
+    email: string;
+    roleId: string;
+    roleKey: string;
+    createdAt: string;
+}
+export interface ManagedInvitation {
+    id: string;
+    email: string;
+    roleId: string;
+    status: "pending" | "accepted" | "expired" | "revoked";
+    expiresAt: string;
+    createdAt: string;
+    acceptedAt: string | null;
+}
+export interface InvitationResult {
+    id: string;
+    token: string;
+    expiresAt: string;
+    deliveryStatus: "queued";
+    queuedAt: string;
+}
+export interface ManagedRole {
+    id: string;
+    key: string;
+    name: string;
+    description: string | null;
+    isSystem: boolean;
+    permissions: string[];
+}
+export interface RoleInput {
+    key: string;
+    name: string;
+    description?: string | null;
+    permissionIds: string[];
+}
+export interface ManagedPermission {
+    id: string;
+    key: string;
+    name: string;
+    description: string | null;
+    isSystem: boolean;
+}
+export interface DeletionBlocker {
+    resource: string;
+    count: number;
+    resolution: string;
+}
+export interface ManagedExternalProvider {
+    id: string;
+    name: string;
+    displayName: string;
+    issuerUrl: string;
+    clientId: string;
+    secretConfigured: boolean;
+    enabled: boolean;
+    allowSignup: boolean;
+    connectedAccounts: number;
+    callbackUrl: string;
+    updatedAt: string;
+}
+export interface ExternalProviderInput {
+    name: string;
+    displayName: string;
+    issuerUrl: string;
+    clientId: string;
+    enabled: boolean;
+    allowSignup: boolean;
+    clientSecret?: string;
+}
+export interface CreateExternalProviderInput extends ExternalProviderInput {
+    clientSecret: string;
+}
+export interface UpdateExternalProviderInput extends ExternalProviderInput {
+    expectedUpdatedAt: string;
+}
+export type WebhookEventType = "user.created" | "user.updated" | "user.deleted" | "session.created" | "session.ended" | "organization.created" | "organization.updated" | "organization.deleted" | "organizationMembership.created" | "organizationMembership.updated" | "organizationMembership.deleted" | "organizationInvitation.created" | "organizationInvitation.updated" | "organizationInvitation.accepted" | "organizationInvitation.revoked" | "organizationInvitation.expired";
+export interface WebhookEndpointInput {
+    name: string;
+    url: string;
+    eventTypes: WebhookEventType[];
+    enabled: boolean;
+}
+export interface UpdateWebhookEndpointInput extends WebhookEndpointInput {
+    expectedUpdatedAt: string;
+}
+export interface ManagedWebhookEndpoint extends WebhookEndpointInput {
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface WebhookSecretResult {
+    endpoint: ManagedWebhookEndpoint;
+    signingSecret: string;
+}
+export type WebhookDeliveryStatus = "pending" | "sending" | "retrying" | "delivered" | "failed" | "cancelled";
+export interface WebhookDeliveryListOptions extends ManagementRequestOptions {
+    limit?: number;
+    cursor?: string;
+    endpointId?: string;
+    status?: WebhookDeliveryStatus;
+}
+export interface ManagedWebhookDelivery {
+    id: string;
+    eventId: string;
+    eventType: string;
+    endpointId: string;
+    endpointName: string;
+    status: WebhookDeliveryStatus;
+    attempts: number;
+    replayCount: number;
+    createdAt: string;
+    lastAttemptAt: string | null;
+    nextAttemptAt: string;
+    deadlineAt: string;
+    lastStatusCode: number | null;
+    lastErrorCode: string | null;
+    deliveredAt: string | null;
+}
+export interface WebhookDeliveryDetails {
+    payload: import("./webhooks.js").PistiWebhookEvent;
+    status: WebhookDeliveryStatus;
+    attemptCount: number;
+    /** The most recent 100 attempts, including interrupted attempts without a result. */
+    attempts: WebhookDeliveryAttempt[];
+}
+export interface WebhookDeliveryAttempt {
+    number: number;
+    startedAt: string;
+    completedAt: string | null;
+    statusCode: number | null;
+    errorCode: string | null;
+    durationMilliseconds: number | null;
+}
+//# sourceMappingURL=management-types.d.ts.map

package/dist/management-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-types.d.ts","sourceRoot":"","sources":["../src/management-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACpC,2GAA2G;IAC3G,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,gGAAgG;IAChG,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACzC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;CAC1B;AAED;kHACkH;AAClH,MAAM,WAAW,MAAM;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAkB,SAAQ,wBAAwB;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;CACxB;AAED,MAAM,WAAW,qBAAsB,SAAQ,wBAAwB;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAC1D,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/C,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE;QAAE,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAClF;AAED,wFAAwF;AACxF,MAAM,WAAW,IAAI;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,QAAQ,CAAC;IACzB,eAAe,EAAE,QAAQ,CAAC;IAC1B,cAAc,EAAE,QAAQ,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,CAAC,EAAE,QAAQ,CAAC;IAC1B,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,cAAc,CAAC,EAAE,QAAQ,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,QAAQ,CAAC;IACzB,eAAe,EAAE,QAAQ,CAAC;IAC1B,cAAc,EAAE,QAAQ,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,OAAO;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAmB,SAAQ,wBAAwB;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,QAAQ,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,CAAC,EAAE,QAAQ,CAAC;IAC1B,eAAe,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IACpE,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,QAAQ,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,2BAA4B,SAAQ,qBAAqB;IACtE,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA4B,SAAQ,qBAAqB;IACtE,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,gBAAgB,GACtB,cAAc,GACd,cAAc,GACd,cAAc,GACd,iBAAiB,GACjB,eAAe,GACf,sBAAsB,GACtB,sBAAsB,GACtB,sBAAsB,GACtB,gCAAgC,GAChC,gCAAgC,GAChC,gCAAgC,GAChC,gCAAgC,GAChC,gCAAgC,GAChC,iCAAiC,GACjC,gCAAgC,GAChC,gCAAgC,CAAC;AAEvC,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;CACpB;AACD,MAAM,WAAW,0BAA2B,SAAQ,oBAAoB;IACpE,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,sBAAuB,SAAQ,oBAAoB;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,mBAAmB;IAChC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAC9E,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAClC;AACD,MAAM,WAAW,sBAAsB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AACD,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,OAAO,eAAe,EAAE,iBAAiB,CAAC;IACnD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,QAAQ,EAAE,sBAAsB,EAAE,CAAC;CACtC;AACD,MAAM,WAAW,sBAAsB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC"}

package/dist/management-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=management-types.js.map

package/dist/management-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-types.js","sourceRoot":"","sources":["../src/management-types.ts"],"names":[],"mappings":""}