@portaidentity/cli 1.7.3 → 1.9.0

package/dist/admin/organization-dialogs.js

@@ -0,0 +1,303 @@
+/** Organization and identity dialogs for the embedded administration application. */
+import { Button, col, Commands, cover, Dialog, fixed, grow, Input, Label, ListView, row, signal, spacer, stringWidth, Text, } from '@jsvision/ui';
+import { normalizeServerOrigin } from '../global-options.js';
+import { runAbortableAdminDialog } from './application-runtime.js';
+import { deleteActionLabel, deleteConfirmationLayout } from './delete-confirmation-layout.js';
+/** Maximum number of terminal cells used for one organization row. */
+const ORGANIZATION_ROW_WIDTH = 68;
+const DELETE_ORGANIZATION_COMMAND = 'admin:delete-organization';
+/** Dialog that keeps an unauthenticated user inside the Authenticate-or-Quit decision. */
+class AuthenticationGateDialog extends Dialog {
+    /** Lets the global Quit shortcut close this modal before the application handles Quit. */
+    onEvent(event) {
+        if (event.event.type === 'command' && event.event.command === Commands.quit && this.modalHost) {
+            this.modalHost.endModal(Commands.quit);
+            this.modalHost = null;
+            event.handled = true;
+            return;
+        }
+        super.onEvent(event);
+    }
+    /** Ignores Escape so the unusable application beneath the gate cannot be exposed. */
+    resolveCancel(event) {
+        event.handled = true;
+    }
+}
+/** Quit button that treats Enter like Space while focused instead of invoking the default button. */
+class AuthenticationQuitButton extends Button {
+    /** Exits on focused Enter and delegates every other activation to the standard button. */
+    onEvent(event) {
+        if (event.event.type === 'key' && event.event.key === 'enter' && this.state.focused) {
+            event.emit?.(Commands.no);
+            event.handled = true;
+            return;
+        }
+        super.onEvent(event);
+    }
+}
+/** Organization list that also accepts a literal decoded space key for activation. */
+class OrganizationListView extends ListView {
+    currentItems;
+    /** Creates the fixed, order-preserving organization list. */
+    constructor(currentItems, selected) {
+        super({
+            items: currentItems,
+            getText: organizationRow,
+            selected,
+            sorted: false,
+            command: Commands.ok,
+        });
+        this.currentItems = currentItems;
+    }
+    /** Treats a literal space exactly like JSVision's normalized `space` key. */
+    onEvent(event) {
+        if (event.event.type === 'key' && event.event.key === ' ') {
+            const index = this.focused.peek();
+            if (this.currentItems.peek()[index]) {
+                this.selected.set(index);
+                event.emit?.(Commands.ok);
+                event.handled = true;
+            }
+            return;
+        }
+        super.onEvent(event);
+    }
+}
+/** Dialog that lets the organization-specific Delete command complete its modal session. */
+class OrganizationChooserDialog extends Dialog {
+    /** Routes Delete through the same enabled-state and validity checks as standard dialog actions. */
+    onEvent(event) {
+        if (event.event.type === 'command' && event.event.command === DELETE_ORGANIZATION_COMMAND) {
+            this.handleTerminating(DELETE_ORGANIZATION_COMMAND, event);
+            return;
+        }
+        super.onEvent(event);
+    }
+}
+/** Returns a dialog size capped to the currently available terminal surface. */
+function dialogSize(host, preferredWidth, preferredHeight) {
+    return {
+        width: Math.max(1, Math.min(preferredWidth, host.desktop.bounds.width)),
+        height: Math.max(1, Math.min(preferredHeight, host.desktop.bounds.height)),
+    };
+}
+/** Mounts one dialog and guarantees removal after modal completion. */
+async function runDialog(host, dialog) {
+    host.desktop.addWindow(dialog);
+    try {
+        return (await host.loop.execView(dialog)) ?? Commands.cancel;
+    }
+    finally {
+        host.desktop.removeWindow(dialog);
+    }
+}
+/** Runs one abortable organization dialog and always removes its window. */
+async function runDeleteDialog(host, dialog, operationSignal) {
+    host.desktop.addWindow(dialog);
+    try {
+        return await runAbortableAdminDialog(host.loop, operationSignal, async () => (await host.loop.execView(dialog)) ?? Commands.cancel);
+    }
+    catch (error) {
+        if (error instanceof DOMException && error.name === 'AbortError')
+            return Commands.cancel;
+        throw error;
+    }
+    finally {
+        host.desktop.removeWindow(dialog);
+    }
+}
+/** Shows the mandatory authentication gate and returns one explicit user choice. */
+export async function showAuthenticationGate(host) {
+    const { width, height } = dialogSize(host, 52, 10);
+    const dialog = new AuthenticationGateDialog({
+        title: 'Authentication required',
+        width,
+        height,
+        centered: true,
+    });
+    dialog.closable = false;
+    dialog.add(cover(col({ padding: { top: 1, right: 2, bottom: 1, left: 2 } }, fixed(new Text('Authenticate with Porta to continue.'), 1), spacer(), fixed(row({ gap: 1, justify: 'end' }, new Button('~A~uthenticate', { command: Commands.ok, default: true }), new AuthenticationQuitButton('~Q~uit', { command: Commands.no })), 2))));
+    return (await runDialog(host, dialog)) === Commands.ok ? 'authenticate' : 'quit';
+}
+/** Accepts a bounded, control-free identity value or returns a fixed fallback. */
+function safeIdentityText(value, fallback) {
+    if (!value || value.length > 80)
+        return fallback;
+    for (const character of value) {
+        const codePoint = character.codePointAt(0) ?? 0;
+        if (codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f))
+            return fallback;
+    }
+    return value;
+}
+/** Removes a row at the first terminal control and clips it by display width. */
+function clipDisplayText(value, maximumWidth) {
+    let result = '';
+    for (const character of value) {
+        const codePoint = character.codePointAt(0) ?? 0;
+        if (codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f))
+            break;
+        if (stringWidth(result + character) > maximumWidth)
+            break;
+        result += character;
+    }
+    return result;
+}
+/** Formats one already validated organization for a single terminal row. */
+function organizationRow(organization) {
+    return clipDisplayText(`${organization.name} (${organization.slug}) [${organization.status}]`, ORGANIZATION_ROW_WIDTH);
+}
+/** Converts a fixed operation result into a safe chooser message. */
+function chooserMessage(result) {
+    if (result.kind === 'session-invalid')
+        return 'Authentication is required.';
+    switch (result.failure) {
+        case 'validation':
+            return 'Validation failed';
+        case 'unauthorized':
+            return 'Not authorized';
+        case 'conflict':
+            return 'Conflict';
+        case 'unavailable':
+            return 'Service unavailable';
+        case 'invalid-response':
+            return 'Invalid server response';
+    }
+}
+/** Converts a retained fixed organization failure into the chooser's bounded message. */
+function organizationFailureMessage(failure) {
+    return chooserMessage({ kind: 'failure', failure });
+}
+/** Shows trusted identity details and restores the previously focused control on close. */
+export async function showWhoAmIDialog(host, state, insecure) {
+    const { width, height } = dialogSize(host, 58, 12);
+    const lines = [
+        `Server: ${normalizeServerOrigin(state.server).origin}`,
+        `Authenticated — Name: ${safeIdentityText(state.identity.name, 'Verified administrator')}`,
+        `Email: ${safeIdentityText(state.identity.email, 'Not provided')}`,
+    ];
+    if (insecure)
+        lines.push('Warning: insecure TLS verification.');
+    const dialog = new Dialog({ title: 'Who am I', width, height, centered: true });
+    dialog.add(cover(col({ padding: { top: 1, right: 2, bottom: 0, left: 2 } }, fixed(new Text(lines.join('\n')), lines.length), spacer(), fixed(row({ justify: 'center' }, new Button('~O~K', { command: Commands.ok, default: true })), 2))));
+    await runDialog(host, dialog);
+}
+/** Shows the organization list and returns only an explicit typed choice. */
+export async function showOrganizationChooser(host, options) {
+    const { width, height } = dialogSize(host, 76, 18);
+    const organizations = signal([]);
+    const message = signal(options.failure
+        ? organizationFailureMessage(options.failure)
+        : options.capabilities.canReadOrganizations
+            ? 'Loading organizations'
+            : 'Organization listing unavailable');
+    const selected = signal(-1);
+    const list = new OrganizationListView(organizations, selected);
+    const dialog = new OrganizationChooserDialog({
+        title: 'Organizations',
+        width,
+        height,
+        centered: true,
+    });
+    const createAllowed = options.capabilities.canCreateOrganizations;
+    const chooserActions = row({ gap: 1 }, new Button('Cancel', { command: Commands.cancel }), createAllowed && new Button('~C~reate', { command: Commands.yes }), options.capabilities.canReadOrganizations &&
+        new Button('~S~witch', { command: Commands.ok, disabled: () => selected() < 0 }), options.capabilities.canDeleteOrganizations &&
+        new Button('Delete', {
+            command: DELETE_ORGANIZATION_COMMAND,
+            disabled: () => {
+                const organization = organizations()[selected()];
+                return !organization || organization.isSuperAdmin === true;
+            },
+        }), spacer(), new Button('~R~eauthenticate', { command: Commands.no }));
+    dialog.add(cover(col({ gap: 1, padding: { top: 1, right: 2, bottom: 1, left: 2 } }, fixed(new Text(() => message()), 1), grow(list), !createAllowed &&
+        fixed(new Text('Create organization… (requires organization create)'), 1), !options.capabilities.canReadOrganizations &&
+        fixed(new Text('Switch organization… (requires organization read)'), 1), fixed(chooserActions, 2))));
+    if (options.organizations && options.capabilities.canReadOrganizations) {
+        void options.organizations.then((result) => {
+            if (result.kind !== 'success') {
+                message.set(chooserMessage(result));
+                return;
+            }
+            organizations.set([...result.value]);
+            if (!options.failure) {
+                message.set(result.value.length === 0 ? 'No organizations available' : 'Select an organization');
+            }
+        });
+    }
+    const command = await runDialog(host, dialog);
+    if (command === Commands.yes && createAllowed)
+        return { kind: 'create' };
+    if (command === Commands.no)
+        return { kind: 'reauthenticate' };
+    if (command === DELETE_ORGANIZATION_COMMAND) {
+        const organization = organizations.peek()[selected.peek()];
+        if (organization && !organization.isSuperAdmin)
+            return { kind: 'delete', organization };
+    }
+    if (command === Commands.ok) {
+        const organization = organizations.peek()[selected.peek()];
+        if (organization)
+            return { kind: 'switch', organization };
+    }
+    return { kind: 'cancel' };
+}
+/** Builds a validator whose live gate permits editing and whose final gate enforces length bounds. */
+function lengthValidator(minimum, maximum, optional = false) {
+    return {
+        isValidInput: (value) => value.length <= maximum,
+        isValid: (value) => (optional && value.length === 0) || (value.length >= minimum && value.length <= maximum),
+    };
+}
+/** Shows the bounded create form and omits blank optional fields from its result. */
+export async function showCreateOrganizationDialog(host) {
+    const { width, height } = dialogSize(host, 62, 14);
+    const name = signal('');
+    const slug = signal('');
+    const defaultLocale = signal('');
+    const nameInput = new Input({ value: name, maxLength: 255, validator: lengthValidator(1, 255) });
+    const slugInput = new Input({
+        value: slug,
+        maxLength: 100,
+        validator: lengthValidator(3, 100, true),
+    });
+    const localeInput = new Input({
+        value: defaultLocale,
+        maxLength: 10,
+        validator: lengthValidator(2, 10, true),
+    });
+    const dialog = new Dialog({ title: 'Create organization', width, height, centered: true });
+    const field = (label, input) => fixed(row({ gap: 1 }, fixed(new Label(label, input), 17), grow(input)), 1);
+    dialog.add(cover(col({ gap: 1, padding: { top: 1, right: 2, bottom: 1, left: 2 } }, field('~N~ame', nameInput), field('~S~lug', slugInput), field('~D~efault locale', localeInput), spacer(), fixed(row({ gap: 1, justify: 'end' }, new Button('~C~reate', { command: Commands.ok, default: true }), new Button('Cancel', { command: Commands.cancel })), 2))));
+    const command = await runDialog(host, dialog);
+    if (command !== Commands.ok)
+        return { kind: 'cancel' };
+    const input = { name: name.peek() };
+    if (slug.peek())
+        input.slug = slug.peek();
+    if (defaultLocale.peek())
+        input.defaultLocale = defaultLocale.peek();
+    return { kind: 'create', input };
+}
+/** Shows the tenant-owned cascade before permanently deleting an organization. */
+export async function showDeleteOrganizationDialog(host, operationSignal, organization) {
+    const { width, height } = dialogSize(host, 72, 14);
+    const keep = new Button('Keep', { command: Commands.cancel, default: true });
+    const remove = new Button(deleteActionLabel(organization.name, width), {
+        command: Commands.yes,
+    });
+    const dialog = new Dialog({ title: 'Delete organization', width, height, centered: true });
+    const confirmation = deleteConfirmationLayout({
+        dialogWidth: width,
+        details: `Organization: ${organization.name}`,
+        warning: 'Deleting this organization removes its users, clients, and security data.',
+        keep,
+        remove,
+    });
+    dialog.add(cover(confirmation.content));
+    const outcome = runDeleteDialog(host, dialog, operationSignal);
+    host.loop.focusView(keep);
+    return (await outcome) === Commands.yes
+        ? { kind: 'delete', organizationId: organization.id }
+        : { kind: 'cancel' };
+}
+//# sourceMappingURL=organization-dialogs.js.map

package/dist/admin/organization-dialogs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-dialogs.js","sourceRoot":"","sources":["../../src/admin/organization-dialogs.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAGrF,OAAO,EACL,MAAM,EACN,GAAG,EACH,QAAQ,EACR,KAAK,EACL,MAAM,EACN,KAAK,EACL,IAAI,EACJ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,GAAG,EACH,MAAM,EACN,MAAM,EACN,WAAW,EACX,IAAI,GACL,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAmD9F,sEAAsE;AACtE,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,2BAA2B,GAAG,2BAA2B,CAAC;AAEhE,0FAA0F;AAC1F,MAAM,wBAAyB,SAAQ,MAAM;IAC3C,0FAA0F;IAC1F,OAAO,CAAC,KAAoB;QAC1B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9F,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,qFAAqF;IAC3E,aAAa,CAAC,KAAoB;QAC1C,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IACvB,CAAC;CACF;AAED,qGAAqG;AACrG,MAAM,wBAAyB,SAAQ,MAAM;IAC3C,0FAA0F;IAC1F,OAAO,CAAC,KAAoB;QAC1B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACpF,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACrB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,oBAAqB,SAAQ,QAAkC;IAGhD,YAAY;IAF/B,6DAA6D;IAC7D,YACmB,YAAgD,EACjE,QAAwB;QAExB,KAAK,CAAC;YACJ,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,eAAe;YACxB,QAAQ;YACR,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,QAAQ,CAAC,EAAE;SACrB,CAAC,CAAC;4BATc,YAAY;IAU/B,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,KAAoB;QAC1B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzB,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC1B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;CACF;AAED,4FAA4F;AAC5F,MAAM,yBAA0B,SAAQ,MAAM;IAC5C,mGAAmG;IACnG,OAAO,CAAC,KAAoB;QAC1B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,2BAA2B,EAAE,CAAC;YAC1F,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;CACF;AAED,gFAAgF;AAChF,SAAS,UAAU,CACjB,IAAqB,EACrB,cAAsB,EACtB,eAAuB;IAEvB,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,SAAS,CAAC,IAAqB,EAAE,MAAc;IAC5D,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAS,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC;IACvE,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,eAAe,CAC5B,IAAuC,EACvC,MAAc,EACd,eAA4B;IAE5B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,uBAAuB,CAClC,IAAI,CAAC,IAAI,EACT,eAAe,EACf,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAS,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,CAC1E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzF,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAqB;IAErB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,wBAAwB,CAAC;QAC1C,KAAK,EAAE,yBAAyB;QAChC,KAAK;QACL,MAAM;QACN,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,MAAM,CAAC,GAAG,CACR,KAAK,CACH,GAAG,CACD,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EACrD,KAAK,CAAC,IAAI,IAAI,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC,EAC1D,MAAM,EAAE,EACR,KAAK,CACH,GAAG,CACD,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAC1B,IAAI,MAAM,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACrE,IAAI,wBAAwB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CACjE,EACD,CAAC,CACF,CACF,CACF,CACF,CAAC;IAEF,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;AACnF,CAAC;AAED,kFAAkF;AAClF,SAAS,gBAAgB,CAAC,KAAyB,EAAE,QAAgB;IACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CAAC,KAAa,EAAE,YAAoB;IAC1D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;YAAE,MAAM;QACzE,IAAI,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,YAAY;YAAE,MAAM;QAC1D,MAAM,IAAI,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,SAAS,eAAe,CAAC,YAAsC;IAC7D,OAAO,eAAe,CACpB,GAAG,YAAY,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,MAAM,YAAY,CAAC,MAAM,GAAG,EACtE,sBAAsB,CACvB,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CACrB,MAGC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,6BAA6B,CAAC;IAC5E,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,YAAY;YACf,OAAO,mBAAmB,CAAC;QAC7B,KAAK,cAAc;YACjB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,qBAAqB,CAAC;QAC/B,KAAK,kBAAkB;YACrB,OAAO,yBAAyB,CAAC;IACrC,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,SAAS,0BAA0B,CAAC,OAAqC;IACvE,OAAO,cAAc,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAqB,EACrB,KAA8B,EAC9B,QAAiB;IAEjB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG;QACZ,WAAW,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;QACvD,yBAAyB,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE;QAC1F,UAAU,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE;KACnE,CAAC;IACF,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,GAAG,CACR,KAAK,CACH,GAAG,CACD,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EACrD,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAC/C,MAAM,EAAE,EACR,KAAK,CACH,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EACvF,CAAC,CACF,CACF,CACF,CACF,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAqB,EACrB,OAAmC;IAEnC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,MAAM,CAA6B,EAAE,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,CACpB,OAAO,CAAC,OAAO;QACb,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,oBAAoB;YACzC,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,kCAAkC,CACzC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,yBAAyB,CAAC;QAC3C,KAAK,EAAE,eAAe;QACtB,KAAK;QACL,MAAM;QACN,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC;IAClE,MAAM,cAAc,GAAG,GAAG,CACxB,EAAE,GAAG,EAAE,CAAC,EAAE,EACV,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAClD,aAAa,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,EAClE,OAAO,CAAC,YAAY,CAAC,oBAAoB;QACvC,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,EAClF,OAAO,CAAC,YAAY,CAAC,sBAAsB;QACzC,IAAI,MAAM,CAAC,QAAQ,EAAE;YACnB,OAAO,EAAE,2BAA2B;YACpC,QAAQ,EAAE,GAAG,EAAE;gBACb,MAAM,YAAY,GAAG,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACjD,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,YAAY,KAAK,IAAI,CAAC;YAC7D,CAAC;SACF,CAAC,EACJ,MAAM,EAAE,EACR,IAAI,MAAM,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CACzD,CAAC;IACF,MAAM,CAAC,GAAG,CACR,KAAK,CACH,GAAG,CACD,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAC7D,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,EACnC,IAAI,CAAC,IAAI,CAAC,EACV,CAAC,aAAa;QACZ,KAAK,CAAC,IAAI,IAAI,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC,EAC3E,CAAC,OAAO,CAAC,YAAY,CAAC,oBAAoB;QACxC,KAAK,CAAC,IAAI,IAAI,CAAC,mDAAmD,CAAC,EAAE,CAAC,CAAC,EACzE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CACzB,CACF,CACF,CAAC;IAEF,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,YAAY,CAAC,oBAAoB,EAAE,CAAC;QACvE,KAAK,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACzC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,wBAAwB,CACpF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,QAAQ,CAAC,GAAG,IAAI,aAAa;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzE,IAAI,OAAO,KAAK,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAC/D,IAAI,OAAO,KAAK,2BAA2B,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,sGAAsG;AACtG,SAAS,eAAe,CAAC,OAAe,EAAE,OAAe,EAAE,QAAQ,GAAG,KAAK;IACzE,OAAO;QACL,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO;QAChD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC;KAC3F,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAqB;IAErB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC;QAC1B,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC;KACzC,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC;QAC5B,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,KAAY,EAAE,EAAE,CAC5C,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CACR,KAAK,CACH,GAAG,CACD,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAC7D,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC1B,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC1B,KAAK,CAAC,kBAAkB,EAAE,WAAW,CAAC,EACtC,MAAM,EAAE,EACR,KAAK,CACH,GAAG,CACD,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAC1B,IAAI,MAAM,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC/D,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CACnD,EACD,CAAC,CACF,CACF,CACF,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACvD,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,aAAa,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAuC,EACvC,eAA4B,EAC5B,YAAsC;IAEtC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;QACrE,OAAO,EAAE,QAAQ,CAAC,GAAG;KACtB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,wBAAwB,CAAC;QAC5C,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,iBAAiB,YAAY,CAAC,IAAI,EAAE;QAC7C,OAAO,EAAE,2EAA2E;QACpF,IAAI;QACJ,MAAM;KACP,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,QAAQ,CAAC,GAAG;QACrC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC,EAAE,EAAE;QACrD,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACzB,CAAC"}

package/dist/admin/organization-service.d.ts

@@ -0,0 +1,110 @@
+/** Sanitized organization operations for the embedded administration UI. */
+import type { BrandingAssetUploadInput, BrandingDomain, CreateOrganizationInput, OrganizationsDomain, TwoFactorDomain, UpdateBrandingSettingsInput } from '@portaidentity/sdk';
+import type { AdminOrganizationAsset, AdminOrganizationAssetType, AdminOrganizationContext, AdminOrganizationLoginMethod, AdminOrganizationOverviewInput, AdminOrganizationReconciliation, AdminOrganizationResult, AdminOrganizationSettings, AdminOrganizationTwoFactorPolicy, AdminOrganizationWorkspaceMutationResult, AdminOrganizationWorkspaceReadResult } from './state.js';
+/**
+ * Projects the full organization settings used by the focused workspace.
+ *
+ * @param value - Untrusted organization returned by the SDK.
+ * @returns A frozen safe projection, or `undefined` when any retained field is invalid.
+ * @example
+ * ```ts
+ * const settings = validateOrganizationSettings(sdkOrganization);
+ * ```
+ */
+export declare function validateOrganizationSettings(value: unknown): AdminOrganizationSettings | undefined;
+/**
+ * Converts one untrusted SDK row to the only fields retained by the UI.
+ *
+ * @param value - Untrusted organization data returned by the SDK.
+ * @returns The validated four-field projection, or `undefined` for any malformed field.
+ * @example
+ * ```ts
+ * const context = validateOrganizationContext(sdkOrganization);
+ * ```
+ */
+export declare function validateOrganizationContext(value: unknown): AdminOrganizationContext | undefined;
+/** Operations used by the admin application without exposing raw SDK responses. */
+export interface AdminOrganizationOperations {
+    /** Loads and validates the complete organization list once. */
+    readonly listAll: () => Promise<AdminOrganizationResult<readonly AdminOrganizationContext[]>>;
+    /** Refreshes one selected organization without exposing unrelated rows. */
+    readonly reconcile: (selectedId: string) => Promise<AdminOrganizationReconciliation>;
+    /** Creates one organization and validates the returned projection. */
+    readonly create: (input: CreateOrganizationInput) => Promise<AdminOrganizationResult<AdminOrganizationContext>>;
+    /** Permanently deletes one organization. */
+    readonly delete: (id: string) => Promise<AdminOrganizationResult<void>>;
+}
+/**
+ * Creates the narrow organization boundary used by the terminal application.
+ *
+ * The SDK domain is obtained lazily so no authenticated client is constructed before an
+ * organization operation is actually requested.
+ *
+ * @param domain - Returns the organization methods for the currently verified server.
+ * @returns Sanitized list, create, and reconciliation operations.
+ * @example
+ * ```ts
+ * const operations = createAdminOrganizationOperations(() => client.organizations);
+ * const result = await operations.listAll();
+ * ```
+ */
+export declare function createAdminOrganizationOperations(domain: () => Pick<OrganizationsDomain, 'listAll' | 'create' | 'delete'>): AdminOrganizationOperations;
+/** Existing SDK domains required only by the selected-organization workspace. */
+export interface AdminOrganizationWorkspaceDomains {
+    /** Returns organization settings and lifecycle operations for the verified session. */
+    readonly organizations: () => Pick<OrganizationsDomain, 'get' | 'update' | 'activate' | 'suspend'>;
+    /** Returns organization branding settings and asset operations. */
+    readonly branding: () => Pick<BrandingDomain, 'listAssets' | 'updateSettings' | 'uploadAsset' | 'deleteAsset'>;
+    /** Returns the existing organization two-factor policy operations. */
+    readonly twoFactor: () => Pick<TwoFactorDomain, 'getPolicy' | 'setPolicy'>;
+}
+/** Common organization-qualified read signature used by workspace resources. */
+type OrganizationWorkspaceRead<T> = (organizationId: string, signal?: AbortSignal) => Promise<AdminOrganizationWorkspaceReadResult<T>>;
+/** Common organization-qualified mutation signature used by lifecycle actions. */
+type OrganizationWorkspaceMutation = (organizationId: string, signal?: AbortSignal) => Promise<AdminOrganizationWorkspaceMutationResult>;
+/** Common organization-qualified update signature for one validated settings value. */
+type OrganizationWorkspaceUpdate<T> = (organizationId: string, value: T, signal?: AbortSignal) => Promise<AdminOrganizationWorkspaceMutationResult>;
+/** Organization-qualified image upload signature. */
+type OrganizationWorkspaceAssetUpload = (organizationId: string, assetType: AdminOrganizationAssetType, input: BrandingAssetUploadInput, signal?: AbortSignal) => Promise<AdminOrganizationWorkspaceMutationResult>;
+/** Organization-qualified image deletion signature. */
+type OrganizationWorkspaceAssetDelete = (organizationId: string, assetType: AdminOrganizationAssetType, signal?: AbortSignal) => Promise<AdminOrganizationWorkspaceMutationResult>;
+/** Direct validated operations consumed by the organization workspace controller. */
+export interface AdminOrganizationWorkspaceOperations {
+    /** Loads the complete validated organization settings projection. */
+    readonly get: OrganizationWorkspaceRead<AdminOrganizationSettings>;
+    /** Updates changed Overview fields without an ETag. */
+    readonly update: OrganizationWorkspaceUpdate<AdminOrganizationOverviewInput>;
+    /** Activates the selected organization. */
+    readonly activate: OrganizationWorkspaceMutation;
+    /** Suspends the selected organization. */
+    readonly suspend: OrganizationWorkspaceMutation;
+    /** Loads the organization login-method defaults. */
+    readonly getLoginMethods: OrganizationWorkspaceRead<readonly AdminOrganizationLoginMethod[]>;
+    /** Updates the non-empty organization login-method defaults. */
+    readonly updateLoginMethods: OrganizationWorkspaceUpdate<readonly AdminOrganizationLoginMethod[]>;
+    /** Loads the organization-wide password-login two-factor policy. */
+    readonly getTwoFactorPolicy: OrganizationWorkspaceRead<AdminOrganizationTwoFactorPolicy>;
+    /** Updates the organization-wide password-login two-factor policy. */
+    readonly updateTwoFactorPolicy: OrganizationWorkspaceUpdate<AdminOrganizationTwoFactorPolicy>;
+    /** Updates changed branding text fields independently from image assets. */
+    readonly updateBranding: OrganizationWorkspaceUpdate<UpdateBrandingSettingsInput>;
+    /** Lists complete validated logo and favicon metadata. */
+    readonly listAssets: OrganizationWorkspaceRead<readonly AdminOrganizationAsset[]>;
+    /** Creates or replaces one validated image asset. */
+    readonly uploadAsset: OrganizationWorkspaceAssetUpload;
+    /** Permanently removes one stored image asset. */
+    readonly deleteAsset: OrganizationWorkspaceAssetDelete;
+}
+/**
+ * Creates the direct SDK adapter used only by the selected-organization workspace.
+ *
+ * @param domains - Lazy access to the verified session's existing SDK domains.
+ * @returns Validated operations that expose only fixed safe outcomes.
+ * @example
+ * ```ts
+ * const operations = createAdminOrganizationWorkspaceOperations(domains);
+ * ```
+ */
+export declare function createAdminOrganizationWorkspaceOperations(domains: AdminOrganizationWorkspaceDomains): AdminOrganizationWorkspaceOperations;
+export {};
+//# sourceMappingURL=organization-service.d.ts.map

package/dist/admin/organization-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-service.d.ts","sourceRoot":"","sources":["../../src/admin/organization-service.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAS5E,OAAO,KAAK,EACV,wBAAwB,EACxB,cAAc,EACd,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,EACf,2BAA2B,EAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EACV,sBAAsB,EAEtB,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,8BAA8B,EAC9B,+BAA+B,EAC/B,uBAAuB,EACvB,yBAAyB,EACzB,gCAAgC,EAChC,wCAAwC,EACxC,oCAAoC,EACrC,MAAM,YAAY,CAAC;AAgGpB;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,GAAG,SAAS,CAqClG;AA8CD;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,GAAG,SAAS,CAwBhG;AAkCD,mFAAmF;AACnF,MAAM,WAAW,2BAA2B;IAC1C,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,uBAAuB,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAC,CAAC;IAC9F,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACrF,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,uBAAuB,KAC3B,OAAO,CAAC,uBAAuB,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAChE,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;CACzE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,MAAM,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC,GACvE,2BAA2B,CAkF7B;AAED,iFAAiF;AACjF,MAAM,WAAW,iCAAiC;IAChD,uFAAuF;IACvF,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,CAChC,mBAAmB,EACnB,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAC1C,CAAC;IACF,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,CAC3B,cAAc,EACd,YAAY,GAAG,gBAAgB,GAAG,aAAa,GAAG,aAAa,CAChE,CAAC;IACF,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,WAAW,CAAC,CAAC;CAC5E;AAED,gFAAgF;AAChF,KAAK,yBAAyB,CAAC,CAAC,IAAI,CAClC,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,kFAAkF;AAClF,KAAK,6BAA6B,GAAG,CACnC,cAAc,EAAE,MAAM,EACtB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,wCAAwC,CAAC,CAAC;AACvD,uFAAuF;AACvF,KAAK,2BAA2B,CAAC,CAAC,IAAI,CACpC,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,CAAC,EACR,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,wCAAwC,CAAC,CAAC;AAEvD,qDAAqD;AACrD,KAAK,gCAAgC,GAAG,CACtC,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,0BAA0B,EACrC,KAAK,EAAE,wBAAwB,EAC/B,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,wCAAwC,CAAC,CAAC;AACvD,uDAAuD;AACvD,KAAK,gCAAgC,GAAG,CACtC,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,0BAA0B,EACrC,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,wCAAwC,CAAC,CAAC;AAEvD,qFAAqF;AACrF,MAAM,WAAW,oCAAoC;IACnD,qEAAqE;IACrE,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,yBAAyB,CAAC,CAAC;IACnE,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC,8BAA8B,CAAC,CAAC;IAC7E,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC,SAAS,4BAA4B,EAAE,CAAC,CAAC;IAC7F,gEAAgE;IAChE,QAAQ,CAAC,kBAAkB,EAAE,2BAA2B,CACtD,SAAS,4BAA4B,EAAE,CACxC,CAAC;IACF,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,gCAAgC,CAAC,CAAC;IACzF,sEAAsE;IACtE,QAAQ,CAAC,qBAAqB,EAAE,2BAA2B,CAAC,gCAAgC,CAAC,CAAC;IAC9F,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC,2BAA2B,CAAC,CAAC;IAClF,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAAC;IAClF,qDAAqD;IACrD,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;IACvD,kDAAkD;IAClD,QAAQ,CAAC,WAAW,EAAE,gCAAgC,CAAC;CACxD;AAiHD;;;;;;;;;GASG;AACH,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,iCAAiC,GACzC,oCAAoC,CA0HtC"}