@portaidentity/sdk 1.5.1 → 1.6.0

package/dist/domains/users.js

@@ -4,14 +4,18 @@
  * @module domains/users
  */
 import { listAll } from '../pagination/index.js';
-import { unwrapData, unwrapWithEtag, etagHeaders, toQueryParams } from './helpers.js';
+import { etagHeaders, toQueryParams, unwrapData, unwrapWithEtag } from './helpers.js';
 export function createUsersDomain(transport) {
     function userBase(orgId) {
         return `/organizations/${orgId}/users`;
     }
     return {
         async list(orgId, params) {
-            const res = await transport.request({ method: 'GET', path: userBase(orgId), params: toQueryParams(params) });
+            const res = await transport.request({
+                method: 'GET',
+                path: userBase(orgId),
+                params: toQueryParams(params),
+            });
             return res.body;
         },
         listAll(orgId, params) {
@@ -22,27 +26,76 @@ export function createUsersDomain(transport) {
             return unwrapWithEtag(res);
         },
         async create(input) {
-            const res = await transport.request({ method: 'POST', path: userBase(input.organizationId), body: input });
+            const res = await transport.request({
+                method: 'POST',
+                path: userBase(input.organizationId),
+                body: input,
+            });
             return unwrapData(res.body);
         },
         async update(orgId, userId, input, etag) {
             const res = await transport.request({
-                method: 'PUT', path: `${userBase(orgId)}/${userId}`, body: input, headers: etagHeaders(etag),
+                method: 'PUT',
+                path: `${userBase(orgId)}/${userId}`,
+                body: input,
+                headers: etagHeaders(etag),
             });
             return unwrapData(res.body);
         },
         async invite(input) {
-            const res = await transport.request({ method: 'POST', path: `${userBase(input.organizationId)}/invite`, body: input });
+            const res = await transport.request({
+                method: 'POST',
+                path: `${userBase(input.organizationId)}/invite`,
+                body: input,
+            });
+            return unwrapData(res.body);
+        },
+        async invitePreview(input) {
+            const res = await transport.request({
+                method: 'POST',
+                path: `${userBase(input.organizationId)}/invite/preview`,
+                body: input,
+            });
             return unwrapData(res.body);
         },
         async setPassword(orgId, userId, input) {
-            await transport.request({ method: 'POST', path: `${userBase(orgId)}/${userId}/password`, body: input });
+            await transport.request({
+                method: 'POST',
+                path: `${userBase(orgId)}/${userId}/password`,
+                body: input,
+            });
+        },
+        async clearPassword(orgId, userId) {
+            await transport.request({ method: 'DELETE', path: `${userBase(orgId)}/${userId}/password` });
+        },
+        async verifyEmail(orgId, userId) {
+            await transport.request({
+                method: 'POST',
+                path: `${userBase(orgId)}/${userId}/verify-email`,
+            });
+        },
+        async exportData(orgId, userId) {
+            const res = await transport.request({
+                method: 'GET',
+                path: `${userBase(orgId)}/${userId}/export`,
+            });
+            return unwrapData(res.body);
+        },
+        async purge(orgId, userId) {
+            // The server requires an explicit confirmation header to perform the
+            // irreversible GDPR purge (X-Confirm-Purge: true).
+            const res = await transport.request({
+                method: 'POST',
+                path: `${userBase(orgId)}/${userId}/purge`,
+                headers: { 'X-Confirm-Purge': 'true' },
+            });
+            return unwrapData(res.body);
         },
         async suspend(orgId, userId) {
             await transport.request({ method: 'POST', path: `${userBase(orgId)}/${userId}/suspend` });
         },
-        async activate(orgId, userId) {
-            await transport.request({ method: 'POST', path: `${userBase(orgId)}/${userId}/activate` });
+        async unsuspend(orgId, userId) {
+            await transport.request({ method: 'POST', path: `${userBase(orgId)}/${userId}/unsuspend` });
         },
         async lock(orgId, userId) {
             await transport.request({ method: 'POST', path: `${userBase(orgId)}/${userId}/lock` });
@@ -58,7 +111,65 @@ export function createUsersDomain(transport) {
         },
         async getHistory(orgId, userId, params) {
             const res = await transport.request({
-                method: 'GET', path: `${userBase(orgId)}/${userId}/history`, params: toQueryParams(params),
+                method: 'GET',
+                path: `${userBase(orgId)}/${userId}/history`,
+                params: toQueryParams(params),
+            });
+            return unwrapData(res.body);
+        },
+    };
+}
+export function createStandaloneUsersDomain(transport) {
+    const base = '/users';
+    return {
+        async get(userId) {
+            const res = await transport.request({ method: 'GET', path: `${base}/${userId}` });
+            return unwrapWithEtag(res);
+        },
+        async update(userId, input, etag) {
+            const res = await transport.request({
+                method: 'PUT',
+                path: `${base}/${userId}`,
+                body: input,
+                headers: etagHeaders(etag),
+            });
+            return unwrapData(res.body);
+        },
+        async setPassword(userId, input) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/password`, body: input });
+        },
+        async clearPassword(userId) {
+            await transport.request({ method: 'DELETE', path: `${base}/${userId}/password` });
+        },
+        async verifyEmail(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/verify-email` });
+        },
+        async deactivate(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/deactivate` });
+        },
+        async reactivate(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/reactivate` });
+        },
+        async activate(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/activate` });
+        },
+        async suspend(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/suspend` });
+        },
+        async unsuspend(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/unsuspend` });
+        },
+        async lock(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/lock` });
+        },
+        async unlock(userId) {
+            await transport.request({ method: 'POST', path: `${base}/${userId}/unlock` });
+        },
+        async getHistory(userId, params) {
+            const res = await transport.request({
+                method: 'GET',
+                path: `${base}/${userId}/history`,
+                params: toQueryParams(params),
             });
             return unwrapData(res.body);
         },

package/dist/domains/users.js.map

@@ -1 +1 @@
-{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/domains/users.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAmBtF,MAAM,UAAU,iBAAiB,CAAC,SAAwB;IACxD,SAAS,QAAQ,CAAC,KAAa;QAC7B,OAAO,kBAAkB,KAAK,QAAQ,CAAC;IACzC,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAO;YACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7G,OAAO,GAAG,CAAC,IAA+B,CAAC;QAC7C,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,MAAO;YACpB,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM;YACrB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7F,OAAO,cAAc,CAAO,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3G,OAAO,UAAU,CAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAK;YACtC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC;aAC7F,CAAC,CAAC;YACH,OAAO,UAAU,CAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvH,OAAO,UAAU,CAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK;YACpC,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1G,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM;YACzB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,UAAU,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM;YAC1B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,WAAW,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM;YACtB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;YACxB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,SAAS,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;YAC5B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,aAAa,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;YAC5B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,aAAa,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAO;YACrC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAC3F,CAAC,CAAC;YACH,OAAO,UAAU,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/domains/users.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAcjD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA2CtF,MAAM,UAAU,iBAAiB,CAAC,SAAwB;IACxD,SAAS,QAAQ,CAAC,KAAa;QAC7B,OAAO,kBAAkB,KAAK,QAAQ,CAAC;IACzC,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAO;YACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACrB,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,IAA+B,CAAC;QAC7C,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,MAAO;YACpB,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM;YACrB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7F,OAAO,cAAc,CAAO,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;gBACpC,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,OAAO,UAAU,CAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAK;YACtC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE;gBACpC,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,OAAO,UAAU,CAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS;gBAChD,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,OAAO,UAAU,CAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,iBAAiB;gBACxD,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,OAAO,UAAU,CAAsB,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK;YACpC,MAAM,SAAS,CAAC,OAAO,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,WAAW;gBAC7C,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM;YAC/B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,WAAW,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM;YAC7B,MAAM,SAAS,CAAC,OAAO,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,eAAe;aAClD,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;YAC5B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,SAAS;aAC5C,CAAC,CAAC;YACH,OAAO,UAAU,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM;YACvB,qEAAqE;YACrE,mDAAmD;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,QAAQ;gBAC1C,OAAO,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE;aACvC,CAAC,CAAC;YACH,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM;YACzB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,UAAU,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM;YAC3B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,YAAY,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM;YACtB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;YACxB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,SAAS,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;YAC5B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,aAAa,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM;YAC5B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,aAAa,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAO;YACrC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,UAAU;gBAC5C,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,UAAU,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC;AAyCD,MAAM,UAAU,2BAA2B,CAAC,SAAwB;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC;IAEtB,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM;YACd,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;YAClF,OAAO,cAAc,CAAO,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAK;YAC/B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,EAAE;gBACzB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,OAAO,UAAU,CAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK;YAC7B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAM;YACxB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,WAAW,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM;YACtB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,eAAe,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAM;YACrB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,aAAa,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAM;YACrB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,aAAa,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,WAAW,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,UAAU,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,MAAM;YACpB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,YAAY,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM;YACjB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,MAAO;YAC9B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,UAAU;gBACjC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,UAAU,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/types/common.d.ts

@@ -52,23 +52,21 @@ export interface ETagResponse<T> {
 }
 /**
  * Entity change history entry returned by `getHistory()` methods.
+ *
+ * Mirrors the server `HistoryEntry` (src/lib/entity-history.ts) — entries are
+ * audit-log rows projected to `{ id, eventType, actorId, metadata, createdAt }`.
+ * The server has no `entityType`/`entityId`/`action`/`changes`/`performedBy`
+ * fields; those were SDK drift (AR-18).
  */
 export interface HistoryEntry {
-    /** History entry ID */
+    /** History entry (audit-log) ID */
     id: string;
-    /** Entity type (e.g., 'organization', 'user') */
-    entityType: string;
-    /** Entity ID */
-    entityId: string;
-    /** Action performed (e.g., 'created', 'updated', 'status_changed') */
-    action: string;
-    /** Changes made (field → { old, new }) */
-    changes: Record<string, {
-        old: unknown;
-        new: unknown;
-    }>;
-    /** User who made the change */
-    performedBy: string | null;
+    /** Event type (e.g., 'user.login', 'org.updated') */
+    eventType: string;
+    /** ID of the actor who triggered the event, or null for system events */
+    actorId: string | null;
+    /** Arbitrary event metadata recorded with the audit entry */
+    metadata: Record<string, unknown> | null;
     /** ISO 8601 timestamp */
     createdAt: string;
 }

package/dist/types/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/types/common.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,mCAAmC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,4BAA4B;IAC5B,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,sBAAsB;IACtB,IAAI,EAAE,CAAC,CAAC;IACR,8DAA8D;IAC9D,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxD,+BAA+B;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/types/common.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,mCAAmC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,4BAA4B;IAC5B,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,sBAAsB;IACtB,IAAI,EAAE,CAAC,CAAC;IACR,8DAA8D;IAC9D,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/types/index.d.ts

@@ -14,12 +14,12 @@ export type { ClaimDefinition, ClaimValueType, CreateClaimDefinitionInput, Updat
 export type { ConfigEntry, SetConfigInput, } from './config.js';
 export type { SigningKey } from './keys.js';
 export type { AuditEntry, AuditListParams, } from './audit.js';
-export type { DashboardStats, EntityCount, } from './stats.js';
+export type { DashboardStats, StatsOverview, OrgStats, StatusCounts, UserStatsCounts, LoginActivity, LoginActivityWindows, SystemHealth, } from './stats.js';
 export type { AdminSession, SessionListParams, RevokeUserSessionsResult, } from './sessions.js';
 export type { BulkOrgAction, BulkUserAction, BulkOrgStatusInput, BulkUserStatusInput, BulkItemResult, BulkOperationResult, } from './bulk.js';
 export type { BrandingAssets } from './branding.js';
 export type { ExportEntityType, ExportFormat, ExportParams, } from './exports.js';
-export type { TwoFactorMethod, TwoFactorStatus, } from './two-factor.js';
+export type { TwoFactorMethod, TwoFactorStatus, TwoFactorPolicyResult, TwoFactorSummary, RegenerateRecoveryCodesResult, } from './two-factor.js';
 export type { ImportMode, ImportManifest, ImportEntityResult, ImportSkippedResult, ImportErrorResult, ImportClientCredentials, ImportResult, } from './imports.js';
 export type { UserRoleAssignment, AssignRoleInput, } from './user-roles.js';
 export type { UserClaimEntry, SetUserClaimValueInput, } from './user-claims.js';

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,IAAI,EACJ,UAAU,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,IAAI,EACJ,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,UAAU,EACV,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,0BAA0B,EAC1B,cAAc,EACd,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAC;AAGrB,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,YAAY,EACV,UAAU,EACV,eAAe,GAChB,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,cAAc,EACd,WAAW,GACZ,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAGnB,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,eAAe,EACf,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,GACb,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,kBAAkB,EAClB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACV,cAAc,EACd,sBAAsB,GACvB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AAGrB,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,uBAAuB,EACvB,uBAAuB,EACvB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,mBAAmB,EACnB,eAAe,GAChB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,IAAI,EACJ,UAAU,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,IAAI,EACJ,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,UAAU,EACV,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,0BAA0B,EAC1B,cAAc,EACd,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,WAAW,EACX,cAAc,GACf,MAAM,aAAa,CAAC;AAGrB,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5C,YAAY,EACV,UAAU,EACV,eAAe,GAChB,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,cAAc,EACd,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,aAAa,EACb,oBAAoB,EACpB,YAAY,GACb,MAAM,YAAY,CAAC;AAIpB,YAAY,EACV,YAAY,EACZ,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,GACpB,MAAM,WAAW,CAAC;AAGnB,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AAKtB,YAAY,EACV,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AAKzB,YAAY,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,GACb,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,kBAAkB,EAClB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACV,cAAc,EACd,sBAAsB,GACvB,MAAM,kBAAkB,CAAC"}

package/dist/types/organizations.d.ts

@@ -23,22 +23,39 @@ export interface Organization {
     createdAt: string;
     updatedAt: string;
 }
+/**
+ * Nested branding object accepted by the org create/update schemas
+ * (src/routes/organizations.ts — `branding{}`). `null` clears a field.
+ */
+export interface OrganizationBrandingInput {
+    logoUrl?: string | null;
+    faviconUrl?: string | null;
+    primaryColor?: string | null;
+    companyName?: string | null;
+    customCss?: string | null;
+}
+/**
+ * Input for creating an organization — mirrors the server
+ * `createOrganizationSchema`. The server does NOT accept `twoFactorPolicy`
+ * on create (AR-17/PF-005); branding is a nested object, not flat fields.
+ */
 export interface CreateOrganizationInput {
     name: string;
     slug?: string;
     defaultLocale?: string;
-    twoFactorPolicy?: TwoFactorPolicy;
     defaultLoginMethods?: LoginMethod[];
+    branding?: OrganizationBrandingInput;
 }
+/**
+ * Input for updating an organization — mirrors the server
+ * `updateOrganizationSchema`. The server does NOT accept `slug` or
+ * `twoFactorPolicy` on update (PF-005); branding is a nested object.
+ */
 export interface UpdateOrganizationInput {
     name?: string;
-    slug?: string;
     defaultLocale?: string;
-    twoFactorPolicy?: TwoFactorPolicy;
     defaultLoginMethods?: LoginMethod[];
-    brandingPrimaryColor?: string | null;
-    brandingCompanyName?: string | null;
-    brandingCustomCss?: string | null;
+    branding?: OrganizationBrandingInput;
 }
 export interface BrandingInput {
     logo?: Blob | Buffer;

package/dist/types/organizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/types/organizations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,CAAC;AAC/F,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;AAMpD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,kBAAkB,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,mBAAmB,EAAE,WAAW,EAAE,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;IACpC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CACzB"}
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../src/types/organizations.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AACrE,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,CAAC;AAC/F,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,YAAY,CAAC;AAMpD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,kBAAkB,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,mBAAmB,EAAE,WAAW,EAAE,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;IACpC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;CACzB"}

package/dist/types/permissions.d.ts

@@ -3,6 +3,10 @@
  *
  * @module types/permissions
  */
+/**
+ * A permission — mirrors the server `mapRowToPermission` (src/rbac/types.ts).
+ * The server projection has no `updatedAt` field; it was SDK drift (AR-18).
+ */
 export interface Permission {
     id: string;
     applicationId: string;
@@ -11,7 +15,6 @@ export interface Permission {
     slug: string;
     description: string | null;
     createdAt: string;
-    updatedAt: string;
 }
 export interface CreatePermissionInput {
     applicationId: string;

package/dist/types/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/types/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/types/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/types/stats.d.ts

@@ -1,18 +1,69 @@
 /**
  * Dashboard statistics types for the Porta SDK.
  *
+ * Mirrors the server `src/lib/stats.ts` — `StatsOverview` (system-wide) and
+ * `OrgStats` (per-organization). The old flat `DashboardStats`/`EntityCount`
+ * shapes were SDK drift (AR-18) and have been replaced.
+ *
  * @module types/stats
  */
-export interface DashboardStats {
-    organizations: EntityCount;
-    applications: EntityCount;
-    clients: EntityCount;
-    users: EntityCount;
-    activeSessionCount: number;
-    auditEventCount: number;
-}
-export interface EntityCount {
+/**
+ * Count breakdown by entity status. Always includes `total`; additional keys
+ * are per-status counts (e.g. `active`, `suspended`) discovered at runtime.
+ */
+export interface StatusCounts {
     total: number;
-    active: number;
+    [status: string]: number;
 }
+/** Login activity for a time window. */
+export interface LoginActivity {
+    successful: number;
+    failed: number;
+}
+/** System health check results. */
+export interface SystemHealth {
+    database: boolean;
+    redis: boolean;
+}
+/** Login activity broken down by rolling time window. */
+export interface LoginActivityWindows {
+    last24h: LoginActivity;
+    last7d: LoginActivity;
+    last30d: LoginActivity;
+}
+/** User counts plus growth/activity metrics. */
+export type UserStatsCounts = StatusCounts & {
+    newLast7d: number;
+    newLast30d: number;
+    activeLast30d: number;
+};
+/**
+ * System-wide dashboard statistics — mirrors the server `StatsOverview`,
+ * returned by `GET /stats/overview` (unwrapped from `{ data }`).
+ */
+export interface StatsOverview {
+    organizations: StatusCounts;
+    users: UserStatsCounts;
+    applications: StatusCounts;
+    clients: StatusCounts;
+    loginActivity: LoginActivityWindows;
+    systemHealth: SystemHealth;
+    generatedAt: string;
+}
+/**
+ * Per-organization dashboard statistics — mirrors the server `OrgStats`,
+ * returned by `GET /stats/organization/:orgId` (unwrapped from `{ data }`).
+ */
+export interface OrgStats {
+    organizationId: string;
+    users: UserStatsCounts;
+    clients: StatusCounts;
+    loginActivity: LoginActivityWindows;
+    generatedAt: string;
+}
+/**
+ * Backwards-compatible alias — the SDK `stats.get()` return type is
+ * `DashboardStats`, which is the system-wide `StatsOverview`.
+ */
+export type DashboardStats = StatsOverview;
 //# sourceMappingURL=stats.d.ts.map

package/dist/types/stats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/types/stats.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,WAAW,CAAC;IAC3B,YAAY,EAAE,WAAW,CAAC;IAC1B,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,WAAW,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../src/types/stats.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mCAAmC;AACnC,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,yDAAyD;AACzD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,gDAAgD;AAChD,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,YAAY,CAAC;IAC5B,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,YAAY,CAAC;IACtB,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,aAAa,EAAE,oBAAoB,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC"}

package/dist/types/stats.js

@@ -1,6 +1,10 @@
 /**
  * Dashboard statistics types for the Porta SDK.
  *
+ * Mirrors the server `src/lib/stats.ts` — `StatsOverview` (system-wide) and
+ * `OrgStats` (per-organization). The old flat `DashboardStats`/`EntityCount`
+ * shapes were SDK drift (AR-18) and have been replaced.
+ *
  * @module types/stats
  */
 export {};

package/dist/types/stats.js.map

@@ -1 +1 @@
-{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../src/types/stats.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../src/types/stats.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/types/two-factor.d.ts

@@ -4,11 +4,53 @@
  * @module types/two-factor
  */
 export type TwoFactorMethod = 'email' | 'totp';
+/**
+ * A user's current 2FA status — mirrors the server `TwoFactorStatus`
+ * (src/two-factor/types.ts). The old `userId`/`emailEnabled`/`totpEnabled`/
+ * `enforcedBy` fields were SDK drift (AR-18) and have been removed.
+ */
 export interface TwoFactorStatus {
-    userId: string;
-    emailEnabled: boolean;
-    totpEnabled: boolean;
+    /** Whether 2FA is enabled for the user */
+    enabled: boolean;
+    /** The configured 2FA method, or null if not enabled */
+    method: TwoFactorMethod | null;
+    /** Whether a TOTP authenticator is configured */
+    totpConfigured: boolean;
+    /** Number of unused recovery codes remaining */
     recoveryCodesRemaining: number;
-    enforcedBy: string | null;
+}
+/**
+ * Organization 2FA policy values — mirrors the server `TwoFactorPolicy`
+ * (src/two-factor/types.ts).
+ */
+export type TwoFactorPolicy = 'optional' | 'required_email' | 'required_totp' | 'required_any';
+/**
+ * Response from the org 2FA policy endpoints (GET/PUT `.../two-factor/policy`).
+ * Mirrors the server `{ twoFactorPolicy, validPolicies }` shape.
+ */
+export interface TwoFactorPolicyResult {
+    twoFactorPolicy: TwoFactorPolicy;
+    validPolicies: TwoFactorPolicy[];
+}
+/**
+ * Org 2FA enrollment summary — mirrors the server `TwoFactorSummary`
+ * (src/two-factor/service.ts), returned by GET `.../two-factor/summary`.
+ */
+export interface TwoFactorSummary {
+    totalUsers: number;
+    enabledCount: number;
+    disabledCount: number;
+    totpCount: number;
+    emailCount: number;
+    complianceRate: number;
+}
+/**
+ * Result of regenerating a user's recovery codes — mirrors the server
+ * response from POST `.../two-factor/recovery-codes/regenerate`.
+ */
+export interface RegenerateRecoveryCodesResult {
+    recoveryCodes: string[];
+    count: number;
+    warning: string;
 }
 //# sourceMappingURL=two-factor.d.ts.map

package/dist/types/two-factor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"two-factor.d.ts","sourceRoot":"","sources":["../../src/types/two-factor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}
+{"version":3,"file":"two-factor.d.ts","sourceRoot":"","sources":["../../src/types/two-factor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,wDAAwD;IACxD,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,iDAAiD;IACjD,cAAc,EAAE,OAAO,CAAC;IACxB,gDAAgD;IAChD,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,CAAC;AAE/F;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,eAAe,EAAE,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/types/users.d.ts

@@ -3,38 +3,101 @@
  *
  * @module types/users
  */
-export type UserStatus = 'active' | 'invited' | 'suspended' | 'locked' | 'deactivated';
+import type { TwoFactorMethod } from './two-factor.js';
+/**
+ * User status values — mirrors the server `UserStatus` (src/users/types.ts).
+ *
+ * Lifecycle: active → inactive (deactivate) / suspended / locked, and back
+ * to active via reactivate / unsuspend / unlock. There is no `invited` or
+ * `deactivated` status on the server — those were SDK drift (AR-4).
+ */
+export type UserStatus = 'active' | 'inactive' | 'suspended' | 'locked';
+/**
+ * A Porta user — full parity with the server `User` (src/users/types.ts,
+ * `mapRowToUser`, 36 fields). All server timestamp `Date`s are serialized
+ * to ISO-8601 strings over the wire. Profile fields follow the OIDC
+ * Standard Claims (§5.1). The password hash is never exposed — only the
+ * derived `hasPassword` boolean.
+ */
 export interface User {
     id: string;
     organizationId: string;
     email: string;
-    name: string | null;
-    status: UserStatus;
     emailVerified: boolean;
     hasPassword: boolean;
-    failedLoginCount: number;
-    lastLoginAt: string | null;
+    passwordChangedAt: string | null;
+    givenName: string | null;
+    familyName: string | null;
+    middleName: string | null;
+    nickname: string | null;
+    preferredUsername: string | null;
+    profileUrl: string | null;
+    pictureUrl: string | null;
+    websiteUrl: string | null;
+    gender: string | null;
+    birthdate: string | null;
+    zoneinfo: string | null;
+    locale: string | null;
+    phoneNumber: string | null;
+    phoneNumberVerified: boolean;
+    addressStreet: string | null;
+    addressLocality: string | null;
+    addressRegion: string | null;
+    addressPostalCode: string | null;
+    addressCountry: string | null;
+    twoFactorEnabled: boolean;
+    twoFactorMethod: TwoFactorMethod | null;
+    status: UserStatus;
     lockedAt: string | null;
+    lockedReason: string | null;
+    lastLoginAt: string | null;
+    loginCount: number;
+    failedLoginCount: number;
+    lastFailedLoginAt: string | null;
     createdAt: string;
     updatedAt: string;
 }
+/**
+ * Input for creating a user — mirrors the server `createUserSchema`
+ * (src/routes/users.ts). Only `email` is required by the server; the SDK
+ * also threads `organizationId` to build the org-scoped route.
+ */
 export interface CreateUserInput {
     organizationId: string;
     email: string;
-    name?: string;
+    givenName?: string;
+    familyName?: string;
     password?: string;
 }
+/**
+ * Input for updating a user profile — mirrors the server `updateUserSchema`.
+ * `null` clears a field; `undefined` leaves it unchanged.
+ */
 export interface UpdateUserInput {
     email?: string;
-    name?: string | null;
+    givenName?: string | null;
+    familyName?: string | null;
 }
+/**
+ * Input for inviting a user — mirrors the server `inviteUserSchema`
+ * (src/routes/users.ts). The server accepts `displayName` (not `name`),
+ * plus an optional personal message, role/claim pre-assignments, and locale.
+ */
 export interface InviteUserInput {
     organizationId: string;
     email: string;
-    name?: string;
-    roles?: string[];
-    message?: string;
-    expiresInHours?: number;
+    displayName?: string;
+    personalMessage?: string;
+    roles?: Array<{
+        applicationId: string;
+        roleId: string;
+    }>;
+    claims?: Array<{
+        applicationId: string;
+        claimDefinitionId: string;
+        value: unknown;
+    }>;
+    locale?: string;
 }
 export interface SetPasswordInput {
     password: string;