@portaidentity/sdk 1.7.3 → 1.8.0

package/dist/domains/clients.js

@@ -4,51 +4,151 @@
  * @module domains/clients
  */
 import { listAll } from '../pagination/index.js';
-import { unwrapData, unwrapWithEtag, etagHeaders, toQueryParams } from './helpers.js';
+import { etagHeaders, isRecord, isStringArray, requireData, requireDataWithEtag, requirePaginatedData, toQueryParams, } from './helpers.js';
+/** Return whether a value is one supported login-method collection. */
+function isLoginMethods(value) {
+    return (isStringArray(value) &&
+        value.every((method) => method === 'password' || method === 'magic_link'));
+}
+/** Validate one complete client returned by the Admin API. */
+function isClient(value) {
+    return (isRecord(value) &&
+        typeof value.id === 'string' &&
+        typeof value.organizationId === 'string' &&
+        typeof value.applicationId === 'string' &&
+        typeof value.clientId === 'string' &&
+        typeof value.clientName === 'string' &&
+        (value.clientType === 'public' || value.clientType === 'confidential') &&
+        (value.applicationType === 'web' ||
+            value.applicationType === 'native' ||
+            value.applicationType === 'spa') &&
+        isStringArray(value.redirectUris) &&
+        isStringArray(value.postLogoutRedirectUris) &&
+        isStringArray(value.grantTypes) &&
+        value.grantTypes.every((grant) => grant === 'authorization_code' ||
+            grant === 'client_credentials' ||
+            grant === 'refresh_token') &&
+        isStringArray(value.responseTypes) &&
+        value.responseTypes.every((responseType) => responseType === 'code') &&
+        typeof value.scope === 'string' &&
+        (value.tokenEndpointAuthMethod === 'client_secret_basic' ||
+            value.tokenEndpointAuthMethod === 'client_secret_post' ||
+            value.tokenEndpointAuthMethod === 'none') &&
+        isStringArray(value.allowedOrigins) &&
+        typeof value.requirePkce === 'boolean' &&
+        (value.loginMethods === null || isLoginMethods(value.loginMethods)) &&
+        isLoginMethods(value.effectiveLoginMethods) &&
+        (value.status === 'active' || value.status === 'inactive') &&
+        typeof value.createdAt === 'string' &&
+        typeof value.updatedAt === 'string');
+}
+/** Validate secret metadata that never contains plaintext. */
+function isClientSecret(value) {
+    return (isRecord(value) &&
+        typeof value.id === 'string' &&
+        typeof value.clientId === 'string' &&
+        (typeof value.label === 'string' || value.label === null) &&
+        (value.status === 'active' || value.status === 'revoked') &&
+        (typeof value.lastUsedAt === 'string' || value.lastUsedAt === null) &&
+        (typeof value.expiresAt === 'string' || value.expiresAt === null) &&
+        typeof value.createdAt === 'string');
+}
+/** Validate a secret returned once by create or generate. */
+function isGeneratedSecret(value) {
+    return (isRecord(value) &&
+        typeof value.id === 'string' &&
+        typeof value.clientId === 'string' &&
+        (typeof value.label === 'string' || value.label === null) &&
+        typeof value.plaintext === 'string' &&
+        (typeof value.expiresAt === 'string' || value.expiresAt === null) &&
+        typeof value.createdAt === 'string');
+}
+/** Validate one client history entry. */
+function isHistoryEntry(value) {
+    return (isRecord(value) &&
+        typeof value.id === 'string' &&
+        typeof value.eventType === 'string' &&
+        (typeof value.actorId === 'string' || value.actorId === null) &&
+        (isRecord(value.metadata) || value.metadata === null) &&
+        typeof value.createdAt === 'string');
+}
+/** Validate the relationship between client type and its optional one-time secret. */
+function isClientCreateResult(value) {
+    if (!isRecord(value) || !isClient(value.client))
+        return false;
+    if (value.client.clientType === 'confidential')
+        return isGeneratedSecret(value.secret);
+    return value.secret === undefined || value.secret === null;
+}
+/** Create the client operations backed by one HTTP transport. */
 export function createClientsDomain(transport) {
     const base = '/clients';
     return {
         async list(params) {
-            const res = await transport.request({ method: 'GET', path: base, params: toQueryParams(params) });
-            return res.body;
+            const res = await transport.request({
+                method: 'GET',
+                path: base,
+                params: toQueryParams(params),
+            });
+            return requirePaginatedData(res.body, isClient);
         },
         listAll(params) {
             return listAll((p) => this.list({ ...params, ...p }), params);
         },
-        async get(idOrClientId) {
-            const res = await transport.request({ method: 'GET', path: `${base}/${idOrClientId}` });
-            return unwrapWithEtag(res);
+        async get(id) {
+            const res = await transport.request({ method: 'GET', path: `${base}/${id}` });
+            return requireDataWithEtag(res, isClient);
         },
         async create(input) {
             const res = await transport.request({ method: 'POST', path: base, body: input });
-            return unwrapData(res.body);
+            const result = requireData(res.body, isClientCreateResult);
+            return result.secret
+                ? { client: result.client, secret: result.secret }
+                : { client: result.client };
         },
-        async update(idOrClientId, input, etag) {
+        async update(id, input, etag) {
             const res = await transport.request({
-                method: 'PUT', path: `${base}/${idOrClientId}`, body: input, headers: etagHeaders(etag),
+                method: 'PUT',
+                path: `${base}/${id}`,
+                body: input,
+                headers: etagHeaders(etag),
             });
-            return unwrapData(res.body);
+            return requireData(res.body, isClient);
+        },
+        async delete(id) {
+            await transport.request({ method: 'DELETE', path: `${base}/${id}` });
         },
-        async revoke(idOrClientId) {
-            await transport.request({ method: 'POST', path: `${base}/${idOrClientId}/revoke` });
+        async activate(id) {
+            await transport.request({ method: 'POST', path: `${base}/${id}/activate` });
         },
-        async restore(idOrClientId) {
-            await transport.request({ method: 'POST', path: `${base}/${idOrClientId}/restore` });
+        async deactivate(id) {
+            await transport.request({ method: 'POST', path: `${base}/${id}/deactivate` });
         },
-        async getHistory(idOrClientId, params) {
-            const res = await transport.request({ method: 'GET', path: `${base}/${idOrClientId}/history`, params: toQueryParams(params) });
-            return unwrapData(res.body);
+        async getHistory(id, params) {
+            const res = await transport.request({
+                method: 'GET',
+                path: `${base}/${id}/history`,
+                params: toQueryParams(params),
+            });
+            return requireData(res.body, (value) => Array.isArray(value) && value.every(isHistoryEntry));
         },
         async listSecrets(clientId) {
             const res = await transport.request({ method: 'GET', path: `${base}/${clientId}/secrets` });
-            return unwrapData(res.body);
+            return requireData(res.body, (value) => Array.isArray(value) && value.every(isClientSecret));
         },
         async generateSecret(clientId, input) {
-            const res = await transport.request({ method: 'POST', path: `${base}/${clientId}/secrets`, body: input });
-            return unwrapData(res.body);
+            const res = await transport.request({
+                method: 'POST',
+                path: `${base}/${clientId}/secrets`,
+                body: input,
+            });
+            return requireData(res.body, isGeneratedSecret);
         },
         async revokeSecret(clientId, secretId) {
-            await transport.request({ method: 'DELETE', path: `${base}/${clientId}/secrets/${secretId}` });
+            await transport.request({
+                method: 'POST',
+                path: `${base}/${clientId}/secrets/${secretId}/revoke`,
+            });
         },
     };
 }

package/dist/domains/clients.js.map

@@ -1 +1 @@
-{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/domains/clients.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAgBtF,MAAM,UAAU,mBAAmB,CAAC,SAAwB;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC;IAExB,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClG,OAAO,GAAG,CAAC,IAAiC,CAAC;QAC/C,CAAC;QAED,OAAO,CAAC,MAAM;YACZ,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,YAAY;YACpB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,YAAY,EAAE,EAAE,CAAC,CAAC;YACxF,OAAO,cAAc,CAAS,GAAG,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,OAAO,UAAU,CAAS,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,IAAK;YACrC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC;aACxF,CAAC,CAAC;YACH,OAAO,UAAU,CAAS,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,YAAY;YACvB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,YAAY,SAAS,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,YAAY;YACxB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,MAAO;YACpC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,YAAY,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC/H,OAAO,UAAU,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,QAAQ;YACxB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,UAAU,EAAE,CAAC,CAAC;YAC5F,OAAO,UAAU,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAM;YACnC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1G,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ;YACnC,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,YAAY,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjG,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/domains/clients.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EACL,WAAW,EACX,QAAQ,EACR,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,GACd,MAAM,cAAc,CAAC;AAEtB,uEAAuE;AACvE,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,aAAa,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,YAAY,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QACxC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QACvC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,CAAC;QACtE,CAAC,KAAK,CAAC,eAAe,KAAK,KAAK;YAC9B,KAAK,CAAC,eAAe,KAAK,QAAQ;YAClC,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC;QAClC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;QACjC,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC;QAC3C,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/B,KAAK,CAAC,UAAU,CAAC,KAAK,CACpB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,oBAAoB;YAC9B,KAAK,KAAK,oBAAoB;YAC9B,KAAK,KAAK,eAAe,CAC5B;QACD,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;QAClC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,KAAK,MAAM,CAAC;QACpE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,KAAK,CAAC,uBAAuB,KAAK,qBAAqB;YACtD,KAAK,CAAC,uBAAuB,KAAK,oBAAoB;YACtD,KAAK,CAAC,uBAAuB,KAAK,MAAM,CAAC;QAC3C,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QACnC,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS;QACtC,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnE,cAAc,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAC3C,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;QAC1D,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CACpC,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QACzD,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QACzD,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;QACnE,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;QACjE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CACpC,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QACzD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;QACjE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CACpC,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;QAC7D,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;QACrD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CACpC,CAAC;AACJ,CAAC;AASD,sFAAsF;AACtF,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,cAAc;QAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;AAC7D,CAAC;AA6BD,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,SAAwB;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC;IAExB,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,CAAC,MAAM;YACZ,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,EAAE;YACV,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC,MAAM;gBAClB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBAClD,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAK;YAC3B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE;gBACrB,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE;YACb,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,EAAE;YACf,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAE;YACjB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,MAAO;YAC1B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,UAAU;gBAC7B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,WAAW,CAChB,GAAG,CAAC,IAAI,EACR,CAAC,KAAK,EAA2B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CACxF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,QAAQ;YACxB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,UAAU,EAAE,CAAC,CAAC;YAC5F,OAAO,WAAW,CAChB,GAAG,CAAC,IAAI,EACR,CAAC,KAAK,EAA2B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CACxF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAM;YACnC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,UAAU;gBACnC,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAClD,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ;YACnC,MAAM,SAAS,CAAC,OAAO,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,IAAI,IAAI,QAAQ,YAAY,QAAQ,SAAS;aACvD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domains/config.d.ts

@@ -4,11 +4,28 @@
  * @module domains/config
  */
 import type { HttpTransport } from '../transport/types.js';
-import type { ConfigEntry } from '../types/index.js';
+import type { ConfigEntry, ConfigKey, ConfigValue, ConfigUpdateResult, ConfigBatchUpdateResult } from '../types/index.js';
+/** Metadata-driven access to the closed operational configuration catalog. */
 export interface ConfigDomain {
-    list(): Promise<ConfigEntry[]>;
+    /** Read all authoritative entries, preserving server catalog order. */
+    list(): Promise<readonly ConfigEntry[]>;
+    /** Read an untrusted name; non-catalog names receive the server's uniform 404. */
     get(key: string): Promise<ConfigEntry>;
-    set(key: string, value: string): Promise<ConfigEntry>;
+    /**
+     * Update one native scalar and retain the required restart action.
+     * @throws {PortaError} If a JavaScript caller supplies a bare dot path segment
+     */
+    set(key: ConfigKey, value: ConfigValue): Promise<ConfigUpdateResult>;
+    /** Atomically update selected catalog keys; the server validates the entire batch. */
+    setMany(values: Readonly<Partial<Record<ConfigKey, ConfigValue>>>): Promise<ConfigBatchUpdateResult>;
 }
+/**
+ * Bind configuration operations to the existing authenticated HTTP transport.
+ * Transport errors propagate unchanged; the server remains the validation authority.
+ * @param transport - Authenticated Admin API transport
+ * @returns Configuration operations without local policy metadata copies
+ * @example
+ * await createConfigDomain(transport).set('magic_link_ttl', 1200);
+ */
 export declare function createConfigDomain(transport: HttpTransport): ConfigDomain;
 //# sourceMappingURL=config.d.ts.map

package/dist/domains/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/domains/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,WAAW,YAAY;IAC3B,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACvD;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,aAAa,GAAG,YAAY,CAezE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/domains/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,WAAW,EACX,kBAAkB,EAClB,uBAAuB,EACxB,MAAM,mBAAmB,CAAC;AAI3B,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,IAAI,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IACxC,kFAAkF;IAClF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC;;;OAGG;IACH,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACrE,sFAAsF;IACtF,OAAO,CACL,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,GACxD,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,aAAa,GAAG,YAAY,CAiCzE"}

package/dist/domains/config.js

@@ -4,6 +4,15 @@
  * @module domains/config
  */
 import { unwrapData } from './helpers.js';
+import { PortaError } from '../errors/index.js';
+/**
+ * Bind configuration operations to the existing authenticated HTTP transport.
+ * Transport errors propagate unchanged; the server remains the validation authority.
+ * @param transport - Authenticated Admin API transport
+ * @returns Configuration operations without local policy metadata copies
+ * @example
+ * await createConfigDomain(transport).set('magic_link_ttl', 1200);
+ */
 export function createConfigDomain(transport) {
     return {
         async list() {
@@ -11,12 +20,30 @@ export function createConfigDomain(transport) {
             return unwrapData(res.body);
         },
         async get(key) {
-            const res = await transport.request({ method: 'GET', path: `/config/${key}` });
+            const res = await transport.request({
+                method: 'GET',
+                path: `/config/${encodeURIComponent(key)}`,
+            });
             return unwrapData(res.body);
         },
         async set(key, value) {
-            const res = await transport.request({ method: 'PUT', path: `/config/${key}`, body: { value } });
-            return unwrapData(res.body);
+            const encodedKey = encodeURIComponent(key);
+            // JavaScript and agent callers bypass compile-time keys. Bare dots survive encoding and
+            // are normalized by fetch, so reject them before they can leave the configuration route.
+            if (encodedKey === '.' || encodedKey === '..') {
+                throw new PortaError('Configuration key is invalid.');
+            }
+            const res = await transport.request({
+                method: 'PUT',
+                path: `/config/${encodedKey}`,
+                body: { value },
+            });
+            // Updates intentionally retain the envelope: unwrapping would lose the restart decision.
+            return res.body;
+        },
+        async setMany(values) {
+            const res = await transport.request({ method: 'PUT', path: '/config', body: { values } });
+            return res.body;
         },
     };
 }

package/dist/domains/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/domains/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAQ1C,MAAM,UAAU,kBAAkB,CAAC,SAAwB;IACzD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,OAAO,UAAU,CAAgB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,UAAU,CAAc,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK;YAClB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAChG,OAAO,UAAU,CAAc,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/domains/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAmBhD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAwB;IACzD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,OAAO,UAAU,CAAyB,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW,kBAAkB,CAAC,GAAG,CAAC,EAAE;aAC3C,CAAC,CAAC;YACH,OAAO,UAAU,CAAc,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK;YAClB,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC3C,wFAAwF;YACxF,yFAAyF;YACzF,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC9C,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW,UAAU,EAAE;gBAC7B,IAAI,EAAE,EAAE,KAAK,EAAE;aAChB,CAAC,CAAC;YACH,yFAAyF;YACzF,OAAO,GAAG,CAAC,IAA0B,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1F,OAAO,GAAG,CAAC,IAA+B,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domains/custom-claims.d.ts

@@ -11,7 +11,8 @@ export interface CustomClaimsDomain {
     get(appId: string, claimId: string): Promise<ClaimDefinition>;
     create(appId: string, input: CreateClaimDefinitionInput): Promise<ClaimDefinition>;
     update(appId: string, claimId: string, input: UpdateClaimDefinitionInput): Promise<ClaimDefinition>;
-    archive(appId: string, claimId: string): Promise<void>;
+    /** Permanently delete a claim definition through its parent-qualified route. */
+    delete(appId: string, claimId: string): Promise<void>;
 }
 export declare function createCustomClaimsDomain(transport: HttpTransport): CustomClaimsDomain;
 //# sourceMappingURL=custom-claims.d.ts.map

package/dist/domains/custom-claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom-claims.d.ts","sourceRoot":"","sources":["../../src/domains/custom-claims.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAIhJ,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACjG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,aAAa,GAAG,kBAAkB,CA2BrF"}
+{"version":3,"file":"custom-claims.d.ts","sourceRoot":"","sources":["../../src/domains/custom-claims.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAIhJ,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACjG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpG,gFAAgF;IAChF,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,aAAa,GAAG,kBAAkB,CA2BrF"}

package/dist/domains/custom-claims.js

@@ -27,8 +27,8 @@ export function createCustomClaimsDomain(transport) {
             const res = await transport.request({ method: 'PUT', path: `${base(appId)}/${claimId}`, body: input });
             return unwrapData(res.body);
         },
-        async archive(appId, claimId) {
-            await transport.request({ method: 'POST', path: `${base(appId)}/${claimId}/archive` });
+        async delete(appId, claimId) {
+            await transport.request({ method: 'DELETE', path: `${base(appId)}/${claimId}` });
         },
     };
 }

package/dist/domains/custom-claims.js.map

@@ -1 +1 @@
-{"version":3,"file":"custom-claims.js","sourceRoot":"","sources":["../../src/domains/custom-claims.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAWzD,MAAM,UAAU,wBAAwB,CAAC,SAAwB;IAC/D,SAAS,IAAI,CAAC,KAAa,IAAI,OAAO,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC;IAExE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAO;YACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzG,OAAO,GAAG,CAAC,IAA0C,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,MAAO;YACpB,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO;YACtB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1F,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK;YACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxF,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK;YAChC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvG,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;YAC1B,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,UAAU,EAAE,CAAC,CAAC;QACzF,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"custom-claims.js","sourceRoot":"","sources":["../../src/domains/custom-claims.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAYzD,MAAM,UAAU,wBAAwB,CAAC,SAAwB;IAC/D,SAAS,IAAI,CAAC,KAAa,IAAI,OAAO,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC;IAExE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAO;YACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzG,OAAO,GAAG,CAAC,IAA0C,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,MAAO;YACpB,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO;YACtB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;YAC1F,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK;YACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxF,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK;YAChC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvG,OAAO,UAAU,CAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO;YACzB,MAAM,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domains/exports.d.ts

@@ -4,9 +4,14 @@
  * @module domains/exports
  */
 import type { HttpTransport, TransportResponse } from '../transport/types.js';
-import type { ExportParams } from '../types/index.js';
+import type { ExportManifestRequest, ExportManifestResponse, ExportParams } from '../types/index.js';
+/** Administrative report downloads and selective manifest exports. */
 export interface ExportsDomain {
+    /** Download one existing CSV or JSON administrative report. */
     download(params: ExportParams): Promise<TransportResponse>;
+    /** Export one parsed portability manifest without writing a local file. */
+    manifest(request: ExportManifestRequest): Promise<ExportManifestResponse>;
 }
+/** Create the export operations backed by one shared HTTP transport. */
 export declare function createExportsDomain(transport: HttpTransport): ExportsDomain;
 //# sourceMappingURL=exports.d.ts.map

package/dist/domains/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/domains/exports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5D;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,aAAa,GAAG,aAAa,CAY3E"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/domains/exports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,KAAK,EACV,qBAAqB,EACrB,sBAAsB,EACtB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAmB3B,sEAAsE;AACtE,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3D,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAC3E;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,aAAa,GAAG,aAAa,CAwB3E"}

package/dist/domains/exports.js

@@ -3,7 +3,22 @@
  *
  * @module domains/exports
  */
-import { toQueryParams } from './helpers.js';
+import { toQueryParams, unwrapData } from './helpers.js';
+/** Path-free attachment names accepted from the server response. */
+const SAFE_ATTACHMENT_FILENAME = /^[A-Za-z0-9][A-Za-z0-9._-]{0,254}$/;
+/** Return the server attachment name only when it is a safe final path component. */
+function attachmentFilename(contentDisposition) {
+    if (!contentDisposition)
+        return undefined;
+    const match = /filename\s*=\s*(?:"([^"]+)"|([^;\s]+))/i.exec(contentDisposition);
+    const filename = match?.[1] ?? match?.[2];
+    return filename && SAFE_ATTACHMENT_FILENAME.test(filename) ? filename : undefined;
+}
+/** Create a path-free fallback name from the current UTC instant. */
+function fallbackManifestFilename() {
+    return `porta-manifest-${new Date().toISOString().replace(/[:.]/g, '-')}.json`;
+}
+/** Create the export operations backed by one shared HTTP transport. */
 export function createExportsDomain(transport) {
     return {
         async download(params) {
@@ -15,6 +30,17 @@ export function createExportsDomain(transport) {
                 responseType: 'raw',
             });
         },
+        async manifest(request) {
+            const response = await transport.request({
+                method: 'POST',
+                path: '/export/manifest',
+                body: request,
+            });
+            return {
+                manifest: unwrapData(response.body),
+                filename: attachmentFilename(response.headers['content-disposition']) ?? fallbackManifestFilename(),
+            };
+        },
     };
 }
 //# sourceMappingURL=exports.js.map

package/dist/domains/exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/domains/exports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAM7C,MAAM,UAAU,mBAAmB,CAAC,SAAwB;IAC1D,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;YACvC,OAAO,SAAS,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW,UAAU,EAAE;gBAC7B,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC;gBAC3B,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../src/domains/exports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEzD,oEAAoE;AACpE,MAAM,wBAAwB,GAAG,oCAAoC,CAAC;AAEtE,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,kBAAsC;IAChE,IAAI,CAAC,kBAAkB;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,yCAAyC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,qEAAqE;AACrE,SAAS,wBAAwB;IAC/B,OAAO,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC;AACjF,CAAC;AAUD,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,SAAwB;IAC1D,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;YACvC,OAAO,SAAS,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,WAAW,UAAU,EAAE;gBAC7B,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC;gBAC3B,YAAY,EAAE,KAAK;aACpB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,OAAO;YACpB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC;gBACvC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,OAAO;gBACL,QAAQ,EAAE,UAAU,CAAsB,QAAQ,CAAC,IAAI,CAAC;gBACxD,QAAQ,EACN,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,wBAAwB,EAAE;aAC5F,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domains/helpers.d.ts

@@ -4,6 +4,37 @@
  * @module domains/helpers
  */
 import type { TransportResponse } from '../transport/types.js';
+import type { ETagResponse, PaginatedResponse } from '../types/index.js';
+/** Return whether a value is a non-null object record. */
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/** Return whether every array entry is a string. */
+export declare function isStringArray(value: unknown): value is string[];
+/**
+ * Require a `{ data: T }` response envelope and validate its payload.
+ *
+ * @param body - Raw response body
+ * @param isData - Feature-specific payload guard
+ * @returns Validated payload
+ * @throws {PortaError} When the envelope or payload is invalid
+ */
+export declare function requireData<T>(body: unknown, isData: (value: unknown) => value is T): T;
+/**
+ * Require a paginated response whose every item passes the supplied guard.
+ *
+ * @param body - Raw response body
+ * @param isItem - Feature-specific item guard
+ * @returns Validated pagination response
+ * @throws {PortaError} When pagination metadata or an item is invalid
+ */
+export declare function requirePaginatedData<T>(body: unknown, isItem: (value: unknown) => value is T): PaginatedResponse<T>;
+/**
+ * Require a validated data envelope while preserving its ETag header.
+ *
+ * @param response - Raw transport response
+ * @param isData - Feature-specific payload guard
+ * @returns Validated payload and optional ETag
+ */
+export declare function requireDataWithEtag<T>(response: TransportResponse, isData: (value: unknown) => value is T): ETagResponse<T>;
 /**
  * Unwrap a `{ data: T }` response envelope.
  * If the body already has a `data` property, extracts it; otherwise returns as-is.

package/dist/domains/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/domains/helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D;;;GAGG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,CAK9C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,GAAG;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAI/F;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,CASvD"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/domains/helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAGzE,0DAA0D;AAC1D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAE/D;AAOD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,CAKvF;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EACpC,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,GACrC,iBAAiB,CAAC,CAAC,CAAC,CAwBtB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,CAAC,GACrC,YAAY,CAAC,CAAC,CAAC,CAIjB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,GAAG,CAAC,CAK9C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,GAAG;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAI/F;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGjE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,CAavD"}

package/dist/domains/helpers.js

@@ -3,6 +3,75 @@
  *
  * @module domains/helpers
  */
+import { PortaError } from '../errors/index.js';
+/** Return whether a value is a non-null object record. */
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Return whether every array entry is a string. */
+export function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
+}
+/** Create the fixed SDK error used when a successful response has an invalid public shape. */
+function invalidResponseError() {
+    return new PortaError('Porta API returned an invalid response.');
+}
+/**
+ * Require a `{ data: T }` response envelope and validate its payload.
+ *
+ * @param body - Raw response body
+ * @param isData - Feature-specific payload guard
+ * @returns Validated payload
+ * @throws {PortaError} When the envelope or payload is invalid
+ */
+export function requireData(body, isData) {
+    if (!isRecord(body) || !('data' in body) || !isData(body.data)) {
+        throw invalidResponseError();
+    }
+    return body.data;
+}
+/**
+ * Require a paginated response whose every item passes the supplied guard.
+ *
+ * @param body - Raw response body
+ * @param isItem - Feature-specific item guard
+ * @returns Validated pagination response
+ * @throws {PortaError} When pagination metadata or an item is invalid
+ */
+export function requirePaginatedData(body, isItem) {
+    if (!isRecord(body) ||
+        !Array.isArray(body.data) ||
+        !body.data.every(isItem) ||
+        typeof body.total !== 'number' ||
+        (body.page !== undefined && typeof body.page !== 'number') ||
+        (body.pageSize !== undefined && typeof body.pageSize !== 'number') ||
+        (body.totalPages !== undefined && typeof body.totalPages !== 'number') ||
+        (body.cursor !== undefined && body.cursor !== null && typeof body.cursor !== 'string') ||
+        (body.hasMore !== undefined && typeof body.hasMore !== 'boolean')) {
+        throw invalidResponseError();
+    }
+    return {
+        data: body.data,
+        total: body.total,
+        ...(body.page !== undefined ? { page: body.page } : {}),
+        ...(body.pageSize !== undefined ? { pageSize: body.pageSize } : {}),
+        ...(body.totalPages !== undefined ? { totalPages: body.totalPages } : {}),
+        ...(typeof body.cursor === 'string' ? { cursor: body.cursor } : {}),
+        ...(body.hasMore !== undefined ? { hasMore: body.hasMore } : {}),
+    };
+}
+/**
+ * Require a validated data envelope while preserving its ETag header.
+ *
+ * @param response - Raw transport response
+ * @param isData - Feature-specific payload guard
+ * @returns Validated payload and optional ETag
+ */
+export function requireDataWithEtag(response, isData) {
+    const data = requireData(response.body, isData);
+    const etag = response.headers?.['etag'] ?? response.headers?.['ETag'] ?? null;
+    return { data, etag };
+}
 /**
  * Unwrap a `{ data: T }` response envelope.
  * If the body already has a `data` property, extracts it; otherwise returns as-is.
@@ -37,7 +106,9 @@ export function toQueryParams(params) {
         return undefined;
     const result = {};
     for (const [key, value] of Object.entries(params)) {
-        if (value !== undefined && value !== null && (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean')) {
+        if (value !== undefined &&
+            value !== null &&
+            (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean')) {
             result[key] = value;
         }
     }

package/dist/domains/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/domains/helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAI,IAAa;IACzC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACvD,OAAQ,IAAoB,CAAC,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAI,QAA2B;IAC3D,MAAM,IAAI,GAAG,UAAU,CAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YACpI,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/domains/helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,0DAA0D;AAC1D,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,8FAA8F;AAC9F,SAAS,oBAAoB;IAC3B,OAAO,IAAI,UAAU,CAAC,yCAAyC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAI,IAAa,EAAE,MAAsC;IAClF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAa,EACb,MAAsC;IAEtC,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACxB,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC1D,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAClE,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC;QACtE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;QACtF,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,EACjE,CAAC;QACD,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAA2B,EAC3B,MAAsC;IAEtC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAI,IAAa;IACzC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACvD,OAAQ,IAAoB,CAAC,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAI,QAA2B;IAC3D,MAAM,IAAI,GAAG,UAAU,CAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IACE,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,IAAI;YACd,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC,EACtF,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC"}

package/dist/domains/imports.d.ts

@@ -1,12 +1,13 @@
-/**
- * Imports domain — declarative provisioning / data import.
- *
- * @module domains/imports
- */
+/** Strict portability-manifest preview and import operations. */
 import type { HttpTransport } from '../transport/types.js';
-import type { ImportManifest, ImportResult } from '../types/index.js';
+import type { PortabilityManifest, PortabilityResult } from '../types/index.js';
+/** Strict manifest preview and apply operations. */
 export interface ImportsDomain {
-    provision(manifest: ImportManifest): Promise<ImportResult>;
+    /** Build a mutation-free import plan. */
+    preview(manifest: PortabilityManifest): Promise<PortabilityResult>;
+    /** Apply one validated manifest using the selected existing-record policy. */
+    apply(manifest: PortabilityManifest, mode: 'keep-existing' | 'update-existing'): Promise<PortabilityResult>;
 }
+/** Create the import operations backed by one shared HTTP transport. */
 export declare function createImportsDomain(transport: HttpTransport): ImportsDomain;
 //# sourceMappingURL=imports.d.ts.map

package/dist/domains/imports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"imports.d.ts","sourceRoot":"","sources":["../../src/domains/imports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC5D;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,aAAa,GAAG,aAAa,CAa3E"}
+{"version":3,"file":"imports.d.ts","sourceRoot":"","sources":["../../src/domains/imports.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAIV,mBAAmB,EAEnB,iBAAiB,EAClB,MAAM,mBAAmB,CAAC;AA4L3B,oDAAoD;AACpD,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnE,8EAA8E;IAC9E,KAAK,CACH,QAAQ,EAAE,mBAAmB,EAC7B,IAAI,EAAE,eAAe,GAAG,iBAAiB,GACxC,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED,wEAAwE;AACxE,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,aAAa,GAAG,aAAa,CAS3E"}