@tai42/api-client 20.0.0 → 22.0.0

package/dist/schemas/marketplace.js

@@ -1,19 +1,23 @@
 /** Marketplace listing, version, install and advisory schemas. */
 import { z } from 'zod';
+import * as openapi from '../generated/openapi-schemas';
+// The registry's listing, search, version, detail and advisory shapes are hand-written: the
+// skeleton passes the upstream registry's bodies through as opaque values. The installed,
+// upgrade, install, preview and uninstall shapes are the skeleton's own.
 /**
  * The CLOSED HTTP-method enum fixed by the contract's RouteMethod, the one source
  * for every route-method field (declaration and install/preview responses alike):
  * a wire method the contract does not define fails loudly as drift rather than
  * passing through silently.
  */
-export const routeMethod = z.enum(['GET', 'POST', 'PUT', 'PATCH', 'DELETE']);
+export const routeMethod = openapi.mountedRoute.shape.methods.element;
 /**
  * How the plugin is delivered, derived server-side from whether its spec names a
  * package: `package` is pip-installed, `descriptor` (marketplace `source` `spec`)
  * installs nothing but the manifest entry. A CLOSED enum, so a wire value the
  * server does not derive fails loudly as drift.
  */
-export const marketplaceDelivery = z.enum(['package', 'descriptor']);
+export const marketplaceDelivery = openapi.installedRow.shape.delivery;
 /**
  * The install-provenance vocabulary a listing/version resolves from: a pip index
  * (`pypi`), a git tag (`github`), or a descriptor yml (`spec`). CLOSED, so a wire
@@ -25,7 +29,7 @@ export const marketplaceSource = z.enum(['pypi', 'github', 'spec']);
  * a `secret` (an OAuth client secret is; a client id or a plain marker var is not).
  * The install dialog seeds each toggle from `secret` and collects the missing ones.
  */
-export const marketplaceRequiredEnvVar = z.object({ name: z.string(), secret: z.boolean() });
+export const marketplaceRequiredEnvVar = openapi.requiredEnvVar;
 /**
  * One HTTP route an item declares in its `tai-plugin.yml`: a `path` relative to
  * the item's mount base, the `methods` it answers, and whether it is served
@@ -199,16 +203,9 @@ export const marketplacePluginDetail = z.object({
  * One installed plugin's compat verdict against the RUNNING tai42-contract:
  * `compatible` / `incompatible` per its declared contract range, `unknown` when
  * no verdict could be computed. `reason` is the human-readable explanation of a
- * non-`compatible` verdict, `null` when compatible. CLOSED (`.strict()`): the
- * server is built against exactly this shape, so an unknown key is drift and
- * throws instead of being stripped.
+ * non-`compatible` verdict, `null` when compatible.
  */
-export const marketplaceInstalledCompat = z
-    .object({
-    status: z.enum(['compatible', 'incompatible', 'unknown']),
-    reason: z.string().nullable(),
-})
-    .strict();
+export const marketplaceInstalledCompat = openapi.compatStatus;
 /**
  * One installed marketplace plugin as the local attribution store records it.
  * `latest` is the newest registry version (`null` when unknown);
@@ -216,132 +213,65 @@ export const marketplaceInstalledCompat = z
  * `incompatible_newer` names the newest version blocked by the running
  * contract (`null` when none), so "an update exists but needs a newer core" is
  * visible. `missing_upstream` flags a plugin the registry no longer lists.
- * `compat` is the row's verdict against the running contract. CLOSED, like
- * every shape of the installed listing.
+ * `compat` is the row's verdict against the running contract. `delivery` is `package`
+ * for a pip-installed plugin, `descriptor` for a descriptor-only plugin whose stored spec
+ * names no package. `items` is the `{kind, name}` of every item this plugin's stored spec
+ * provides (local truth); `route_mounts` is the persisted `{item_name: base}` mount this
+ * plugin is installed at (`{}` means every item at its declared base).
  */
-export const marketplaceInstalledPlugin = z
-    .object({
-    ref: z.string(),
-    version: z.string(),
-    source: z.string(),
-    // How the row was delivered: `package` for a pip-installed plugin, `descriptor`
-    // for a descriptor-only plugin whose stored spec names no package.
-    delivery: marketplaceDelivery,
-    installed_at: z.string(),
-    latest: z.string().nullable(),
-    update_available: z.boolean(),
-    incompatible_newer: z.string().nullable(),
-    missing_upstream: z.boolean(),
-    compat: marketplaceInstalledCompat,
-    // The `{kind, name}` of every item this plugin's stored spec provides
-    // (local truth). The connectors page's McpServersSection joins the mcp-server
-    // item names against the manifest's mcp-entry titles to render an
-    // installer-written entry read-only.
-    items: z.array(marketplaceItem.pick({ kind: true, name: true })),
-    // The persisted `{item_name: base}` mount this plugin is installed at (local
-    // truth; `{}` means every item at its declared base). Studio seeds the update
-    // flow and renders routes at the ACTUAL mounted base from this.
-    route_mounts: z.record(z.string(), z.string()),
-})
-    .strict();
+export const marketplaceInstalledPlugin = openapi.installedRow;
 /**
  * The installed inventory (`GET /api/marketplace/installed`): the attributed
- * rows, each with its per-row compat verdict and update picture. CLOSED.
+ * rows, each with its per-row compat verdict and update picture.
  */
-export const marketplaceInstalled = z
-    .object({
-    installed: z.array(marketplaceInstalledPlugin),
-})
-    .strict();
+export const marketplaceInstalled = openapi.installedInventory;
 /**
  * One per-plugin outcome of `POST /api/marketplace/upgrade-all`: `upgraded`,
  * already `up-to-date`, `no-compatible-version` in the registry, or `failed`;
- * `detail` always carries the human-readable specifics. CLOSED.
+ * `detail` always carries the human-readable specifics.
  */
-export const marketplaceUpgradeAllRow = z
-    .object({
-    ref: z.string(),
-    outcome: z.enum(['upgraded', 'up-to-date', 'no-compatible-version', 'failed']),
-    detail: z.string(),
-})
-    .strict();
-/** The whole upgrade-all readout: one outcome row per installed plugin. CLOSED. */
-export const marketplaceUpgradeAllResult = z
-    .object({
-    results: z.array(marketplaceUpgradeAllRow),
-})
-    .strict();
+export const marketplaceUpgradeAllRow = openapi.upgradeRow;
+/** The whole upgrade-all readout: one outcome row per installed plugin. */
+export const marketplaceUpgradeAllResult = openapi.upgradeAllResult;
 /** The advisory state for installed plugins, with when it was last fetched. */
-export const marketplaceAdvisories = z.object({
+export const marketplaceAdvisories = openapi.advisorySnapshot.extend({
     advisories: z.array(marketplaceAdvisory),
-    fetched_at: z.string(),
 });
 /** The registry's controlled category list, proxied through the skeleton. */
-export const marketplaceCategories = z.array(z.string());
+export const marketplaceCategories = openapi.stringList;
 /** The registry's controlled item-kind list, proxied through the skeleton. */
-export const marketplaceKinds = z.array(z.string());
+export const marketplaceKinds = openapi.stringList;
 /**
  * One route the install / update actually mounted: the item that owns it, the
  * absolute `full_path` it now answers, the `methods`, and whether it is served
  * `public`. The receipt lists these so the operator sees what was opened where.
  */
-export const marketplaceMountedRoute = z.object({
-    item: z.string(),
-    full_path: z.string(),
-    methods: z.array(routeMethod),
-    public: z.boolean(),
-});
+export const marketplaceMountedRoute = openapi.mountedRoute;
 /**
  * The receipt of an install / update: what landed and at which version.
  * `notes` (env-selected items naming their activating env var) and any
  * non-critical `advisories` ride BOTH the install and update receipts.
  * `routes` is the mounted-route list — empty for a plugin that registers none.
- * The wire also carries `package`, `reload`, and `pip_output`, which the receipt
- * does not model — zod's default strip drops them; the UI renders the receipt,
- * not the raw install log.
+ * `package`, `reload` and `pip_output` carry the installed package, the config reload
+ * and the raw install log.
  */
-export const marketplaceInstallResult = z.object({
-    ref: z.string(),
-    version: z.string(),
-    notes: z.array(z.string()),
+export const marketplaceInstallResult = openapi.installResult.extend({
     advisories: z.array(marketplaceAdvisory),
-    routes: z.array(marketplaceMountedRoute),
 });
 /** One resolved route in an install preview: the declared `path`, its resolved
  * absolute `full_path`, the `methods`, and whether it is `public`. */
-export const marketplacePreviewRoute = z.object({
-    path: z.string(),
-    full_path: z.string(),
-    methods: z.array(routeMethod),
-    public: z.boolean(),
-});
+export const marketplacePreviewRoute = openapi.previewItemRoute;
 /** One route-carrying item in an install preview: its resolved `base` (the
  * override or the default), the `default_base` it declares, and the routes that
  * mount under it. */
-export const marketplacePreviewItem = z.object({
-    item: z.string(),
-    kind: z.string(),
-    base: z.string(),
-    default_base: z.string(),
-    routes: z.array(marketplacePreviewRoute),
-});
+export const marketplacePreviewItem = openapi.previewItem;
 /** One collision the preview found: a route whose resolved shape+method clashes
  * with an already-owned route. `conflict_owner` is `core` or `plugin:<ref>`; the
  * remedy is to remap the item's base. */
-export const marketplacePreviewCollision = z.object({
-    item: z.string(),
-    full_path: z.string(),
-    methods: z.array(routeMethod),
-    conflict_owner: z.string(),
-    conflict_path: z.string(),
-});
+export const marketplacePreviewCollision = openapi.routeCollision;
 /** One public route the operator is asked to accept: served WITHOUT
  * authentication once installed. */
-export const marketplacePreviewPublicRoute = z.object({
-    item: z.string(),
-    full_path: z.string(),
-    methods: z.array(routeMethod),
-});
+export const marketplacePreviewPublicRoute = openapi.publicRouteRow;
 /**
  * The install preview (`POST /api/marketplace/install/preview`): the resolved
  * routes per item with any base overrides applied, the collisions against the
@@ -354,26 +284,11 @@ export const marketplacePreviewPublicRoute = z.object({
  * process env (server-computed — the ONE authority the dialog collects), and
  * `delivery` is the one word the surface shows (`package` / `descriptor`).
  */
-export const marketplaceInstallPreview = z.object({
-    ref: z.string(),
-    version: z.string(),
-    items: z.array(marketplacePreviewItem),
-    collisions: z.array(marketplacePreviewCollision),
-    public_routes: z.array(marketplacePreviewPublicRoute),
-    new_public_routes: z.array(marketplacePreviewPublicRoute),
-    requires_public_acceptance: z.boolean(),
-    required_env: z.array(marketplaceRequiredEnvVar),
-    missing_env: z.array(z.string()),
-    delivery: marketplaceDelivery,
-});
+export const marketplaceInstallPreview = openapi.installPreview;
 /**
  * The receipt of an uninstall. `notes` carries operator warnings (e.g. a config
  * provider still selected by its env var); render them like the install
- * receipt's notes.
+ * receipt's notes. `reload` is `null` when the plugin wrote no manifest entry to remove.
  */
-export const marketplaceUninstallResult = z.object({
-    ref: z.string(),
-    uninstalled: z.literal(true),
-    notes: z.array(z.string()),
-});
+export const marketplaceUninstallResult = openapi.uninstallResult;
 //# sourceMappingURL=marketplace.js.map

package/dist/schemas/marketplace.js.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace.js","sourceRoot":"","sources":["../../src/schemas/marketplace.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAGrE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAGpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAG7F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;CACrC,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wEAAwE;IACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,0EAA0E;IAC1E,gFAAgF;IAChF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CACxC,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CAChC,CAAC,CAAC;AAGH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,2EAA2E;IAC3E,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wEAAwE;IACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,0EAA0E;IAC1E,yEAAyE;IACzE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iEAAiE;IACjE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACtC,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,gFAAgF;IAChF,mEAAmE;IACnE,QAAQ,EAAE,mBAAmB;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,MAAM,EAAE,0BAA0B;IAClC,sEAAsE;IACtE,8EAA8E;IAC9E,kEAAkE;IAClE,qCAAqC;IACrC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,6EAA6E;IAC7E,8EAA8E;IAC9E,gEAAgE;IAChE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC;CAC/C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,uBAAuB,EAAE,QAAQ,CAAC,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEzD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;CACzC,CAAC,CAAC;AAGH;sEACsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAGH;;qBAEqB;AACrB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;CACzC,CAAC,CAAC;AAGH;;yCAEyC;AACzC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAC;AAGH;oCACoC;AACpC,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;CAC9B,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IACrD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IACzD,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,mBAAmB;CAC9B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC"}
+{"version":3,"file":"marketplace.js","sourceRoot":"","sources":["../../src/schemas/marketplace.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AAExD,4FAA4F;AAC5F,0FAA0F;AAC1F,yEAAyE;AAEzE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;AAGtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;AAGvE;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAGpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;AAGhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;CACrC,CAAC,CAAC;AAGH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,qBAAqB,CAAC,OAAO,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wEAAwE;IACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,0EAA0E;IAC1E,gFAAgF;IAChF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CACxC,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CAChC,CAAC,CAAC;AAGH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,2EAA2E;IAC3E,wDAAwD;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wEAAwE;IACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,0EAA0E;IAC1E,yEAAyE;IACzE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iEAAiE;IACjE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACtC,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC;AAG/D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC;AAG/D;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,kBAAkB,CAAC;AAG/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC;AAG3D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;AAGpE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CACzC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;AAExD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC;AAG5D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CACzC,CAAC,CAAC;AAGH;sEACsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC;AAGhE;;qBAEqB;AACrB,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;AAG1D;;yCAEyC;AACzC,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAC,cAAc,CAAC;AAGlE;oCACoC;AACpC,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC,cAAc,CAAC;AAGpE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;AAGhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC,eAAe,CAAC"}

package/dist/schemas/members.d.ts

@@ -1,5 +1,5 @@
 /** Member, invite, directory and member-action schemas for the generic Members view. */
-import { z } from 'zod';
+import type { z } from 'zod';
 /**
  * Where a declared member action renders: a page-level button, a member-row menu
  * item, or an invite-row menu item. A provider classifies each of its own actions
@@ -15,21 +15,26 @@ export type MemberActionScope = z.infer<typeof memberActionScope>;
 /**
  * One platform principal a member holds (`GET /api/auth/members` →
  * `members[].principals[]`). `user_id` is the platform principal id; `disabled` is
- * taken from that principal's own record (the store the principals listing reads),
- * never from a provider.
+ * taken from that principal's own record (the store the principals listing reads) and
+ * `role` is the role it holds, joined from its own policy record — both never from a
+ * provider. `role` is `null` when the principal's policy was not written from a role
+ * template.
  */
 export declare const memberPrincipalState: z.ZodObject<{
-    user_id: z.ZodString;
     disabled: z.ZodBoolean;
-}, z.core.$strip>;
+    role: z.ZodNullable<z.ZodString>;
+    user_id: z.ZodString;
+}, z.core.$strict>;
 export type MemberPrincipalState = z.infer<typeof memberPrincipalState>;
 /**
  * One person an accounts provider owns, as the directory door returns them
  * (`GET /api/auth/members` → `members[]`). `id` is the provider's stable handle for
- * the person (a list key, not shown). `email` is the sign-in identity; `role` names
- * the platform role the person holds (the NAME only — the role definition is read
- * from the role listing). `principals` carries each principal's platform-joined
- * state; `disabled` is derived True only when EVERY principal is disabled, so a
+ * the person (a list key, not shown). `email` is the sign-in identity; `role` is the
+ * one role name every principal holds (the NAME only — the role definition is read
+ * from the role listing), or `null` when there is no single name: every principal's
+ * access was set directly, or the principals hold different roles
+ * (`principals[].role` carries each one's own). `principals` carries each principal's
+ * platform-joined state; `disabled` is derived True only when EVERY principal is disabled, so a
  * person with any enabled principal still reads active while the per-principal truth
  * stays visible. `handle` routes an invoke back to the producing provider and pins
  * this row; `action_keys` are the opaque catalog keys of the actions applicable to
@@ -37,37 +42,38 @@ export type MemberPrincipalState = z.infer<typeof memberPrincipalState>;
  * instant.
  */
 export declare const memberRow: z.ZodObject<{
-    id: z.ZodString;
-    email: z.ZodString;
-    role: z.ZodString;
+    action_keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
     created_at: z.ZodString;
-    principals: z.ZodArray<z.ZodObject<{
-        user_id: z.ZodString;
-        disabled: z.ZodBoolean;
-    }, z.core.$strip>>;
     disabled: z.ZodBoolean;
+    email: z.ZodString;
     handle: z.ZodString;
-    action_keys: z.ZodArray<z.ZodString>;
-}, z.core.$strip>;
+    id: z.ZodString;
+    principals: z.ZodArray<z.ZodObject<{
+        disabled: z.ZodBoolean;
+        role: z.ZodNullable<z.ZodString>;
+        user_id: z.ZodString;
+    }, z.core.$strict>>;
+    role: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
 export type MemberRow = z.infer<typeof memberRow>;
 /**
  * One outstanding invitation an accounts provider holds, as the directory door
  * returns them (`GET /api/auth/members` → `invites[]`). `id` is the provider's
  * stable handle for the invited person; `email` is the invited address; `role` names
- * the platform role they will hold (name only, as on {@link memberRow}). An
+ * the platform role they will hold (name only, or `null` when not from a role template). An
  * invitation holds no principal, so it carries no principal state. `handle` and
  * `action_keys` are the opaque routing tokens (see {@link memberRow}). `created_at`
  * and `expires_at` are ISO-8601 instants.
  */
 export declare const inviteRow: z.ZodObject<{
-    id: z.ZodString;
-    email: z.ZodString;
-    role: z.ZodString;
+    action_keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
     created_at: z.ZodString;
+    email: z.ZodString;
     expires_at: z.ZodString;
     handle: z.ZodString;
-    action_keys: z.ZodArray<z.ZodString>;
-}, z.core.$strip>;
+    id: z.ZodString;
+    role: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
 export type InviteRow = z.infer<typeof inviteRow>;
 /**
  * The deployment-wide membership (`GET /api/auth/members`): every accounts
@@ -76,29 +82,30 @@ export type InviteRow = z.infer<typeof inviteRow>;
  * provider.
  */
 export declare const memberDirectory: z.ZodObject<{
-    members: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        email: z.ZodString;
-        role: z.ZodString;
+    invites: z.ZodArray<z.ZodObject<{
+        action_keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
         created_at: z.ZodString;
-        principals: z.ZodArray<z.ZodObject<{
-            user_id: z.ZodString;
-            disabled: z.ZodBoolean;
-        }, z.core.$strip>>;
-        disabled: z.ZodBoolean;
+        email: z.ZodString;
+        expires_at: z.ZodString;
         handle: z.ZodString;
-        action_keys: z.ZodArray<z.ZodString>;
-    }, z.core.$strip>>;
-    invites: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
-        email: z.ZodString;
-        role: z.ZodString;
+        role: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+    members: z.ZodArray<z.ZodObject<{
+        action_keys: z.ZodDefault<z.ZodArray<z.ZodString>>;
         created_at: z.ZodString;
-        expires_at: z.ZodString;
+        disabled: z.ZodBoolean;
+        email: z.ZodString;
         handle: z.ZodString;
-        action_keys: z.ZodArray<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
+        id: z.ZodString;
+        principals: z.ZodArray<z.ZodObject<{
+            disabled: z.ZodBoolean;
+            role: z.ZodNullable<z.ZodString>;
+            user_id: z.ZodString;
+        }, z.core.$strict>>;
+        role: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 export type MemberDirectory = z.infer<typeof memberDirectory>;
 /**
  * One declared member action, serialized for the catalog (`GET
@@ -110,17 +117,17 @@ export type MemberDirectory = z.infer<typeof memberDirectory>;
  * name known to Studio.
  */
 export declare const memberActionDescriptor: z.ZodObject<{
+    destructive: z.ZodBoolean;
+    input_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     key: z.ZodString;
     label: z.ZodString;
+    result_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     scope: z.ZodEnum<{
         page: "page";
         member_row: "member_row";
         invite_row: "invite_row";
     }>;
-    destructive: z.ZodBoolean;
-    input_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    result_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export type MemberActionDescriptor = z.infer<typeof memberActionDescriptor>;
 /**
  * Every declared member action across the registered accounts providers (`GET
@@ -129,18 +136,18 @@ export type MemberActionDescriptor = z.infer<typeof memberActionDescriptor>;
  */
 export declare const memberActionCatalog: z.ZodObject<{
     actions: z.ZodArray<z.ZodObject<{
+        destructive: z.ZodBoolean;
+        input_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         key: z.ZodString;
         label: z.ZodString;
+        result_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         scope: z.ZodEnum<{
             page: "page";
             member_row: "member_row";
             invite_row: "invite_row";
         }>;
-        destructive: z.ZodBoolean;
-        input_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-        result_schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 export type MemberActionCatalog = z.infer<typeof memberActionCatalog>;
 /**
  * The invoke-door result (`POST /api/auth/member-actions/invoke`): the provider's
@@ -149,6 +156,6 @@ export type MemberActionCatalog = z.infer<typeof memberActionCatalog>;
  */
 export declare const invokeMemberActionResult: z.ZodObject<{
     result: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export type InvokeMemberActionResult = z.infer<typeof invokeMemberActionResult>;
 //# sourceMappingURL=members.d.ts.map

package/dist/schemas/members.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../src/schemas/members.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;EAA+C,CAAC;AAC9E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;iBASpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS;;;;;;;;iBAQpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;iBAG1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;iBAOjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;iBAE9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;iBAEnC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../src/schemas/members.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAI7B;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;EAA6C,CAAC;AAC5E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB;;;;kBAA+B,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;kBAAoB,CAAC;AAC3C,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS;;;;;;;;kBAAoB,CAAC;AAC3C,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;kBAA0B,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;kBAAiC,CAAC;AACrE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;kBAA8B,CAAC;AAC/D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB;;kBAAmC,CAAC;AACzE,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/schemas/members.js

@@ -1,74 +1,53 @@
-/** Member, invite, directory and member-action schemas for the generic Members view. */
-import { z } from 'zod';
-import { jsonSchema } from './shared';
+import * as openapi from '../generated/openapi-schemas';
 /**
  * Where a declared member action renders: a page-level button, a member-row menu
  * item, or an invite-row menu item. A provider classifies each of its own actions
  * into one of these three places; Studio only joins by `scope`, never reads the
  * provider's meaning behind it.
  */
-export const memberActionScope = z.enum(['page', 'member_row', 'invite_row']);
+export const memberActionScope = openapi.memberActionDescriptor.shape.scope;
 /**
  * One platform principal a member holds (`GET /api/auth/members` →
  * `members[].principals[]`). `user_id` is the platform principal id; `disabled` is
- * taken from that principal's own record (the store the principals listing reads),
- * never from a provider.
+ * taken from that principal's own record (the store the principals listing reads) and
+ * `role` is the role it holds, joined from its own policy record — both never from a
+ * provider. `role` is `null` when the principal's policy was not written from a role
+ * template.
  */
-export const memberPrincipalState = z.object({
-    user_id: z.string(),
-    disabled: z.boolean(),
-});
+export const memberPrincipalState = openapi.memberPrincipalState;
 /**
  * One person an accounts provider owns, as the directory door returns them
  * (`GET /api/auth/members` → `members[]`). `id` is the provider's stable handle for
- * the person (a list key, not shown). `email` is the sign-in identity; `role` names
- * the platform role the person holds (the NAME only — the role definition is read
- * from the role listing). `principals` carries each principal's platform-joined
- * state; `disabled` is derived True only when EVERY principal is disabled, so a
+ * the person (a list key, not shown). `email` is the sign-in identity; `role` is the
+ * one role name every principal holds (the NAME only — the role definition is read
+ * from the role listing), or `null` when there is no single name: every principal's
+ * access was set directly, or the principals hold different roles
+ * (`principals[].role` carries each one's own). `principals` carries each principal's
+ * platform-joined state; `disabled` is derived True only when EVERY principal is disabled, so a
  * person with any enabled principal still reads active while the per-principal truth
  * stays visible. `handle` routes an invoke back to the producing provider and pins
  * this row; `action_keys` are the opaque catalog keys of the actions applicable to
  * it — Studio joins and echoes both, never parses them. `created_at` is an ISO-8601
  * instant.
  */
-export const memberRow = z.object({
-    id: z.string(),
-    email: z.string(),
-    role: z.string(),
-    created_at: z.string(),
-    principals: z.array(memberPrincipalState),
-    disabled: z.boolean(),
-    handle: z.string(),
-    action_keys: z.array(z.string()),
-});
+export const memberRow = openapi.memberRow;
 /**
  * One outstanding invitation an accounts provider holds, as the directory door
  * returns them (`GET /api/auth/members` → `invites[]`). `id` is the provider's
  * stable handle for the invited person; `email` is the invited address; `role` names
- * the platform role they will hold (name only, as on {@link memberRow}). An
+ * the platform role they will hold (name only, or `null` when not from a role template). An
  * invitation holds no principal, so it carries no principal state. `handle` and
  * `action_keys` are the opaque routing tokens (see {@link memberRow}). `created_at`
  * and `expires_at` are ISO-8601 instants.
  */
-export const inviteRow = z.object({
-    id: z.string(),
-    email: z.string(),
-    role: z.string(),
-    created_at: z.string(),
-    expires_at: z.string(),
-    handle: z.string(),
-    action_keys: z.array(z.string()),
-});
+export const inviteRow = openapi.inviteRow;
 /**
  * The deployment-wide membership (`GET /api/auth/members`): every accounts
  * provider's people and outstanding invitations, aggregated and platform-joined by
  * the backend into one view so a generic Members screen renders without naming any
  * provider.
  */
-export const memberDirectory = z.object({
-    members: z.array(memberRow),
-    invites: z.array(inviteRow),
-});
+export const memberDirectory = openapi.memberDirectory;
 /**
  * One declared member action, serialized for the catalog (`GET
  * /api/auth/member-actions` → `actions[]`). `key` is the opaque catalog key a caller
@@ -78,28 +57,17 @@ export const memberDirectory = z.object({
  * form and a read-only result view from them generically, with no provider field
  * name known to Studio.
  */
-export const memberActionDescriptor = z.object({
-    key: z.string(),
-    label: z.string(),
-    scope: memberActionScope,
-    destructive: z.boolean(),
-    input_schema: jsonSchema,
-    result_schema: jsonSchema,
-});
+export const memberActionDescriptor = openapi.memberActionDescriptor;
 /**
  * Every declared member action across the registered accounts providers (`GET
  * /api/auth/member-actions`). ADMIN-ONLY (`secret`) — a non-admin projection never
  * reaches the route, exactly as the members listing.
  */
-export const memberActionCatalog = z.object({
-    actions: z.array(memberActionDescriptor),
-});
+export const memberActionCatalog = openapi.memberActionCatalog;
 /**
  * The invoke-door result (`POST /api/auth/member-actions/invoke`): the provider's
  * result-model dump, carried opaquely. `result` is rendered through the action's
  * `result_schema`; Studio reads no field of it by name.
  */
-export const invokeMemberActionResult = z.object({
-    result: jsonSchema,
-});
+export const invokeMemberActionResult = openapi.invokeMemberActionResult;
 //# sourceMappingURL=members.js.map

package/dist/schemas/members.js.map

@@ -1 +1 @@
-{"version":3,"file":"members.js","sourceRoot":"","sources":["../../src/schemas/members.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAG9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAGH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;CAC5B,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,UAAU;CAC1B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CACzC,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,UAAU;CACnB,CAAC,CAAC"}
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../src/schemas/members.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AAExD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC;AAG5E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;AAGjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;AAG3C;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;AAG3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;AAGvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;AAGrE;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;AAG/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC"}