@v3finance/core-sdk 0.1.0 → 0.2.0

package/dist/esm/resources/addresses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"addresses.d.ts","sourceRoot":"","sources":["../../../src/resources/addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAW,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAEtD,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,MAAM,CAAA;CAC1B;AACD,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,uBAAuB,CAAA;AAE9B,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B;;;OAGG;IACH,MAAM,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;IAC7C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAI5B,YAAY,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAG9C;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAE7D;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAE7C;IAED,sFAAsF;IAChF,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC,CAG3F;IAED,yEAAyE;IACzE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnE;CACF"}
+{"version":3,"file":"addresses.d.ts","sourceRoot":"","sources":["../../../src/resources/addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAW,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,IAAI,wBAAwB,EAC5C,MAAM,uBAAuB,CAAA;AAE9B;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,eAAe,GAAG,wBAAwB,CAAA;AAEtD,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B;;;OAGG;IACH,MAAM,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAA;IAC7C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAI5B,YAAY,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAG9C;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAE7D;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAE7C;IAED,sFAAsF;IAChF,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC,CAG3F;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnE;CACF"}

package/dist/esm/resources/addresses.js

@@ -27,7 +27,13 @@ export class AddressesResource {
         const res = await this.#http.requestRaw('POST', this.#base, { body: input });
         return toGated(res.status, res.data);
     }
-    /** Metadata only: this touches neither money nor the derivation path. */
+    /**
+     * Metadata only: this touches neither money nor the derivation path.
+     *
+     * Answers with the listing shape, minus `sharing` — the endpoint reuses the
+     * schema but does not fill that property, which is why it is optional on
+     * `Address`. Refresh the list rather than reading the share count back.
+     */
     update(addressId, input) {
         return this.#http.request('PATCH', `${this.#base}/${seg(addressId)}`, { body: input });
     }

package/dist/esm/resources/addresses.js.map

@@ -1 +1 @@
-{"version":3,"file":"addresses.js","sourceRoot":"","sources":["../../../src/resources/addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,OAAO,EAAc,MAAM,kBAAkB,CAAA;AA6BtD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAY;IACjB,KAAK,CAAQ;IAEtB,YAAY,IAAgB,EAAE,SAAiB;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,KAAK,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,YAAY,CAAA;IAC3D,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,GAAwB,EAAE;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,MAAM,CAAC,KAAwB;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAU,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrF,OAAO,OAAO,CAAuC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC;IAED,yEAAyE;IACzE,MAAM,CAAC,SAAiB,EAAE,KAAuB;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjG,CAAC;CACF"}
+{"version":3,"file":"addresses.js","sourceRoot":"","sources":["../../../src/resources/addresses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,OAAO,EAAc,MAAM,kBAAkB,CAAA;AAsCtD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAY;IACjB,KAAK,CAAQ;IAEtB,YAAY,IAAgB,EAAE,SAAiB;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,KAAK,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,YAAY,CAAA;IAC3D,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,MAAM,GAAwB,EAAE;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,MAAM,CAAC,KAAwB;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAU,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrF,OAAO,OAAO,CAAuC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAiB,EAAE,KAAuB;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjG,CAAC;CACF"}

package/dist/esm/resources/admin.d.ts

@@ -1,5 +1,41 @@
 import { type HttpClient } from '../core/http.js';
-import type { CreateInvitationBody, PolicyGroup, PolicyTableItem, PolicyWithRules, CreateSeatBody, SeatCreated, CreatePolicyBody, CreatePolicyGroupBody, CreateVisibilityGrantBody, InvitationCreated, InvitationDetail, PatchPolicyBody, PatchPolicyGroupBody, PolicyDetail, PolicyGroupDetail, PolicyVersionList, VaultPoliciesPage, VisibilityGrant } from '../generated/types.js';
+import type { PageParams } from '../core/pagination.js';
+import type { AcceptDebugBody, AcceptResult, ActionType, CreateInvitationBody, Effect, Invitation, InvitationListItem, InvitationPublic, Membership, PolicyGroup, PolicyGroupWithCounts, PolicyTableItem, PolicyWithRules, CreateSeatBody, SeatCreated, CreatePolicyBody, CreatePolicyGroupBody, CreateVisibilityGrantBody, InvitationCreated, InvitationDetail, PatchPolicyBody, PatchPolicyGroupBody, PolicyDetail, PolicyGroupDetail, PolicyVersionList, UserGroupItem, VaultPoliciesPage, VisibilityGrant } from '../generated/types.js';
+/**
+ * A policy as the two LISTING endpoints return it. A strict alias of the
+ * generated `PolicyTableItem`, kept under its earlier name.
+ *
+ * There is NO `conditionJson` and no `approvalJson` here: neither listing
+ * selects them, so a row cannot tell you whether a policy is conditional —
+ * and treating the absence as "applies always" is the opposite of what a
+ * condition usually says. Load one policy (`policies.get`) when you need the
+ * rule itself; the vault-scoped page (`vault().policies`) does carry both
+ * fields.
+ */
+export type PolicyRow = PolicyTableItem;
+/** Filters of the vault-scoped policy page (`vault().policies`). */
+export interface VaultPoliciesParams extends PageParams {
+    actionType?: ActionType | undefined;
+    /**
+     * `requireApproval` is accepted here and nowhere else. A policy's own
+     * effect has been `allow | block` only since approval became a property of
+     * an allowing policy rather than an effect of its own, so this third value
+     * exists for rows written before that change — not for new ones.
+     */
+    effect?: Effect | 'requireApproval' | undefined;
+    enabled?: boolean | undefined;
+}
+/** A policy from the flat vault listing, which also names its owner group. */
+export interface PolicyRowWithGroup extends PolicyRow {
+    groupId: string;
+    group: {
+        id: string;
+        code: string;
+        name: string;
+        color: string | null;
+        emoji: string | null;
+    };
+}
 /**
  * Administrative endpoints.
  *
@@ -12,6 +48,11 @@ import type { CreateInvitationBody, PolicyGroup, PolicyTableItem, PolicyWithRule
  * this OBJECT" — grants — lives with the resources it belongs to
  * (`sharing`, `folders`, `categories`).
  */
+/**
+ * The PLATFORM role, from the spec's own enum. Not a role inside a vault —
+ * a platform `admin` sees every vault while belonging to none.
+ */
+export type PlatformRole = 'admin' | 'user';
 export declare class AdminResource {
     #private;
     constructor(http: HttpClient);
@@ -36,16 +77,27 @@ export declare class AdminResource {
         /**
          * `vaultId` is REQUIRED — the endpoint lists policies of one vault and
          * answers 400 without it. It is also NOT paginated: everything comes
-         * back in one array.
+         * back in one array, sorted group then code.
+         *
+         * `actionType` is spelled out rather than left as a string because the
+         * API does not validate it here: an unrecognised value is passed to the
+         * query as-is and comes back as an EMPTY list, which reads like "this
+         * vault has no transfer policies" instead of "you misspelled it". The
+         * vault-scoped twin (`vault().policies`) declares the same ten values as
+         * an enum, so one spelling serves both.
+         *
+         * `effect` is `allow | block` only. Approval stopped being an effect when
+         * it became a property of an allowing policy; the vault-scoped twin still
+         * accepts the historical third value, this one does not and answers 400.
          */
         list: (params: {
             vaultId: string;
-            groupId?: string;
-            actionType?: string;
-            effect?: string;
-            enabled?: boolean;
+            groupId?: string | undefined;
+            actionType?: ActionType | undefined;
+            effect?: Effect | undefined;
+            enabled?: boolean | undefined;
         }) => Promise<{
-            items: PolicyTableItem[];
+            items: PolicyRowWithGroup[];
         }>;
         get: (policyId: string) => Promise<PolicyDetail>;
         /** Every version of a policy — what changed, and which decision used which. */
@@ -69,8 +121,21 @@ export declare class AdminResource {
      */
     readonly policyGroups: {
         get: (groupId: string) => Promise<PolicyGroupDetail>;
-        policies: (groupId: string) => Promise<unknown>;
-        /** What this group's members can reach. */
+        /** This group's policies for a table view: every field but the rules. */
+        policies: (groupId: string, params?: {
+            actionType?: ActionType | undefined;
+        }) => Promise<PolicyTableItem[]>;
+        /**
+         * What this group's members can reach: the group, its member count, its
+         * policies and the three kinds of grant held by the group as a subject
+         * (addresses, member visibility, operation categories).
+         *
+         * Left untyped. The API declares this body inline, so there is no
+         * generated name to import, and it nests four different resources —
+         * hand-writing them here would add exactly the kind of duplicated shape
+         * that drifts from the API with nothing to notice it. Narrow it at the
+         * call site, or read the single-purpose endpoints.
+         */
         access: (groupId: string) => Promise<unknown>;
         create: (input: CreatePolicyGroupBody) => Promise<PolicyGroup>;
         update: (groupId: string, input: PatchPolicyGroupBody) => Promise<PolicyGroup>;
@@ -78,30 +143,82 @@ export declare class AdminResource {
          * Adding somebody to a group also makes them a vault member — the two
          * used to drift apart, leaving people with policies but no membership.
          */
-        addMember: (groupId: string, userId: string) => Promise<unknown>;
-        /** Takes the MEMBERSHIP id, not the user id — a user id answers 404. */
-        removeMember: (groupId: string, membershipId: string) => Promise<unknown>;
+        addMember: (groupId: string, userId: string) => Promise<Membership>;
+        /**
+         * Takes the MEMBERSHIP id, not the user id — a user id answers 404. The
+         * id comes from `users.policyGroups`, which returns it as `membershipId`
+         * for this purpose.
+         *
+         * Removing somebody from their last group does NOT remove them from the
+         * vault: membership is its own record, so they stay in the directory with
+         * no policies — able to be granted access, refused every action.
+         */
+        removeMember: (groupId: string, membershipId: string) => Promise<{
+            deleted: true;
+        }>;
     };
     readonly users: {
-        policyGroups: (userId: string) => Promise<unknown>;
-        /** The PLATFORM role, not a role within a vault. The two are different. */
-        setRole: (userId: string, role: string) => Promise<unknown>;
+        /**
+         * Every group this person is in, each with the `membershipId` that
+         * `policyGroups.removeMember` needs. Without `vaultId` it spans ALL
+         * vaults, so filter when you are rendering one vault's screen.
+         */
+        policyGroups: (userId: string, params?: {
+            vaultId?: string | undefined;
+        }) => Promise<UserGroupItem[]>;
+        /**
+         * The PLATFORM role, not a role within a vault. The two are different:
+         * a platform `admin` sees every vault while belonging to none, whereas a
+         * vault membership carries its own role.
+         *
+         * The parameter is narrowed to the two values the spec declares, which is
+         * worth the compile error on a privilege path: `string` here let a caller
+         * pass anything and find out from a 400 — after sending a role change.
+         * The RESPONSE keeps `role: string`, because the spec declares it bare and
+         * narrowing an answer we do not control would be a guess.
+         */
+        setRole: (userId: string, role: PlatformRole) => Promise<{
+            id: string;
+            email: string;
+            role: string;
+        }>;
     };
     /** Vault-scoped administrative listings and creation. */
     vault(vaultCode: string): {
-        invitations: () => Promise<unknown>;
-        policies: (params?: Record<string, string | number | boolean>) => Promise<VaultPoliciesPage>;
-        policyGroups: () => Promise<unknown>;
+        invitations: (params?: {
+            status?: 'pending' | 'accepted' | 'revoked' | undefined;
+        }) => Promise<InvitationListItem[]>;
+        policies: (params?: VaultPoliciesParams) => Promise<VaultPoliciesPage>;
+        policyGroups: () => Promise<PolicyGroupWithCounts[]>;
         createSeat: (input: CreateSeatBody) => Promise<SeatCreated>;
     };
     readonly invitations: {
-        /** Public: lets an invited person see what they were invited to. */
-        byToken: (token: string) => Promise<unknown>;
+        /**
+         * Public: lets an invited person see what they were invited to — the
+         * vault and the groups, no token echoed back. The only endpoint here
+         * that needs no session, because it is what the /accept page calls.
+         *
+         * A revoked or already-accepted invitation answers 410, not 404: the
+         * difference is worth showing, since "this link was withdrawn" and "this
+         * link never existed" lead somewhere different.
+         */
+        byToken: (token: string) => Promise<InvitationPublic>;
+        /** The one place the magic-link token is returned. */
         get: (invitationId: string) => Promise<InvitationDetail>;
         create: (input: CreateInvitationBody) => Promise<InvitationCreated>;
-        revoke: (invitationId: string) => Promise<unknown>;
-        /** Accepts an invitation without the email round-trip. For debugging. */
-        acceptDebug: (body: unknown) => Promise<unknown>;
+        /** Answers the invitation itself, now `revoked`. Already revoked → 400. */
+        revoke: (invitationId: string) => Promise<Invitation>;
+        /**
+         * Accepts an invitation without the email round-trip, for an account that
+         * already exists. For debugging and curl tests: in the real flow this
+         * happens inside the sign-up hook.
+         *
+         * Matches on the EMAIL in the body, not on a token — it finds the pending
+         * invitation for that address. No pending invitation → 404; the user
+         * already attached to another invitation → 400, so a repeat is refused
+         * rather than duplicating memberships.
+         */
+        acceptDebug: (body: AcceptDebugBody) => Promise<AcceptResult>;
     };
     /**
      * Who can see whom.
@@ -112,9 +229,17 @@ export declare class AdminResource {
      * here.
      */
     visibilityGrants(vaultCode: string): {
-        list: () => Promise<unknown>;
+        list: (params?: {
+            subjectUserId?: string | undefined;
+            subjectGroupId?: string | undefined;
+            includeRevoked?: boolean | undefined;
+        }) => Promise<{
+            items: VisibilityGrant[];
+        }>;
         create: (input: CreateVisibilityGrantBody) => Promise<VisibilityGrant>;
-        revoke: (grantId: string) => Promise<unknown>;
+        revoke: (grantId: string) => Promise<{
+            revoked: true;
+        }>;
     };
 }
 //# sourceMappingURL=admin.d.ts.map

package/dist/esm/resources/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/resources/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAEtD,OAAO,KAAK,EACV,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,eAAe,EACf,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAA;AAE9B;;;;;;;;;;;GAWG;AACH,qBAAa,aAAa;;IAGxB,YAAY,IAAI,EAAE,UAAU,EAE3B;IAID;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,QAAQ;QACf;;;;WAIG;QACH,IAAI,WAAW;YACb,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,UAAU,CAAC,EAAE,MAAM,CAAA;YACnB,MAAM,CAAC,EAAE,MAAM,CAAA;YACf,OAAO,CAAC,EAAE,OAAO,CAAA;SAClB;mBAAiC,eAAe,EAAE;;QAInD,GAAG,aAAa,MAAM;QAGtB,+EAA+E;QAC/E,QAAQ,aAAa,MAAM;QAG3B,MAAM,UAAU,gBAAgB;QAGhC;;;;WAIG;QACH,MAAM,aAAa,MAAM,SAAS,eAAe;MAIlD;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY;QACnB,GAAG,YAAY,MAAM;QAGrB,QAAQ,YAAY,MAAM;QAG1B,2CAA2C;QAC3C,MAAM,YAAY,MAAM;QAGxB,MAAM,UAAU,qBAAqB;QAGrC,MAAM,YAAY,MAAM,SAAS,oBAAoB;QAKrD;;;WAGG;QACH,SAAS,YAAY,MAAM,UAAU,MAAM;QAK3C,wEAAwE;QACxE,YAAY,YAAY,MAAM,gBAAgB,MAAM;MAKrD;IAID,QAAQ,CAAC,KAAK;QACZ,YAAY,WAAW,MAAM;QAG7B,2EAA2E;QAC3E,OAAO,WAAW,MAAM,QAAQ,MAAM;MAEvC;IAED,yDAAyD;IACzD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG;QACxB,WAAW,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;QACnC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC5F,YAAY,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;QACpC,UAAU,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;KAC5D,CAgBA;IAED,QAAQ,CAAC,WAAW;QAClB,oEAAoE;QACpE,OAAO,UAAU,MAAM;QAGvB,GAAG,iBAAiB,MAAM;QAG1B,MAAM,UAAU,oBAAoB;QAGpC,MAAM,iBAAiB,MAAM;QAG7B,yEAAyE;QACzE,WAAW,SAAS,OAAO;MAE5B;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG;QACnC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,EAAE,CAAC,KAAK,EAAE,yBAAyB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;QACtE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAC9C,CAOA;CACF"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/resources/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EACZ,UAAU,EACV,oBAAoB,EACpB,MAAM,EACN,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,eAAe,EAChB,MAAM,uBAAuB,CAAA;AAE9B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,SAAS,GAAG,eAAe,CAAA;AAEvC,oEAAoE;AACpE,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;IACnC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAA;IAC/C,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC9B;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;QACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KACrB,CAAA;CACF;AAED;;;;;;;;;;;GAWG;AACH;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,CAAA;AAE3C,qBAAa,aAAa;;IAGxB,YAAY,IAAI,EAAE,UAAU,EAE3B;IAID;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,QAAQ;QACf;;;;;;;;;;;;;;;WAeG;QACH,IAAI,WAAW;YACb,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;YAC5B,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;YACnC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;YAC3B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SAC9B;mBAAiC,kBAAkB,EAAE;;QAItD,GAAG,aAAa,MAAM;QAGtB,+EAA+E;QAC/E,QAAQ,aAAa,MAAM;QAG3B,MAAM,UAAU,gBAAgB;QAGhC;;;;WAIG;QACH,MAAM,aAAa,MAAM,SAAS,eAAe;MAIlD;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY;QACnB,GAAG,YAAY,MAAM;QAGrB,yEAAyE;QACzE,QAAQ,YAAY,MAAM,WAAU;YAAE,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;SAAE;QAK3E;;;;;;;;;;WAUG;QACH,MAAM,YAAY,MAAM;QAGxB,MAAM,UAAU,qBAAqB;QAGrC,MAAM,YAAY,MAAM,SAAS,oBAAoB;QAKrD;;;WAGG;QACH,SAAS,YAAY,MAAM,UAAU,MAAM;QAK3C;;;;;;;;WAQG;QACH,YAAY,YAAY,MAAM,gBAAgB,MAAM;qBACpB,IAAI;;MAIrC;IAID,QAAQ,CAAC,KAAK;QACZ;;;;WAIG;QACH,YAAY,WAAW,MAAM,WAAU;YAAE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE;QAKvE;;;;;;;;;;WAUG;QACH,OAAO,WAAW,MAAM,QAAQ,YAAY;gBACjB,MAAM;mBAAS,MAAM;kBAAQ,MAAM;;MAK/D;IAED,yDAAyD;IACzD,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG;QACxB,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE;YACrB,MAAM,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAA;SACxD,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;QACnC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACtE,YAAY,EAAE,MAAM,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAA;QACpD,UAAU,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;KAC5D,CA0BA;IAED,QAAQ,CAAC,WAAW;QAClB;;;;;;;;WAQG;QACH,OAAO,UAAU,MAAM;QAMvB,sDAAsD;QACtD,GAAG,iBAAiB,MAAM;QAG1B,MAAM,UAAU,oBAAoB;QAGpC,2EAA2E;QAC3E,MAAM,iBAAiB,MAAM;QAG7B;;;;;;;;;WASG;QACH,WAAW,SAAS,eAAe;MAEpC;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG;QACnC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;YACd,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;YAClC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;YACnC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;SACrC,KAAK,OAAO,CAAC;YAAE,KAAK,EAAE,eAAe,EAAE,CAAA;SAAE,CAAC,CAAA;QAC3C,MAAM,EAAE,CAAC,KAAK,EAAE,yBAAyB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;QACtE,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,OAAO,EAAE,IAAI,CAAA;SAAE,CAAC,CAAA;KACxD,CAeA;CACF"}

package/dist/esm/resources/admin.js

@@ -1,16 +1,4 @@
 import { seg } from '../core/http.js';
-/**
- * Administrative endpoints.
- *
- * They are in the package because the package covers the whole API. Having a
- * method here grants nothing: the server decides from your session, and a
- * non-administrator gets 403.
- *
- * Note that this is the half of the authorisation model that answers "may
- * this ACTION happen" — policies. The other half, "does this person reach
- * this OBJECT" — grants — lives with the resources it belongs to
- * (`sharing`, `folders`, `categories`).
- */
 export class AdminResource {
     #http;
     constructor(http) {
@@ -38,7 +26,18 @@ export class AdminResource {
         /**
          * `vaultId` is REQUIRED — the endpoint lists policies of one vault and
          * answers 400 without it. It is also NOT paginated: everything comes
-         * back in one array.
+         * back in one array, sorted group then code.
+         *
+         * `actionType` is spelled out rather than left as a string because the
+         * API does not validate it here: an unrecognised value is passed to the
+         * query as-is and comes back as an EMPTY list, which reads like "this
+         * vault has no transfer policies" instead of "you misspelled it". The
+         * vault-scoped twin (`vault().policies`) declares the same ten values as
+         * an enum, so one spelling serves both.
+         *
+         * `effect` is `allow | block` only. Approval stopped being an effect when
+         * it became a property of an allowing policy; the vault-scoped twin still
+         * accepts the historical third value, this one does not and answers 400.
          */
         list: (params) => this.#http.request('GET', '/api/v1/policies', {
             query: { ...params },
@@ -67,8 +66,21 @@ export class AdminResource {
      */
     policyGroups = {
         get: (groupId) => this.#http.request('GET', `/api/v1/policy-groups/${seg(groupId)}`),
-        policies: (groupId) => this.#http.request('GET', `/api/v1/policy-groups/${seg(groupId)}/policies`),
-        /** What this group's members can reach. */
+        /** This group's policies for a table view: every field but the rules. */
+        policies: (groupId, params = {}) => this.#http.request('GET', `/api/v1/policy-groups/${seg(groupId)}/policies`, {
+            query: { ...params },
+        }),
+        /**
+         * What this group's members can reach: the group, its member count, its
+         * policies and the three kinds of grant held by the group as a subject
+         * (addresses, member visibility, operation categories).
+         *
+         * Left untyped. The API declares this body inline, so there is no
+         * generated name to import, and it nests four different resources —
+         * hand-writing them here would add exactly the kind of duplicated shape
+         * that drifts from the API with nothing to notice it. Narrow it at the
+         * call site, or read the single-purpose endpoints.
+         */
         access: (groupId) => this.#http.request('GET', `/api/v1/policy-groups/${seg(groupId)}/access`),
         create: (input) => this.#http.request('POST', '/api/v1/policy-groups', { body: input }),
         update: (groupId, input) => this.#http.request('PATCH', `/api/v1/policy-groups/${seg(groupId)}`, {
@@ -81,21 +93,54 @@ export class AdminResource {
         addMember: (groupId, userId) => this.#http.request('POST', `/api/v1/policy-groups/${seg(groupId)}/members`, {
             body: { userId },
         }),
-        /** Takes the MEMBERSHIP id, not the user id — a user id answers 404. */
+        /**
+         * Takes the MEMBERSHIP id, not the user id — a user id answers 404. The
+         * id comes from `users.policyGroups`, which returns it as `membershipId`
+         * for this purpose.
+         *
+         * Removing somebody from their last group does NOT remove them from the
+         * vault: membership is its own record, so they stay in the directory with
+         * no policies — able to be granted access, refused every action.
+         */
         removeMember: (groupId, membershipId) => this.#http.request('DELETE', `/api/v1/policy-groups/${seg(groupId)}/members/${seg(membershipId)}`),
     };
     // --- people -------------------------------------------------------------
     users = {
-        policyGroups: (userId) => this.#http.request('GET', `/api/v1/users/${seg(userId)}/policy-groups`),
-        /** The PLATFORM role, not a role within a vault. The two are different. */
+        /**
+         * Every group this person is in, each with the `membershipId` that
+         * `policyGroups.removeMember` needs. Without `vaultId` it spans ALL
+         * vaults, so filter when you are rendering one vault's screen.
+         */
+        policyGroups: (userId, params = {}) => this.#http.request('GET', `/api/v1/users/${seg(userId)}/policy-groups`, {
+            query: { ...params },
+        }),
+        /**
+         * The PLATFORM role, not a role within a vault. The two are different:
+         * a platform `admin` sees every vault while belonging to none, whereas a
+         * vault membership carries its own role.
+         *
+         * The parameter is narrowed to the two values the spec declares, which is
+         * worth the compile error on a privilege path: `string` here let a caller
+         * pass anything and find out from a 400 — after sending a role change.
+         * The RESPONSE keeps `role: string`, because the spec declares it bare and
+         * narrowing an answer we do not control would be a guess.
+         */
         setRole: (userId, role) => this.#http.request('PATCH', `/api/v1/users/${seg(userId)}/role`, { body: { role } }),
     };
     /** Vault-scoped administrative listings and creation. */
     vault(vaultCode) {
         const base = `/api/v1/vaults/${seg(vaultCode)}`;
         return {
-            invitations: () => this.#http.request('GET', `${base}/invitations`),
-            policies: (params = {}) => this.#http.request('GET', `${base}/policies`, { query: params }),
+            /**
+             * Every invitation of the vault, newest first. The magic-link TOKEN is
+             * not in the listing — only `invitations.get` returns it, so that it
+             * cannot leak through a screenshot or a log of a list view.
+             */
+            invitations: (params = {}) => this.#http.request('GET', `${base}/invitations`, {
+                query: { ...params },
+            }),
+            policies: (params = {}) => this.#http.request('GET', `${base}/policies`, { query: { ...params } }),
+            /** Groups with `_count` of their policies and members. No cursor. */
             policyGroups: () => this.#http.request('GET', `${base}/policy-groups`),
             /**
              * Creates a "seat": an account prepared in advance, before the person's
@@ -107,12 +152,31 @@ export class AdminResource {
         };
     }
     invitations = {
-        /** Public: lets an invited person see what they were invited to. */
+        /**
+         * Public: lets an invited person see what they were invited to — the
+         * vault and the groups, no token echoed back. The only endpoint here
+         * that needs no session, because it is what the /accept page calls.
+         *
+         * A revoked or already-accepted invitation answers 410, not 404: the
+         * difference is worth showing, since "this link was withdrawn" and "this
+         * link never existed" lead somewhere different.
+         */
         byToken: (token) => this.#http.request('GET', `/api/v1/invitations/by-token/${seg(token)}`),
+        /** The one place the magic-link token is returned. */
         get: (invitationId) => this.#http.request('GET', `/api/v1/invitations/${seg(invitationId)}`),
         create: (input) => this.#http.request('POST', '/api/v1/invitations', { body: input }),
+        /** Answers the invitation itself, now `revoked`. Already revoked → 400. */
         revoke: (invitationId) => this.#http.request('POST', `/api/v1/invitations/${seg(invitationId)}/revoke`),
-        /** Accepts an invitation without the email round-trip. For debugging. */
+        /**
+         * Accepts an invitation without the email round-trip, for an account that
+         * already exists. For debugging and curl tests: in the real flow this
+         * happens inside the sign-up hook.
+         *
+         * Matches on the EMAIL in the body, not on a token — it finds the pending
+         * invitation for that address. No pending invitation → 404; the user
+         * already attached to another invitation → 400, so a repeat is refused
+         * rather than duplicating memberships.
+         */
         acceptDebug: (body) => this.#http.request('POST', '/api/v1/invitations/accept-debug', { body }),
     };
     /**
@@ -126,8 +190,15 @@ export class AdminResource {
     visibilityGrants(vaultCode) {
         const base = `/api/v1/vaults/${seg(vaultCode)}/visibility-grants`;
         return {
-            list: () => this.#http.request('GET', base),
+            /**
+             * Active grants with the cards of subject and target group. The subject
+             * filters answer "what is open to this person or group", which is what
+             * their detail screen needs; `includeRevoked` adds the soft-deleted
+             * rows, the only way to see what access was withdrawn and when.
+             */
+            list: (params = {}) => this.#http.request('GET', base, { query: { ...params } }),
             create: (input) => this.#http.request('POST', base, { body: input }),
+            /** Soft: the row stays as `revoked`. Effective immediately. */
             revoke: (grantId) => this.#http.request('DELETE', `${base}/${seg(grantId)}`),
         };
     }

package/dist/esm/resources/admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/resources/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,iBAAiB,CAAA;AAuBtD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,aAAa;IACf,KAAK,CAAY;IAE1B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;IACnB,CAAC;IAED,2EAA2E;IAE3E;;;;;;;;;;;;;;;;OAgBG;IACM,QAAQ,GAAG;QAClB;;;;WAIG;QACH,IAAI,EAAE,CAAC,MAMN,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAA+B,KAAK,EAAE,kBAAkB,EAAE;YAChF,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;SACrB,CAAC;QAEF,GAAG,EAAE,CAAC,QAAgB,EAAE,EAAE,CACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,KAAK,EAAE,oBAAoB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE9E,+EAA+E;QAC/E,QAAQ,EAAE,CAAC,QAAgB,EAAE,EAAE,CAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,KAAK,EAAE,oBAAoB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAE5F,MAAM,EAAE,CAAC,KAAuB,EAAE,EAAE,CAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAElF;;;;WAIG;QACH,MAAM,EAAE,CAAC,QAAgB,EAAE,KAAsB,EAAE,EAAE,CACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,OAAO,EAAE,oBAAoB,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChF,IAAI,EAAE,KAAK;SACZ,CAAC;KACL,CAAA;IAED;;;;;;;;OAQG;IACM,YAAY,GAAG;QACtB,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAEvF,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE,CAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;QAE7E,2CAA2C;QAC3C,MAAM,EAAE,CAAC,OAAe,EAAE,EAAE,CAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAE3E,MAAM,EAAE,CAAC,KAA4B,EAAE,EAAE,CACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,MAAM,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAEnF,MAAM,EAAE,CAAC,OAAe,EAAE,KAA2B,EAAE,EAAE,CACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,OAAO,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;YAChF,IAAI,EAAE,KAAK;SACZ,CAAC;QAEJ;;;WAGG;QACH,SAAS,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE,CAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE;YAC1E,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC;QAEJ,wEAAwE;QACxE,YAAY,EAAE,CAAC,OAAe,EAAE,YAAoB,EAAE,EAAE,CACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAChB,QAAQ,EACR,yBAAyB,GAAG,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,YAAY,CAAC,EAAE,CACrE;KACJ,CAAA;IAED,2EAA2E;IAElE,KAAK,GAAG;QACf,YAAY,EAAE,CAAC,MAAc,EAAE,EAAE,CAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAEzE,2EAA2E;QAC3E,OAAO,EAAE,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;KACvF,CAAA;IAED,yDAAyD;IACzD,KAAK,CAAC,SAAiB;QAMrB,MAAM,IAAI,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAA;QAC/C,OAAO;YACL,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,cAAc,CAAC;YACnE,QAAQ,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,KAAK,EAAE,GAAG,IAAI,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACrF,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAI,gBAAgB,CAAC;YACtE;;;;;eAKG;YACH,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SAC5E,CAAA;IACH,CAAC;IAEQ,WAAW,GAAG;QACrB,oEAAoE;QACpE,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,gCAAgC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAEzE,GAAG,EAAE,CAAC,YAAoB,EAAE,EAAE,CAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,KAAK,EAAE,uBAAuB,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAEzF,MAAM,EAAE,CAAC,KAA2B,EAAE,EAAE,CACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,MAAM,EAAE,qBAAqB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAEvF,MAAM,EAAE,CAAC,YAAoB,EAAE,EAAE,CAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;QAE/E,yEAAyE;QACzE,WAAW,EAAE,CAAC,IAAa,EAAE,EAAE,CAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,kCAAkC,EAAE,EAAE,IAAI,EAAE,CAAC;KAC3E,CAAA;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,SAAiB;QAKhC,MAAM,IAAI,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAA;QACjE,OAAO;YACL,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;YAC3C,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACrF,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;SAC7E,CAAA;IACH,CAAC;CACF"}
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/resources/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,iBAAiB,CAAA;AAyFtD,MAAM,OAAO,aAAa;IACf,KAAK,CAAY;IAE1B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;IACnB,CAAC;IAED,2EAA2E;IAE3E;;;;;;;;;;;;;;;;OAgBG;IACM,QAAQ,GAAG;QAClB;;;;;;;;;;;;;;;WAeG;QACH,IAAI,EAAE,CAAC,MAMN,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkC,KAAK,EAAE,kBAAkB,EAAE;YACnF,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;SACrB,CAAC;QAEF,GAAG,EAAE,CAAC,QAAgB,EAAE,EAAE,CACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,KAAK,EAAE,oBAAoB,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAE9E,+EAA+E;QAC/E,QAAQ,EAAE,CAAC,QAAgB,EAAE,EAAE,CAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,KAAK,EAAE,oBAAoB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QAE5F,MAAM,EAAE,CAAC,KAAuB,EAAE,EAAE,CAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,MAAM,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAElF;;;;WAIG;QACH,MAAM,EAAE,CAAC,QAAgB,EAAE,KAAsB,EAAE,EAAE,CACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,OAAO,EAAE,oBAAoB,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE;YAChF,IAAI,EAAE,KAAK;SACZ,CAAC;KACL,CAAA;IAED;;;;;;;;OAQG;IACM,YAAY,GAAG;QACtB,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAEvF,yEAAyE;QACzE,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAM,GAA4C,EAAE,EAAE,EAAE,CAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE;YACvF,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;SACrB,CAAC;QAEJ;;;;;;;;;;WAUG;QACH,MAAM,EAAE,CAAC,OAAe,EAAE,EAAE,CAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;QAE3E,MAAM,EAAE,CAAC,KAA4B,EAAE,EAAE,CACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,MAAM,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAEnF,MAAM,EAAE,CAAC,OAAe,EAAE,KAA2B,EAAE,EAAE,CACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,OAAO,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;YAChF,IAAI,EAAE,KAAK;SACZ,CAAC;QAEJ;;;WAGG;QACH,SAAS,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE,CAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAa,MAAM,EAAE,yBAAyB,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE;YACtF,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC;QAEJ;;;;;;;;WAQG;QACH,YAAY,EAAE,CAAC,OAAe,EAAE,YAAoB,EAAE,EAAE,CACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAChB,QAAQ,EACR,yBAAyB,GAAG,CAAC,OAAO,CAAC,YAAY,GAAG,CAAC,YAAY,CAAC,EAAE,CACrE;KACJ,CAAA;IAED,2EAA2E;IAElE,KAAK,GAAG;QACf;;;;WAIG;QACH,YAAY,EAAE,CAAC,MAAc,EAAE,MAAM,GAAqC,EAAE,EAAE,EAAE,CAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,KAAK,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACvF,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;SACrB,CAAC;QAEJ;;;;;;;;;;WAUG;QACH,OAAO,EAAE,CAAC,MAAc,EAAE,IAAkB,EAAE,EAAE,CAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAChB,OAAO,EACP,iBAAiB,GAAG,CAAC,MAAM,CAAC,OAAO,EACnC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CACnB;KACJ,CAAA;IAED,yDAAyD;IACzD,KAAK,CAAC,SAAiB;QAQrB,MAAM,IAAI,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,EAAE,CAAA;QAC/C,OAAO;YACL;;;;eAIG;YACH,WAAW,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,KAAK,EAAE,GAAG,IAAI,cAAc,EAAE;gBACrE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;aACrB,CAAC;YACJ,QAAQ,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,KAAK,EAAE,GAAG,IAAI,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;YAC5F,qEAAqE;YACrE,YAAY,EAAE,GAAG,EAAE,CACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAA0B,KAAK,EAAE,GAAG,IAAI,gBAAgB,CAAC;YAC7E;;;;;eAKG;YACH,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SAC5E,CAAA;IACH,CAAC;IAEQ,WAAW,GAAG;QACrB;;;;;;;;WAQG;QACH,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE,CACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAChB,KAAK,EACL,gCAAgC,GAAG,CAAC,KAAK,CAAC,EAAE,CAC7C;QAEH,sDAAsD;QACtD,GAAG,EAAE,CAAC,YAAoB,EAAE,EAAE,CAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,KAAK,EAAE,uBAAuB,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAEzF,MAAM,EAAE,CAAC,KAA2B,EAAE,EAAE,CACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,MAAM,EAAE,qBAAqB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAEvF,2EAA2E;QAC3E,MAAM,EAAE,CAAC,YAAoB,EAAE,EAAE,CAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAa,MAAM,EAAE,uBAAuB,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC;QAE3F;;;;;;;;;WASG;QACH,WAAW,EAAE,CAAC,IAAqB,EAAE,EAAE,CACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,MAAM,EAAE,kCAAkC,EAAE,EAAE,IAAI,EAAE,CAAC;KACzF,CAAA;IAED;;;;;;;OAOG;IACH,gBAAgB,CAAC,SAAiB;QAShC,MAAM,IAAI,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAA;QACjE,OAAO;YACL;;;;;eAKG;YACH,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CACpB,IAAI,CAAC,KAAK,CAAC,OAAO,CAA+B,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;YACzF,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACrF,+DAA+D;YAC/D,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;SAChG,CAAA;IACH,CAAC;CACF"}

package/dist/esm/resources/approvals.d.ts

@@ -1,9 +1,23 @@
 import { type HttpClient } from '../core/http.js';
 import type { PageParams } from '../core/pagination.js';
 import { type Gated } from '../core/gated.js';
-import type { ApprovalRequestCreated, ApprovalRequestDetail, CompositeApplied, ApprovalRequestsPage, CreateCompositeBody, VoteBody } from '../generated/types.js';
+import type { ApprovalRequestCreated, ApprovalRequestDetail, ApprovalRequestsPage, CompositeApplied, CreateCompositeBody, RequestVoteResult, VoteBody } from '../generated/types.js';
+/**
+ * Status of an approval REQUEST — and in UPPER CASE.
+ *
+ * That is the trap this type exists for: a transfer's status is lowercase
+ * (`awaiting_approval`, `confirmed`), a request's is not, and the two live
+ * side by side on the same screen. `status: 'pending'` used to compile and
+ * answer 400.
+ *
+ * `APPROVED` is about the VOTES, not about the outcome. "Approved but it
+ * failed to apply" is still `APPROVED`, and the difference shows up in
+ * `applyError` and `resolvedResultId` on the vote's answer — so a listing
+ * filtered to `APPROVED` is not a listing of things that happened.
+ */
+export type ApprovalRequestStatus = 'PENDING' | 'APPROVED' | 'REJECTED' | 'CANCELLED';
 export interface ListApprovalsParams extends PageParams {
-    status?: string | undefined;
+    status?: ApprovalRequestStatus | undefined;
     action?: string | undefined;
     /** Requests I STARTED. Not the same as the ones waiting for me. */
     mine?: boolean | undefined;
@@ -31,9 +45,36 @@ export declare class ApprovalsResource {
     constructor(http: HttpClient, vaultCode: string);
     list(params?: ListApprovalsParams): Promise<ApprovalRequestsPage>;
     get(requestId: string): Promise<ApprovalRequestDetail>;
-    vote(requestId: string, input: VoteBody): Promise<unknown>;
-    /** Cancels your own request and releases whatever it reserved. */
-    cancel(requestId: string, reason?: string): Promise<unknown>;
+    /**
+     * Typed from `RequestVoteResult`, which the spec declares as a component but
+     * never `$ref`s — the operation inlines its 200 instead. The two were
+     * compared key by key and type by type and are the same schema; the only
+     * difference is an `additionalProperties: false` that does not reach the
+     * TypeScript shape. Worth saying, because a component nothing references
+     * usually means the opposite: an orphan left behind, which is what the
+     * `Address` schema turned out to be.
+     *
+     * Read `finalized` with `applyError`: a vote can finalize a request AND
+     * fail to apply it, and then the money has not moved.
+     */
+    vote(requestId: string, input: VoteBody): Promise<RequestVoteResult>;
+    /**
+     * Cancels your own request and releases whatever it reserved.
+     *
+     * Only while the request is `PENDING`, and only as its initiator or as an
+     * admin — the admin case exists so a request whose initiator is gone can
+     * still be cleared instead of holding the reserve forever.
+     *
+     * @param reason IGNORED BY THE SERVER, and no longer sent. The endpoint
+     * declares no request body and the handler never reads one, so the reason
+     * reached nothing: not the cancellation event, not the audit trail. It
+     * stays in the signature only so that existing callers keep compiling —
+     * drop it from your call, and record the reason wherever you need it to
+     * actually survive.
+     */
+    cancel(requestId: string, reason?: string): Promise<{
+        status: 'CANCELLED';
+    }>;
     /**
      * A composite request: several steps approved as one chain.
      *

package/dist/esm/resources/approvals.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../../src/resources/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAW,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,QAAQ,EACT,MAAM,uBAAuB,CAAA;AAE9B,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,mEAAmE;IACnE,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACjC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAI5B,YAAY,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAG9C;IAED,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAEpE;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAErD;IAED,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAEzD;IAED,kEAAkE;IAClE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAI3D;IAED;;;;;;;OAOG;IACG,eAAe,CACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC,CAK1D;CACF"}
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../../src/resources/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAO,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAW,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,QAAQ,EACT,MAAM,uBAAuB,CAAA;AAE9B;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,CAAA;AAErF,MAAM,WAAW,mBAAoB,SAAQ,UAAU;IACrD,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAA;IAC1C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,mEAAmE;IACnE,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACjC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAiB;;IAI5B,YAAY,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAG9C;IAED,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAEpE;IAED,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAErD;IAED;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAMnE;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC,CAK3E;IAED;;;;;;;OAOG;IACG,eAAe,CACnB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC,CAK1D;CACF"}

package/dist/esm/resources/approvals.js

@@ -21,14 +21,37 @@ export class ApprovalsResource {
     get(requestId) {
         return this.#http.request('GET', `${this.#base}/${seg(requestId)}`);
     }
+    /**
+     * Typed from `RequestVoteResult`, which the spec declares as a component but
+     * never `$ref`s — the operation inlines its 200 instead. The two were
+     * compared key by key and type by type and are the same schema; the only
+     * difference is an `additionalProperties: false` that does not reach the
+     * TypeScript shape. Worth saying, because a component nothing references
+     * usually means the opposite: an orphan left behind, which is what the
+     * `Address` schema turned out to be.
+     *
+     * Read `finalized` with `applyError`: a vote can finalize a request AND
+     * fail to apply it, and then the money has not moved.
+     */
     vote(requestId, input) {
         return this.#http.request('POST', `${this.#base}/${seg(requestId)}/approvals`, { body: input });
     }
-    /** Cancels your own request and releases whatever it reserved. */
+    /**
+     * Cancels your own request and releases whatever it reserved.
+     *
+     * Only while the request is `PENDING`, and only as its initiator or as an
+     * admin — the admin case exists so a request whose initiator is gone can
+     * still be cleared instead of holding the reserve forever.
+     *
+     * @param reason IGNORED BY THE SERVER, and no longer sent. The endpoint
+     * declares no request body and the handler never reads one, so the reason
+     * reached nothing: not the cancellation event, not the audit trail. It
+     * stays in the signature only so that existing callers keep compiling —
+     * drop it from your call, and record the reason wherever you need it to
+     * actually survive.
+     */
     cancel(requestId, reason) {
-        return this.#http.request('POST', `${this.#base}/${seg(requestId)}/cancel`, {
-            body: reason === undefined ? {} : { reason },
-        });
+        return this.#http.request('POST', `${this.#base}/${seg(requestId)}/cancel`);
     }
     /**
      * A composite request: several steps approved as one chain.

package/dist/esm/resources/approvals.js.map

@@ -1 +1 @@
-{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../../src/resources/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,OAAO,EAAc,MAAM,kBAAkB,CAAA;AA2BtD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAY;IACjB,KAAK,CAAQ;IAEtB,YAAY,IAAgB,EAAE,SAAiB;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,KAAK,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAA;IACnE,CAAC;IAED,IAAI,CAAC,MAAM,GAAwB,EAAE;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9F,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,KAAe;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjG,CAAC;IAED,kEAAkE;IAClE,MAAM,CAAC,SAAiB,EAAE,MAAe;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE;YAC1E,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE;SAC7C,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CACnB,KAA0B;QAE1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAU,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,YAAY,EAAE;YAClF,IAAI,EAAE,KAAK;SACZ,CAAC,CAAA;QACF,OAAO,OAAO,CAA2C,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC;CACF"}
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../../src/resources/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAmB,MAAM,iBAAiB,CAAA;AAEtD,OAAO,EAAE,OAAO,EAAc,MAAM,kBAAkB,CAAA;AA2CtD;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAY;IACjB,KAAK,CAAQ;IAEtB,YAAY,IAAgB,EAAE,SAAiB;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,KAAK,GAAG,kBAAkB,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAA;IACnE,CAAC;IAED,IAAI,CAAC,MAAM,GAAwB,EAAE;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9F,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,SAAiB,EAAE,KAAe;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,MAAM,EACN,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,EAC3C,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAA;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,SAAiB,EAAE,MAAe;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,MAAM,EACN,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,CAAC,SAAS,CACzC,CAAA;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CACnB,KAA0B;QAE1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAU,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,YAAY,EAAE;YAClF,IAAI,EAAE,KAAK;SACZ,CAAC,CAAA;QACF,OAAO,OAAO,CAA2C,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IAChF,CAAC;CACF"}