@viu/emporix-sdk 2.22.0 → 2.23.0

package/dist/customer-groups.cjs

@@ -1,38 +1,221 @@
 'use strict';
 
-// src/services/customer-groups.ts
-var CustomerGroupsService = class {
+// src/services/iam.ts
+var IamService = class {
   constructor(ctx) {
     this.ctx = ctx;
   }
   ctx;
   static channel = "iam";
   base() {
-    return `/iam/${this.ctx.tenant}/groups`;
+    return `/iam/${this.ctx.tenant}`;
   }
-  /** Lists customer groups belonging to one legal entity. */
-  async listForCompany(legalEntityId, auth) {
-    return this.ctx.http.request({
+  users = {
+    list: async (auth, query) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users`,
+      auth,
+      ...query ? { query } : {}
+    }),
+    create: async (input, auth) => this.ctx.http.request({
+      method: "POST",
+      path: `${this.base()}/users`,
+      auth,
+      body: input
+    }),
+    get: async (userId, auth) => this.ctx.http.request({
       method: "GET",
-      path: this.base(),
-      query: { "b2b.legalEntityId": legalEntityId },
+      path: `${this.base()}/users/${userId}`,
       auth
-    });
+    }),
+    getMe: async (auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/me`,
+      auth
+    }),
+    update: async (userId, input, auth) => {
+      await this.ctx.http.request({
+        method: "PUT",
+        path: `${this.base()}/users/${userId}`,
+        auth,
+        body: input
+      });
+    },
+    delete: async (userId, auth) => {
+      await this.ctx.http.request({
+        method: "DELETE",
+        path: `${this.base()}/users/${userId}`,
+        auth
+      });
+    },
+    getGroups: async (userId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/${userId}/groups`,
+      auth
+    }),
+    getScopes: async (userId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/${userId}/scopes`,
+      auth
+    }),
+    getMyScopes: async (auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/me/scopes`,
+      auth
+    }),
+    getAccessControls: async (userId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/${userId}/access-controls`,
+      auth
+    }),
+    getMyAccessControls: async (auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/me/access-controls`,
+      auth
+    })
+  };
+  groups = {
+    list: async (auth, query) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/groups`,
+      auth,
+      ...query ? { query } : {}
+    }),
+    create: async (input, auth) => this.ctx.http.request({
+      method: "POST",
+      path: `${this.base()}/groups`,
+      auth,
+      body: input
+    }),
+    get: async (groupId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/groups/${groupId}`,
+      auth
+    }),
+    update: async (groupId, input, auth) => {
+      await this.ctx.http.request({
+        method: "PUT",
+        path: `${this.base()}/groups/${groupId}`,
+        auth,
+        body: input
+      });
+    },
+    delete: async (groupId, auth) => {
+      await this.ctx.http.request({
+        method: "DELETE",
+        path: `${this.base()}/groups/${groupId}`,
+        auth
+      });
+    },
+    listUsers: async (groupId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/groups/${groupId}/users`,
+      auth
+    }),
+    addUser: async (groupId, input, auth) => this.ctx.http.request({
+      method: "POST",
+      path: `${this.base()}/groups/${groupId}/users`,
+      auth,
+      body: input
+    }),
+    updateUser: async (groupId, userType, userId, input, auth) => this.ctx.http.request({
+      method: "PUT",
+      path: `${this.base()}/groups/${groupId}/users/${userType}/${userId}`,
+      auth,
+      body: input
+    }),
+    removeAllUsers: async (groupId, auth) => {
+      await this.ctx.http.request({
+        method: "DELETE",
+        path: `${this.base()}/groups/${groupId}/users`,
+        auth
+      });
+    },
+    listAccessControls: async (groupId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/groups/${groupId}/access-controls`,
+      auth
+    })
+  };
+  accessControls = {
+    list: async (auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/access-controls`,
+      auth
+    }),
+    get: async (id, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/access-controls/${id}`,
+      auth
+    }),
+    upsert: async (id, input, auth) => this.ctx.http.request({
+      method: "PUT",
+      path: `${this.base()}/access-controls/${id}`,
+      auth,
+      body: input
+    }),
+    delete: async (id, auth) => {
+      await this.ctx.http.request({
+        method: "DELETE",
+        path: `${this.base()}/access-controls/${id}`,
+        auth
+      });
+    }
+  };
+  scopes = {
+    list: async (auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/scopes`,
+      auth
+    }),
+    get: async (scopeId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/scopes/${scopeId}`,
+      auth
+    }),
+    upsertCustom: async (scopeId, input, auth) => this.ctx.http.request({
+      method: "PUT",
+      path: `${this.base()}/scopes/${scopeId}`,
+      auth,
+      body: input
+    }),
+    deleteCustom: async (scopeId, auth) => {
+      await this.ctx.http.request({
+        method: "DELETE",
+        path: `${this.base()}/scopes/${scopeId}`,
+        auth
+      });
+    }
+  };
+};
+
+// src/services/customer-groups.ts
+var CustomerGroupsService = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+    this.iam = new IamService(ctx);
+  }
+  ctx;
+  static channel = "iam";
+  iam;
+  /** Lists customer groups belonging to one legal entity. */
+  async listForCompany(legalEntityId, auth) {
+    return this.iam.groups.list(auth, { "b2b.legalEntityId": legalEntityId });
   }
   /** Adds a user (customer or employee) to a group. */
   async addMember(groupId, member, auth) {
-    return this.ctx.http.request({
-      method: "POST",
-      path: `${this.base()}/${groupId}/users`,
-      auth,
-      body: member
-    });
+    return await this.iam.groups.addUser(groupId, member, auth);
   }
-  /** Removes a user from a group. */
+  /**
+   * Removes a user from a group. Uses `DELETE …/groups/{groupId}/users/{userId}`
+   * directly — this endpoint is deprecated upstream and intentionally not
+   * exposed on {@link IamService}, so it is not delegated. No non-deprecated
+   * single-user removal exists.
+   */
   async removeMember(groupId, userId, auth) {
     await this.ctx.http.request({
       method: "DELETE",
-      path: `${this.base()}/${groupId}/users/${userId}`,
+      path: `/iam/${this.ctx.tenant}/groups/${groupId}/users/${userId}`,
       auth
     });
   }

package/dist/customer-groups.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/services/customer-groups.ts"],"names":[],"mappings":";;;AAeO,IAAM,wBAAN,MAA4B;AAAA,EAEjC,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,KAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,OAAA,CAAA;AAAA,EAChC;AAAA;AAAA,EAGA,MAAM,cAAA,CAAe,aAAA,EAAuB,IAAA,EAAmD;AAC7F,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA+B;AAAA,MAClD,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,KAAA,EAAO,EAAE,mBAAA,EAAqB,aAAA,EAAc;AAAA,MAC5C;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,SAAA,CACJ,OAAA,EACA,MAAA,EACA,IAAA,EACyB;AACzB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,OAAO,CAAA,MAAA,CAAA;AAAA,MAC/B,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,YAAA,CAAa,OAAA,EAAiB,MAAA,EAAgB,IAAA,EAAkC;AACpF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,CAAA,EAAI,OAAO,UAAU,MAAM,CAAA,CAAA;AAAA,MAC/C;AAAA,KACD,CAAA;AAAA,EACH;AACF","file":"customer-groups.cjs","sourcesContent":["import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type {\n  GroupsQueryDocument,\n  AssignmentCreateRequest,\n} from \"../generated/iam\";\n\n/**\n * Access to IAM customer groups for a legal entity.\n *\n * `listForCompany` requires `iam.group_read`; the member mutations\n * (`addMember`/`removeMember`) require `iam.group_manage` — typically only\n * granted to Admin-group customers; a 403 surfaces as\n * `EmporixInsufficientScopeError`.\n */\nexport class CustomerGroupsService {\n  static readonly channel = \"iam\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/iam/${this.ctx.tenant}/groups`;\n  }\n\n  /** Lists customer groups belonging to one legal entity. */\n  async listForCompany(legalEntityId: string, auth: AuthContext): Promise<GroupsQueryDocument[]> {\n    return this.ctx.http.request<GroupsQueryDocument[]>({\n      method: \"GET\",\n      path: this.base(),\n      query: { \"b2b.legalEntityId\": legalEntityId },\n      auth,\n    });\n  }\n\n  /** Adds a user (customer or employee) to a group. */\n  async addMember(\n    groupId: string,\n    member: AssignmentCreateRequest,\n    auth: AuthContext,\n  ): Promise<{ id: string }> {\n    return this.ctx.http.request<{ id: string }>({\n      method: \"POST\",\n      path: `${this.base()}/${groupId}/users`,\n      auth,\n      body: member,\n    });\n  }\n\n  /** Removes a user from a group. */\n  async removeMember(groupId: string, userId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${groupId}/users/${userId}`,\n      auth,\n    });\n  }\n}\n"]}
+{"version":3,"sources":["../src/services/iam.ts","../src/services/customer-groups.ts"],"names":[],"mappings":";;;AA+BO,IAAM,aAAN,MAAiB;AAAA,EAEtB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,KAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAA;AAAA,EAChC;AAAA,EAES,KAAA,GAAQ;AAAA,IACf,MAAM,OAAO,IAAA,EAAmB,UAC9B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAmB;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,MAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU;AAAC,KAC1B,CAAA;AAAA,IACH,QAAQ,OAAO,KAAA,EAAsB,SACnC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAwB;AAAA,MACpC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,MAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,KAAK,OAAO,MAAA,EAAgB,SAC1B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,OAAO,OAAO,IAAA,KACZ,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,SAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,MAAA,EAAgB,KAAA,EAAsB,IAAA,KAAqC;AACxF,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,KAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,QACpC,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,MAAA,EAAgB,IAAA,KAAqC;AAClE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,QACpC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,WAAW,OAAO,MAAA,EAAgB,SAChC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,OAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,WAAW,OAAO,MAAA,EAAgB,SAChC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,OAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,aAAa,OAAO,IAAA,KAClB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,gBAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,mBAAmB,OAAO,MAAA,EAAgB,SACxC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,gBAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,qBAAqB,OAAO,IAAA,KAC1B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,yBAAA,CAAA;AAAA,MACpB;AAAA,KACD;AAAA,GACL;AAAA,EAES,MAAA,GAAS;AAAA,IAChB,MAAM,OAAO,IAAA,EAAmB,UAC9B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU;AAAC,KAC1B,CAAA;AAAA,IACH,QAAQ,OAAO,KAAA,EAAuB,SACpC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAyB;AAAA,MACrC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,KAAK,OAAO,OAAA,EAAiB,SAC3B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,OAAA,EAAiB,KAAA,EAAuB,IAAA,KAAqC;AAC1F,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,KAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,OAAA,EAAiB,IAAA,KAAqC;AACnE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,WAAW,OAAO,OAAA,EAAiB,SACjC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAmB;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,OAAA,EAAS,OACP,OAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA+B;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,UAAA,EAAY,OACV,OAAA,EACA,QAAA,EACA,MAAA,EACA,OACA,IAAA,KAEA,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA+B;AAAA,MAC3C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,OAAA,EAAU,QAAQ,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,MAClE,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,cAAA,EAAgB,OAAO,OAAA,EAAiB,IAAA,KAAqC;AAC3E,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,oBAAoB,OAAO,OAAA,EAAiB,SAC1C,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,gBAAA,CAAA;AAAA,MACtC;AAAA,KACD;AAAA,GACL;AAAA,EAES,cAAA,GAAiB;AAAA,IACxB,MAAM,OAAO,IAAA,KACX,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,gBAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,KAAK,OAAO,EAAA,EAAY,SACtB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA0B;AAAA,MACtC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,MAC1C;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OACN,EAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAiC;AAAA,MAC7C,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,EAAA,EAAY,IAAA,KAAqC;AAC9D,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,QAC1C;AAAA,OACD,CAAA;AAAA,IACH;AAAA,GACF;AAAA,EAES,MAAA,GAAS;AAAA,IAChB,MAAM,OAAO,IAAA,KACX,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,KAAK,OAAO,OAAA,EAAiB,SAC3B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,YAAA,EAAc,OACZ,OAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAyB;AAAA,MACrC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,YAAA,EAAc,OAAO,OAAA,EAAiB,IAAA,KAAqC;AACzE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH;AAAA,GACF;AACF,CAAA;;;ACrPO,IAAM,wBAAN,MAA4B;AAAA,EAGjC,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAC3B,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,UAAA,CAAW,GAAG,CAAA;AAAA,EAC/B;AAAA,EAF6B,GAAA;AAAA,EAF7B,OAAgB,OAAA,GAAU,KAAA;AAAA,EACT,GAAA;AAAA;AAAA,EAMjB,MAAM,cAAA,CAAe,aAAA,EAAuB,IAAA,EAAmD;AAC7F,IAAA,OAAO,IAAA,CAAK,IAAI,MAAA,CAAO,IAAA,CAAK,MAAM,EAAE,mBAAA,EAAqB,eAAe,CAAA;AAAA,EAC1E;AAAA;AAAA,EAGA,MAAM,SAAA,CACJ,OAAA,EACA,MAAA,EACA,IAAA,EACyB;AAIzB,IAAA,OAAQ,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,OAAA,CAAQ,OAAA,EAAS,QAAQ,IAAI,CAAA;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,CAAa,OAAA,EAAiB,MAAA,EAAgB,IAAA,EAAkC;AACpF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,QAAA,EAAW,OAAO,UAAU,MAAM,CAAA,CAAA;AAAA,MAC/D;AAAA,KACD,CAAA;AAAA,EACH;AACF","file":"customer-groups.cjs","sourcesContent":["import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type {\n  IamUser,\n  IamUserDetail,\n  IamUserCreate,\n  IamUserUpdate,\n  IamUserScopes,\n  IamUserCreated,\n  IamGroup,\n  IamGroupCreate,\n  IamGroupUpdate,\n  IamGroupCreated,\n  IamGroupMemberInput,\n  IamGroupMemberCreated,\n  IamAccessControl,\n  IamAccessControlUpsert,\n  IamAccessControlCreated,\n  IamScope,\n  IamScopeUpsert,\n  IamScopeCreated,\n} from \"./iam-types\";\n\nexport type * from \"./iam-types\";\n\n/**\n * IAM admin CRUD: users, user-groups, access-controls, scopes. Every method\n * requires an explicit `auth` (admin/service token; `getMe*` take the caller's\n * customer token). The deprecated legacy-RBAC model (roles/permissions/\n * resources/templates) is intentionally not wrapped.\n */\nexport class IamService {\n  static readonly channel = \"iam\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/iam/${this.ctx.tenant}`;\n  }\n\n  readonly users = {\n    list: async (auth: AuthContext, query?: Record<string, string | number>): Promise<IamUser[]> =>\n      this.ctx.http.request<IamUser[]>({\n        method: \"GET\",\n        path: `${this.base()}/users`,\n        auth,\n        ...(query ? { query } : {}),\n      }),\n    create: async (input: IamUserCreate, auth: AuthContext): Promise<IamUserCreated> =>\n      this.ctx.http.request<IamUserCreated>({\n        method: \"POST\",\n        path: `${this.base()}/users`,\n        auth,\n        body: input,\n      }),\n    get: async (userId: string, auth: AuthContext): Promise<IamUserDetail> =>\n      this.ctx.http.request<IamUserDetail>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n      }),\n    getMe: async (auth: AuthContext): Promise<IamUserDetail> =>\n      this.ctx.http.request<IamUserDetail>({\n        method: \"GET\",\n        path: `${this.base()}/users/me`,\n        auth,\n      }),\n    update: async (userId: string, input: IamUserUpdate, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"PUT\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n        body: input,\n      });\n    },\n    delete: async (userId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n      });\n    },\n    getGroups: async (userId: string, auth: AuthContext): Promise<IamGroup[]> =>\n      this.ctx.http.request<IamGroup[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/groups`,\n        auth,\n      }),\n    getScopes: async (userId: string, auth: AuthContext): Promise<IamUserScopes> =>\n      this.ctx.http.request<IamUserScopes>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/scopes`,\n        auth,\n      }),\n    getMyScopes: async (auth: AuthContext): Promise<IamUserScopes> =>\n      this.ctx.http.request<IamUserScopes>({\n        method: \"GET\",\n        path: `${this.base()}/users/me/scopes`,\n        auth,\n      }),\n    getAccessControls: async (userId: string, auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/access-controls`,\n        auth,\n      }),\n    getMyAccessControls: async (auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/me/access-controls`,\n        auth,\n      }),\n  };\n\n  readonly groups = {\n    list: async (auth: AuthContext, query?: Record<string, string | number>): Promise<IamGroup[]> =>\n      this.ctx.http.request<IamGroup[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups`,\n        auth,\n        ...(query ? { query } : {}),\n      }),\n    create: async (input: IamGroupCreate, auth: AuthContext): Promise<IamGroupCreated> =>\n      this.ctx.http.request<IamGroupCreated>({\n        method: \"POST\",\n        path: `${this.base()}/groups`,\n        auth,\n        body: input,\n      }),\n    get: async (groupId: string, auth: AuthContext): Promise<IamGroup> =>\n      this.ctx.http.request<IamGroup>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n      }),\n    update: async (groupId: string, input: IamGroupUpdate, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"PUT\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n        body: input,\n      });\n    },\n    delete: async (groupId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n      });\n    },\n    listUsers: async (groupId: string, auth: AuthContext): Promise<IamUser[]> =>\n      this.ctx.http.request<IamUser[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n      }),\n    addUser: async (\n      groupId: string,\n      input: IamGroupMemberInput,\n      auth: AuthContext,\n    ): Promise<IamGroupMemberCreated> =>\n      this.ctx.http.request<IamGroupMemberCreated>({\n        method: \"POST\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n        body: input,\n      }),\n    updateUser: async (\n      groupId: string,\n      userType: string,\n      userId: string,\n      input: IamGroupMemberInput,\n      auth: AuthContext,\n    ): Promise<IamGroupMemberCreated> =>\n      this.ctx.http.request<IamGroupMemberCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/groups/${groupId}/users/${userType}/${userId}`,\n        auth,\n        body: input,\n      }),\n    removeAllUsers: async (groupId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n      });\n    },\n    listAccessControls: async (groupId: string, auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}/access-controls`,\n        auth,\n      }),\n  };\n\n  readonly accessControls = {\n    list: async (auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/access-controls`,\n        auth,\n      }),\n    get: async (id: string, auth: AuthContext): Promise<IamAccessControl> =>\n      this.ctx.http.request<IamAccessControl>({\n        method: \"GET\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n      }),\n    upsert: async (\n      id: string,\n      input: IamAccessControlUpsert,\n      auth: AuthContext,\n    ): Promise<IamAccessControlCreated> =>\n      this.ctx.http.request<IamAccessControlCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n        body: input,\n      }),\n    delete: async (id: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n      });\n    },\n  };\n\n  readonly scopes = {\n    list: async (auth: AuthContext): Promise<IamScope[]> =>\n      this.ctx.http.request<IamScope[]>({\n        method: \"GET\",\n        path: `${this.base()}/scopes`,\n        auth,\n      }),\n    get: async (scopeId: string, auth: AuthContext): Promise<IamScope> =>\n      this.ctx.http.request<IamScope>({\n        method: \"GET\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n      }),\n    upsertCustom: async (\n      scopeId: string,\n      input: IamScopeUpsert,\n      auth: AuthContext,\n    ): Promise<IamScopeCreated> =>\n      this.ctx.http.request<IamScopeCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n        body: input,\n      }),\n    deleteCustom: async (scopeId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n      });\n    },\n  };\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type { GroupsQueryDocument, AssignmentCreateRequest } from \"../generated/iam\";\nimport { IamService } from \"./iam\";\n\n/**\n * Access to IAM customer groups for a legal entity. Thin B2B-friendly wrapper\n * over {@link IamService.groups}; kept for backward compatibility.\n *\n * `listForCompany` requires `iam.group_read`; the member mutations\n * (`addMember`/`removeMember`) require `iam.group_manage` — typically only\n * granted to Admin-group customers; a 403 surfaces as\n * `EmporixInsufficientScopeError`.\n */\nexport class CustomerGroupsService {\n  static readonly channel = \"iam\" as const;\n  private readonly iam: IamService;\n  constructor(private readonly ctx: ClientContext) {\n    this.iam = new IamService(ctx);\n  }\n\n  /** Lists customer groups belonging to one legal entity. */\n  async listForCompany(legalEntityId: string, auth: AuthContext): Promise<GroupsQueryDocument[]> {\n    return this.iam.groups.list(auth, { \"b2b.legalEntityId\": legalEntityId });\n  }\n\n  /** Adds a user (customer or employee) to a group. */\n  async addMember(\n    groupId: string,\n    member: AssignmentCreateRequest,\n    auth: AuthContext,\n  ): Promise<{ id: string }> {\n    // `addUser` returns `AssignmentIdResponse` (id optional); the original public\n    // contract is `{ id: string }` (the old `request<{id:string}>` asserted the\n    // same). Cast to preserve that contract — the wire body is identical.\n    return (await this.iam.groups.addUser(groupId, member, auth)) as { id: string };\n  }\n\n  /**\n   * Removes a user from a group. Uses `DELETE …/groups/{groupId}/users/{userId}`\n   * directly — this endpoint is deprecated upstream and intentionally not\n   * exposed on {@link IamService}, so it is not delegated. No non-deprecated\n   * single-user removal exists.\n   */\n  async removeMember(groupId: string, userId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `/iam/${this.ctx.tenant}/groups/${groupId}/users/${userId}`,\n      auth,\n    });\n  }\n}\n"]}

package/dist/customer-groups.d.cts

@@ -1,110 +1,2 @@
-import { C as ClientContext, b as AuthContext } from './context-CfXJcYKP.cjs';
-
-type AssignmentCreateRequest = {
-    /**
-     * User unique identifier generated when the user is created. Might be customer ID or Management Dashboard user ID.
-     */
-    userId: string;
-    /**
-     * Assignment type, possible values: CUSTOMER, EMPLOYEE
-     */
-    userType?: 'CUSTOMER' | 'EMPLOYEE';
-};
-/**
- * Group metadata.
- */
-type GroupsMetadataQueryDocument = {
-    /**
-     * Group document version.
-     */
-    version: number;
-    /**
-     * Timestamp indicating when the group was created.
-     */
-    createdAt: string;
-    /**
-     * Timestamp indicating when the group was last modified.
-     */
-    modifiedAt?: string;
-};
-/**
- * Definition of groups
- */
-type GroupsQueryDocument = {
-    /**
-     * Group unique identifier generated when the group is created.
-     */
-    id?: string;
-    /**
-     * Localized group name in the form of a map of translations.
-     */
-    name?: {
-        [key: string]: string;
-    };
-    /**
-     * Localized group description in the form of a map of translations.
-     */
-    description?: {
-        [key: string]: string;
-    };
-    /**
-     * An identifier of a vendor to whom the group belongs. Can only be set during creation and is immutable thereafter. A group with vendorId can only be assigned to users of type `EMPLOYEE`
-     */
-    readonly vendorId?: string;
-    /**
-     * Access control unique identifiers associated with this group.
-     */
-    accessControls?: Array<string>;
-    /**
-     * Template unique identifiers associated with this group.
-     */
-    templates?: Array<string>;
-    code?: string;
-    /**
-     * The group type determines if the group can consist of users of the `CUSTOMER` or the `EMPLOYEE` type.
-     */
-    userType?: string;
-    /**
-     * additional properties for B2B
-     */
-    b2b?: {
-        /**
-         * identifier of the assigned legal entity
-         */
-        legalEntityId?: string;
-    };
-    restrictions?: Restrictions;
-    /**
-     * Custom group attributes that need to be included directly in the `mixins` object.
-     */
-    mixins?: {
-        [key: string]: string;
-    };
-    metadata?: GroupsMetadataQueryDocument;
-};
-type Restrictions = Array<string>;
-
-/**
- * Access to IAM customer groups for a legal entity.
- *
- * `listForCompany` requires `iam.group_read`; the member mutations
- * (`addMember`/`removeMember`) require `iam.group_manage` — typically only
- * granted to Admin-group customers; a 403 surfaces as
- * `EmporixInsufficientScopeError`.
- */
-declare class CustomerGroupsService {
-    private readonly ctx;
-    static readonly channel: "iam";
-    constructor(ctx: ClientContext);
-    private base;
-    /** Lists customer groups belonging to one legal entity. */
-    listForCompany(legalEntityId: string, auth: AuthContext): Promise<GroupsQueryDocument[]>;
-    /** Adds a user (customer or employee) to a group. */
-    addMember(groupId: string, member: AssignmentCreateRequest, auth: AuthContext): Promise<{
-        id: string;
-    }>;
-    /** Removes a user from a group. */
-    removeMember(groupId: string, userId: string, auth: AuthContext): Promise<void>;
-}
-
-export { CustomerGroupsService, type GroupsQueryDocument as IamGroup, type AssignmentCreateRequest as IamGroupMemberAssignment };
+export { g as CustomerGroupsService, j as IamGroup, c as IamGroupMemberAssignment } from './customer-groups-BxSNFHq1.cjs';
+import './context-CfXJcYKP.cjs';

package/dist/customer-groups.d.ts

@@ -1,110 +1,2 @@
-import { C as ClientContext, b as AuthContext } from './context-CfXJcYKP.js';
-
-type AssignmentCreateRequest = {
-    /**
-     * User unique identifier generated when the user is created. Might be customer ID or Management Dashboard user ID.
-     */
-    userId: string;
-    /**
-     * Assignment type, possible values: CUSTOMER, EMPLOYEE
-     */
-    userType?: 'CUSTOMER' | 'EMPLOYEE';
-};
-/**
- * Group metadata.
- */
-type GroupsMetadataQueryDocument = {
-    /**
-     * Group document version.
-     */
-    version: number;
-    /**
-     * Timestamp indicating when the group was created.
-     */
-    createdAt: string;
-    /**
-     * Timestamp indicating when the group was last modified.
-     */
-    modifiedAt?: string;
-};
-/**
- * Definition of groups
- */
-type GroupsQueryDocument = {
-    /**
-     * Group unique identifier generated when the group is created.
-     */
-    id?: string;
-    /**
-     * Localized group name in the form of a map of translations.
-     */
-    name?: {
-        [key: string]: string;
-    };
-    /**
-     * Localized group description in the form of a map of translations.
-     */
-    description?: {
-        [key: string]: string;
-    };
-    /**
-     * An identifier of a vendor to whom the group belongs. Can only be set during creation and is immutable thereafter. A group with vendorId can only be assigned to users of type `EMPLOYEE`
-     */
-    readonly vendorId?: string;
-    /**
-     * Access control unique identifiers associated with this group.
-     */
-    accessControls?: Array<string>;
-    /**
-     * Template unique identifiers associated with this group.
-     */
-    templates?: Array<string>;
-    code?: string;
-    /**
-     * The group type determines if the group can consist of users of the `CUSTOMER` or the `EMPLOYEE` type.
-     */
-    userType?: string;
-    /**
-     * additional properties for B2B
-     */
-    b2b?: {
-        /**
-         * identifier of the assigned legal entity
-         */
-        legalEntityId?: string;
-    };
-    restrictions?: Restrictions;
-    /**
-     * Custom group attributes that need to be included directly in the `mixins` object.
-     */
-    mixins?: {
-        [key: string]: string;
-    };
-    metadata?: GroupsMetadataQueryDocument;
-};
-type Restrictions = Array<string>;
-
-/**
- * Access to IAM customer groups for a legal entity.
- *
- * `listForCompany` requires `iam.group_read`; the member mutations
- * (`addMember`/`removeMember`) require `iam.group_manage` — typically only
- * granted to Admin-group customers; a 403 surfaces as
- * `EmporixInsufficientScopeError`.
- */
-declare class CustomerGroupsService {
-    private readonly ctx;
-    static readonly channel: "iam";
-    constructor(ctx: ClientContext);
-    private base;
-    /** Lists customer groups belonging to one legal entity. */
-    listForCompany(legalEntityId: string, auth: AuthContext): Promise<GroupsQueryDocument[]>;
-    /** Adds a user (customer or employee) to a group. */
-    addMember(groupId: string, member: AssignmentCreateRequest, auth: AuthContext): Promise<{
-        id: string;
-    }>;
-    /** Removes a user from a group. */
-    removeMember(groupId: string, userId: string, auth: AuthContext): Promise<void>;
-}
-
-export { CustomerGroupsService, type GroupsQueryDocument as IamGroup, type AssignmentCreateRequest as IamGroupMemberAssignment };
+export { g as CustomerGroupsService, j as IamGroup, c as IamGroupMemberAssignment } from './customer-groups-GlzWhDsi.js';
+import './context-CfXJcYKP.js';

package/dist/customer-groups.js

@@ -1,3 +1,3 @@
-export { CustomerGroupsService } from './chunk-3BTPX7IJ.js';
+export { CustomerGroupsService } from './chunk-LQFRJSVT.js';
 //# sourceMappingURL=customer-groups.js.map
 //# sourceMappingURL=customer-groups.js.map