@viu/emporix-sdk 4.0.1 → 4.2.0

package/dist/chunk-ZWJUDXTK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/search.ts"],"names":[],"mappings":";AAeO,IAAM,aAAA,GAAgB,CAAC,YAAA,EAAc,UAAA,EAAY,QAAQ,QAAQ;AAQjE,SAAS,UAAA,CACd,OACA,SAAA,EACiG;AACjG,EAAA,MAAM,OAAgC,EAAC;AACvC,EAAA,MAAM,QAA+D,EAAC;AACtE,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,UAAU,QAAA,CAAS,GAAG,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,GAAI,KAAA;AAAA,SACrC,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,EACnB;AACA,EAAA,OAAO,EAAE,MAAM,KAAA,EAAM;AACvB","file":"chunk-ZWJUDXTK.js","sourcesContent":["/**\n * Paging, sort and field selection for a `POST …/search` endpoint. Emporix reads\n * them from the query string, not the body, so the SDK sends them there. Without\n * them a search returns only the server's first page.\n */\nexport interface SearchPaging {\n  pageNumber?: number;\n  pageSize?: number;\n  /** Properties to sort by, in Emporix sort syntax. */\n  sort?: string;\n  /** Comma-separated fields to return. */\n  fields?: string;\n}\n\n/** The {@link SearchPaging} keys, for {@link splitQuery}. */\nexport const SEARCH_PAGING = [\"pageNumber\", \"pageSize\", \"sort\", \"fields\"] as const;\n\n/**\n * Splits a request input: the named keys go to the query string, everything\n * else stays in the body. A `POST …/search` declares its paging, sort and similar\n * parameters in the query and ignores them in the body — sent there, the search\n * silently returns the first page.\n */\nexport function splitQuery(\n  input: object,\n  queryKeys: readonly string[],\n): { body: Record<string, unknown>; query: Record<string, string | number | boolean | undefined> } {\n  const body: Record<string, unknown> = {};\n  const query: Record<string, string | number | boolean | undefined> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (queryKeys.includes(key)) query[key] = value as string | number | boolean | undefined;\n    else body[key] = value;\n  }\n  return { body, query };\n}\n"]}

package/dist/companies.cjs

@@ -1,5 +1,17 @@
 'use strict';
 
+// src/core/search.ts
+var SEARCH_PAGING = ["pageNumber", "pageSize", "sort", "fields"];
+function splitQuery(input, queryKeys) {
+  const body = {};
+  const query = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (queryKeys.includes(key)) query[key] = value;
+    else body[key] = value;
+  }
+  return { body, query };
+}
+
 // src/services/companies.ts
 var CompaniesService = class {
   constructor(ctx) {
@@ -59,14 +71,15 @@ var CompaniesService = class {
   }
   /**
    * Searches legal entities via `POST /legal-entities/search` with an Emporix
-   * `q`-syntax filter body. Requires the same read scope as {@link listMine}.
+   * `q`-syntax filter body; paging, sort and fields go in the query string.
+   * Requires the same read scope as {@link listMine}.
    */
   async search(query, auth) {
     return this.ctx.http.request({
       method: "POST",
       path: `${this.base()}/search`,
       auth,
-      body: query,
+      ...splitQuery(query, SEARCH_PAGING),
       idempotent: true
       // pure read over POST — safe to replay on 5xx/429
     });

package/dist/companies.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/services/companies.ts"],"names":[],"mappings":";;;AAmBO,IAAM,mBAAN,MAAuB;AAAA,EAE5B,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,qBAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,qBAAA,EAAwB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,eAAA,CAAA;AAAA,EAChD;AAAA;AAAA,EAGA,MAAM,SAAS,IAAA,EAA2C;AACxD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,aAAA,EAAuB,IAAA,EAAyC;AACxE,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,CAAA;AAAA,MACrC;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,MAAA,CAAO,KAAA,EAA0B,IAAA,EAA4C;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAA,CACJ,aAAA,EACA,KAAA,EACA,IAAA,EACsB;AACtB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,CAAA;AAAA,MACrC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,MAAA,CAAO,aAAA,EAAuB,IAAA,EAAkC;AACpE,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,CAAA;AAAA,MACrC;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAA,CAAO,KAAA,EAA+B,IAAA,EAA2C;AACrF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM,KAAA;AAAA,MACN,UAAA,EAAY;AAAA;AAAA,KACb,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAA,CAAgB,aAAA,EAAuB,IAAA,EAA2C;AACtF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,iBAAA,CAAA;AAAA,MACrC;AAAA,KACD,CAAA;AAAA,EACH;AACF","file":"companies.cjs","sourcesContent":["import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type {\n  LegalEntity,\n  LegalEntityCreate,\n  LegalEntityUpdate,\n} from \"../generated/customer-management\";\n\n/** Body for `companies.search` — an Emporix `q`-syntax filter. */\nexport type LegalEntitySearchInput = { q?: string };\n\n/**\n * Storefront-customer access to Legal Entities.\n *\n * `listMine`/`get` require `customermanagement.legalentity_read_own` on the\n * customer token. `create`/`update`/`delete` require the corresponding\n * `_manage` scopes — typically only granted to Admin-group customers; a 403\n * surfaces as `EmporixInsufficientScopeError`.\n */\nexport class CompaniesService {\n  static readonly channel = \"customer-management\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/customer-management/${this.ctx.tenant}/legal-entities`;\n  }\n\n  /** Lists the legal entities the calling customer is assigned to. */\n  async listMine(auth: AuthContext): Promise<LegalEntity[]> {\n    return this.ctx.http.request<LegalEntity[]>({\n      method: \"GET\",\n      path: this.base(),\n      auth,\n    });\n  }\n\n  /** Fetches a single legal entity by id. */\n  async get(legalEntityId: string, auth: AuthContext): Promise<LegalEntity> {\n    return this.ctx.http.request<LegalEntity>({\n      method: \"GET\",\n      path: `${this.base()}/${legalEntityId}`,\n      auth,\n    });\n  }\n\n  /** Creates a legal entity. Requires `customermanagement.legalentity_manage`. */\n  async create(input: LegalEntityCreate, auth: AuthContext): Promise<{ id: string }> {\n    return this.ctx.http.request<{ id: string }>({\n      method: \"POST\",\n      path: this.base(),\n      auth,\n      body: input,\n    });\n  }\n\n  /**\n   * Updates a legal entity via `PUT …/legal-entities/{id}` (upsert / full\n   * replace). The live API rejects `PATCH` on this path with 405; send the\n   * complete entity, as the server replaces the resource. The body stays typed\n   * as a partial of `LegalEntityUpdate` for backward compatibility.\n   */\n  async update(\n    legalEntityId: string,\n    patch: Partial<LegalEntityUpdate>,\n    auth: AuthContext,\n  ): Promise<LegalEntity> {\n    return this.ctx.http.request<LegalEntity>({\n      method: \"PUT\",\n      path: `${this.base()}/${legalEntityId}`,\n      auth,\n      body: patch,\n    });\n  }\n\n  /** Deletes a legal entity (async cascade on the server). */\n  async delete(legalEntityId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${legalEntityId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Searches legal entities via `POST /legal-entities/search` with an Emporix\n   * `q`-syntax filter body. Requires the same read scope as {@link listMine}.\n   */\n  async search(query: LegalEntitySearchInput, auth: AuthContext): Promise<LegalEntity[]> {\n    return this.ctx.http.request<LegalEntity[]>({\n      method: \"POST\",\n      path: `${this.base()}/search`,\n      auth,\n      body: query,\n      idempotent: true, // pure read over POST — safe to replay on 5xx/429\n    });\n  }\n\n  /**\n   * Retrieves a legal entity's chain of parent entities\n   * (`GET /legal-entities/{id}/parent-hierarchy`).\n   */\n  async parentHierarchy(legalEntityId: string, auth: AuthContext): Promise<LegalEntity[]> {\n    return this.ctx.http.request<LegalEntity[]>({\n      method: \"GET\",\n      path: `${this.base()}/${legalEntityId}/parent-hierarchy`,\n      auth,\n    });\n  }\n}\n"]}
+{"version":3,"sources":["../src/core/search.ts","../src/services/companies.ts"],"names":[],"mappings":";;;AAeO,IAAM,aAAA,GAAgB,CAAC,YAAA,EAAc,UAAA,EAAY,QAAQ,QAAQ,CAAA;AAQjE,SAAS,UAAA,CACd,OACA,SAAA,EACiG;AACjG,EAAA,MAAM,OAAgC,EAAC;AACvC,EAAA,MAAM,QAA+D,EAAC;AACtE,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAChD,IAAA,IAAI,UAAU,QAAA,CAAS,GAAG,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,GAAI,KAAA;AAAA,SACrC,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,EACnB;AACA,EAAA,OAAO,EAAE,MAAM,KAAA,EAAM;AACvB;;;ACdO,IAAM,mBAAN,MAAuB;AAAA,EAE5B,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,qBAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,qBAAA,EAAwB,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,eAAA,CAAA;AAAA,EAChD;AAAA;AAAA,EAGA,MAAM,SAAS,IAAA,EAA2C;AACxD,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,GAAA,CAAI,aAAA,EAAuB,IAAA,EAAyC;AACxE,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,CAAA;AAAA,MACrC;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,MAAA,CAAO,KAAA,EAA0B,IAAA,EAA4C;AACjF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAwB;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,KAAK,IAAA,EAAK;AAAA,MAChB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,MAAA,CACJ,aAAA,EACA,KAAA,EACA,IAAA,EACsB;AACtB,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAqB;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,CAAA;AAAA,MACrC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,MAAA,CAAO,aAAA,EAAuB,IAAA,EAAkC;AACpE,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,CAAA;AAAA,MACrC;AAAA,KACD,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAA,CAAO,KAAA,EAA+B,IAAA,EAA2C;AACrF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,GAAG,UAAA,CAAW,KAAA,EAAO,aAAa,CAAA;AAAA,MAClC,UAAA,EAAY;AAAA;AAAA,KACb,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eAAA,CAAgB,aAAA,EAAuB,IAAA,EAA2C;AACtF,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAuB;AAAA,MAC1C,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,IAAI,aAAa,CAAA,iBAAA,CAAA;AAAA,MACrC;AAAA,KACD,CAAA;AAAA,EACH;AACF","file":"companies.cjs","sourcesContent":["/**\n * Paging, sort and field selection for a `POST …/search` endpoint. Emporix reads\n * them from the query string, not the body, so the SDK sends them there. Without\n * them a search returns only the server's first page.\n */\nexport interface SearchPaging {\n  pageNumber?: number;\n  pageSize?: number;\n  /** Properties to sort by, in Emporix sort syntax. */\n  sort?: string;\n  /** Comma-separated fields to return. */\n  fields?: string;\n}\n\n/** The {@link SearchPaging} keys, for {@link splitQuery}. */\nexport const SEARCH_PAGING = [\"pageNumber\", \"pageSize\", \"sort\", \"fields\"] as const;\n\n/**\n * Splits a request input: the named keys go to the query string, everything\n * else stays in the body. A `POST …/search` declares its paging, sort and similar\n * parameters in the query and ignores them in the body — sent there, the search\n * silently returns the first page.\n */\nexport function splitQuery(\n  input: object,\n  queryKeys: readonly string[],\n): { body: Record<string, unknown>; query: Record<string, string | number | boolean | undefined> } {\n  const body: Record<string, unknown> = {};\n  const query: Record<string, string | number | boolean | undefined> = {};\n  for (const [key, value] of Object.entries(input)) {\n    if (queryKeys.includes(key)) query[key] = value as string | number | boolean | undefined;\n    else body[key] = value;\n  }\n  return { body, query };\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport { SEARCH_PAGING, splitQuery, type SearchPaging } from \"../core/search\";\nimport type {\n  LegalEntity,\n  LegalEntityCreate,\n  LegalEntityUpdate,\n} from \"../generated/customer-management\";\n\n/** Input for `companies.search`: an Emporix `q`-syntax filter (body) plus {@link SearchPaging} (query). */\nexport type LegalEntitySearchInput = { q?: string } & SearchPaging;\n\n/**\n * Storefront-customer access to Legal Entities.\n *\n * `listMine`/`get` require `customermanagement.legalentity_read_own` on the\n * customer token. `create`/`update`/`delete` require the corresponding\n * `_manage` scopes — typically only granted to Admin-group customers; a 403\n * surfaces as `EmporixInsufficientScopeError`.\n */\nexport class CompaniesService {\n  static readonly channel = \"customer-management\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/customer-management/${this.ctx.tenant}/legal-entities`;\n  }\n\n  /** Lists the legal entities the calling customer is assigned to. */\n  async listMine(auth: AuthContext): Promise<LegalEntity[]> {\n    return this.ctx.http.request<LegalEntity[]>({\n      method: \"GET\",\n      path: this.base(),\n      auth,\n    });\n  }\n\n  /** Fetches a single legal entity by id. */\n  async get(legalEntityId: string, auth: AuthContext): Promise<LegalEntity> {\n    return this.ctx.http.request<LegalEntity>({\n      method: \"GET\",\n      path: `${this.base()}/${legalEntityId}`,\n      auth,\n    });\n  }\n\n  /** Creates a legal entity. Requires `customermanagement.legalentity_manage`. */\n  async create(input: LegalEntityCreate, auth: AuthContext): Promise<{ id: string }> {\n    return this.ctx.http.request<{ id: string }>({\n      method: \"POST\",\n      path: this.base(),\n      auth,\n      body: input,\n    });\n  }\n\n  /**\n   * Updates a legal entity via `PUT …/legal-entities/{id}` (upsert / full\n   * replace). The live API rejects `PATCH` on this path with 405; send the\n   * complete entity, as the server replaces the resource. The body stays typed\n   * as a partial of `LegalEntityUpdate` for backward compatibility.\n   */\n  async update(\n    legalEntityId: string,\n    patch: Partial<LegalEntityUpdate>,\n    auth: AuthContext,\n  ): Promise<LegalEntity> {\n    return this.ctx.http.request<LegalEntity>({\n      method: \"PUT\",\n      path: `${this.base()}/${legalEntityId}`,\n      auth,\n      body: patch,\n    });\n  }\n\n  /** Deletes a legal entity (async cascade on the server). */\n  async delete(legalEntityId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `${this.base()}/${legalEntityId}`,\n      auth,\n    });\n  }\n\n  /**\n   * Searches legal entities via `POST /legal-entities/search` with an Emporix\n   * `q`-syntax filter body; paging, sort and fields go in the query string.\n   * Requires the same read scope as {@link listMine}.\n   */\n  async search(query: LegalEntitySearchInput, auth: AuthContext): Promise<LegalEntity[]> {\n    return this.ctx.http.request<LegalEntity[]>({\n      method: \"POST\",\n      path: `${this.base()}/search`,\n      auth,\n      ...splitQuery(query, SEARCH_PAGING),\n      idempotent: true, // pure read over POST — safe to replay on 5xx/429\n    });\n  }\n\n  /**\n   * Retrieves a legal entity's chain of parent entities\n   * (`GET /legal-entities/{id}/parent-hierarchy`).\n   */\n  async parentHierarchy(legalEntityId: string, auth: AuthContext): Promise<LegalEntity[]> {\n    return this.ctx.http.request<LegalEntity[]>({\n      method: \"GET\",\n      path: `${this.base()}/${legalEntityId}/parent-hierarchy`,\n      auth,\n    });\n  }\n}\n"]}

package/dist/companies.d.cts

@@ -1,11 +1,12 @@
 import { C as ClientContext, b as AuthContext } from './context-5lt8Q0MT.cjs';
+import { S as SearchPaging } from './search-DU6tE356.cjs';
 import { L as LegalEntity, e as LegalEntityCreate, f as LegalEntityUpdate } from './types.gen-fWB4nrso.cjs';
 export { A as AccountLimit, d as CustomerGroup, g as LegalInfo } from './types.gen-fWB4nrso.cjs';
 
-/** Body for `companies.search` — an Emporix `q`-syntax filter. */
+/** Input for `companies.search`: an Emporix `q`-syntax filter (body) plus {@link SearchPaging} (query). */
 type LegalEntitySearchInput = {
     q?: string;
-};
+} & SearchPaging;
 /**
  * Storefront-customer access to Legal Entities.
  *
@@ -38,7 +39,8 @@ declare class CompaniesService {
     delete(legalEntityId: string, auth: AuthContext): Promise<void>;
     /**
      * Searches legal entities via `POST /legal-entities/search` with an Emporix
-     * `q`-syntax filter body. Requires the same read scope as {@link listMine}.
+     * `q`-syntax filter body; paging, sort and fields go in the query string.
+     * Requires the same read scope as {@link listMine}.
      */
     search(query: LegalEntitySearchInput, auth: AuthContext): Promise<LegalEntity[]>;
     /**

package/dist/companies.d.ts

@@ -1,11 +1,12 @@
 import { C as ClientContext, b as AuthContext } from './context-5lt8Q0MT.js';
+import { S as SearchPaging } from './search-DU6tE356.js';
 import { L as LegalEntity, e as LegalEntityCreate, f as LegalEntityUpdate } from './types.gen-fWB4nrso.js';
 export { A as AccountLimit, d as CustomerGroup, g as LegalInfo } from './types.gen-fWB4nrso.js';
 
-/** Body for `companies.search` — an Emporix `q`-syntax filter. */
+/** Input for `companies.search`: an Emporix `q`-syntax filter (body) plus {@link SearchPaging} (query). */
 type LegalEntitySearchInput = {
     q?: string;
-};
+} & SearchPaging;
 /**
  * Storefront-customer access to Legal Entities.
  *
@@ -38,7 +39,8 @@ declare class CompaniesService {
     delete(legalEntityId: string, auth: AuthContext): Promise<void>;
     /**
      * Searches legal entities via `POST /legal-entities/search` with an Emporix
-     * `q`-syntax filter body. Requires the same read scope as {@link listMine}.
+     * `q`-syntax filter body; paging, sort and fields go in the query string.
+     * Requires the same read scope as {@link listMine}.
      */
     search(query: LegalEntitySearchInput, auth: AuthContext): Promise<LegalEntity[]>;
     /**

package/dist/companies.js

@@ -1,3 +1,4 @@
-export { CompaniesService } from './chunk-QQMLN76U.js';
+export { CompaniesService } from './chunk-2OTFVTG6.js';
+import './chunk-ZWJUDXTK.js';
 //# sourceMappingURL=companies.js.map
 //# sourceMappingURL=companies.js.map

package/dist/customer-groups.cjs

@@ -48,11 +48,28 @@ var IamService = class {
         auth
       });
     },
+    /**
+     * Lists one vendor's Management Dashboard users, with their groups
+     * (`GET /users/vendors/{vendorId}`).
+     */
+    listForVendor: async (vendorId, auth) => this.ctx.http.request({
+      method: "GET",
+      path: `${this.base()}/users/vendors/${encodeURIComponent(vendorId)}`,
+      auth
+    }),
     getGroups: async (userId, auth) => this.ctx.http.request({
       method: "GET",
       path: `${this.base()}/users/${userId}/groups`,
       auth
     }),
+    /** Removes a user from every group at once (`DELETE /users/{userId}/groups`, `204`). */
+    removeFromAllGroups: async (userId, auth) => {
+      await this.ctx.http.request({
+        method: "DELETE",
+        path: `${this.base()}/users/${encodeURIComponent(userId)}/groups`,
+        auth
+      });
+    },
     /**
      * Reads one of a user's groups (`GET /users/{userId}/groups/{groupId}`).
      * The collection read above returns the same shape per entry; this exists

package/dist/customer-groups.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/services/iam.ts","../src/services/customer-groups.ts"],"names":[],"mappings":";;;AA+BO,IAAM,aAAN,MAAiB;AAAA,EAEtB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,KAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAA;AAAA,EAChC;AAAA,EAES,KAAA,GAAQ;AAAA,IACf,MAAM,OAAO,IAAA,EAAmB,UAC9B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAmB;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,MAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU;AAAC,KAC1B,CAAA;AAAA,IACH,QAAQ,OAAO,KAAA,EAAsB,SACnC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAwB;AAAA,MACpC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,MAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,KAAK,OAAO,MAAA,EAAgB,SAC1B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,OAAO,OAAO,IAAA,KACZ,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,SAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,MAAA,EAAgB,KAAA,EAAsB,IAAA,KAAqC;AACxF,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,KAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,QACpC,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,MAAA,EAAgB,IAAA,KAAqC;AAClE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,QACpC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,WAAW,OAAO,MAAA,EAAgB,SAChC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,OAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOH,QAAA,EAAU,OAAO,MAAA,EAAgB,OAAA,EAAiB,SAChD,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,EAAU,kBAAA,CAAmB,MAAM,CAAC,CAAA,QAAA,EAAW,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AAAA,MAC9F;AAAA,KACD,CAAA;AAAA,IACH,WAAW,OAAO,MAAA,EAAgB,SAChC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,OAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,aAAa,OAAO,IAAA,KAClB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,gBAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,mBAAmB,OAAO,MAAA,EAAgB,SACxC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,gBAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,qBAAqB,OAAO,IAAA,KAC1B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,yBAAA,CAAA;AAAA,MACpB;AAAA,KACD;AAAA,GACL;AAAA,EAES,MAAA,GAAS;AAAA,IAChB,MAAM,OAAO,IAAA,EAAmB,UAC9B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU;AAAC,KAC1B,CAAA;AAAA,IACH,QAAQ,OAAO,KAAA,EAAuB,SACpC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAyB;AAAA,MACrC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,KAAK,OAAO,OAAA,EAAiB,SAC3B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,OAAA,EAAiB,KAAA,EAAuB,IAAA,KAAqC;AAC1F,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,KAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,OAAA,EAAiB,IAAA,KAAqC;AACnE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,WAAW,OAAO,OAAA,EAAiB,SACjC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAmB;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,OAAA,EAAS,OACP,OAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA+B;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,UAAA,EAAY,OACV,OAAA,EACA,QAAA,EACA,MAAA,EACA,OACA,IAAA,KAEA,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA+B;AAAA,MAC3C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,OAAA,EAAU,QAAQ,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,MAClE,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,cAAA,EAAgB,OAAO,OAAA,EAAiB,IAAA,KAAqC;AAC3E,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,oBAAoB,OAAO,OAAA,EAAiB,SAC1C,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,gBAAA,CAAA;AAAA,MACtC;AAAA,KACD;AAAA,GACL;AAAA,EAES,cAAA,GAAiB;AAAA,IACxB,MAAM,OAAO,IAAA,KACX,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,gBAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,KAAK,OAAO,EAAA,EAAY,SACtB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA0B;AAAA,MACtC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,MAC1C;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OACN,EAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAiC;AAAA,MAC7C,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,EAAA,EAAY,IAAA,KAAqC;AAC9D,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,QAC1C;AAAA,OACD,CAAA;AAAA,IACH;AAAA,GACF;AAAA,EAES,MAAA,GAAS;AAAA,IAChB,MAAM,OAAO,IAAA,KACX,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,KAAK,OAAO,OAAA,EAAiB,SAC3B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,YAAA,EAAc,OACZ,OAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAyB;AAAA,MACrC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,YAAA,EAAc,OAAO,OAAA,EAAiB,IAAA,KAAqC;AACzE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH;AAAA,GACF;AACF,CAAA;;;ACjQO,IAAM,wBAAN,MAA4B;AAAA,EAGjC,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAC3B,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,UAAA,CAAW,GAAG,CAAA;AAAA,EAC/B;AAAA,EAF6B,GAAA;AAAA,EAF7B,OAAgB,OAAA,GAAU,KAAA;AAAA,EACT,GAAA;AAAA;AAAA,EAMjB,MAAM,cAAA,CAAe,aAAA,EAAuB,IAAA,EAAmD;AAC7F,IAAA,OAAO,IAAA,CAAK,IAAI,MAAA,CAAO,IAAA,CAAK,MAAM,EAAE,mBAAA,EAAqB,eAAe,CAAA;AAAA,EAC1E;AAAA;AAAA,EAGA,MAAM,SAAA,CACJ,OAAA,EACA,MAAA,EACA,IAAA,EACyB;AAIzB,IAAA,OAAQ,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,OAAA,CAAQ,OAAA,EAAS,QAAQ,IAAI,CAAA;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,CAAa,OAAA,EAAiB,MAAA,EAAgB,IAAA,EAAkC;AACpF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,QAAA,EAAW,OAAO,UAAU,MAAM,CAAA,CAAA;AAAA,MAC/D;AAAA,KACD,CAAA;AAAA,EACH;AACF","file":"customer-groups.cjs","sourcesContent":["import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type {\n  IamUser,\n  IamUserDetail,\n  IamUserCreate,\n  IamUserUpdate,\n  IamUserScopes,\n  IamUserCreated,\n  IamGroup,\n  IamGroupCreate,\n  IamGroupUpdate,\n  IamGroupCreated,\n  IamGroupMemberInput,\n  IamGroupMemberCreated,\n  IamAccessControl,\n  IamAccessControlUpsert,\n  IamAccessControlCreated,\n  IamScope,\n  IamScopeUpsert,\n  IamScopeCreated,\n} from \"./iam-types\";\n\nexport type * from \"./iam-types\";\n\n/**\n * IAM admin CRUD: users, user-groups, access-controls, scopes. Every method\n * requires an explicit `auth` (admin/service token; `getMe*` take the caller's\n * customer token). The deprecated legacy-RBAC model (roles/permissions/\n * resources/templates) is intentionally not wrapped.\n */\nexport class IamService {\n  static readonly channel = \"iam\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/iam/${this.ctx.tenant}`;\n  }\n\n  readonly users = {\n    list: async (auth: AuthContext, query?: Record<string, string | number>): Promise<IamUser[]> =>\n      this.ctx.http.request<IamUser[]>({\n        method: \"GET\",\n        path: `${this.base()}/users`,\n        auth,\n        ...(query ? { query } : {}),\n      }),\n    create: async (input: IamUserCreate, auth: AuthContext): Promise<IamUserCreated> =>\n      this.ctx.http.request<IamUserCreated>({\n        method: \"POST\",\n        path: `${this.base()}/users`,\n        auth,\n        body: input,\n      }),\n    get: async (userId: string, auth: AuthContext): Promise<IamUserDetail> =>\n      this.ctx.http.request<IamUserDetail>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n      }),\n    getMe: async (auth: AuthContext): Promise<IamUserDetail> =>\n      this.ctx.http.request<IamUserDetail>({\n        method: \"GET\",\n        path: `${this.base()}/users/me`,\n        auth,\n      }),\n    update: async (userId: string, input: IamUserUpdate, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"PUT\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n        body: input,\n      });\n    },\n    delete: async (userId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n      });\n    },\n    getGroups: async (userId: string, auth: AuthContext): Promise<IamGroup[]> =>\n      this.ctx.http.request<IamGroup[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/groups`,\n        auth,\n      }),\n    /**\n     * Reads one of a user's groups (`GET /users/{userId}/groups/{groupId}`).\n     * The collection read above returns the same shape per entry; this exists\n     * because Emporix exposes the item separately and a caller holding both ids\n     * should not have to page the collection to resolve one group.\n     */\n    getGroup: async (userId: string, groupId: string, auth: AuthContext): Promise<IamGroup> =>\n      this.ctx.http.request<IamGroup>({\n        method: \"GET\",\n        path: `${this.base()}/users/${encodeURIComponent(userId)}/groups/${encodeURIComponent(groupId)}`,\n        auth,\n      }),\n    getScopes: async (userId: string, auth: AuthContext): Promise<IamUserScopes> =>\n      this.ctx.http.request<IamUserScopes>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/scopes`,\n        auth,\n      }),\n    getMyScopes: async (auth: AuthContext): Promise<IamUserScopes> =>\n      this.ctx.http.request<IamUserScopes>({\n        method: \"GET\",\n        path: `${this.base()}/users/me/scopes`,\n        auth,\n      }),\n    getAccessControls: async (userId: string, auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/access-controls`,\n        auth,\n      }),\n    getMyAccessControls: async (auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/me/access-controls`,\n        auth,\n      }),\n  };\n\n  readonly groups = {\n    list: async (auth: AuthContext, query?: Record<string, string | number>): Promise<IamGroup[]> =>\n      this.ctx.http.request<IamGroup[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups`,\n        auth,\n        ...(query ? { query } : {}),\n      }),\n    create: async (input: IamGroupCreate, auth: AuthContext): Promise<IamGroupCreated> =>\n      this.ctx.http.request<IamGroupCreated>({\n        method: \"POST\",\n        path: `${this.base()}/groups`,\n        auth,\n        body: input,\n      }),\n    get: async (groupId: string, auth: AuthContext): Promise<IamGroup> =>\n      this.ctx.http.request<IamGroup>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n      }),\n    update: async (groupId: string, input: IamGroupUpdate, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"PUT\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n        body: input,\n      });\n    },\n    delete: async (groupId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n      });\n    },\n    listUsers: async (groupId: string, auth: AuthContext): Promise<IamUser[]> =>\n      this.ctx.http.request<IamUser[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n      }),\n    addUser: async (\n      groupId: string,\n      input: IamGroupMemberInput,\n      auth: AuthContext,\n    ): Promise<IamGroupMemberCreated> =>\n      this.ctx.http.request<IamGroupMemberCreated>({\n        method: \"POST\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n        body: input,\n      }),\n    updateUser: async (\n      groupId: string,\n      userType: string,\n      userId: string,\n      input: IamGroupMemberInput,\n      auth: AuthContext,\n    ): Promise<IamGroupMemberCreated> =>\n      this.ctx.http.request<IamGroupMemberCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/groups/${groupId}/users/${userType}/${userId}`,\n        auth,\n        body: input,\n      }),\n    removeAllUsers: async (groupId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n      });\n    },\n    listAccessControls: async (groupId: string, auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}/access-controls`,\n        auth,\n      }),\n  };\n\n  readonly accessControls = {\n    list: async (auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/access-controls`,\n        auth,\n      }),\n    get: async (id: string, auth: AuthContext): Promise<IamAccessControl> =>\n      this.ctx.http.request<IamAccessControl>({\n        method: \"GET\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n      }),\n    upsert: async (\n      id: string,\n      input: IamAccessControlUpsert,\n      auth: AuthContext,\n    ): Promise<IamAccessControlCreated> =>\n      this.ctx.http.request<IamAccessControlCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n        body: input,\n      }),\n    delete: async (id: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n      });\n    },\n  };\n\n  readonly scopes = {\n    list: async (auth: AuthContext): Promise<IamScope[]> =>\n      this.ctx.http.request<IamScope[]>({\n        method: \"GET\",\n        path: `${this.base()}/scopes`,\n        auth,\n      }),\n    get: async (scopeId: string, auth: AuthContext): Promise<IamScope> =>\n      this.ctx.http.request<IamScope>({\n        method: \"GET\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n      }),\n    upsertCustom: async (\n      scopeId: string,\n      input: IamScopeUpsert,\n      auth: AuthContext,\n    ): Promise<IamScopeCreated> =>\n      this.ctx.http.request<IamScopeCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n        body: input,\n      }),\n    deleteCustom: async (scopeId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n      });\n    },\n  };\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type { GroupsQueryDocument, AssignmentCreateRequest } from \"../generated/iam\";\nimport { IamService } from \"./iam\";\n\n/**\n * Access to IAM customer groups for a legal entity. Thin B2B-friendly wrapper\n * over {@link IamService.groups}; kept for backward compatibility.\n *\n * `listForCompany` requires `iam.group_read`; the member mutations\n * (`addMember`/`removeMember`) require `iam.group_manage` — typically only\n * granted to Admin-group customers; a 403 surfaces as\n * `EmporixInsufficientScopeError`.\n */\nexport class CustomerGroupsService {\n  static readonly channel = \"iam\" as const;\n  private readonly iam: IamService;\n  constructor(private readonly ctx: ClientContext) {\n    this.iam = new IamService(ctx);\n  }\n\n  /** Lists customer groups belonging to one legal entity. */\n  async listForCompany(legalEntityId: string, auth: AuthContext): Promise<GroupsQueryDocument[]> {\n    return this.iam.groups.list(auth, { \"b2b.legalEntityId\": legalEntityId });\n  }\n\n  /** Adds a user (customer or employee) to a group. */\n  async addMember(\n    groupId: string,\n    member: AssignmentCreateRequest,\n    auth: AuthContext,\n  ): Promise<{ id: string }> {\n    // `addUser` returns `AssignmentIdResponse` (id optional); the original public\n    // contract is `{ id: string }` (the old `request<{id:string}>` asserted the\n    // same). Cast to preserve that contract — the wire body is identical.\n    return (await this.iam.groups.addUser(groupId, member, auth)) as { id: string };\n  }\n\n  /**\n   * Removes a user from a group. Uses `DELETE …/groups/{groupId}/users/{userId}`\n   * directly — this endpoint is deprecated upstream and intentionally not\n   * exposed on {@link IamService}, so it is not delegated. No non-deprecated\n   * single-user removal exists.\n   */\n  async removeMember(groupId: string, userId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `/iam/${this.ctx.tenant}/groups/${groupId}/users/${userId}`,\n      auth,\n    });\n  }\n}\n"]}
+{"version":3,"sources":["../src/services/iam.ts","../src/services/customer-groups.ts"],"names":[],"mappings":";;;AA+BO,IAAM,aAAN,MAAiB;AAAA,EAEtB,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAAA,EAAqB;AAAA,EAArB,GAAA;AAAA,EAD7B,OAAgB,OAAA,GAAU,KAAA;AAAA,EAGlB,IAAA,GAAe;AACrB,IAAA,OAAO,CAAA,KAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAA;AAAA,EAChC;AAAA,EAES,KAAA,GAAQ;AAAA,IACf,MAAM,OAAO,IAAA,EAAmB,UAC9B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAmB;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,MAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU;AAAC,KAC1B,CAAA;AAAA,IACH,QAAQ,OAAO,KAAA,EAAsB,SACnC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAwB;AAAA,MACpC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,MAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,KAAK,OAAO,MAAA,EAAgB,SAC1B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,OAAO,OAAO,IAAA,KACZ,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,SAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,MAAA,EAAgB,KAAA,EAAsB,IAAA,KAAqC;AACxF,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,KAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,QACpC,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,MAAA,EAAgB,IAAA,KAAqC;AAClE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,CAAA;AAAA,QACpC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,eAAe,OAAO,QAAA,EAAkB,SACtC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAmB;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,eAAA,EAAkB,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAAA,MAClE;AAAA,KACD,CAAA;AAAA,IACH,WAAW,OAAO,MAAA,EAAgB,SAChC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,OAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA;AAAA,IAEH,mBAAA,EAAqB,OAAO,MAAA,EAAgB,IAAA,KAAqC;AAC/E,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,IAAA,EAAM,GAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,EAAU,kBAAA,CAAmB,MAAM,CAAC,CAAA,OAAA,CAAA;AAAA,QACxD;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,QAAA,EAAU,OAAO,MAAA,EAAgB,OAAA,EAAiB,SAChD,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,EAAU,kBAAA,CAAmB,MAAM,CAAC,CAAA,QAAA,EAAW,kBAAA,CAAmB,OAAO,CAAC,CAAA,CAAA;AAAA,MAC9F;AAAA,KACD,CAAA;AAAA,IACH,WAAW,OAAO,MAAA,EAAgB,SAChC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,OAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,aAAa,OAAO,IAAA,KAClB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAuB;AAAA,MACnC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,gBAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,mBAAmB,OAAO,MAAA,EAAgB,SACxC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,UAAU,MAAM,CAAA,gBAAA,CAAA;AAAA,MACpC;AAAA,KACD,CAAA;AAAA,IACH,qBAAqB,OAAO,IAAA,KAC1B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,yBAAA,CAAA;AAAA,MACpB;AAAA,KACD;AAAA,GACL;AAAA,EAES,MAAA,GAAS;AAAA,IAChB,MAAM,OAAO,IAAA,EAAmB,UAC9B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU;AAAC,KAC1B,CAAA;AAAA,IACH,QAAQ,OAAO,KAAA,EAAuB,SACpC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAyB;AAAA,MACrC,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,KAAK,OAAO,OAAA,EAAiB,SAC3B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,OAAA,EAAiB,KAAA,EAAuB,IAAA,KAAqC;AAC1F,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,KAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC,IAAA;AAAA,QACA,IAAA,EAAM;AAAA,OACP,CAAA;AAAA,IACH,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,OAAA,EAAiB,IAAA,KAAqC;AACnE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,WAAW,OAAO,OAAA,EAAiB,SACjC,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAmB;AAAA,MAC/B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,OAAA,EAAS,OACP,OAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA+B;AAAA,MAC3C,MAAA,EAAQ,MAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,MACtC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,UAAA,EAAY,OACV,OAAA,EACA,QAAA,EACA,MAAA,EACA,OACA,IAAA,KAEA,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAA+B;AAAA,MAC3C,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,OAAA,EAAU,QAAQ,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAAA,MAClE,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,cAAA,EAAgB,OAAO,OAAA,EAAiB,IAAA,KAAqC;AAC3E,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,MAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH,CAAA;AAAA,IACA,oBAAoB,OAAO,OAAA,EAAiB,SAC1C,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,gBAAA,CAAA;AAAA,MACtC;AAAA,KACD;AAAA,GACL;AAAA,EAES,cAAA,GAAiB;AAAA,IACxB,MAAM,OAAO,IAAA,KACX,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA4B;AAAA,MACxC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,gBAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,KAAK,OAAO,EAAA,EAAY,SACtB,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAA0B;AAAA,MACtC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,MAC1C;AAAA,KACD,CAAA;AAAA,IACH,MAAA,EAAQ,OACN,EAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAiC;AAAA,MAC7C,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,MAC1C,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,MAAA,EAAQ,OAAO,EAAA,EAAY,IAAA,KAAqC;AAC9D,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,oBAAoB,EAAE,CAAA,CAAA;AAAA,QAC1C;AAAA,OACD,CAAA;AAAA,IACH;AAAA,GACF;AAAA,EAES,MAAA,GAAS;AAAA,IAChB,MAAM,OAAO,IAAA,KACX,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAoB;AAAA,MAChC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,CAAA,OAAA,CAAA;AAAA,MACpB;AAAA,KACD,CAAA;AAAA,IACH,KAAK,OAAO,OAAA,EAAiB,SAC3B,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAkB;AAAA,MAC9B,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC;AAAA,KACD,CAAA;AAAA,IACH,YAAA,EAAc,OACZ,OAAA,EACA,KAAA,EACA,SAEA,IAAA,CAAK,GAAA,CAAI,KAAK,OAAA,CAAyB;AAAA,MACrC,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,MACtC,IAAA;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAAA,IACH,YAAA,EAAc,OAAO,OAAA,EAAiB,IAAA,KAAqC;AACzE,MAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,QAChC,MAAA,EAAQ,QAAA;AAAA,QACR,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,EAAM,WAAW,OAAO,CAAA,CAAA;AAAA,QACtC;AAAA,OACD,CAAA;AAAA,IACH;AAAA,GACF;AACF,CAAA;;;ACnRO,IAAM,wBAAN,MAA4B;AAAA,EAGjC,YAA6B,GAAA,EAAoB;AAApB,IAAA,IAAA,CAAA,GAAA,GAAA,GAAA;AAC3B,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,UAAA,CAAW,GAAG,CAAA;AAAA,EAC/B;AAAA,EAF6B,GAAA;AAAA,EAF7B,OAAgB,OAAA,GAAU,KAAA;AAAA,EACT,GAAA;AAAA;AAAA,EAMjB,MAAM,cAAA,CAAe,aAAA,EAAuB,IAAA,EAAmD;AAC7F,IAAA,OAAO,IAAA,CAAK,IAAI,MAAA,CAAO,IAAA,CAAK,MAAM,EAAE,mBAAA,EAAqB,eAAe,CAAA;AAAA,EAC1E;AAAA;AAAA,EAGA,MAAM,SAAA,CACJ,OAAA,EACA,MAAA,EACA,IAAA,EACyB;AAIzB,IAAA,OAAQ,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,OAAA,CAAQ,OAAA,EAAS,QAAQ,IAAI,CAAA;AAAA,EAC7D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,YAAA,CAAa,OAAA,EAAiB,MAAA,EAAgB,IAAA,EAAkC;AACpF,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,OAAA,CAAc;AAAA,MAChC,MAAA,EAAQ,QAAA;AAAA,MACR,IAAA,EAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,QAAA,EAAW,OAAO,UAAU,MAAM,CAAA,CAAA;AAAA,MAC/D;AAAA,KACD,CAAA;AAAA,EACH;AACF","file":"customer-groups.cjs","sourcesContent":["import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type {\n  IamUser,\n  IamUserDetail,\n  IamUserCreate,\n  IamUserUpdate,\n  IamUserScopes,\n  IamUserCreated,\n  IamGroup,\n  IamGroupCreate,\n  IamGroupUpdate,\n  IamGroupCreated,\n  IamGroupMemberInput,\n  IamGroupMemberCreated,\n  IamAccessControl,\n  IamAccessControlUpsert,\n  IamAccessControlCreated,\n  IamScope,\n  IamScopeUpsert,\n  IamScopeCreated,\n} from \"./iam-types\";\n\nexport type * from \"./iam-types\";\n\n/**\n * IAM admin CRUD: users, user-groups, access-controls, scopes. Every method\n * requires an explicit `auth` (admin/service token; `getMe*` take the caller's\n * customer token). The deprecated legacy-RBAC model (roles/permissions/\n * resources/templates) is intentionally not wrapped.\n */\nexport class IamService {\n  static readonly channel = \"iam\" as const;\n  constructor(private readonly ctx: ClientContext) {}\n\n  private base(): string {\n    return `/iam/${this.ctx.tenant}`;\n  }\n\n  readonly users = {\n    list: async (auth: AuthContext, query?: Record<string, string | number>): Promise<IamUser[]> =>\n      this.ctx.http.request<IamUser[]>({\n        method: \"GET\",\n        path: `${this.base()}/users`,\n        auth,\n        ...(query ? { query } : {}),\n      }),\n    create: async (input: IamUserCreate, auth: AuthContext): Promise<IamUserCreated> =>\n      this.ctx.http.request<IamUserCreated>({\n        method: \"POST\",\n        path: `${this.base()}/users`,\n        auth,\n        body: input,\n      }),\n    get: async (userId: string, auth: AuthContext): Promise<IamUserDetail> =>\n      this.ctx.http.request<IamUserDetail>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n      }),\n    getMe: async (auth: AuthContext): Promise<IamUserDetail> =>\n      this.ctx.http.request<IamUserDetail>({\n        method: \"GET\",\n        path: `${this.base()}/users/me`,\n        auth,\n      }),\n    update: async (userId: string, input: IamUserUpdate, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"PUT\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n        body: input,\n      });\n    },\n    delete: async (userId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/users/${userId}`,\n        auth,\n      });\n    },\n    /**\n     * Lists one vendor's Management Dashboard users, with their groups\n     * (`GET /users/vendors/{vendorId}`).\n     */\n    listForVendor: async (vendorId: string, auth: AuthContext): Promise<IamUser[]> =>\n      this.ctx.http.request<IamUser[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/vendors/${encodeURIComponent(vendorId)}`,\n        auth,\n      }),\n    getGroups: async (userId: string, auth: AuthContext): Promise<IamGroup[]> =>\n      this.ctx.http.request<IamGroup[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/groups`,\n        auth,\n      }),\n    /** Removes a user from every group at once (`DELETE /users/{userId}/groups`, `204`). */\n    removeFromAllGroups: async (userId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/users/${encodeURIComponent(userId)}/groups`,\n        auth,\n      });\n    },\n    /**\n     * Reads one of a user's groups (`GET /users/{userId}/groups/{groupId}`).\n     * The collection read above returns the same shape per entry; this exists\n     * because Emporix exposes the item separately and a caller holding both ids\n     * should not have to page the collection to resolve one group.\n     */\n    getGroup: async (userId: string, groupId: string, auth: AuthContext): Promise<IamGroup> =>\n      this.ctx.http.request<IamGroup>({\n        method: \"GET\",\n        path: `${this.base()}/users/${encodeURIComponent(userId)}/groups/${encodeURIComponent(groupId)}`,\n        auth,\n      }),\n    getScopes: async (userId: string, auth: AuthContext): Promise<IamUserScopes> =>\n      this.ctx.http.request<IamUserScopes>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/scopes`,\n        auth,\n      }),\n    getMyScopes: async (auth: AuthContext): Promise<IamUserScopes> =>\n      this.ctx.http.request<IamUserScopes>({\n        method: \"GET\",\n        path: `${this.base()}/users/me/scopes`,\n        auth,\n      }),\n    getAccessControls: async (userId: string, auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/${userId}/access-controls`,\n        auth,\n      }),\n    getMyAccessControls: async (auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/users/me/access-controls`,\n        auth,\n      }),\n  };\n\n  readonly groups = {\n    list: async (auth: AuthContext, query?: Record<string, string | number>): Promise<IamGroup[]> =>\n      this.ctx.http.request<IamGroup[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups`,\n        auth,\n        ...(query ? { query } : {}),\n      }),\n    create: async (input: IamGroupCreate, auth: AuthContext): Promise<IamGroupCreated> =>\n      this.ctx.http.request<IamGroupCreated>({\n        method: \"POST\",\n        path: `${this.base()}/groups`,\n        auth,\n        body: input,\n      }),\n    get: async (groupId: string, auth: AuthContext): Promise<IamGroup> =>\n      this.ctx.http.request<IamGroup>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n      }),\n    update: async (groupId: string, input: IamGroupUpdate, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"PUT\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n        body: input,\n      });\n    },\n    delete: async (groupId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/groups/${groupId}`,\n        auth,\n      });\n    },\n    listUsers: async (groupId: string, auth: AuthContext): Promise<IamUser[]> =>\n      this.ctx.http.request<IamUser[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n      }),\n    addUser: async (\n      groupId: string,\n      input: IamGroupMemberInput,\n      auth: AuthContext,\n    ): Promise<IamGroupMemberCreated> =>\n      this.ctx.http.request<IamGroupMemberCreated>({\n        method: \"POST\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n        body: input,\n      }),\n    updateUser: async (\n      groupId: string,\n      userType: string,\n      userId: string,\n      input: IamGroupMemberInput,\n      auth: AuthContext,\n    ): Promise<IamGroupMemberCreated> =>\n      this.ctx.http.request<IamGroupMemberCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/groups/${groupId}/users/${userType}/${userId}`,\n        auth,\n        body: input,\n      }),\n    removeAllUsers: async (groupId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/groups/${groupId}/users`,\n        auth,\n      });\n    },\n    listAccessControls: async (groupId: string, auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/groups/${groupId}/access-controls`,\n        auth,\n      }),\n  };\n\n  readonly accessControls = {\n    list: async (auth: AuthContext): Promise<IamAccessControl[]> =>\n      this.ctx.http.request<IamAccessControl[]>({\n        method: \"GET\",\n        path: `${this.base()}/access-controls`,\n        auth,\n      }),\n    get: async (id: string, auth: AuthContext): Promise<IamAccessControl> =>\n      this.ctx.http.request<IamAccessControl>({\n        method: \"GET\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n      }),\n    upsert: async (\n      id: string,\n      input: IamAccessControlUpsert,\n      auth: AuthContext,\n    ): Promise<IamAccessControlCreated> =>\n      this.ctx.http.request<IamAccessControlCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n        body: input,\n      }),\n    delete: async (id: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/access-controls/${id}`,\n        auth,\n      });\n    },\n  };\n\n  readonly scopes = {\n    list: async (auth: AuthContext): Promise<IamScope[]> =>\n      this.ctx.http.request<IamScope[]>({\n        method: \"GET\",\n        path: `${this.base()}/scopes`,\n        auth,\n      }),\n    get: async (scopeId: string, auth: AuthContext): Promise<IamScope> =>\n      this.ctx.http.request<IamScope>({\n        method: \"GET\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n      }),\n    upsertCustom: async (\n      scopeId: string,\n      input: IamScopeUpsert,\n      auth: AuthContext,\n    ): Promise<IamScopeCreated> =>\n      this.ctx.http.request<IamScopeCreated>({\n        method: \"PUT\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n        body: input,\n      }),\n    deleteCustom: async (scopeId: string, auth: AuthContext): Promise<void> => {\n      await this.ctx.http.request<void>({\n        method: \"DELETE\",\n        path: `${this.base()}/scopes/${scopeId}`,\n        auth,\n      });\n    },\n  };\n}\n","import type { ClientContext } from \"../core/context\";\nimport type { AuthContext } from \"../core/auth\";\nimport type { GroupsQueryDocument, AssignmentCreateRequest } from \"../generated/iam\";\nimport { IamService } from \"./iam\";\n\n/**\n * Access to IAM customer groups for a legal entity. Thin B2B-friendly wrapper\n * over {@link IamService.groups}; kept for backward compatibility.\n *\n * `listForCompany` requires `iam.group_read`; the member mutations\n * (`addMember`/`removeMember`) require `iam.group_manage` — typically only\n * granted to Admin-group customers; a 403 surfaces as\n * `EmporixInsufficientScopeError`.\n */\nexport class CustomerGroupsService {\n  static readonly channel = \"iam\" as const;\n  private readonly iam: IamService;\n  constructor(private readonly ctx: ClientContext) {\n    this.iam = new IamService(ctx);\n  }\n\n  /** Lists customer groups belonging to one legal entity. */\n  async listForCompany(legalEntityId: string, auth: AuthContext): Promise<GroupsQueryDocument[]> {\n    return this.iam.groups.list(auth, { \"b2b.legalEntityId\": legalEntityId });\n  }\n\n  /** Adds a user (customer or employee) to a group. */\n  async addMember(\n    groupId: string,\n    member: AssignmentCreateRequest,\n    auth: AuthContext,\n  ): Promise<{ id: string }> {\n    // `addUser` returns `AssignmentIdResponse` (id optional); the original public\n    // contract is `{ id: string }` (the old `request<{id:string}>` asserted the\n    // same). Cast to preserve that contract — the wire body is identical.\n    return (await this.iam.groups.addUser(groupId, member, auth)) as { id: string };\n  }\n\n  /**\n   * Removes a user from a group. Uses `DELETE …/groups/{groupId}/users/{userId}`\n   * directly — this endpoint is deprecated upstream and intentionally not\n   * exposed on {@link IamService}, so it is not delegated. No non-deprecated\n   * single-user removal exists.\n   */\n  async removeMember(groupId: string, userId: string, auth: AuthContext): Promise<void> {\n    await this.ctx.http.request<void>({\n      method: \"DELETE\",\n      path: `/iam/${this.ctx.tenant}/groups/${groupId}/users/${userId}`,\n      auth,\n    });\n  }\n}\n"]}

package/dist/customer-groups.js

@@ -1,3 +1,3 @@
-export { CustomerGroupsService } from './chunk-5XZ6MSXW.js';
+export { CustomerGroupsService } from './chunk-VXORPTMP.js';
 //# sourceMappingURL=customer-groups.js.map
 //# sourceMappingURL=customer-groups.js.map