@voyant-travel/auth 0.129.0 → 0.131.0

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,EAEd,SAAS,GACV,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAWvB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAEF,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/B,CAAC,CAAA;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACrC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC5E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACpF,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;CACtF,CAAC,CAAA;AACF,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CAChE,CAAC,CAAA;AACF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;CACxD,CAAC,CAAA;AACF,MAAM,2BAA2B,GAAG,mBAAmB,CAAC,MAAM,CAAC;IAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC;CACrF,CAAC,CAAA;AAEF,MAAM,qBAAqB,GACzB,sFAAsF,CAAA;AAkBxF,SAAS,cAAc,CAAC,GAA8B;IACpD,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CACjB,uDAAuD,EACvD,sBAAsB,EACtB;YACE,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CACF,CAAA;IACH,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,UAAU,CAIzD;IACA,IAAI,EAAE,kCAAkC;IACxC,WAAW,EACT,8EAA8E;QAC9E,qBAAqB;IACvB,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,gCAAgC;IAC9C,cAAc,EAAE,CAAC,WAAW,CAAC;IAC7B,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,cAAc;IAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;QACvB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,CAAA;IAC9C,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAI3C;IACA,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACT,8EAA8E;QAC9E,qBAAqB;IACvB,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACvC,cAAc,EAAE,CAAC,WAAW,CAAC;IAC7B,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,cAAc;IAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;QACvB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC1C,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAIzC;IACA,IAAI,EAAE,iBAAiB;IACvB,WAAW,EACT,wEAAwE;QACxE,qBAAqB;IACvB,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;IACrC,cAAc,EAAE,CAAC,WAAW,CAAC;IAC7B,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,cAAc;IAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;QACvB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAA;IACxC,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAU,CAI/C;IACA,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,kFAAkF;QAClF,qBAAqB;IACvB,WAAW,EAAE,gBAAgB;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAC3C,cAAc,EAAE,CAAC,WAAW,CAAC;IAC7B,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,cAAc;IAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;QACvB,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,CAAA;IAC9C,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,CAI5C;IACA,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACT,oHAAoH;QACpH,qBAAqB;IACvB,WAAW,EAAE,2BAA2B;IACxC,YAAY,EAAE,oBAAoB;IAClC,cAAc,EAAE,CAAC,YAAY,CAAC;IAC9B,IAAI,EAAE,aAAa;IACnB,UAAU,EAAE;QACV,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,IAAI;QAC1B,WAAW,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;KACrC;IACD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC9F,OAAO,UAAU,CAAA;IACnB,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAIhD;IACA,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,8FAA8F;QAC9F,qBAAqB;IACvB,WAAW,EAAE,uBAAuB;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9E,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,IAAI,EAAE,aAAa;IACnB,UAAU,EAAE;QACV,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,IAAI;QAC1B,WAAW,EAAE,CAAC,aAAa,CAAC;KAC7B;IACD,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG;QACjC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAA;QACxD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IACxC,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAIhD;IACA,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EACT,mFAAmF;QACnF,qBAAqB;IACvB,WAAW,EAAE,2BAA2B;IACxC,YAAY,EAAE,gBAAgB;IAC9B,cAAc,EAAE,CAAC,YAAY,CAAC;IAC9B,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE;QACV,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,IAAI;QAC1B,WAAW,EAAE,CAAC,YAAY,CAAC;KAC5B;IACD,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG;QACrC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAI9C;IACA,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EACT,4EAA4E;QAC5E,qBAAqB;IACvB,WAAW,EAAE,mBAAmB;IAChC,YAAY,EAAE,gBAAgB;IAC9B,cAAc,EAAE,CAAC,YAAY,CAAC;IAC9B,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE;QACV,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;QAChB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,IAAI;QAC1B,WAAW,EAAE,CAAC,YAAY,CAAC;KAC5B;IACD,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG;QAC7B,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;IACrD,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,UAAU,CAIhD;IACA,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,qHAAqH;QACrH,qBAAqB;IACvB,WAAW,EAAE,mBAAmB;IAChC,YAAY,EAAE,gBAAgB;IAC9B,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,IAAI,EAAE,aAAa;IACnB,UAAU,EAAE;QACV,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,IAAI;QAC1B,WAAW,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;KAC3C;IACD,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG;QAC7B,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACvD,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,iCAAiC;IACjC,mBAAmB;IACnB,iBAAiB;IACjB,uBAAuB;IACvB,oBAAoB;IACpB,wBAAwB;IACxB,wBAAwB;IACxB,sBAAsB;IACtB,wBAAwB;CAChB,CAAA","sourcesContent":["import {\n  defineTool,\n  READ_ONLY_RISK,\n  requireService,\n  type ToolContext,\n  ToolError,\n} from \"@voyant-travel/tools\"\nimport { z } from \"zod\"\n\nimport type {\n  CreatedTeamInvitationDto,\n  InviteTeamMemberInput,\n  TeamInvitationDto,\n  TeamManagementCapabilitiesDto,\n  TeamMemberDto,\n  TeamRoleDto,\n} from \"./team-management-runtime-port.js\"\n\nconst teamMemberSchema = z.object({\n  id: z.string(),\n  email: z.string().email().nullable(),\n  name: z.string().nullable(),\n  roleId: z.string(),\n  roleName: z.string(),\n  status: z.enum([\"active\", \"deactivated\"]),\n  joinedAt: z.string().nullable(),\n  lastActivityAt: z.string().nullable(),\n})\n\nconst teamRoleSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  description: z.string().nullable(),\n})\n\nconst teamInvitationSchema = z.object({\n  id: z.string(),\n  email: z.string().email(),\n  roleId: z.string(),\n  roleName: z.string(),\n  status: z.enum([\"pending\", \"accepted\", \"expired\", \"revoked\"]),\n  createdAt: z.string(),\n  expiresAt: z.string(),\n})\n\nconst teamManagementCapabilitiesSchema = z.object({\n  viewRoster: z.boolean(),\n  inviteMembers: z.boolean(),\n  manageRoles: z.boolean(),\n  activateMembers: z.boolean(),\n  deactivateMembers: z.boolean(),\n  revokeInvitations: z.boolean(),\n})\n\nconst emptyInputSchema = z.object({})\nconst inviteTeamMemberInputSchema = z.object({\n  email: z.string().email().describe(\"Email address for the new team member.\"),\n  roleId: z.string().trim().min(1).max(120).describe(\"Provider-neutral team role id.\"),\n  expiresInDays: z\n    .number()\n    .int()\n    .min(1)\n    .max(30)\n    .optional()\n    .describe(\"Invitation validity in days. Uses the deployment default when omitted.\"),\n})\nconst invitationIdInputSchema = z.object({\n  invitationId: z.string().min(1).describe(\"Team invitation id.\"),\n})\nconst memberIdInputSchema = z.object({\n  memberId: z.string().min(1).describe(\"Team member id.\"),\n})\nconst updateMemberRoleInputSchema = memberIdInputSchema.extend({\n  roleId: z.string().trim().min(1).max(120).describe(\"Provider-neutral team role id.\"),\n})\n\nconst actingUserRequirement =\n  \" Requires an authenticated acting staff user; organization-only grants are rejected.\"\n\nexport interface TeamManagementToolServices {\n  getCapabilities(): Promise<TeamManagementCapabilitiesDto>\n  listMembers(): Promise<TeamMemberDto[]>\n  listRoles(): Promise<TeamRoleDto[]>\n  listInvitations(): Promise<TeamInvitationDto[]>\n  inviteMember(input: InviteTeamMemberInput): Promise<CreatedTeamInvitationDto>\n  revokeInvitation(invitationId: string): Promise<void>\n  updateMemberRole(memberId: string, roleId: string): Promise<TeamMemberDto>\n  activateMember(memberId: string): Promise<TeamMemberDto>\n  deactivateMember(memberId: string): Promise<TeamMemberDto>\n}\n\nexport type TeamManagementToolContext = ToolContext & {\n  teamManagement?: TeamManagementToolServices\n}\n\nfunction teamManagement(ctx: TeamManagementToolContext): TeamManagementToolServices {\n  if (ctx.actor !== \"staff\" || ctx.audience !== \"staff\") {\n    throw new ToolError(\n      \"Team-management tools are restricted to staff grants.\",\n      \"AUTHORIZATION_DENIED\",\n      {\n        actor: ctx.actor,\n        audience: ctx.audience,\n      },\n    )\n  }\n  return requireService(ctx.teamManagement, \"teamManagement\")\n}\n\nexport const getTeamManagementCapabilitiesTool = defineTool<\n  z.infer<typeof emptyInputSchema>,\n  TeamManagementCapabilitiesDto,\n  TeamManagementToolContext\n>({\n  name: \"get_team_management_capabilities\",\n  description:\n    \"Read the current staff user's provider-neutral team-management capabilities.\" +\n    actingUserRequirement,\n  inputSchema: emptyInputSchema,\n  outputSchema: teamManagementCapabilitiesSchema,\n  requiredScopes: [\"team:read\"],\n  tier: \"read\",\n  riskPolicy: READ_ONLY_RISK,\n  async handler(_input, ctx) {\n    return teamManagement(ctx).getCapabilities()\n  },\n})\n\nexport const listTeamMembersTool = defineTool<\n  z.infer<typeof emptyInputSchema>,\n  TeamMemberDto[],\n  TeamManagementToolContext\n>({\n  name: \"list_team_members\",\n  description:\n    \"List the staff team roster and access status. Contains personal information.\" +\n    actingUserRequirement,\n  inputSchema: emptyInputSchema,\n  outputSchema: z.array(teamMemberSchema),\n  requiredScopes: [\"team:read\"],\n  tier: \"sensitive\",\n  riskPolicy: READ_ONLY_RISK,\n  async handler(_input, ctx) {\n    return teamManagement(ctx).listMembers()\n  },\n})\n\nexport const listTeamRolesTool = defineTool<\n  z.infer<typeof emptyInputSchema>,\n  TeamRoleDto[],\n  TeamManagementToolContext\n>({\n  name: \"list_team_roles\",\n  description:\n    \"List the provider-neutral roles assignable to team members. Read-only.\" +\n    actingUserRequirement,\n  inputSchema: emptyInputSchema,\n  outputSchema: z.array(teamRoleSchema),\n  requiredScopes: [\"team:read\"],\n  tier: \"read\",\n  riskPolicy: READ_ONLY_RISK,\n  async handler(_input, ctx) {\n    return teamManagement(ctx).listRoles()\n  },\n})\n\nexport const listTeamInvitationsTool = defineTool<\n  z.infer<typeof emptyInputSchema>,\n  TeamInvitationDto[],\n  TeamManagementToolContext\n>({\n  name: \"list_team_invitations\",\n  description:\n    \"List team invitations and their lifecycle status. Contains personal information.\" +\n    actingUserRequirement,\n  inputSchema: emptyInputSchema,\n  outputSchema: z.array(teamInvitationSchema),\n  requiredScopes: [\"team:read\"],\n  tier: \"sensitive\",\n  riskPolicy: READ_ONLY_RISK,\n  async handler(_input, ctx) {\n    return teamManagement(ctx).listInvitations()\n  },\n})\n\nexport const inviteTeamMemberTool = defineTool<\n  z.infer<typeof inviteTeamMemberInputSchema>,\n  TeamInvitationDto,\n  TeamManagementToolContext\n>({\n  name: \"invite_team_member\",\n  description:\n    \"Invite a staff team member with an assigned role. Sends an external invitation and requires explicit confirmation.\" +\n    actingUserRequirement,\n  inputSchema: inviteTeamMemberInputSchema,\n  outputSchema: teamInvitationSchema,\n  requiredScopes: [\"team:write\"],\n  tier: \"destructive\",\n  riskPolicy: {\n    destructive: true,\n    reversible: false,\n    dryRunSupported: false,\n    confirmationRequired: true,\n    sideEffects: [\"email\", \"data-write\"],\n  },\n  async handler(input, ctx) {\n    const { acceptUrl: _acceptUrl, ...invitation } = await teamManagement(ctx).inviteMember(input)\n    return invitation\n  },\n})\n\nexport const revokeTeamInvitationTool = defineTool<\n  z.infer<typeof invitationIdInputSchema>,\n  { invitationId: string; revoked: true },\n  TeamManagementToolContext\n>({\n  name: \"revoke_team_invitation\",\n  description:\n    \"Revoke a pending team invitation. Invalidates its acceptance path and requires confirmation.\" +\n    actingUserRequirement,\n  inputSchema: invitationIdInputSchema,\n  outputSchema: z.object({ invitationId: z.string(), revoked: z.literal(true) }),\n  requiredScopes: [\"team:delete\"],\n  tier: \"destructive\",\n  riskPolicy: {\n    destructive: true,\n    reversible: false,\n    dryRunSupported: false,\n    confirmationRequired: true,\n    sideEffects: [\"data-delete\"],\n  },\n  async handler({ invitationId }, ctx) {\n    await teamManagement(ctx).revokeInvitation(invitationId)\n    return { invitationId, revoked: true }\n  },\n})\n\nexport const updateTeamMemberRoleTool = defineTool<\n  z.infer<typeof updateMemberRoleInputSchema>,\n  TeamMemberDto,\n  TeamManagementToolContext\n>({\n  name: \"update_team_member_role\",\n  description:\n    \"Change a team member's role and effective access. Requires explicit confirmation.\" +\n    actingUserRequirement,\n  inputSchema: updateMemberRoleInputSchema,\n  outputSchema: teamMemberSchema,\n  requiredScopes: [\"team:write\"],\n  tier: \"sensitive\",\n  riskPolicy: {\n    destructive: false,\n    reversible: true,\n    dryRunSupported: false,\n    confirmationRequired: true,\n    sideEffects: [\"data-write\"],\n  },\n  async handler({ memberId, roleId }, ctx) {\n    return teamManagement(ctx).updateMemberRole(memberId, roleId)\n  },\n})\n\nexport const activateTeamMemberTool = defineTool<\n  z.infer<typeof memberIdInputSchema>,\n  TeamMemberDto,\n  TeamManagementToolContext\n>({\n  name: \"activate_team_member\",\n  description:\n    \"Restore a team member's deployment access. Requires explicit confirmation.\" +\n    actingUserRequirement,\n  inputSchema: memberIdInputSchema,\n  outputSchema: teamMemberSchema,\n  requiredScopes: [\"team:write\"],\n  tier: \"sensitive\",\n  riskPolicy: {\n    destructive: false,\n    reversible: true,\n    dryRunSupported: false,\n    confirmationRequired: true,\n    sideEffects: [\"data-write\"],\n  },\n  async handler({ memberId }, ctx) {\n    return teamManagement(ctx).activateMember(memberId)\n  },\n})\n\nexport const deactivateTeamMemberTool = defineTool<\n  z.infer<typeof memberIdInputSchema>,\n  TeamMemberDto,\n  TeamManagementToolContext\n>({\n  name: \"deactivate_team_member\",\n  description:\n    \"Remove a team member's deployment access and potentially revoke active credentials. Requires explicit confirmation.\" +\n    actingUserRequirement,\n  inputSchema: memberIdInputSchema,\n  outputSchema: teamMemberSchema,\n  requiredScopes: [\"team:delete\"],\n  tier: \"destructive\",\n  riskPolicy: {\n    destructive: true,\n    reversible: false,\n    dryRunSupported: false,\n    confirmationRequired: true,\n    sideEffects: [\"data-write\", \"data-delete\"],\n  },\n  async handler({ memberId }, ctx) {\n    return teamManagement(ctx).deactivateMember(memberId)\n  },\n})\n\nexport const teamManagementTools = [\n  getTeamManagementCapabilitiesTool,\n  listTeamMembersTool,\n  listTeamRolesTool,\n  listTeamInvitationsTool,\n  inviteTeamMemberTool,\n  revokeTeamInvitationTool,\n  updateTeamMemberRoleTool,\n  activateTeamMemberTool,\n  deactivateTeamMemberTool,\n] as const\n"]}

package/dist/voyant.js

@@ -1,5 +1,6 @@
 import { defineModule, providePort, requirePort } from "@voyant-travel/core/project";
 import { identityAccessRuntimePort } from "./identity-access-runtime-port.js";
+import { teamManagementRuntimePort } from "./team-management-runtime-port.js";
 export const authInvitationsVoyantModule = defineModule({
     id: "@voyant-travel/auth#invitations",
     packageName: "@voyant-travel/auth",
@@ -41,20 +42,28 @@ export const authInvitationsVoyantModule = defineModule({
             },
         },
     ],
-    meta: { ownership: "package" },
+    meta: {
+        ownership: "package",
+        agentTools: {
+            posture: "not-applicable",
+            rationale: "This unit owns public invitation acceptance; staff invitation management is exposed by the guarded auth team runtime.",
+        },
+    },
 });
 export const authTeamVoyantModule = defineModule({
     id: "@voyant-travel/auth#team",
     packageName: "@voyant-travel/auth",
     localId: "auth.team",
-    provides: { ports: [providePort(identityAccessRuntimePort)] },
-    runtimePorts: [requirePort(identityAccessRuntimePort)],
+    provides: { ports: [providePort(teamManagementRuntimePort)] },
+    runtimePorts: [requirePort(teamManagementRuntimePort)],
     api: [
         {
             id: "@voyant-travel/auth#team.api.admin",
             surface: "admin",
             mount: "team",
+            resource: "team",
             openapi: { document: "team" },
+            transactional: true,
             runtime: {
                 entry: "@voyant-travel/auth/identity-access-graph-runtime",
                 export: "createTeamVoyantRuntime",
@@ -68,6 +77,7 @@ export const authTeamVoyantModule = defineModule({
                 resource: "team",
                 label: "Team",
                 description: "Manage staff team members and their access.",
+                wildcard: "explicit-resource",
                 actions: [
                     {
                         action: "read",
@@ -77,18 +87,263 @@ export const authTeamVoyantModule = defineModule({
                     {
                         action: "write",
                         label: "Manage team",
-                        description: "Create and update staff team members.",
+                        description: "Invite staff and update roles or access.",
+                        sensitive: true,
+                        wildcard: "explicit",
                     },
                     {
                         action: "delete",
-                        label: "Delete team members",
-                        description: "Delete staff team members.",
+                        label: "Remove team access",
+                        description: "Revoke invitations or deactivate staff team members.",
                         sensitive: true,
+                        wildcard: "explicit",
                     },
                 ],
             },
         ],
     },
-    meta: { ownership: "package" },
+    tools: [
+        {
+            id: "@voyant-travel/auth#team.tool.get-capabilities",
+            name: "get_team_management_capabilities",
+            runtime: {
+                entry: "@voyant-travel/auth/tools",
+                export: "getTeamManagementCapabilitiesTool",
+            },
+            requiredScopes: ["team:read"],
+            context: ["teamManagement"],
+            risk: "low",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.list-members",
+            name: "list_team_members",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "listTeamMembersTool" },
+            requiredScopes: ["team:read"],
+            context: ["teamManagement"],
+            risk: "high",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.list-roles",
+            name: "list_team_roles",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "listTeamRolesTool" },
+            requiredScopes: ["team:read"],
+            context: ["teamManagement"],
+            risk: "low",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.list-invitations",
+            name: "list_team_invitations",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "listTeamInvitationsTool" },
+            requiredScopes: ["team:read"],
+            context: ["teamManagement"],
+            risk: "high",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.invite-member",
+            name: "invite_team_member",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "inviteTeamMemberTool" },
+            requiredScopes: ["team:write"],
+            context: ["teamManagement"],
+            risk: "high",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.revoke-invitation",
+            name: "revoke_team_invitation",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "revokeTeamInvitationTool" },
+            requiredScopes: ["team:delete"],
+            context: ["teamManagement"],
+            risk: "high",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.update-member-role",
+            name: "update_team_member_role",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "updateTeamMemberRoleTool" },
+            requiredScopes: ["team:write"],
+            context: ["teamManagement"],
+            risk: "high",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.activate-member",
+            name: "activate_team_member",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "activateTeamMemberTool" },
+            requiredScopes: ["team:write"],
+            context: ["teamManagement"],
+            risk: "high",
+        },
+        {
+            id: "@voyant-travel/auth#team.tool.deactivate-member",
+            name: "deactivate_team_member",
+            runtime: { entry: "@voyant-travel/auth/tools", export: "deactivateTeamMemberTool" },
+            requiredScopes: ["team:delete"],
+            context: ["teamManagement"],
+            risk: "high",
+        },
+    ],
+    actions: [
+        {
+            id: "@voyant-travel/auth#team.action.get-capabilities",
+            version: "v1",
+            kind: "read",
+            targetType: "team-capabilities",
+            resource: "team",
+            action: "read",
+            requiredScopes: ["team:read"],
+            risk: "low",
+            ledger: "optional",
+            approval: "never",
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.get-capabilities"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.list-members",
+            version: "v1",
+            kind: "sensitive-read",
+            targetType: "team-member",
+            resource: "team",
+            action: "read",
+            requiredScopes: ["team:read"],
+            risk: "high",
+            ledger: "required",
+            approval: "never",
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.list-members"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.list-roles",
+            version: "v1",
+            kind: "read",
+            targetType: "team-role",
+            resource: "team",
+            action: "read",
+            requiredScopes: ["team:read"],
+            risk: "low",
+            ledger: "optional",
+            approval: "never",
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.list-roles"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.list-invitations",
+            version: "v1",
+            kind: "sensitive-read",
+            targetType: "team-invitation",
+            resource: "team",
+            action: "read",
+            requiredScopes: ["team:read"],
+            risk: "high",
+            ledger: "required",
+            approval: "never",
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.list-invitations"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.invite-member",
+            version: "v1",
+            kind: "execute",
+            targetType: "team-invitation",
+            resource: "team",
+            action: "write",
+            requiredScopes: ["team:write"],
+            risk: "high",
+            ledger: "required",
+            approval: "required",
+            reversible: false,
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.invite-member"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.revoke-invitation",
+            version: "v1",
+            kind: "execute",
+            targetType: "team-invitation",
+            resource: "team",
+            action: "delete",
+            requiredScopes: ["team:delete"],
+            risk: "high",
+            ledger: "required",
+            approval: "required",
+            reversible: false,
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.revoke-invitation"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.update-member-role",
+            version: "v1",
+            kind: "execute",
+            targetType: "team-member",
+            resource: "team",
+            action: "write",
+            requiredScopes: ["team:write"],
+            risk: "high",
+            ledger: "required",
+            approval: "required",
+            reversible: true,
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.update-member-role"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.activate-member",
+            version: "v1",
+            kind: "execute",
+            targetType: "team-member",
+            resource: "team",
+            action: "write",
+            requiredScopes: ["team:write"],
+            risk: "high",
+            ledger: "required",
+            approval: "required",
+            reversible: true,
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.activate-member"] },
+        },
+        {
+            id: "@voyant-travel/auth#team.action.deactivate-member",
+            version: "v1",
+            kind: "execute",
+            targetType: "team-member",
+            resource: "team",
+            action: "delete",
+            requiredScopes: ["team:delete"],
+            risk: "high",
+            ledger: "required",
+            approval: "required",
+            reversible: false,
+            allowedActorTypes: ["staff"],
+            from: { tools: ["@voyant-travel/auth#team.tool.deactivate-member"] },
+        },
+    ],
+    admin: {
+        compositionOrder: 5,
+        setupSteps: [{ id: "@voyant-travel/auth#setup.team", skippable: true }],
+        runtime: {
+            entry: "@voyant-travel/auth-react/admin",
+            export: "createSelectedAuthTeamAdminExtension",
+        },
+        copy: [
+            {
+                id: "@voyant-travel/auth#team.admin.copy",
+                namespace: "auth.admin.team",
+                fallbackLocale: "en",
+                runtime: {
+                    entry: "@voyant-travel/auth-react/i18n",
+                    export: "authUiMessageDefinitions",
+                },
+            },
+        ],
+        routes: [
+            {
+                id: "@voyant-travel/auth#team.admin.route",
+                path: "/settings/team",
+                requiredScopes: ["team:read"],
+                runtime: {
+                    entry: "@voyant-travel/auth-react/admin",
+                    export: "createSelectedAuthTeamAdminExtension",
+                },
+            },
+        ],
+    },
+    meta: {
+        ownership: "package",
+    },
 });
 //# sourceMappingURL=voyant.js.map

package/dist/voyant.js.map

@@ -1 +1 @@
-{"version":3,"file":"voyant.js","sourceRoot":"","sources":["../src/voyant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAEpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAE7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAC;IACtD,EAAE,EAAE,iCAAiC;IACrC,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,kBAAkB;IAC3B,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,EAAE;IAC7D,YAAY,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACtD,GAAG,EAAE;QACH;YACE,EAAE,EAAE,2CAA2C;YAC/C,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;YACpC,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE;gBACP,KAAK,EAAE,mDAAmD;gBAC1D,MAAM,EAAE,gCAAgC;aACzC;SACF;QACD;YACE,EAAE,EAAE,4CAA4C;YAChD,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;YACpC,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE;gBACP,KAAK,EAAE,mDAAmD;gBAC1D,MAAM,EAAE,gCAAgC;aACzC;SACF;KACF;IACD,aAAa,EAAE;QACb;YACE,EAAE,EAAE,6CAA6C;YACjD,OAAO,EAAE;gBACP,KAAK,EAAE,6CAA6C;gBACpD,MAAM,EAAE,kCAAkC;aAC3C;SACF;KACF;IACD,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;CAC/B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;IAC/C,EAAE,EAAE,0BAA0B;IAC9B,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,EAAE;IAC7D,YAAY,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACtD,GAAG,EAAE;QACH;YACE,EAAE,EAAE,oCAAoC;YACxC,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC7B,OAAO,EAAE;gBACP,KAAK,EAAE,mDAAmD;gBAC1D,MAAM,EAAE,yBAAyB;aAClC;SACF;KACF;IACD,MAAM,EAAE;QACN,SAAS,EAAE;YACT;gBACE,EAAE,EAAE,iCAAiC;gBACrC,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,MAAM;gBACb,WAAW,EAAE,6CAA6C;gBAC1D,OAAO,EAAE;oBACP;wBACE,MAAM,EAAE,MAAM;wBACd,KAAK,EAAE,WAAW;wBAClB,WAAW,EAAE,0BAA0B;qBACxC;oBACD;wBACE,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,aAAa;wBACpB,WAAW,EAAE,uCAAuC;qBACrD;oBACD;wBACE,MAAM,EAAE,QAAQ;wBAChB,KAAK,EAAE,qBAAqB;wBAC5B,WAAW,EAAE,4BAA4B;wBACzC,SAAS,EAAE,IAAI;qBAChB;iBACF;aACF;SACF;KACF;IACD,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE;CAC/B,CAAC,CAAA","sourcesContent":["import { defineModule, providePort, requirePort } from \"@voyant-travel/core/project\"\n\nimport { identityAccessRuntimePort } from \"./identity-access-runtime-port.js\"\n\nexport const authInvitationsVoyantModule = defineModule({\n  id: \"@voyant-travel/auth#invitations\",\n  packageName: \"@voyant-travel/auth\",\n  localId: \"auth.invitations\",\n  provides: { ports: [providePort(identityAccessRuntimePort)] },\n  runtimePorts: [requirePort(identityAccessRuntimePort)],\n  api: [\n    {\n      id: \"@voyant-travel/auth#invitations.api.admin\",\n      surface: \"admin\",\n      mount: \"invitations\",\n      resource: \"team\",\n      openapi: { document: \"invitations\" },\n      transactional: true,\n      runtime: {\n        entry: \"@voyant-travel/auth/identity-access-graph-runtime\",\n        export: \"createInvitationsVoyantRuntime\",\n      },\n    },\n    {\n      id: \"@voyant-travel/auth#invitations.api.public\",\n      surface: \"public\",\n      mount: \"invitations\",\n      anonymous: true,\n      openapi: { document: \"invitations\" },\n      transactional: true,\n      runtime: {\n        entry: \"@voyant-travel/auth/identity-access-graph-runtime\",\n        export: \"createInvitationsVoyantRuntime\",\n      },\n    },\n  ],\n  presentations: [\n    {\n      id: \"@voyant-travel/auth#presentation.local-auth\",\n      runtime: {\n        entry: \"@voyant-travel/auth-react/local-auth-routes\",\n        export: \"createLocalAuthRouteContribution\",\n      },\n    },\n  ],\n  meta: { ownership: \"package\" },\n})\n\nexport const authTeamVoyantModule = defineModule({\n  id: \"@voyant-travel/auth#team\",\n  packageName: \"@voyant-travel/auth\",\n  localId: \"auth.team\",\n  provides: { ports: [providePort(identityAccessRuntimePort)] },\n  runtimePorts: [requirePort(identityAccessRuntimePort)],\n  api: [\n    {\n      id: \"@voyant-travel/auth#team.api.admin\",\n      surface: \"admin\",\n      mount: \"team\",\n      openapi: { document: \"team\" },\n      runtime: {\n        entry: \"@voyant-travel/auth/identity-access-graph-runtime\",\n        export: \"createTeamVoyantRuntime\",\n      },\n    },\n  ],\n  access: {\n    resources: [\n      {\n        id: \"@voyant-travel/auth#access.team\",\n        resource: \"team\",\n        label: \"Team\",\n        description: \"Manage staff team members and their access.\",\n        actions: [\n          {\n            action: \"read\",\n            label: \"View team\",\n            description: \"View staff team members.\",\n          },\n          {\n            action: \"write\",\n            label: \"Manage team\",\n            description: \"Create and update staff team members.\",\n          },\n          {\n            action: \"delete\",\n            label: \"Delete team members\",\n            description: \"Delete staff team members.\",\n            sensitive: true,\n          },\n        ],\n      },\n    ],\n  },\n  meta: { ownership: \"package\" },\n})\n"]}
+{"version":3,"file":"voyant.js","sourceRoot":"","sources":["../src/voyant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAEpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAE7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAC;IACtD,EAAE,EAAE,iCAAiC;IACrC,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,kBAAkB;IAC3B,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,EAAE;IAC7D,YAAY,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACtD,GAAG,EAAE;QACH;YACE,EAAE,EAAE,2CAA2C;YAC/C,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;YACpC,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE;gBACP,KAAK,EAAE,mDAAmD;gBAC1D,MAAM,EAAE,gCAAgC;aACzC;SACF;QACD;YACE,EAAE,EAAE,4CAA4C;YAChD,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;YACpC,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE;gBACP,KAAK,EAAE,mDAAmD;gBAC1D,MAAM,EAAE,gCAAgC;aACzC;SACF;KACF;IACD,aAAa,EAAE;QACb;YACE,EAAE,EAAE,6CAA6C;YACjD,OAAO,EAAE;gBACP,KAAK,EAAE,6CAA6C;gBACpD,MAAM,EAAE,kCAAkC;aAC3C;SACF;KACF;IACD,IAAI,EAAE;QACJ,SAAS,EAAE,SAAS;QACpB,UAAU,EAAE;YACV,OAAO,EAAE,gBAAgB;YACzB,SAAS,EACP,uHAAuH;SAC1H;KACF;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;IAC/C,EAAE,EAAE,0BAA0B;IAC9B,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,EAAE;IAC7D,YAAY,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACtD,GAAG,EAAE;QACH;YACE,EAAE,EAAE,oCAAoC;YACxC,OAAO,EAAE,OAAO;YAChB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;YAC7B,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE;gBACP,KAAK,EAAE,mDAAmD;gBAC1D,MAAM,EAAE,yBAAyB;aAClC;SACF;KACF;IACD,MAAM,EAAE;QACN,SAAS,EAAE;YACT;gBACE,EAAE,EAAE,iCAAiC;gBACrC,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,MAAM;gBACb,WAAW,EAAE,6CAA6C;gBAC1D,QAAQ,EAAE,mBAAmB;gBAC7B,OAAO,EAAE;oBACP;wBACE,MAAM,EAAE,MAAM;wBACd,KAAK,EAAE,WAAW;wBAClB,WAAW,EAAE,0BAA0B;qBACxC;oBACD;wBACE,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,aAAa;wBACpB,WAAW,EAAE,0CAA0C;wBACvD,SAAS,EAAE,IAAI;wBACf,QAAQ,EAAE,UAAU;qBACrB;oBACD;wBACE,MAAM,EAAE,QAAQ;wBAChB,KAAK,EAAE,oBAAoB;wBAC3B,WAAW,EAAE,sDAAsD;wBACnE,SAAS,EAAE,IAAI;wBACf,QAAQ,EAAE,UAAU;qBACrB;iBACF;aACF;SACF;KACF;IACD,KAAK,EAAE;QACL;YACE,EAAE,EAAE,gDAAgD;YACpD,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE;gBACP,KAAK,EAAE,2BAA2B;gBAClC,MAAM,EAAE,mCAAmC;aAC5C;YACD,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,KAAK;SACZ;QACD;YACE,EAAE,EAAE,4CAA4C;YAChD,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,qBAAqB,EAAE;YAC9E,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,MAAM;SACb;QACD;YACE,EAAE,EAAE,0CAA0C;YAC9C,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAC5E,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,KAAK;SACZ;QACD;YACE,EAAE,EAAE,gDAAgD;YACpD,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,yBAAyB,EAAE;YAClF,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,MAAM;SACb;QACD;YACE,EAAE,EAAE,6CAA6C;YACjD,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,sBAAsB,EAAE;YAC/E,cAAc,EAAE,CAAC,YAAY,CAAC;YAC9B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,MAAM;SACb;QACD;YACE,EAAE,EAAE,iDAAiD;YACrD,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,0BAA0B,EAAE;YACnF,cAAc,EAAE,CAAC,aAAa,CAAC;YAC/B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,MAAM;SACb;QACD;YACE,EAAE,EAAE,kDAAkD;YACtD,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,0BAA0B,EAAE;YACnF,cAAc,EAAE,CAAC,YAAY,CAAC;YAC9B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,MAAM;SACb;QACD;YACE,EAAE,EAAE,+CAA+C;YACnD,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,wBAAwB,EAAE;YACjF,cAAc,EAAE,CAAC,YAAY,CAAC;YAC9B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,MAAM;SACb;QACD;YACE,EAAE,EAAE,iDAAiD;YACrD,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,MAAM,EAAE,0BAA0B,EAAE;YACnF,cAAc,EAAE,CAAC,aAAa,CAAC;YAC/B,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,IAAI,EAAE,MAAM;SACb;KACF;IACD,OAAO,EAAE;QACP;YACE,EAAE,EAAE,kDAAkD;YACtD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,mBAAmB;YAC/B,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,OAAO;YACjB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,gDAAgD,CAAC,EAAE;SACpE;QACD;YACE,EAAE,EAAE,8CAA8C;YAClD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,OAAO;YACjB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,4CAA4C,CAAC,EAAE;SAChE;QACD;YACE,EAAE,EAAE,4CAA4C;YAChD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,WAAW;YACvB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,OAAO;YACjB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,0CAA0C,CAAC,EAAE;SAC9D;QACD;YACE,EAAE,EAAE,kDAAkD;YACtD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,MAAM;YACd,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,OAAO;YACjB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,gDAAgD,CAAC,EAAE;SACpE;QACD;YACE,EAAE,EAAE,+CAA+C;YACnD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,CAAC,YAAY,CAAC;YAC9B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,6CAA6C,CAAC,EAAE;SACjE;QACD;YACE,EAAE,EAAE,mDAAmD;YACvD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,CAAC,aAAa,CAAC;YAC/B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,iDAAiD,CAAC,EAAE;SACrE;QACD;YACE,EAAE,EAAE,oDAAoD;YACxD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,CAAC,YAAY,CAAC;YAC9B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,kDAAkD,CAAC,EAAE;SACtE;QACD;YACE,EAAE,EAAE,iDAAiD;YACrD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO;YACf,cAAc,EAAE,CAAC,YAAY,CAAC;YAC9B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,+CAA+C,CAAC,EAAE;SACnE;QACD;YACE,EAAE,EAAE,mDAAmD;YACvD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,CAAC,aAAa,CAAC;YAC/B,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,iDAAiD,CAAC,EAAE;SACrE;KACF;IACD,KAAK,EAAE;QACL,gBAAgB,EAAE,CAAC;QACnB,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,gCAAgC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACvE,OAAO,EAAE;YACP,KAAK,EAAE,iCAAiC;YACxC,MAAM,EAAE,sCAAsC;SAC/C;QACD,IAAI,EAAE;YACJ;gBACE,EAAE,EAAE,qCAAqC;gBACzC,SAAS,EAAE,iBAAiB;gBAC5B,cAAc,EAAE,IAAI;gBACpB,OAAO,EAAE;oBACP,KAAK,EAAE,gCAAgC;oBACvC,MAAM,EAAE,0BAA0B;iBACnC;aACF;SACF;QACD,MAAM,EAAE;YACN;gBACE,EAAE,EAAE,sCAAsC;gBAC1C,IAAI,EAAE,gBAAgB;gBACtB,cAAc,EAAE,CAAC,WAAW,CAAC;gBAC7B,OAAO,EAAE;oBACP,KAAK,EAAE,iCAAiC;oBACxC,MAAM,EAAE,sCAAsC;iBAC/C;aACF;SACF;KACF;IACD,IAAI,EAAE;QACJ,SAAS,EAAE,SAAS;KACrB;CACF,CAAC,CAAA","sourcesContent":["import { defineModule, providePort, requirePort } from \"@voyant-travel/core/project\"\n\nimport { identityAccessRuntimePort } from \"./identity-access-runtime-port.js\"\nimport { teamManagementRuntimePort } from \"./team-management-runtime-port.js\"\n\nexport const authInvitationsVoyantModule = defineModule({\n  id: \"@voyant-travel/auth#invitations\",\n  packageName: \"@voyant-travel/auth\",\n  localId: \"auth.invitations\",\n  provides: { ports: [providePort(identityAccessRuntimePort)] },\n  runtimePorts: [requirePort(identityAccessRuntimePort)],\n  api: [\n    {\n      id: \"@voyant-travel/auth#invitations.api.admin\",\n      surface: \"admin\",\n      mount: \"invitations\",\n      resource: \"team\",\n      openapi: { document: \"invitations\" },\n      transactional: true,\n      runtime: {\n        entry: \"@voyant-travel/auth/identity-access-graph-runtime\",\n        export: \"createInvitationsVoyantRuntime\",\n      },\n    },\n    {\n      id: \"@voyant-travel/auth#invitations.api.public\",\n      surface: \"public\",\n      mount: \"invitations\",\n      anonymous: true,\n      openapi: { document: \"invitations\" },\n      transactional: true,\n      runtime: {\n        entry: \"@voyant-travel/auth/identity-access-graph-runtime\",\n        export: \"createInvitationsVoyantRuntime\",\n      },\n    },\n  ],\n  presentations: [\n    {\n      id: \"@voyant-travel/auth#presentation.local-auth\",\n      runtime: {\n        entry: \"@voyant-travel/auth-react/local-auth-routes\",\n        export: \"createLocalAuthRouteContribution\",\n      },\n    },\n  ],\n  meta: {\n    ownership: \"package\",\n    agentTools: {\n      posture: \"not-applicable\",\n      rationale:\n        \"This unit owns public invitation acceptance; staff invitation management is exposed by the guarded auth team runtime.\",\n    },\n  },\n})\n\nexport const authTeamVoyantModule = defineModule({\n  id: \"@voyant-travel/auth#team\",\n  packageName: \"@voyant-travel/auth\",\n  localId: \"auth.team\",\n  provides: { ports: [providePort(teamManagementRuntimePort)] },\n  runtimePorts: [requirePort(teamManagementRuntimePort)],\n  api: [\n    {\n      id: \"@voyant-travel/auth#team.api.admin\",\n      surface: \"admin\",\n      mount: \"team\",\n      resource: \"team\",\n      openapi: { document: \"team\" },\n      transactional: true,\n      runtime: {\n        entry: \"@voyant-travel/auth/identity-access-graph-runtime\",\n        export: \"createTeamVoyantRuntime\",\n      },\n    },\n  ],\n  access: {\n    resources: [\n      {\n        id: \"@voyant-travel/auth#access.team\",\n        resource: \"team\",\n        label: \"Team\",\n        description: \"Manage staff team members and their access.\",\n        wildcard: \"explicit-resource\",\n        actions: [\n          {\n            action: \"read\",\n            label: \"View team\",\n            description: \"View staff team members.\",\n          },\n          {\n            action: \"write\",\n            label: \"Manage team\",\n            description: \"Invite staff and update roles or access.\",\n            sensitive: true,\n            wildcard: \"explicit\",\n          },\n          {\n            action: \"delete\",\n            label: \"Remove team access\",\n            description: \"Revoke invitations or deactivate staff team members.\",\n            sensitive: true,\n            wildcard: \"explicit\",\n          },\n        ],\n      },\n    ],\n  },\n  tools: [\n    {\n      id: \"@voyant-travel/auth#team.tool.get-capabilities\",\n      name: \"get_team_management_capabilities\",\n      runtime: {\n        entry: \"@voyant-travel/auth/tools\",\n        export: \"getTeamManagementCapabilitiesTool\",\n      },\n      requiredScopes: [\"team:read\"],\n      context: [\"teamManagement\"],\n      risk: \"low\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.list-members\",\n      name: \"list_team_members\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"listTeamMembersTool\" },\n      requiredScopes: [\"team:read\"],\n      context: [\"teamManagement\"],\n      risk: \"high\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.list-roles\",\n      name: \"list_team_roles\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"listTeamRolesTool\" },\n      requiredScopes: [\"team:read\"],\n      context: [\"teamManagement\"],\n      risk: \"low\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.list-invitations\",\n      name: \"list_team_invitations\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"listTeamInvitationsTool\" },\n      requiredScopes: [\"team:read\"],\n      context: [\"teamManagement\"],\n      risk: \"high\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.invite-member\",\n      name: \"invite_team_member\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"inviteTeamMemberTool\" },\n      requiredScopes: [\"team:write\"],\n      context: [\"teamManagement\"],\n      risk: \"high\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.revoke-invitation\",\n      name: \"revoke_team_invitation\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"revokeTeamInvitationTool\" },\n      requiredScopes: [\"team:delete\"],\n      context: [\"teamManagement\"],\n      risk: \"high\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.update-member-role\",\n      name: \"update_team_member_role\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"updateTeamMemberRoleTool\" },\n      requiredScopes: [\"team:write\"],\n      context: [\"teamManagement\"],\n      risk: \"high\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.activate-member\",\n      name: \"activate_team_member\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"activateTeamMemberTool\" },\n      requiredScopes: [\"team:write\"],\n      context: [\"teamManagement\"],\n      risk: \"high\",\n    },\n    {\n      id: \"@voyant-travel/auth#team.tool.deactivate-member\",\n      name: \"deactivate_team_member\",\n      runtime: { entry: \"@voyant-travel/auth/tools\", export: \"deactivateTeamMemberTool\" },\n      requiredScopes: [\"team:delete\"],\n      context: [\"teamManagement\"],\n      risk: \"high\",\n    },\n  ],\n  actions: [\n    {\n      id: \"@voyant-travel/auth#team.action.get-capabilities\",\n      version: \"v1\",\n      kind: \"read\",\n      targetType: \"team-capabilities\",\n      resource: \"team\",\n      action: \"read\",\n      requiredScopes: [\"team:read\"],\n      risk: \"low\",\n      ledger: \"optional\",\n      approval: \"never\",\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.get-capabilities\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.list-members\",\n      version: \"v1\",\n      kind: \"sensitive-read\",\n      targetType: \"team-member\",\n      resource: \"team\",\n      action: \"read\",\n      requiredScopes: [\"team:read\"],\n      risk: \"high\",\n      ledger: \"required\",\n      approval: \"never\",\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.list-members\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.list-roles\",\n      version: \"v1\",\n      kind: \"read\",\n      targetType: \"team-role\",\n      resource: \"team\",\n      action: \"read\",\n      requiredScopes: [\"team:read\"],\n      risk: \"low\",\n      ledger: \"optional\",\n      approval: \"never\",\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.list-roles\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.list-invitations\",\n      version: \"v1\",\n      kind: \"sensitive-read\",\n      targetType: \"team-invitation\",\n      resource: \"team\",\n      action: \"read\",\n      requiredScopes: [\"team:read\"],\n      risk: \"high\",\n      ledger: \"required\",\n      approval: \"never\",\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.list-invitations\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.invite-member\",\n      version: \"v1\",\n      kind: \"execute\",\n      targetType: \"team-invitation\",\n      resource: \"team\",\n      action: \"write\",\n      requiredScopes: [\"team:write\"],\n      risk: \"high\",\n      ledger: \"required\",\n      approval: \"required\",\n      reversible: false,\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.invite-member\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.revoke-invitation\",\n      version: \"v1\",\n      kind: \"execute\",\n      targetType: \"team-invitation\",\n      resource: \"team\",\n      action: \"delete\",\n      requiredScopes: [\"team:delete\"],\n      risk: \"high\",\n      ledger: \"required\",\n      approval: \"required\",\n      reversible: false,\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.revoke-invitation\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.update-member-role\",\n      version: \"v1\",\n      kind: \"execute\",\n      targetType: \"team-member\",\n      resource: \"team\",\n      action: \"write\",\n      requiredScopes: [\"team:write\"],\n      risk: \"high\",\n      ledger: \"required\",\n      approval: \"required\",\n      reversible: true,\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.update-member-role\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.activate-member\",\n      version: \"v1\",\n      kind: \"execute\",\n      targetType: \"team-member\",\n      resource: \"team\",\n      action: \"write\",\n      requiredScopes: [\"team:write\"],\n      risk: \"high\",\n      ledger: \"required\",\n      approval: \"required\",\n      reversible: true,\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.activate-member\"] },\n    },\n    {\n      id: \"@voyant-travel/auth#team.action.deactivate-member\",\n      version: \"v1\",\n      kind: \"execute\",\n      targetType: \"team-member\",\n      resource: \"team\",\n      action: \"delete\",\n      requiredScopes: [\"team:delete\"],\n      risk: \"high\",\n      ledger: \"required\",\n      approval: \"required\",\n      reversible: false,\n      allowedActorTypes: [\"staff\"],\n      from: { tools: [\"@voyant-travel/auth#team.tool.deactivate-member\"] },\n    },\n  ],\n  admin: {\n    compositionOrder: 5,\n    setupSteps: [{ id: \"@voyant-travel/auth#setup.team\", skippable: true }],\n    runtime: {\n      entry: \"@voyant-travel/auth-react/admin\",\n      export: \"createSelectedAuthTeamAdminExtension\",\n    },\n    copy: [\n      {\n        id: \"@voyant-travel/auth#team.admin.copy\",\n        namespace: \"auth.admin.team\",\n        fallbackLocale: \"en\",\n        runtime: {\n          entry: \"@voyant-travel/auth-react/i18n\",\n          export: \"authUiMessageDefinitions\",\n        },\n      },\n    ],\n    routes: [\n      {\n        id: \"@voyant-travel/auth#team.admin.route\",\n        path: \"/settings/team\",\n        requiredScopes: [\"team:read\"],\n        runtime: {\n          entry: \"@voyant-travel/auth-react/admin\",\n          export: \"createSelectedAuthTeamAdminExtension\",\n        },\n      },\n    ],\n  },\n  meta: {\n    ownership: \"package\",\n  },\n})\n"]}

package/openapi/admin/team.json

@@ -5,46 +5,39 @@
     "version": "1.0.0"
   },
   "paths": {
+    "/v1/admin/team/capabilities": {
+      "get": {
+        "operationId": "getTeamManagementCapabilities",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "responses": { "200": { "description": "Team-management capabilities." } }
+      }
+    },
     "/v1/admin/team/members": {
       "get": {
         "operationId": "listTeamMembers",
-        "summary": "List team members",
         "tags": ["Team"],
         "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
-        "responses": {
-          "200": { "description": "The deployment team members." },
-          "401": { "description": "The caller is not authenticated." },
-          "404": { "description": "Cloud team management is unavailable." }
-        }
+        "responses": { "200": { "description": "Team roster." } }
       }
     },
     "/v1/admin/team/roles": {
       "get": {
         "operationId": "listTeamRoles",
-        "summary": "List team roles",
         "tags": ["Team"],
         "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
-        "responses": {
-          "200": { "description": "The available team roles." },
-          "401": { "description": "The caller is not authenticated." },
-          "404": { "description": "Cloud team management is unavailable." }
-        }
+        "responses": { "200": { "description": "Available team roles." } }
       }
     },
     "/v1/admin/team/invitations": {
       "get": {
         "operationId": "listTeamInvitations",
-        "summary": "List team invitations",
         "tags": ["Team"],
         "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
-        "responses": {
-          "200": { "description": "The outstanding team invitations." },
-          "401": { "description": "The caller is not authenticated." }
-        }
+        "responses": { "200": { "description": "Team invitations." } }
       },
       "post": {
         "operationId": "createTeamInvitation",
-        "summary": "Invite a team member",
         "tags": ["Team"],
         "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
         "requestBody": {
@@ -53,34 +46,22 @@
             "application/json": {
               "schema": {
                 "type": "object",
-                "required": ["email"],
+                "required": ["email", "roleId"],
                 "properties": {
                   "email": { "type": "string", "format": "email" },
-                  "roleSlug": {
-                    "type": ["string", "null"],
-                    "minLength": 1,
-                    "maxLength": 120
-                  },
-                  "expiresInDays": {
-                    "type": "integer",
-                    "minimum": 1,
-                    "maximum": 30
-                  }
+                  "roleId": { "type": "string", "minLength": 1, "maxLength": 120 },
+                  "expiresInDays": { "type": "integer", "minimum": 1, "maximum": 30 }
                 }
               }
             }
           }
         },
-        "responses": {
-          "201": { "description": "The created team invitation." },
-          "401": { "description": "The caller is not authenticated." }
-        }
+        "responses": { "201": { "description": "Created team invitation." } }
       }
     },
     "/v1/admin/team/invitations/{invitationId}": {
       "delete": {
         "operationId": "revokeTeamInvitation",
-        "summary": "Revoke a team invitation",
         "tags": ["Team"],
         "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
         "parameters": [
@@ -91,21 +72,17 @@
             "schema": { "type": "string" }
           }
         ],
-        "responses": {
-          "204": { "description": "The invitation was revoked." },
-          "401": { "description": "The caller is not authenticated." }
-        }
+        "responses": { "204": { "description": "Invitation revoked." } }
       }
     },
-    "/v1/admin/team/members/{membershipId}/access": {
+    "/v1/admin/team/members/{memberId}/role": {
       "put": {
-        "operationId": "setTeamMemberAccess",
-        "summary": "Set team member access",
+        "operationId": "updateTeamMemberRole",
         "tags": ["Team"],
         "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
         "parameters": [
           {
-            "name": "membershipId",
+            "name": "memberId",
             "in": "path",
             "required": true,
             "schema": { "type": "string" }
@@ -117,54 +94,45 @@
             "application/json": {
               "schema": {
                 "type": "object",
-                "required": ["hasAccess"],
-                "properties": { "hasAccess": { "type": "boolean" } }
+                "required": ["roleId"],
+                "properties": { "roleId": { "type": "string", "minLength": 1 } }
               }
             }
           }
         },
-        "responses": {
-          "200": { "description": "The updated team member." },
-          "401": { "description": "The caller is not authenticated." }
-        }
+        "responses": { "200": { "description": "Updated team member." } }
       }
     },
-    "/v1/admin/team/members/{membershipId}/permissions": {
-      "put": {
-        "operationId": "setTeamMemberPermissions",
-        "summary": "Set team member permissions",
+    "/v1/admin/team/members/{memberId}": {
+      "delete": {
+        "operationId": "deactivateTeamMember",
         "tags": ["Team"],
         "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
         "parameters": [
           {
-            "name": "membershipId",
+            "name": "memberId",
             "in": "path",
             "required": true,
             "schema": { "type": "string" }
           }
         ],
-        "requestBody": {
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "type": "object",
-                "required": ["permissions"],
-                "properties": {
-                  "permissions": {
-                    "type": "array",
-                    "maxItems": 200,
-                    "items": { "type": "string", "minLength": 1, "maxLength": 120 }
-                  }
-                }
-              }
-            }
+        "responses": { "200": { "description": "Deactivated team member." } }
+      }
+    },
+    "/v1/admin/team/members/{memberId}/activation": {
+      "put": {
+        "operationId": "activateTeamMember",
+        "tags": ["Team"],
+        "x-voyant-api-id": "@voyant-travel/auth#team.api.admin",
+        "parameters": [
+          {
+            "name": "memberId",
+            "in": "path",
+            "required": true,
+            "schema": { "type": "string" }
           }
-        },
-        "responses": {
-          "200": { "description": "The updated team member." },
-          "401": { "description": "The caller is not authenticated." }
-        }
+        ],
+        "responses": { "200": { "description": "Activated team member." } }
       }
     }
   }