@voyantjs/types 0.31.1 → 0.31.2

package/dist/api-keys.d.ts

@@ -1,156 +1,242 @@
 import { z } from "zod";
-/**
- * API Key Scope Definitions
- *
- * Following resource:action pattern similar to Stripe/Shopify
- * Format: "{resource}:{action}" or wildcards
- */
-export declare const API_KEY_RESOURCES: readonly ["operators", "connections", "oauth-clients", "products", "availability", "bookings", "suppliers", "grants", "audit-logs"];
-export type ApiKeyResource = (typeof API_KEY_RESOURCES)[number];
-export declare const API_KEY_ACTIONS: readonly ["read", "write", "delete"];
+export declare const API_KEY_ACTIONS: readonly ["read", "write", "delete", "trigger", "relay", "search"];
 export type ApiKeyAction = (typeof API_KEY_ACTIONS)[number];
-/**
- * Valid scope patterns:
- * - Specific: "operators:read", "connections:write"
- * - Resource wildcard: "operators:*" (all actions on operators)
- * - Action wildcard: "*:read" (read all resources)
- * - Full wildcard: "*" (all resources, all actions)
- */
-export declare const VALID_SCOPES: readonly ["operators:read", "operators:write", "operators:delete", "operators:*", "connections:read", "connections:write", "connections:delete", "connections:*", "oauth-clients:read", "oauth-clients:write", "oauth-clients:delete", "oauth-clients:*", "products:read", "products:*", "availability:read", "availability:*", "bookings:read", "bookings:write", "bookings:delete", "bookings:*", "suppliers:read", "suppliers:*", "grants:read", "grants:write", "grants:delete", "grants:*", "audit-logs:read", "audit-logs:*", "*:read", "*:write", "*:delete", "*"];
-export type ApiKeyScope = (typeof VALID_SCOPES)[number];
-export declare const apiKeyScopeSchema: z.ZodEnum<{
-    "operators:read": "operators:read";
-    "operators:write": "operators:write";
-    "operators:delete": "operators:delete";
-    "operators:*": "operators:*";
-    "connections:read": "connections:read";
-    "connections:write": "connections:write";
-    "connections:delete": "connections:delete";
-    "connections:*": "connections:*";
-    "oauth-clients:read": "oauth-clients:read";
-    "oauth-clients:write": "oauth-clients:write";
-    "oauth-clients:delete": "oauth-clients:delete";
-    "oauth-clients:*": "oauth-clients:*";
-    "products:read": "products:read";
-    "products:*": "products:*";
-    "availability:read": "availability:read";
-    "availability:*": "availability:*";
-    "bookings:read": "bookings:read";
-    "bookings:write": "bookings:write";
-    "bookings:delete": "bookings:delete";
-    "bookings:*": "bookings:*";
-    "suppliers:read": "suppliers:read";
-    "suppliers:*": "suppliers:*";
-    "grants:read": "grants:read";
-    "grants:write": "grants:write";
-    "grants:delete": "grants:delete";
-    "grants:*": "grants:*";
-    "audit-logs:read": "audit-logs:read";
-    "audit-logs:*": "audit-logs:*";
-    "*:read": "*:read";
-    "*:write": "*:write";
-    "*:delete": "*:delete";
-    "*": "*";
-}>;
-export declare const apiKeyScopesSchema: z.ZodDefault<z.ZodArray<z.ZodEnum<{
-    "operators:read": "operators:read";
-    "operators:write": "operators:write";
-    "operators:delete": "operators:delete";
-    "operators:*": "operators:*";
-    "connections:read": "connections:read";
-    "connections:write": "connections:write";
-    "connections:delete": "connections:delete";
-    "connections:*": "connections:*";
-    "oauth-clients:read": "oauth-clients:read";
-    "oauth-clients:write": "oauth-clients:write";
-    "oauth-clients:delete": "oauth-clients:delete";
-    "oauth-clients:*": "oauth-clients:*";
-    "products:read": "products:read";
-    "products:*": "products:*";
-    "availability:read": "availability:read";
-    "availability:*": "availability:*";
-    "bookings:read": "bookings:read";
-    "bookings:write": "bookings:write";
-    "bookings:delete": "bookings:delete";
-    "bookings:*": "bookings:*";
-    "suppliers:read": "suppliers:read";
-    "suppliers:*": "suppliers:*";
-    "grants:read": "grants:read";
-    "grants:write": "grants:write";
-    "grants:delete": "grants:delete";
-    "grants:*": "grants:*";
-    "audit-logs:read": "audit-logs:read";
-    "audit-logs:*": "audit-logs:*";
-    "*:read": "*:read";
-    "*:write": "*:write";
-    "*:delete": "*:delete";
-    "*": "*";
-}>>>;
-/**
- * Scope groups for UI display
- * Grouped by resource for nested checkbox UX
- */
-export declare const SCOPE_GROUPS: {
-    readonly operators: {
-        readonly label: "Operators";
-        readonly description: "Manage operator registrations and configuration";
-        readonly scopes: readonly ["operators:read", "operators:write", "operators:delete"];
-    };
-    readonly connections: {
-        readonly label: "Connections";
-        readonly description: "Manage supplier connections and credentials";
-        readonly scopes: readonly ["connections:read", "connections:write", "connections:delete"];
-    };
-    readonly "oauth-clients": {
-        readonly label: "OAuth Clients";
-        readonly description: "Manage OAuth client credentials for M2M access";
-        readonly scopes: readonly ["oauth-clients:read", "oauth-clients:write", "oauth-clients:delete"];
-    };
-    readonly products: {
-        readonly label: "Products";
-        readonly description: "Query supplier product catalogs via OCTO";
-        readonly scopes: readonly ["products:read"];
-    };
-    readonly availability: {
-        readonly label: "Availability";
-        readonly description: "Query supplier availability via OCTO";
-        readonly scopes: readonly ["availability:read"];
+export declare const API_KEY_RESOURCES: readonly ["availability", "bookings", "catalog", "crm", "cruises", "departures", "finance", "ground", "hospitality", "itineraries", "legal", "notifications", "pricing", "products", "resources", "storefront", "suppliers", "transactions", "webhooks", "workflows"];
+export type ApiKeyResource = (typeof API_KEY_RESOURCES)[number];
+export type ApiKeyPermissions = Record<string, string[]>;
+export type ApiKeyPermissionString = "*" | "*:*" | `${string}:*` | `*:${string}` | `${string}:${string}`;
+export interface ApiKeyPermissionDescriptor {
+    resource: string;
+    action: string;
+    label: string;
+    description: string;
+}
+export interface ApiKeyPermissionGroup {
+    resource: string;
+    label: string;
+    description: string;
+    permissions: ApiKeyPermissionDescriptor[];
+}
+export declare const API_KEY_PERMISSION_GROUPS: readonly [{
+    readonly resource: "catalog";
+    readonly label: "Catalog";
+    readonly description: "Search and read unified catalog content.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "products";
+    readonly label: "Products";
+    readonly description: "Read and manage products, options, content, and media.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "departures";
+    readonly label: "Departures";
+    readonly description: "Read and manage scheduled departures.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "itineraries";
+    readonly label: "Itineraries";
+    readonly description: "Read and manage day-by-day itinerary content.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "bookings";
+    readonly label: "Bookings";
+    readonly description: "Read and manage booking records and booking workflows.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "availability";
+    readonly label: "Availability";
+    readonly description: "Read and manage availability rules, slots, and closeouts.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "hospitality";
+    readonly label: "Hospitality";
+    readonly description: "Read and manage properties, rooms, rates, and hospitality bookings.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "ground";
+    readonly label: "Ground";
+    readonly description: "Read and manage ground transport operations.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "cruises";
+    readonly label: "Cruises";
+    readonly description: "Read and manage cruise products and sailing data.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "workflows";
+    readonly label: "Workflows";
+    readonly description: "Trigger workflow automation from external systems.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}, {
+    readonly resource: "webhooks";
+    readonly label: "Webhooks";
+    readonly description: "Relay webhook events into Voyant runtimes.";
+    readonly permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+}];
+export declare const API_KEY_PERMISSION_PRESETS: {
+    readonly "catalog-read": {
+        readonly label: "Catalog read";
+        readonly description: "Read/search catalog, product, departure, and itinerary content.";
+        readonly permissions: {
+            readonly catalog: ["read", "search"];
+            readonly products: ["read"];
+            readonly departures: ["read"];
+            readonly itineraries: ["read"];
+        };
     };
-    readonly bookings: {
-        readonly label: "Bookings";
-        readonly description: "Create, confirm, and cancel bookings via OCTO";
-        readonly scopes: readonly ["bookings:read", "bookings:write", "bookings:delete"];
+    readonly "commerce-read": {
+        readonly label: "Commerce read";
+        readonly description: "Read bookings, availability, products, pricing, and suppliers.";
+        readonly permissions: {
+            readonly bookings: ["read"];
+            readonly availability: ["read"];
+            readonly products: ["read"];
+            readonly pricing: ["read"];
+            readonly suppliers: ["read"];
+        };
     };
-    readonly suppliers: {
-        readonly label: "Suppliers";
-        readonly description: "Query supplier information via OCTO";
-        readonly scopes: readonly ["suppliers:read"];
+    readonly automation: {
+        readonly label: "Automation";
+        readonly description: "Trigger workflows and relay webhooks.";
+        readonly permissions: {
+            readonly workflows: ["trigger"];
+            readonly webhooks: ["relay"];
+        };
     };
-    readonly grants: {
-        readonly label: "Grants";
-        readonly description: "Manage cross-organization operator access grants";
-        readonly scopes: readonly ["grants:read", "grants:write", "grants:delete"];
+    readonly "read-only": {
+        readonly label: "Read only";
+        readonly description: "Read across every resource that accepts API tokens.";
+        readonly permissions: {
+            readonly "*": ["read"];
+        };
     };
-    readonly "audit-logs": {
-        readonly label: "Audit Logs";
-        readonly description: "Query API audit logs for your organization";
-        readonly scopes: readonly ["audit-logs:read"];
+    readonly "full-access": {
+        readonly label: "Full access";
+        readonly description: "All resources and all actions. Use only for trusted automation.";
+        readonly permissions: {
+            readonly "*": ["*"];
+        };
     };
 };
-export type ScopeGroupKey = keyof typeof SCOPE_GROUPS;
-/**
- * Predefined scope templates for quick setup
- */
-interface ScopeTemplate {
-    name: string;
-    description: string;
-    scopes: ApiKeyScope[];
-}
-export declare const SCOPE_TEMPLATES: Record<string, ScopeTemplate>;
-export type ScopeTemplateKey = "read-only" | "full-access" | "operator-admin" | "reseller";
-/**
- * Expiration presets for key creation
- */
+export type ApiKeyPermissionPresetKey = keyof typeof API_KEY_PERMISSION_PRESETS;
+export declare const apiKeyPermissionStringSchema: z.ZodString & z.ZodType<ApiKeyPermissionString, string, z.core.$ZodTypeInternals<ApiKeyPermissionString, string>>;
+export declare const apiKeyPermissionsSchema: z.ZodPipe<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>, z.ZodTransform<ApiKeyPermissions, Record<string, string[]>>>;
+export declare function normalizeApiKeyPermissions(permissions: string | ApiKeyPermissions | null | undefined): ApiKeyPermissions;
+export declare function permissionStringsToPermissions(permissions: readonly string[]): ApiKeyPermissions;
+export declare function permissionsToStrings(permissions: string | ApiKeyPermissions | null | undefined): ApiKeyPermissionString[];
+export declare function hasApiKeyPermission(permissions: string | ApiKeyPermissions | null | undefined, resource: string, action: string): boolean;
+export declare function hasApiKeyPermissions(permissions: string | ApiKeyPermissions | null | undefined, required: ApiKeyPermissions): boolean;
+export declare function describePermissions(permissions: string | ApiKeyPermissions | null | undefined): string;
 export declare const EXPIRATION_PRESETS: {
     readonly never: {
         readonly label: "Never";
@@ -182,25 +268,283 @@ export declare const EXPIRATION_PRESETS: {
     };
 };
 export type ExpirationPresetKey = keyof typeof EXPIRATION_PRESETS;
-/**
- * Helper functions for scope validation
- */
-/**
- * Check if a scope pattern matches a required scope
- * Handles wildcards: "operators:*", "*:read", "*"
- */
-export declare function scopeMatches(userScope: string, requiredScope: string): boolean;
-/**
- * Check if user has all required scopes
- */
-export declare function hasScopes(userScopes: string[], requiredScopes: string[]): boolean;
-/**
- * Get human-readable description of scopes
- */
-export declare function describescopes(scopes: string[]): string;
-/**
- * Calculate expiration date from preset
- */
 export declare function calculateExpirationDate(preset: ExpirationPresetKey, customDate?: Date): Date | null;
-export {};
+/** @deprecated Use ApiKeyPermissionString. */
+export type ApiKeyScope = ApiKeyPermissionString;
+/** @deprecated Use ApiKeyPermissionDescriptor. */
+export type ApiKeyScopeDescriptor = ApiKeyPermissionDescriptor & {
+    scope: ApiKeyPermissionString;
+};
+/** @deprecated Use API_KEY_PERMISSION_GROUPS. */
+export declare const API_KEY_SCOPE_GROUPS: ({
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "catalog";
+    label: "Catalog";
+    description: "Search and read unified catalog content.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "products";
+    label: "Products";
+    description: "Read and manage products, options, content, and media.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "departures";
+    label: "Departures";
+    description: "Read and manage scheduled departures.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "itineraries";
+    label: "Itineraries";
+    description: "Read and manage day-by-day itinerary content.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "bookings";
+    label: "Bookings";
+    description: "Read and manage booking records and booking workflows.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "availability";
+    label: "Availability";
+    description: "Read and manage availability rules, slots, and closeouts.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "hospitality";
+    label: "Hospitality";
+    description: "Read and manage properties, rooms, rates, and hospitality bookings.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "ground";
+    label: "Ground";
+    description: "Read and manage ground transport operations.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "cruises";
+    label: "Cruises";
+    description: "Read and manage cruise products and sailing data.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }, {
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "workflows";
+    label: "Workflows";
+    description: "Trigger workflow automation from external systems.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+} | {
+    scopes: {
+        scope: ApiKeyPermissionString;
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }[];
+    resource: "webhooks";
+    label: "Webhooks";
+    description: "Relay webhook events into Voyant runtimes.";
+    permissions: [{
+        resource: string;
+        action: string;
+        label: string;
+        description: string;
+    }];
+})[];
+/** @deprecated Use API_KEY_PERMISSION_PRESETS. */
+export declare const API_KEY_SCOPE_PRESETS: Record<string, {
+    label: string;
+    description: string;
+    scopes: ApiKeyPermissionString[];
+}>;
+/** @deprecated Use ApiKeyPermissionPresetKey. */
+export type ApiKeyScopePresetKey = ApiKeyPermissionPresetKey;
+/** @deprecated Use apiKeyPermissionStringSchema. */
+export declare const apiKeyScopeSchema: z.ZodString & z.ZodType<ApiKeyPermissionString, string, z.core.$ZodTypeInternals<ApiKeyPermissionString, string>>;
+/** @deprecated Use array of apiKeyPermissionStringSchema only for display strings. */
+export declare const apiKeyScopesSchema: z.ZodDefault<z.ZodArray<z.ZodString & z.ZodType<ApiKeyPermissionString, string, z.core.$ZodTypeInternals<ApiKeyPermissionString, string>>>>;
+/** @deprecated Use permissionStringsToPermissions. */
+export declare const scopesToPermissions: typeof permissionStringsToPermissions;
+/** @deprecated Use permissionsToStrings. */
+export declare const permissionsToScopes: typeof permissionsToStrings;
+/** @deprecated Use permissionsToStrings. */
+export declare const normalizeApiKeyScopes: typeof permissionsToStrings;
+/** @deprecated Use apiKeyPermissionStringSchema.parse. */
+export declare function normalizeApiKeyScope(scope: string): ApiKeyPermissionString;
+/** @deprecated Use hasApiKeyPermission. */
+export declare function scopeMatches(userScope: string, requiredScope: string): boolean;
+/** @deprecated Use hasApiKeyPermissions. */
+export declare function hasScopes(userScopes: readonly string[], requiredScopes: readonly string[]): boolean;
+/** @deprecated Use describePermissions. */
+export declare const describeScopes: typeof describePermissions;
+/** @deprecated Use describePermissions. */
+export declare const describescopes: typeof describePermissions;
 //# sourceMappingURL=api-keys.d.ts.map

package/dist/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;GAKG;AAGH,eAAO,MAAM,iBAAiB,qIAUpB,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAG/D,eAAO,MAAM,eAAe,sCAAuC,CAAA;AAEnE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3D;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,2iBAoDf,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAGvD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAuB,CAAA;AAErD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAAyC,CAAA;AAExE;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Cf,CAAA;AAEV,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,YAAY,CAAA;AAErD;;GAEG;AACH,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,WAAW,EAAE,CAAA;CACtB;AAED,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CA4BzD,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,gBAAgB,GAAG,UAAU,CAAA;AAE1F;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BrB,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,kBAAkB,CAAA;AAEjE;;GAEG;AAEH;;;GAGG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAiB9E;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAIjF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAuBvD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,UAAU,CAAC,EAAE,IAAI,GAChB,IAAI,GAAG,IAAI,CAUb"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,eAAe,oEAAqE,CAAA;AAEjG,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3D,eAAO,MAAM,iBAAiB,uQAqBpB,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;AACxD,MAAM,MAAM,sBAAsB,GAC9B,GAAG,GACH,KAAK,GACL,GAAG,MAAM,IAAI,GACb,KAAK,MAAM,EAAE,GACb,GAAG,MAAM,IAAI,MAAM,EAAE,CAAA;AAEzB,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,0BAA0B,EAAE,CAAA;CAC1C;AAMD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwMe,CAAA;AAErD,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CtC,CAAA;AAED,MAAM,MAAM,yBAAyB,GAAG,MAAM,OAAO,0BAA0B,CAAA;AAK/E,eAAO,MAAM,4BAA4B,mHAStC,CAAA;AAEH,eAAO,MAAM,uBAAuB,2HAEkC,CAAA;AAYtE,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,GACzD,iBAAiB,CAsBnB;AAED,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,iBAAiB,CAiBhG;AAED,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,GACzD,sBAAsB,EAAE,CAgB1B;AAED,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,EAC1D,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAWT;AAED,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,EAC1D,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAIT;AAED,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,GAAG,SAAS,GACzD,MAAM,CAkBR;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BrB,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,kBAAkB,CAAA;AAEjE,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAC3B,UAAU,CAAC,EAAE,IAAI,GAChB,IAAI,GAAG,IAAI,CAUb;AAED,8CAA8C;AAC9C,MAAM,MAAM,WAAW,GAAG,sBAAsB,CAAA;AAChD,kDAAkD;AAClD,MAAM,MAAM,qBAAqB,GAAG,0BAA0B,GAAG;IAAE,KAAK,EAAE,sBAAsB,CAAA;CAAE,CAAA;AAClG,iDAAiD;AACjD,eAAO,MAAM,oBAAoB;;eAIe,sBAAsB;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;;;eAAtB,sBAAsB;;;;;;;;;;;;;;;IAEnE,CAAA;AACH,kDAAkD;AAClD,eAAO,MAAM,qBAAqB,EAK7B,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,sBAAsB,EAAE,CAAA;CAAE,CAAC,CAAA;AAC7F,iDAAiD;AACjD,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,CAAA;AAC5D,oDAAoD;AACpD,eAAO,MAAM,iBAAiB,mHAA+B,CAAA;AAC7D,sFAAsF;AACtF,eAAO,MAAM,kBAAkB,6IAAoD,CAAA;AACnF,sDAAsD;AACtD,eAAO,MAAM,mBAAmB,uCAAiC,CAAA;AACjE,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,6BAAuB,CAAA;AACvD,4CAA4C;AAC5C,eAAO,MAAM,qBAAqB,6BAAuB,CAAA;AACzD,0DAA0D;AAC1D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,CAI1E;AACD,2CAA2C;AAC3C,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAI9E;AACD,4CAA4C;AAC5C,wBAAgB,SAAS,CACvB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC,OAAO,CAKT;AACD,2CAA2C;AAC3C,eAAO,MAAM,cAAc,4BAAsB,CAAA;AACjD,2CAA2C;AAC3C,eAAO,MAAM,cAAc,4BAAsB,CAAA"}

package/dist/api-keys.js

@@ -1,161 +1,275 @@
 import { z } from "zod";
-/**
- * API Key Scope Definitions
- *
- * Following resource:action pattern similar to Stripe/Shopify
- * Format: "{resource}:{action}" or wildcards
- */
-// Resource types
+export const API_KEY_ACTIONS = ["read", "write", "delete", "trigger", "relay", "search"];
 export const API_KEY_RESOURCES = [
-    "operators",
-    "connections",
-    "oauth-clients",
-    "products",
     "availability",
     "bookings",
+    "catalog",
+    "crm",
+    "cruises",
+    "departures",
+    "finance",
+    "ground",
+    "hospitality",
+    "itineraries",
+    "legal",
+    "notifications",
+    "pricing",
+    "products",
+    "resources",
+    "storefront",
     "suppliers",
-    "grants",
-    "audit-logs",
+    "transactions",
+    "webhooks",
+    "workflows",
 ];
-// Action types
-export const API_KEY_ACTIONS = ["read", "write", "delete"];
-/**
- * Valid scope patterns:
- * - Specific: "operators:read", "connections:write"
- * - Resource wildcard: "operators:*" (all actions on operators)
- * - Action wildcard: "*:read" (read all resources)
- * - Full wildcard: "*" (all resources, all actions)
- */
-export const VALID_SCOPES = [
-    // Operators
-    "operators:read",
-    "operators:write",
-    "operators:delete",
-    "operators:*",
-    // Connections
-    "connections:read",
-    "connections:write",
-    "connections:delete",
-    "connections:*",
-    // OAuth Clients
-    "oauth-clients:read",
-    "oauth-clients:write",
-    "oauth-clients:delete",
-    "oauth-clients:*",
-    // Products
-    "products:read",
-    "products:*",
-    // Availability
-    "availability:read",
-    "availability:*",
-    // Bookings
-    "bookings:read",
-    "bookings:write",
-    "bookings:delete",
-    "bookings:*",
-    // Suppliers
-    "suppliers:read",
-    "suppliers:*",
-    // Grants
-    "grants:read",
-    "grants:write",
-    "grants:delete",
-    "grants:*",
-    // Audit Logs
-    "audit-logs:read",
-    "audit-logs:*",
-    // Wildcard patterns
-    "*:read", // Read-only access to all resources
-    "*:write", // Write access to all resources
-    "*:delete", // Delete access to all resources
-    "*", // Full access (God mode)
-];
-// Zod schema for scope validation
-export const apiKeyScopeSchema = z.enum(VALID_SCOPES);
-export const apiKeyScopesSchema = z.array(apiKeyScopeSchema).default([]);
-/**
- * Scope groups for UI display
- * Grouped by resource for nested checkbox UX
- */
-export const SCOPE_GROUPS = {
-    operators: {
-        label: "Operators",
-        description: "Manage operator registrations and configuration",
-        scopes: ["operators:read", "operators:write", "operators:delete"],
+function permission(resource, action, label, description) {
+    return { resource, action, label, description };
+}
+export const API_KEY_PERMISSION_GROUPS = [
+    {
+        resource: "catalog",
+        label: "Catalog",
+        description: "Search and read unified catalog content.",
+        permissions: [
+            permission("catalog", "read", "Read catalog", "Read catalog records and storefront-ready content."),
+            permission("catalog", "search", "Search catalog", "Run catalog search and discovery requests."),
+        ],
+    },
+    {
+        resource: "products",
+        label: "Products",
+        description: "Read and manage products, options, content, and media.",
+        permissions: [
+            permission("products", "read", "Read products", "Read product, option, media, category, and tag data."),
+            permission("products", "write", "Write products", "Create or update products and product content."),
+            permission("products", "delete", "Delete products", "Delete products and product-owned records."),
+        ],
     },
-    connections: {
-        label: "Connections",
-        description: "Manage supplier connections and credentials",
-        scopes: ["connections:read", "connections:write", "connections:delete"],
+    {
+        resource: "departures",
+        label: "Departures",
+        description: "Read and manage scheduled departures.",
+        permissions: [
+            permission("departures", "read", "Read departures", "Read departure schedules and availability context."),
+            permission("departures", "write", "Write departures", "Create or update scheduled departures."),
+        ],
     },
-    "oauth-clients": {
-        label: "OAuth Clients",
-        description: "Manage OAuth client credentials for M2M access",
-        scopes: ["oauth-clients:read", "oauth-clients:write", "oauth-clients:delete"],
+    {
+        resource: "itineraries",
+        label: "Itineraries",
+        description: "Read and manage day-by-day itinerary content.",
+        permissions: [
+            permission("itineraries", "read", "Read itineraries", "Read itinerary days, services, and descriptions."),
+            permission("itineraries", "write", "Write itineraries", "Create or update itinerary content."),
+        ],
     },
-    products: {
-        label: "Products",
-        description: "Query supplier product catalogs via OCTO",
-        scopes: ["products:read"],
+    {
+        resource: "bookings",
+        label: "Bookings",
+        description: "Read and manage booking records and booking workflows.",
+        permissions: [
+            permission("bookings", "read", "Read bookings", "Read booking records and non-sensitive booking state."),
+            permission("bookings", "write", "Write bookings", "Create, update, confirm, or cancel bookings."),
+            permission("bookings", "delete", "Delete bookings", "Delete booking-owned records where supported."),
+        ],
     },
-    availability: {
+    {
+        resource: "availability",
         label: "Availability",
-        description: "Query supplier availability via OCTO",
-        scopes: ["availability:read"],
+        description: "Read and manage availability rules, slots, and closeouts.",
+        permissions: [
+            permission("availability", "read", "Read availability", "Read availability slots, rules, pickup points, and closeouts."),
+            permission("availability", "write", "Write availability", "Create or update availability configuration."),
+        ],
     },
-    bookings: {
-        label: "Bookings",
-        description: "Create, confirm, and cancel bookings via OCTO",
-        scopes: ["bookings:read", "bookings:write", "bookings:delete"],
+    {
+        resource: "hospitality",
+        label: "Hospitality",
+        description: "Read and manage properties, rooms, rates, and hospitality bookings.",
+        permissions: [
+            permission("hospitality", "read", "Read hospitality", "Read hospitality inventory, properties, and rates."),
+            permission("hospitality", "write", "Write hospitality", "Create or update hospitality records."),
+        ],
     },
-    suppliers: {
-        label: "Suppliers",
-        description: "Query supplier information via OCTO",
-        scopes: ["suppliers:read"],
+    {
+        resource: "ground",
+        label: "Ground",
+        description: "Read and manage ground transport operations.",
+        permissions: [
+            permission("ground", "read", "Read ground", "Read transport schedules, vehicles, dispatch, and operations data."),
+            permission("ground", "write", "Write ground", "Create or update ground transport records."),
+        ],
     },
-    grants: {
-        label: "Grants",
-        description: "Manage cross-organization operator access grants",
-        scopes: ["grants:read", "grants:write", "grants:delete"],
+    {
+        resource: "cruises",
+        label: "Cruises",
+        description: "Read and manage cruise products and sailing data.",
+        permissions: [
+            permission("cruises", "read", "Read cruises", "Read cruise products, sailings, cabins, and itinerary data."),
+            permission("cruises", "write", "Write cruises", "Create or update cruise records."),
+        ],
     },
-    "audit-logs": {
-        label: "Audit Logs",
-        description: "Query API audit logs for your organization",
-        scopes: ["audit-logs:read"],
+    {
+        resource: "workflows",
+        label: "Workflows",
+        description: "Trigger workflow automation from external systems.",
+        permissions: [
+            permission("workflows", "trigger", "Trigger workflows", "Trigger workflow runs and ingest workflow events."),
+        ],
     },
-};
-export const SCOPE_TEMPLATES = {
-    "read-only": {
-        name: "Read Only",
-        description: "Read-only access to all resources",
-        scopes: ["*:read"],
+    {
+        resource: "webhooks",
+        label: "Webhooks",
+        description: "Relay webhook events into Voyant runtimes.",
+        permissions: [
+            permission("webhooks", "relay", "Relay webhooks", "Relay validated third-party webhook events."),
+        ],
     },
-    "full-access": {
-        name: "Full Access",
-        description: "Complete access to all resources and actions",
-        scopes: ["*"],
+];
+export const API_KEY_PERMISSION_PRESETS = {
+    "catalog-read": {
+        label: "Catalog read",
+        description: "Read/search catalog, product, departure, and itinerary content.",
+        permissions: {
+            catalog: ["read", "search"],
+            products: ["read"],
+            departures: ["read"],
+            itineraries: ["read"],
+        },
     },
-    "operator-admin": {
-        name: "Operator Admin",
-        description: "Full operator and connection management",
-        scopes: ["operators:*", "connections:*", "oauth-clients:*"],
+    "commerce-read": {
+        label: "Commerce read",
+        description: "Read bookings, availability, products, pricing, and suppliers.",
+        permissions: {
+            bookings: ["read"],
+            availability: ["read"],
+            products: ["read"],
+            pricing: ["read"],
+            suppliers: ["read"],
+        },
     },
-    reseller: {
-        name: "OCTO Reseller",
-        description: "Full data-plane access for resellers",
-        scopes: [
-            "products:read",
-            "availability:read",
-            "bookings:read",
-            "bookings:write",
-            "bookings:delete",
-            "suppliers:read",
-        ],
+    automation: {
+        label: "Automation",
+        description: "Trigger workflows and relay webhooks.",
+        permissions: {
+            workflows: ["trigger"],
+            webhooks: ["relay"],
+        },
+    },
+    "read-only": {
+        label: "Read only",
+        description: "Read across every resource that accepts API tokens.",
+        permissions: {
+            "*": ["read"],
+        },
+    },
+    "full-access": {
+        label: "Full access",
+        description: "All resources and all actions. Use only for trusted automation.",
+        permissions: {
+            "*": ["*"],
+        },
     },
 };
-/**
- * Expiration presets for key creation
- */
+const permissionNamePattern = /^(\*|[a-z][a-z0-9-]*)$/;
+const permissionStringPattern = /^(\*|[a-z][a-z0-9-]*):(\*|[a-z][a-z0-9-]*)$/;
+export const apiKeyPermissionStringSchema = z
+    .string()
+    .trim()
+    .refine((value) => value === "*" || value === "*:*" || permissionStringPattern.test(value), {
+    message: "Permission must be '*' or use the resource:action format.",
+});
+export const apiKeyPermissionsSchema = z
+    .record(z.string(), z.array(z.string()))
+    .transform((permissions) => normalizeApiKeyPermissions(permissions));
+function parsePermissionsJson(permissions) {
+    try {
+        const parsed = JSON.parse(permissions);
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+            return {};
+        return normalizeApiKeyPermissions(parsed);
+    }
+    catch {
+        return {};
+    }
+}
+export function normalizeApiKeyPermissions(permissions) {
+    if (!permissions)
+        return {};
+    if (typeof permissions === "string")
+        return parsePermissionsJson(permissions);
+    const normalized = {};
+    for (const [resourceInput, actionsInput] of Object.entries(permissions)) {
+        const resource = resourceInput.trim().toLowerCase();
+        if (!permissionNamePattern.test(resource) || !Array.isArray(actionsInput))
+            continue;
+        const actions = Array.from(new Set(actionsInput
+            .map((action) => action.trim().toLowerCase())
+            .filter((action) => permissionNamePattern.test(action)))).sort();
+        if (actions.length > 0) {
+            normalized[resource] = actions;
+        }
+    }
+    return normalized;
+}
+export function permissionStringsToPermissions(permissions) {
+    const next = {};
+    for (const permissionInput of permissions) {
+        const permission = permissionInput.trim().toLowerCase();
+        if (permission === "*" || permission === "*:*") {
+            next["*"] = ["*"];
+            continue;
+        }
+        if (!permissionStringPattern.test(permission))
+            continue;
+        const [resource, action] = permission.split(":");
+        if (!resource || !action)
+            continue;
+        next[resource] = Array.from(new Set([...(next[resource] ?? []), action])).sort();
+    }
+    return normalizeApiKeyPermissions(next);
+}
+export function permissionsToStrings(permissions) {
+    const normalized = normalizeApiKeyPermissions(permissions);
+    const strings = [];
+    for (const [resource, actions] of Object.entries(normalized)) {
+        if (resource === "*" && actions.includes("*")) {
+            strings.push("*");
+            continue;
+        }
+        for (const action of actions) {
+            strings.push(`${resource}:${action}`);
+        }
+    }
+    return Array.from(new Set(strings)).sort();
+}
+export function hasApiKeyPermission(permissions, resource, action) {
+    const normalized = normalizeApiKeyPermissions(permissions);
+    const resourceKey = resource.trim().toLowerCase();
+    const actionKey = action.trim().toLowerCase();
+    return (normalized["*"]?.includes("*") === true ||
+        normalized["*"]?.includes(actionKey) === true ||
+        normalized[resourceKey]?.includes("*") === true ||
+        normalized[resourceKey]?.includes(actionKey) === true);
+}
+export function hasApiKeyPermissions(permissions, required) {
+    return Object.entries(normalizeApiKeyPermissions(required)).every(([resource, actions]) => actions.every((action) => hasApiKeyPermission(permissions, resource, action)));
+}
+export function describePermissions(permissions) {
+    const normalized = normalizeApiKeyPermissions(permissions);
+    const permissionStrings = permissionsToStrings(normalized);
+    if (normalized["*"]?.includes("*"))
+        return "Full access";
+    if (permissionStrings.length === 0)
+        return "No permissions";
+    if (permissionStrings.length === 1 && permissionStrings[0] === "*:read")
+        return "Read-only access";
+    const resources = Object.keys(normalized).filter((resource) => resource !== "*");
+    const actions = new Set(Object.values(normalized)
+        .flat()
+        .filter((action) => action !== "*"));
+    return `${resources.length || "All"} resource${resources.length === 1 ? "" : "s"} / ${actions.size || "all"} action${actions.size === 1 ? "" : "s"}`;
+}
 export const EXPIRATION_PRESETS = {
     never: {
         label: "Never",
@@ -186,63 +300,6 @@ export const EXPIRATION_PRESETS = {
         days: null,
     },
 };
-/**
- * Helper functions for scope validation
- */
-/**
- * Check if a scope pattern matches a required scope
- * Handles wildcards: "operators:*", "*:read", "*"
- */
-export function scopeMatches(userScope, requiredScope) {
-    // Full wildcard
-    if (userScope === "*")
-        return true;
-    // Exact match
-    if (userScope === requiredScope)
-        return true;
-    const [userResource, userAction] = userScope.split(":");
-    const [reqResource, reqAction] = requiredScope.split(":");
-    // Resource wildcard (e.g., "operators:*" matches "operators:read")
-    if (userResource === reqResource && userAction === "*")
-        return true;
-    // Action wildcard (e.g., "*:read" matches "operators:read")
-    if (userResource === "*" && userAction === reqAction)
-        return true;
-    return false;
-}
-/**
- * Check if user has all required scopes
- */
-export function hasScopes(userScopes, requiredScopes) {
-    return requiredScopes.every((required) => userScopes.some((userScope) => scopeMatches(userScope, required)));
-}
-/**
- * Get human-readable description of scopes
- */
-export function describescopes(scopes) {
-    if (scopes.includes("*")) {
-        return "Full access to all resources";
-    }
-    if (scopes.includes("*:read") && scopes.length === 1) {
-        return "Read-only access to all resources";
-    }
-    const resources = new Set();
-    const actions = new Set();
-    for (const scope of scopes) {
-        const [resource, action] = scope.split(":");
-        if (resource && resource !== "*")
-            resources.add(resource);
-        if (action && action !== "*")
-            actions.add(action);
-    }
-    if (resources.size === 0) {
-        return `${actions.size} permission${actions.size > 1 ? "s" : ""}`;
-    }
-    return `${resources.size} resource${resources.size > 1 ? "s" : ""}`;
-}
-/**
- * Calculate expiration date from preset
- */
 export function calculateExpirationDate(preset, customDate) {
     if (preset === "never")
         return null;
@@ -255,4 +312,49 @@ export function calculateExpirationDate(preset, customDate) {
     expiresAt.setDate(expiresAt.getDate() + config.days);
     return expiresAt;
 }
+/** @deprecated Use API_KEY_PERMISSION_GROUPS. */
+export const API_KEY_SCOPE_GROUPS = API_KEY_PERMISSION_GROUPS.map((group) => ({
+    ...group,
+    scopes: group.permissions.map((item) => ({
+        ...item,
+        scope: `${item.resource}:${item.action}`,
+    })),
+}));
+/** @deprecated Use API_KEY_PERMISSION_PRESETS. */
+export const API_KEY_SCOPE_PRESETS = Object.fromEntries(Object.entries(API_KEY_PERMISSION_PRESETS).map(([key, preset]) => [
+    key,
+    { ...preset, scopes: permissionsToStrings(preset.permissions) },
+]));
+/** @deprecated Use apiKeyPermissionStringSchema. */
+export const apiKeyScopeSchema = apiKeyPermissionStringSchema;
+/** @deprecated Use array of apiKeyPermissionStringSchema only for display strings. */
+export const apiKeyScopesSchema = z.array(apiKeyPermissionStringSchema).default([]);
+/** @deprecated Use permissionStringsToPermissions. */
+export const scopesToPermissions = permissionStringsToPermissions;
+/** @deprecated Use permissionsToStrings. */
+export const permissionsToScopes = permissionsToStrings;
+/** @deprecated Use permissionsToStrings. */
+export const normalizeApiKeyScopes = permissionsToStrings;
+/** @deprecated Use apiKeyPermissionStringSchema.parse. */
+export function normalizeApiKeyScope(scope) {
+    const normalized = scope.trim().toLowerCase();
+    if (normalized === "*:*")
+        return "*";
+    return apiKeyPermissionStringSchema.parse(normalized);
+}
+/** @deprecated Use hasApiKeyPermission. */
+export function scopeMatches(userScope, requiredScope) {
+    const [resource, action] = requiredScope.split(":");
+    if (!resource || !action)
+        return false;
+    return hasApiKeyPermission(permissionStringsToPermissions([userScope]), resource, action);
+}
+/** @deprecated Use hasApiKeyPermissions. */
+export function hasScopes(userScopes, requiredScopes) {
+    return hasApiKeyPermissions(permissionStringsToPermissions(userScopes), permissionStringsToPermissions(requiredScopes));
+}
+/** @deprecated Use describePermissions. */
+export const describeScopes = describePermissions;
+/** @deprecated Use describePermissions. */
+export const describescopes = describePermissions;
 //# sourceMappingURL=api-keys.js.map

package/dist/api-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB;;;;;GAKG;AAEH,iBAAiB;AACjB,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW;IACX,aAAa;IACb,eAAe;IACf,UAAU;IACV,cAAc;IACd,UAAU;IACV,WAAW;IACX,QAAQ;IACR,YAAY;CACJ,CAAA;AAIV,eAAe;AACf,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAA;AAInE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,YAAY;IACZ,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IAEb,cAAc;IACd,kBAAkB;IAClB,mBAAmB;IACnB,oBAAoB;IACpB,eAAe;IAEf,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,sBAAsB;IACtB,iBAAiB;IAEjB,WAAW;IACX,eAAe;IACf,YAAY;IAEZ,eAAe;IACf,mBAAmB;IACnB,gBAAgB;IAEhB,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IAEZ,YAAY;IACZ,gBAAgB;IAChB,aAAa;IAEb,SAAS;IACT,aAAa;IACb,cAAc;IACd,eAAe;IACf,UAAU;IAEV,aAAa;IACb,iBAAiB;IACjB,cAAc;IAEd,oBAAoB;IACpB,QAAQ,EAAE,oCAAoC;IAC9C,SAAS,EAAE,gCAAgC;IAC3C,UAAU,EAAE,iCAAiC;IAC7C,GAAG,EAAE,yBAAyB;CACtB,CAAA;AAIV,kCAAkC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,SAAS,EAAE;QACT,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,iDAAiD;QAC9D,MAAM,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;KAClE;IACD,WAAW,EAAE;QACX,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,6CAA6C;QAC1D,MAAM,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,CAAC;KACxE;IACD,eAAe,EAAE;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,gDAAgD;QAC7D,MAAM,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC;KAC9E;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,0CAA0C;QACvD,MAAM,EAAE,CAAC,eAAe,CAAC;KAC1B;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE,CAAC,mBAAmB,CAAC;KAC9B;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,+CAA+C;QAC5D,MAAM,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;KAC/D;IACD,SAAS,EAAE;QACT,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,qCAAqC;QAClD,MAAM,EAAE,CAAC,gBAAgB,CAAC;KAC3B;IACD,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,kDAAkD;QAC/D,MAAM,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,eAAe,CAAC;KACzD;IACD,YAAY,EAAE;QACZ,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,4CAA4C;QACzD,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B;CACO,CAAA;AAaV,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC5D,WAAW,EAAE;QACX,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,mCAAmC;QAChD,MAAM,EAAE,CAAC,QAAQ,CAAC;KACnB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,CAAC,GAAG,CAAC;KACd;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,yCAAyC;QACtD,MAAM,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,iBAAiB,CAAC;KAC5D;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,sCAAsC;QACnD,MAAM,EAAE;YACN,eAAe;YACf,mBAAmB;YACnB,eAAe;YACf,gBAAgB;YAChB,iBAAiB;YACjB,gBAAgB;SACjB;KACF;CACF,CAAA;AAID;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,IAAI;KACX;IACD,OAAO,EAAE;QACP,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,CAAC;KACR;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,EAAE;KACT;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,EAAE;KACT;IACD,SAAS,EAAE;QACT,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,GAAG;KACV;IACD,SAAS,EAAE;QACT,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,GAAG;KACV;IACD,MAAM,EAAE;QACN,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,IAAI;KACX;CACO,CAAA;AAIV;;GAEG;AAEH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,aAAqB;IACnE,gBAAgB;IAChB,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAElC,cAAc;IACd,IAAI,SAAS,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IAE5C,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACvD,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEzD,mEAAmE;IACnE,IAAI,YAAY,KAAK,WAAW,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAEnE,4DAA4D;IAC5D,IAAI,YAAY,KAAK,GAAG,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAEjE,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,UAAoB,EAAE,cAAwB;IACtE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAClE,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgB;IAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,8BAA8B,CAAA;IACvC,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,mCAAmC,CAAA;IAC5C,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IAEjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,QAAQ,IAAI,QAAQ,KAAK,GAAG;YAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACnD,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACnE,CAAC;IAED,OAAO,GAAG,SAAS,CAAC,IAAI,YAAY,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACrE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA2B,EAC3B,UAAiB;IAEjB,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,IAAI,IAAI,CAAA;IAElD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAE7B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;IAC5B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IACpD,OAAO,SAAS,CAAA;AAClB,CAAC"}
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../src/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAA;AAIjG,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,cAAc;IACd,UAAU;IACV,SAAS;IACT,KAAK;IACL,SAAS;IACT,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,aAAa;IACb,aAAa;IACb,OAAO;IACP,eAAe;IACf,SAAS;IACT,UAAU;IACV,WAAW;IACX,YAAY;IACZ,WAAW;IACX,cAAc;IACd,UAAU;IACV,WAAW;CACH,CAAA;AA0BV,SAAS,UAAU,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAa,EAAE,WAAmB;IACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAA;AACjD,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC;QACE,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,0CAA0C;QACvD,WAAW,EAAE;YACX,UAAU,CACR,SAAS,EACT,MAAM,EACN,cAAc,EACd,oDAAoD,CACrD;YACD,UAAU,CACR,SAAS,EACT,QAAQ,EACR,gBAAgB,EAChB,4CAA4C,CAC7C;SACF;KACF;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACX,UAAU,CACR,UAAU,EACV,MAAM,EACN,eAAe,EACf,sDAAsD,CACvD;YACD,UAAU,CACR,UAAU,EACV,OAAO,EACP,gBAAgB,EAChB,gDAAgD,CACjD;YACD,UAAU,CACR,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,4CAA4C,CAC7C;SACF;KACF;IACD;QACE,QAAQ,EAAE,YAAY;QACtB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,uCAAuC;QACpD,WAAW,EAAE;YACX,UAAU,CACR,YAAY,EACZ,MAAM,EACN,iBAAiB,EACjB,oDAAoD,CACrD;YACD,UAAU,CACR,YAAY,EACZ,OAAO,EACP,kBAAkB,EAClB,wCAAwC,CACzC;SACF;KACF;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,+CAA+C;QAC5D,WAAW,EAAE;YACX,UAAU,CACR,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,kDAAkD,CACnD;YACD,UAAU,CACR,aAAa,EACb,OAAO,EACP,mBAAmB,EACnB,qCAAqC,CACtC;SACF;KACF;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE;YACX,UAAU,CACR,UAAU,EACV,MAAM,EACN,eAAe,EACf,uDAAuD,CACxD;YACD,UAAU,CACR,UAAU,EACV,OAAO,EACP,gBAAgB,EAChB,8CAA8C,CAC/C;YACD,UAAU,CACR,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,+CAA+C,CAChD;SACF;KACF;IACD;QACE,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,2DAA2D;QACxE,WAAW,EAAE;YACX,UAAU,CACR,cAAc,EACd,MAAM,EACN,mBAAmB,EACnB,+DAA+D,CAChE;YACD,UAAU,CACR,cAAc,EACd,OAAO,EACP,oBAAoB,EACpB,8CAA8C,CAC/C;SACF;KACF;IACD;QACE,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,qEAAqE;QAClF,WAAW,EAAE;YACX,UAAU,CACR,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,oDAAoD,CACrD;YACD,UAAU,CACR,aAAa,EACb,OAAO,EACP,mBAAmB,EACnB,uCAAuC,CACxC;SACF;KACF;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,8CAA8C;QAC3D,WAAW,EAAE;YACX,UAAU,CACR,QAAQ,EACR,MAAM,EACN,aAAa,EACb,oEAAoE,CACrE;YACD,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,4CAA4C,CAAC;SAC5F;KACF;IACD;QACE,QAAQ,EAAE,SAAS;QACnB,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,mDAAmD;QAChE,WAAW,EAAE;YACX,UAAU,CACR,SAAS,EACT,MAAM,EACN,cAAc,EACd,6DAA6D,CAC9D;YACD,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,kCAAkC,CAAC;SACpF;KACF;IACD;QACE,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,oDAAoD;QACjE,WAAW,EAAE;YACX,UAAU,CACR,WAAW,EACX,SAAS,EACT,mBAAmB,EACnB,mDAAmD,CACpD;SACF;KACF;IACD;QACE,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,4CAA4C;QACzD,WAAW,EAAE;YACX,UAAU,CACR,UAAU,EACV,OAAO,EACP,gBAAgB,EAChB,6CAA6C,CAC9C;SACF;KACF;CACkD,CAAA;AAErD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,cAAc,EAAE;QACd,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC3B,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,UAAU,EAAE,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC,MAAM,CAAC;SACtB;KACF;IACD,eAAe,EAAE;QACf,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,gEAAgE;QAC7E,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,YAAY,EAAE,CAAC,MAAM,CAAC;YACtB,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,CAAC,MAAM,CAAC;YACjB,SAAS,EAAE,CAAC,MAAM,CAAC;SACpB;KACF;IACD,UAAU,EAAE;QACV,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,uCAAuC;QACpD,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,SAAS,CAAC;YACtB,QAAQ,EAAE,CAAC,OAAO,CAAC;SACpB;KACF;IACD,WAAW,EAAE;QACX,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,qDAAqD;QAClE,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,MAAM,CAAC;SACd;KACF;IACD,aAAa,EAAE;QACb,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,GAAG,CAAC;SACX;KACF;CAIF,CAAA;AAID,MAAM,qBAAqB,GAAG,wBAAwB,CAAA;AACtD,MAAM,uBAAuB,GAAG,6CAA6C,CAAA;AAE7E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,EAAE;KACR,IAAI,EAAE;KACN,MAAM,CACL,CAAC,KAAK,EAAmC,EAAE,CACzC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EACzE;IACE,OAAO,EAAE,2DAA2D;CACrE,CACF,CAAA;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACvC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAA;AAEtE,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAY,CAAA;QACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAA;QACrF,OAAO,0BAA0B,CAAC,MAA2B,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,WAA0D;IAE1D,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAA;IAC3B,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,oBAAoB,CAAC,WAAW,CAAC,CAAA;IAE7E,MAAM,UAAU,GAAsB,EAAE,CAAA;IACxC,KAAK,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACxE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACnD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAAE,SAAQ;QAEnF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,IAAI,GAAG,CACL,YAAY;aACT,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAC5C,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAC1D,CACF,CAAC,IAAI,EAAE,CAAA;QAER,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAA;QAChC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,WAA8B;IAC3E,MAAM,IAAI,GAAsB,EAAE,CAAA;IAElC,KAAK,MAAM,eAAe,IAAI,WAAW,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACvD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACjB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,SAAQ;QAEvD,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;YAAE,SAAQ;QAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAClF,CAAC;IAED,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,WAA0D;IAE1D,MAAM,UAAU,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAA;IAC1D,MAAM,OAAO,GAA6B,EAAE,CAAA;IAE5C,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,IAAI,QAAQ,KAAK,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACjB,SAAQ;QACV,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,MAAM,EAA4B,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAA0D,EAC1D,QAAgB,EAChB,MAAc;IAEd,MAAM,UAAU,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7C,OAAO,CACL,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI;QACvC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI;QAC7C,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI;QAC/C,UAAU,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI,CACtD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,WAA0D,EAC1D,QAA2B;IAE3B,OAAO,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CACxF,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC9E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAA0D;IAE1D,MAAM,UAAU,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAA;IAC1D,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;IAE1D,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAA;IACxD,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAA;IAC3D,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAA;IAElG,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAA;IAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;SACtB,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,CACtC,CAAA;IAED,OAAO,GAAG,SAAS,CAAC,MAAM,IAAI,KAAK,YAAY,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAC9E,OAAO,CAAC,IAAI,IAAI,KAClB,UAAU,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,IAAI;KACX;IACD,OAAO,EAAE;QACP,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,CAAC;KACR;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,EAAE;KACT;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,EAAE;KACT;IACD,SAAS,EAAE;QACT,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,GAAG;KACV;IACD,SAAS,EAAE;QACT,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,GAAG;KACV;IACD,MAAM,EAAE;QACN,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,IAAI;KACX;CACO,CAAA;AAIV,MAAM,UAAU,uBAAuB,CACrC,MAA2B,EAC3B,UAAiB;IAEjB,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,IAAI,IAAI,CAAA;IAElD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAE7B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;IAC5B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IACpD,OAAO,SAAS,CAAA;AAClB,CAAC;AAMD,iDAAiD;AACjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5E,GAAG,KAAK;IACR,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvC,GAAG,IAAI;QACP,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,EAA4B;KACnE,CAAC,CAAC;CACJ,CAAC,CAAC,CAAA;AACH,kDAAkD;AAClD,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,WAAW,CACrD,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAChE,GAAG;IACH,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;CAChE,CAAC,CACyF,CAAA;AAG7F,oDAAoD;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,4BAA4B,CAAA;AAC7D,sFAAsF;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AACnF,sDAAsD;AACtD,MAAM,CAAC,MAAM,mBAAmB,GAAG,8BAA8B,CAAA;AACjE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AACvD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,oBAAoB,CAAA;AACzD,0DAA0D;AAC1D,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7C,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,GAAG,CAAA;IACpC,OAAO,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;AACvD,CAAC;AACD,2CAA2C;AAC3C,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,aAAqB;IACnE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACnD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtC,OAAO,mBAAmB,CAAC,8BAA8B,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;AAC3F,CAAC;AACD,4CAA4C;AAC5C,MAAM,UAAU,SAAS,CACvB,UAA6B,EAC7B,cAAiC;IAEjC,OAAO,oBAAoB,CACzB,8BAA8B,CAAC,UAAU,CAAC,EAC1C,8BAA8B,CAAC,cAAc,CAAC,CAC/C,CAAA;AACH,CAAC;AACD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAA;AACjD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voyantjs/types",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
   ],
   "dependencies": {
     "zod": "^4.3.6",
-    "@voyantjs/db": "0.31.1"
+    "@voyantjs/db": "0.31.2"
   },
   "devDependencies": {
     "typescript": "^6.0.2",