pi-kiosk-shared 2.1.49 → 2.1.52

package/dist/auditEventCodes.d.ts

@@ -2,7 +2,7 @@
  * Cross-package mirror of backend `domain/audit/auditEventCatalog.ts` AUDIT_EVENT_CODES.
  * Append-only — never reorder. CI drift test keeps this in sync with domain.
  */
-export declare const AUDIT_EVENT_CODES: readonly ["auth.admin.login.success", "auth.admin.login.failed", "auth.admin.logout", "auth.admin.access.denied", "admin.invite.created", "admin.invite.resent", "admin.invite.activated", "admin.account.username_changed", "admin.account.password_changed", "admin.credentials.provider_secret.set", "admin.credentials.provider_secret.rotated", "admin.credentials.provider_secret.deleted", "admin.credentials.bank_secret.set", "admin.credentials.bank_secret.rotated", "admin.settings.updated", "admin.user.created", "admin.user.deactivated", "admin.user.reactivated", "admin.user.permanently_deleted", "admin.product.deactivated", "admin.product.reactivated", "admin.product.permanently_deleted", "admin.kiosk.deactivated", "admin.kiosk.reactivated", "admin.kiosk.permanently_deleted", "admin.tenant.deactivated", "admin.tenant.permanently_deleted", "admin.tenant.reactivated", "admin.donation_template.created", "admin.donation_template.updated", "admin.donation_template.default_set", "admin.kiosk.donation_projects.updated", "admin.kiosk.donation_amounts.updated", "dev.tenant.created", "dev.tenant.updated", "payment.transaction.state_changed", "payment.customer.refund.requested", "reconciliation.transaction.refund_candidate.marked", "reconciliation.transaction.refund_candidate.unmarked", "export.analytics.explore.exported", "export.analytics.rollups.materialized", "gdpr.erasure.completed"];
+export declare const AUDIT_EVENT_CODES: readonly ["auth.admin.login.success", "auth.admin.login.failed", "auth.admin.logout", "auth.admin.access.denied", "admin.invite.created", "admin.invite.resent", "admin.invite.activated", "admin.account.username_changed", "admin.account.password_changed", "admin.credentials.provider_secret.set", "admin.credentials.provider_secret.rotated", "admin.credentials.provider_secret.deleted", "admin.credentials.bank_secret.set", "admin.credentials.bank_secret.rotated", "admin.settings.updated", "admin.user.created", "admin.user.deactivated", "admin.user.reactivated", "admin.user.permanently_deleted", "admin.product.deactivated", "admin.product.reactivated", "admin.product.permanently_deleted", "admin.kiosk.deactivated", "admin.kiosk.reactivated", "admin.kiosk.permanently_deleted", "admin.tenant.deactivated", "admin.tenant.permanently_deleted", "admin.tenant.reactivated", "admin.donation_template.created", "admin.donation_template.updated", "admin.donation_template.default_set", "admin.kiosk.donation_projects.updated", "admin.kiosk.donation_amounts.updated", "dev.tenant.created", "dev.tenant.updated", "dev.tenant.provider.updated", "payment.transaction.state_changed", "payment.customer.refund.requested", "reconciliation.transaction.refund_candidate.marked", "reconciliation.transaction.refund_candidate.unmarked", "export.analytics.explore.exported", "export.analytics.rollups.materialized", "gdpr.erasure.completed"];
 export type AuditEventCode = (typeof AUDIT_EVENT_CODES)[number];
 export declare function isAuditEventCode(code: string): code is AuditEventCode;
 //# sourceMappingURL=auditEventCodes.d.ts.map

package/dist/auditEventCodes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auditEventCodes.d.ts","sourceRoot":"","sources":["../src/auditEventCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,q3CA2CpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIhE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,cAAc,CAErE"}
+{"version":3,"file":"auditEventCodes.d.ts","sourceRoot":"","sources":["../src/auditEventCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,o5CA4CpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIhE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,cAAc,CAErE"}

package/dist/auditEventCodes.js

@@ -38,6 +38,7 @@ export const AUDIT_EVENT_CODES = [
     'admin.kiosk.donation_amounts.updated',
     'dev.tenant.created',
     'dev.tenant.updated',
+    'dev.tenant.provider.updated',
     'payment.transaction.state_changed',
     'payment.customer.refund.requested',
     'reconciliation.transaction.refund_candidate.marked',

package/dist/auditEventCodes.js.map

@@ -1 +1 @@
-{"version":3,"file":"auditEventCodes.js","sourceRoot":"","sources":["../src/auditEventCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,0BAA0B;IAC1B,yBAAyB;IACzB,mBAAmB;IACnB,0BAA0B;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,wBAAwB;IACxB,gCAAgC;IAChC,gCAAgC;IAChC,uCAAuC;IACvC,2CAA2C;IAC3C,2CAA2C;IAC3C,mCAAmC;IACnC,uCAAuC;IACvC,wBAAwB;IACxB,oBAAoB;IACpB,wBAAwB;IACxB,wBAAwB;IACxB,gCAAgC;IAChC,2BAA2B;IAC3B,2BAA2B;IAC3B,mCAAmC;IACnC,yBAAyB;IACzB,yBAAyB;IACzB,iCAAiC;IACjC,0BAA0B;IAC1B,kCAAkC;IAClC,0BAA0B;IAC1B,iCAAiC;IACjC,iCAAiC;IACjC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,oBAAoB;IACpB,oBAAoB;IACpB,mCAAmC;IACnC,mCAAmC;IACnC,oDAAoD;IACpD,sDAAsD;IACtD,mCAAmC;IACnC,uCAAuC;IACvC,wBAAwB;CAChB,CAAC;AAIX,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAE7E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"auditEventCodes.js","sourceRoot":"","sources":["../src/auditEventCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,0BAA0B;IAC1B,yBAAyB;IACzB,mBAAmB;IACnB,0BAA0B;IAC1B,sBAAsB;IACtB,qBAAqB;IACrB,wBAAwB;IACxB,gCAAgC;IAChC,gCAAgC;IAChC,uCAAuC;IACvC,2CAA2C;IAC3C,2CAA2C;IAC3C,mCAAmC;IACnC,uCAAuC;IACvC,wBAAwB;IACxB,oBAAoB;IACpB,wBAAwB;IACxB,wBAAwB;IACxB,gCAAgC;IAChC,2BAA2B;IAC3B,2BAA2B;IAC3B,mCAAmC;IACnC,yBAAyB;IACzB,yBAAyB;IACzB,iCAAiC;IACjC,0BAA0B;IAC1B,kCAAkC;IAClC,0BAA0B;IAC1B,iCAAiC;IACjC,iCAAiC;IACjC,qCAAqC;IACrC,uCAAuC;IACvC,sCAAsC;IACtC,oBAAoB;IACpB,oBAAoB;IACpB,6BAA6B;IAC7B,mCAAmC;IACnC,mCAAmC;IACnC,oDAAoD;IACpD,sDAAsD;IACtD,mCAAmC;IACnC,uCAAuC;IACvC,wBAAwB;CAChB,CAAC;AAIX,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAE7E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}

package/dist/auditEventDescriptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auditEventDescriptions.d.ts","sourceRoot":"","sources":["../src/auditEventDescriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,sFAAsF;AACtF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,CAyK3E,CAAC"}
+{"version":3,"file":"auditEventDescriptions.d.ts","sourceRoot":"","sources":["../src/auditEventDescriptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE,sFAAsF;AACtF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,CA6K3E,CAAC"}

package/dist/auditEventDescriptions.js

@@ -140,6 +140,10 @@ export const AUDIT_EVENT_DESCRIPTIONS = {
         en: 'Recorded when platform staff change an organization’s code or display name. One line per successful update.',
         cs: 'Zapíše se, když pracovníci platformy změní kód nebo zobrazované jméno organizace. Jeden řádek za úspěšnou změnu.',
     },
+    'dev.tenant.provider.updated': {
+        en: 'Recorded when platform staff change payment provider settings for an organization in dev tools. One line per successful update.',
+        cs: 'Zapíše se, když pracovníci platformy v dev nástrojích změní nastavení platebního poskytovatele organizace. Jeden řádek za úspěšnou změnu.',
+    },
     'payment.transaction.state_changed': {
         en: 'Recorded automatically when a payment moves to a new status (paid, cancelled, etc.). One line per status change. If writing the line fails, the payment still changes.',
         cs: 'Zapíše se automaticky, když platba přejde do nového stavu (zaplaceno, zrušeno atd.). Jeden řádek za změnu stavu. Když se zápis nepovede, platba se stejně změní.',

package/dist/auditEventDescriptions.js.map

@@ -1 +1 @@
-{"version":3,"file":"auditEventDescriptions.js","sourceRoot":"","sources":["../src/auditEventDescriptions.ts"],"names":[],"mappings":"AAGA,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAA2C;IAC9E,0BAA0B,EAAE;QAC1B,EAAE,EAAE,wJAAwJ;QAC5J,EAAE,EAAE,wJAAwJ;KAC7J;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,uJAAuJ;QAC3J,EAAE,EAAE,6IAA6I;KAClJ;IACD,mBAAmB,EAAE;QACnB,EAAE,EAAE,sEAAsE;QAC1E,EAAE,EAAE,8EAA8E;KACnF;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,2KAA2K;QAC/K,EAAE,EAAE,oKAAoK;KACzK;IACD,sBAAsB,EAAE;QACtB,EAAE,EAAE,4JAA4J;QAChK,EAAE,EAAE,iJAAiJ;KACtJ;IACD,qBAAqB,EAAE;QACrB,EAAE,EAAE,mHAAmH;QACvH,EAAE,EAAE,wHAAwH;KAC7H;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,iIAAiI;QACrI,EAAE,EAAE,yHAAyH;KAC9H;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,2HAA2H;QAC/H,EAAE,EAAE,wHAAwH;KAC7H;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,mIAAmI;QACvI,EAAE,EAAE,+GAA+G;KACpH;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,6JAA6J;QACjK,EAAE,EAAE,2JAA2J;KAChK;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,+IAA+I;QACnJ,EAAE,EAAE,qIAAqI;KAC1I;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,sFAAsF;QAC1F,EAAE,EAAE,8FAA8F;KACnG;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,wKAAwK;QAC5K,EAAE,EAAE,iKAAiK;KACtK;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,6JAA6J;QACjK,EAAE,EAAE,qJAAqJ;KAC1J;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,0LAA0L;QAC9L,EAAE,EAAE,iMAAiM;KACtM;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,2HAA2H;QAC/H,EAAE,EAAE,mIAAmI;KACxI;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,iHAAiH;QACrH,EAAE,EAAE,4GAA4G;KACjH;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,+FAA+F;QACnG,EAAE,EAAE,qGAAqG;KAC1G;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,+GAA+G;QACnH,EAAE,EAAE,iHAAiH;KACtH;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,4IAA4I;QAChJ,EAAE,EAAE,8IAA8I;KACnJ;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,wFAAwF;QAC5F,EAAE,EAAE,wFAAwF;KAC7F;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,2HAA2H;QAC/H,EAAE,EAAE,gHAAgH;KACrH;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,6HAA6H;QACjI,EAAE,EAAE,yGAAyG;KAC9G;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,wEAAwE;QAC5E,EAAE,EAAE,uEAAuE;KAC5E;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,mIAAmI;QACvI,EAAE,EAAE,4HAA4H;KACjI;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,2JAA2J;QAC/J,EAAE,EAAE,2JAA2J;KAChK;IACD,kCAAkC,EAAE;QAClC,EAAE,EAAE,8IAA8I;QAClJ,EAAE,EAAE,6IAA6I;KAClJ;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,iFAAiF;QACrF,EAAE,EAAE,iFAAiF;KACtF;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,4FAA4F;QAChG,EAAE,EAAE,mGAAmG;KACxG;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,sFAAsF;QAC1F,EAAE,EAAE,uFAAuF;KAC5F;IACD,qCAAqC,EAAE;QACrC,EAAE,EAAE,0HAA0H;QAC9H,EAAE,EAAE,mHAAmH;KACxH;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,yIAAyI;QAC7I,EAAE,EAAE,gJAAgJ;KACrJ;IACD,sCAAsC,EAAE;QACtC,EAAE,EAAE,yFAAyF;QAC7F,EAAE,EAAE,oGAAoG;KACzG;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,mKAAmK;QACvK,EAAE,EAAE,8JAA8J;KACnK;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,6GAA6G;QACjH,EAAE,EAAE,kHAAkH;KACvH;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,wKAAwK;QAC5K,EAAE,EAAE,kKAAkK;KACvK;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,kKAAkK;QACtK,EAAE,EAAE,yJAAyJ;KAC9J;IACD,oDAAoD,EAAE;QACpD,EAAE,EAAE,oIAAoI;QACxI,EAAE,EAAE,uIAAuI;KAC5I;IACD,sDAAsD,EAAE;QACtD,EAAE,EAAE,gGAAgG;QACpG,EAAE,EAAE,8FAA8F;KACnG;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,qLAAqL;QACzL,EAAE,EAAE,sJAAsJ;KAC3J;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,sHAAsH;QAC1H,EAAE,EAAE,8GAA8G;KACnH;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,mMAAmM;QACvM,EAAE,EAAE,8KAA8K;KACnL;CACF,CAAC"}
+{"version":3,"file":"auditEventDescriptions.js","sourceRoot":"","sources":["../src/auditEventDescriptions.ts"],"names":[],"mappings":"AAGA,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAA2C;IAC9E,0BAA0B,EAAE;QAC1B,EAAE,EAAE,wJAAwJ;QAC5J,EAAE,EAAE,wJAAwJ;KAC7J;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,uJAAuJ;QAC3J,EAAE,EAAE,6IAA6I;KAClJ;IACD,mBAAmB,EAAE;QACnB,EAAE,EAAE,sEAAsE;QAC1E,EAAE,EAAE,8EAA8E;KACnF;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,2KAA2K;QAC/K,EAAE,EAAE,oKAAoK;KACzK;IACD,sBAAsB,EAAE;QACtB,EAAE,EAAE,4JAA4J;QAChK,EAAE,EAAE,iJAAiJ;KACtJ;IACD,qBAAqB,EAAE;QACrB,EAAE,EAAE,mHAAmH;QACvH,EAAE,EAAE,wHAAwH;KAC7H;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,iIAAiI;QACrI,EAAE,EAAE,yHAAyH;KAC9H;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,2HAA2H;QAC/H,EAAE,EAAE,wHAAwH;KAC7H;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,mIAAmI;QACvI,EAAE,EAAE,+GAA+G;KACpH;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,6JAA6J;QACjK,EAAE,EAAE,2JAA2J;KAChK;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,+IAA+I;QACnJ,EAAE,EAAE,qIAAqI;KAC1I;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,sFAAsF;QAC1F,EAAE,EAAE,8FAA8F;KACnG;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,wKAAwK;QAC5K,EAAE,EAAE,iKAAiK;KACtK;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,6JAA6J;QACjK,EAAE,EAAE,qJAAqJ;KAC1J;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,0LAA0L;QAC9L,EAAE,EAAE,iMAAiM;KACtM;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,2HAA2H;QAC/H,EAAE,EAAE,mIAAmI;KACxI;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,iHAAiH;QACrH,EAAE,EAAE,4GAA4G;KACjH;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,+FAA+F;QACnG,EAAE,EAAE,qGAAqG;KAC1G;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,+GAA+G;QACnH,EAAE,EAAE,iHAAiH;KACtH;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,4IAA4I;QAChJ,EAAE,EAAE,8IAA8I;KACnJ;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,wFAAwF;QAC5F,EAAE,EAAE,wFAAwF;KAC7F;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,2HAA2H;QAC/H,EAAE,EAAE,gHAAgH;KACrH;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,6HAA6H;QACjI,EAAE,EAAE,yGAAyG;KAC9G;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,wEAAwE;QAC5E,EAAE,EAAE,uEAAuE;KAC5E;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,mIAAmI;QACvI,EAAE,EAAE,4HAA4H;KACjI;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,2JAA2J;QAC/J,EAAE,EAAE,2JAA2J;KAChK;IACD,kCAAkC,EAAE;QAClC,EAAE,EAAE,8IAA8I;QAClJ,EAAE,EAAE,6IAA6I;KAClJ;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,iFAAiF;QACrF,EAAE,EAAE,iFAAiF;KACtF;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,4FAA4F;QAChG,EAAE,EAAE,mGAAmG;KACxG;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,sFAAsF;QAC1F,EAAE,EAAE,uFAAuF;KAC5F;IACD,qCAAqC,EAAE;QACrC,EAAE,EAAE,0HAA0H;QAC9H,EAAE,EAAE,mHAAmH;KACxH;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,yIAAyI;QAC7I,EAAE,EAAE,gJAAgJ;KACrJ;IACD,sCAAsC,EAAE;QACtC,EAAE,EAAE,yFAAyF;QAC7F,EAAE,EAAE,oGAAoG;KACzG;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,mKAAmK;QACvK,EAAE,EAAE,8JAA8J;KACnK;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,6GAA6G;QACjH,EAAE,EAAE,kHAAkH;KACvH;IACD,6BAA6B,EAAE;QAC7B,EAAE,EAAE,iIAAiI;QACrI,EAAE,EAAE,2IAA2I;KAChJ;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,wKAAwK;QAC5K,EAAE,EAAE,kKAAkK;KACvK;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,kKAAkK;QACtK,EAAE,EAAE,yJAAyJ;KAC9J;IACD,oDAAoD,EAAE;QACpD,EAAE,EAAE,oIAAoI;QACxI,EAAE,EAAE,uIAAuI;KAC5I;IACD,sDAAsD,EAAE;QACtD,EAAE,EAAE,gGAAgG;QACpG,EAAE,EAAE,8FAA8F;KACnG;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,qLAAqL;QACzL,EAAE,EAAE,sJAAsJ;KAC3J;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,sHAAsH;QAC1H,EAAE,EAAE,8GAA8G;KACnH;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,mMAAmM;QACvM,EAAE,EAAE,8KAA8K;KACnL;CACF,CAAC"}

package/dist/auditEventLabels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auditEventLabels.d.ts","sourceRoot":"","sources":["../src/auditEventLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAsLjE,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,CAAsB,CAAC"}
+{"version":3,"file":"auditEventLabels.d.ts","sourceRoot":"","sources":["../src/auditEventLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AA0LjE,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,CAAsB,CAAC"}

package/dist/auditEventLabels.js

@@ -141,6 +141,10 @@ const AUDIT_LABEL_OVERRIDES = {
         en: 'Organization updated (platform)',
         cs: 'Organizace upravena (platforma)',
     },
+    'dev.tenant.provider.updated': {
+        en: 'Organization provider updated (platform)',
+        cs: 'Poskytovatel organizace upraven (platforma)',
+    },
     'payment.transaction.state_changed': {
         en: 'Payment status changed',
         cs: 'Změna stavu platby',

package/dist/auditEventLabels.js.map

@@ -1 +1 @@
-{"version":3,"file":"auditEventLabels.js","sourceRoot":"","sources":["../src/auditEventLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAuB,MAAM,sBAAsB,CAAC;AAG9E,oFAAoF;AACpF,MAAM,qBAAqB,GAA2C;IACpE,0BAA0B,EAAE;QAC1B,EAAE,EAAE,uBAAuB;QAC3B,EAAE,EAAE,mCAAmC;KACxC;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,oBAAoB;QACxB,EAAE,EAAE,mCAAmC;KACxC;IACD,mBAAmB,EAAE;QACnB,EAAE,EAAE,cAAc;QAClB,EAAE,EAAE,0BAA0B;KAC/B;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,eAAe;QACnB,EAAE,EAAE,iBAAiB;KACtB;IACD,sBAAsB,EAAE;QACtB,EAAE,EAAE,sBAAsB;QAC1B,EAAE,EAAE,mCAAmC;KACxC;IACD,qBAAqB,EAAE;QACrB,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,wCAAwC;KAC7C;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,oCAAoC;KACzC;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,4BAA4B;KACjC;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,4BAA4B;KACjC;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,6BAA6B;QACjC,EAAE,EAAE,0CAA0C;KAC/C;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,uCAAuC;KAC5C;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,wCAAwC;KAC7C;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,8BAA8B;QAClC,EAAE,EAAE,sCAAsC;KAC3C;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,0CAA0C;KAC/C;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,kBAAkB;QACtB,EAAE,EAAE,mBAAmB;KACxB;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,oBAAoB;QACxB,EAAE,EAAE,wBAAwB;KAC7B;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,2BAA2B;KAChC;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,+BAA+B;KACpC;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,6BAA6B;KAClC;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,qBAAqB;KAC1B;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,yBAAyB;KAC9B;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,6BAA6B;QACjC,EAAE,EAAE,uBAAuB;KAC5B;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,mBAAmB;KACxB;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,uBAAuB;KAC5B;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,2BAA2B;QAC/B,EAAE,EAAE,qBAAqB;KAC1B;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,0BAA0B;QAC9B,EAAE,EAAE,yBAAyB;KAC9B;IACD,kCAAkC,EAAE;QAClC,EAAE,EAAE,kCAAkC;QACtC,EAAE,EAAE,2BAA2B;KAChC;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,0BAA0B;QAC9B,EAAE,EAAE,6BAA6B;KAClC;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,kCAAkC;QACtC,EAAE,EAAE,+BAA+B;KACpC;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,kCAAkC;QACtC,EAAE,EAAE,8BAA8B;KACnC;IACD,qCAAqC,EAAE;QACrC,EAAE,EAAE,+BAA+B;QACnC,EAAE,EAAE,gCAAgC;KACrC;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,kCAAkC;KACvC;IACD,sCAAsC,EAAE;QACtC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,gCAAgC;KACrC;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,iCAAiC;KACtC;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,iCAAiC;KACtC;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,oBAAoB;KACzB;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,2BAA2B;QAC/B,EAAE,EAAE,4BAA4B;KACjC;IACD,oDAAoD,EAAE;QACpD,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,8BAA8B;KACnC;IACD,sDAAsD,EAAE;QACtD,EAAE,EAAE,sBAAsB;QAC1B,EAAE,EAAE,0BAA0B;KAC/B;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,0BAA0B;QAC9B,EAAE,EAAE,0BAA0B;KAC/B;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,qCAAqC;KAC1C;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,qBAAqB;KAC1B;CACF,CAAC;AAEF,SAAS,gBAAgB;IACvB,MAAM,MAAM,GAAG,EAA4C,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAA2C,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"auditEventLabels.js","sourceRoot":"","sources":["../src/auditEventLabels.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAuB,MAAM,sBAAsB,CAAC;AAG9E,oFAAoF;AACpF,MAAM,qBAAqB,GAA2C;IACpE,0BAA0B,EAAE;QAC1B,EAAE,EAAE,uBAAuB;QAC3B,EAAE,EAAE,mCAAmC;KACxC;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,oBAAoB;QACxB,EAAE,EAAE,mCAAmC;KACxC;IACD,mBAAmB,EAAE;QACnB,EAAE,EAAE,cAAc;QAClB,EAAE,EAAE,0BAA0B;KAC/B;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,eAAe;QACnB,EAAE,EAAE,iBAAiB;KACtB;IACD,sBAAsB,EAAE;QACtB,EAAE,EAAE,sBAAsB;QAC1B,EAAE,EAAE,mCAAmC;KACxC;IACD,qBAAqB,EAAE;QACrB,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,wCAAwC;KAC7C;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,oCAAoC;KACzC;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,4BAA4B;KACjC;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,4BAA4B;KACjC;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,6BAA6B;QACjC,EAAE,EAAE,0CAA0C;KAC/C;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,uCAAuC;KAC5C;IACD,2CAA2C,EAAE;QAC3C,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,wCAAwC;KAC7C;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,8BAA8B;QAClC,EAAE,EAAE,sCAAsC;KAC3C;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,0CAA0C;KAC/C;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,kBAAkB;QACtB,EAAE,EAAE,mBAAmB;KACxB;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,oBAAoB;QACxB,EAAE,EAAE,wBAAwB;KAC7B;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,2BAA2B;KAChC;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,+BAA+B;KACpC;IACD,gCAAgC,EAAE;QAChC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,6BAA6B;KAClC;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,qBAAqB;KAC1B;IACD,2BAA2B,EAAE;QAC3B,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,yBAAyB;KAC9B;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,6BAA6B;QACjC,EAAE,EAAE,uBAAuB;KAC5B;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,mBAAmB;KACxB;IACD,yBAAyB,EAAE;QACzB,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,uBAAuB;KAC5B;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,2BAA2B;QAC/B,EAAE,EAAE,qBAAqB;KAC1B;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,0BAA0B;QAC9B,EAAE,EAAE,yBAAyB;KAC9B;IACD,kCAAkC,EAAE;QAClC,EAAE,EAAE,kCAAkC;QACtC,EAAE,EAAE,2BAA2B;KAChC;IACD,0BAA0B,EAAE;QAC1B,EAAE,EAAE,0BAA0B;QAC9B,EAAE,EAAE,6BAA6B;KAClC;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,kCAAkC;QACtC,EAAE,EAAE,+BAA+B;KACpC;IACD,iCAAiC,EAAE;QACjC,EAAE,EAAE,kCAAkC;QACtC,EAAE,EAAE,8BAA8B;KACnC;IACD,qCAAqC,EAAE;QACrC,EAAE,EAAE,+BAA+B;QACnC,EAAE,EAAE,gCAAgC;KACrC;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,kCAAkC;KACvC;IACD,sCAAsC,EAAE;QACtC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,gCAAgC;KACrC;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,iCAAiC;KACtC;IACD,oBAAoB,EAAE;QACpB,EAAE,EAAE,iCAAiC;QACrC,EAAE,EAAE,iCAAiC;KACtC;IACD,6BAA6B,EAAE;QAC7B,EAAE,EAAE,0CAA0C;QAC9C,EAAE,EAAE,6CAA6C;KAClD;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,oBAAoB;KACzB;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,2BAA2B;QAC/B,EAAE,EAAE,4BAA4B;KACjC;IACD,oDAAoD,EAAE;QACpD,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,8BAA8B;KACnC;IACD,sDAAsD,EAAE;QACtD,EAAE,EAAE,sBAAsB;QAC1B,EAAE,EAAE,0BAA0B;KAC/B;IACD,mCAAmC,EAAE;QACnC,EAAE,EAAE,0BAA0B;QAC9B,EAAE,EAAE,0BAA0B;KAC/B;IACD,uCAAuC,EAAE;QACvC,EAAE,EAAE,gCAAgC;QACpC,EAAE,EAAE,qCAAqC;KAC1C;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,EAAE,EAAE,qBAAqB;KAC1B;CACF,CAAC;AAEF,SAAS,gBAAgB;IACvB,MAAM,MAAM,GAAG,EAA4C,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAA2C,gBAAgB,EAAE,CAAC"}

package/dist/index.d.ts

@@ -32,4 +32,7 @@ export * from './complianceDevCaps.js';
 export * from './customerFailureRecovery.js';
 export * from './labels/localizedLabel.js';
 export * from './clientLogRedaction.js';
+export { PERMISSION_DOMAIN_LABELS, PERMISSION_LEVEL_LABELS, getPermissionDomainLabel, getPermissionLevelLabel, } from './permissions/permissionLabels.js';
+export { expandCapabilitiesForClientCheck, grantImpliesTarget, hasEffectiveCapability, hasAnyEffectiveCapability, ADMIN_USERS_MANAGE_BRIDGE_SOURCES, ADMIN_USERS_MANAGE_BRIDGE_TARGETS, BRIDGE_PARITY_FIXTURE_GRANTS, BRIDGE_PARITY_FIXTURE_EXPECTED_TARGETS, } from './permissions/effectiveCapabilities.js';
+export type { PermissionLevel } from './permissions/permissionLabels.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,qCAAqC,CAAC;AACpD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,qCAAqC,CAAC;AACpD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gCAAgC,EAChC,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,iCAAiC,EACjC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,GACvC,MAAM,wCAAwC,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/index.js

@@ -32,4 +32,6 @@ export * from './complianceDevCaps.js';
 export * from './customerFailureRecovery.js';
 export * from './labels/localizedLabel.js';
 export * from './clientLogRedaction.js';
+export { PERMISSION_DOMAIN_LABELS, PERMISSION_LEVEL_LABELS, getPermissionDomainLabel, getPermissionLevelLabel, } from './permissions/permissionLabels.js';
+export { expandCapabilitiesForClientCheck, grantImpliesTarget, hasEffectiveCapability, hasAnyEffectiveCapability, ADMIN_USERS_MANAGE_BRIDGE_SOURCES, ADMIN_USERS_MANAGE_BRIDGE_TARGETS, BRIDGE_PARITY_FIXTURE_GRANTS, BRIDGE_PARITY_FIXTURE_EXPECTED_TARGETS, } from './permissions/effectiveCapabilities.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,qCAAqC,CAAC;AACpD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,qCAAqC,CAAC;AACpD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,mCAAmC,CAAC;AAClD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,iCAAiC,CAAC;AAChD,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gCAAgC,EAChC,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,iCAAiC,EACjC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,GACvC,MAAM,wCAAwC,CAAC"}

package/dist/permissions/capabilityBridgeRules.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared capability bridge rules — single source for client JWT fallback checks.
+ * Server uses the same helpers from pi-kiosk-shared in PermissionInheritanceResolver.
+ */
+export declare const ADMIN_USERS_MANAGE_BRIDGE_SOURCES: readonly string[];
+export declare const ADMIN_USERS_MANAGE_BRIDGE_TARGETS: readonly string[];
+/**
+ * Forward-only implication used by client expansion and server bridge checks.
+ */
+export declare function grantImpliesTarget(granted: string, target: string): boolean;
+/**
+ * Expands grants with bridge rules and manage→view / manage→read (no reverse implications).
+ */
+export declare function expandCapabilitiesForClientCheck(grants: readonly string[]): Set<string>;
+/** Parity fixture — both backend and shared tests must satisfy. */
+export declare const BRIDGE_PARITY_FIXTURE_GRANTS: readonly ["users:admins:create"];
+export declare const BRIDGE_PARITY_FIXTURE_EXPECTED_TARGETS: readonly ["tenant.adminUserCapabilities.view", "tenant.adminUserCapabilities.manage", "tenant.adminUsers.manage"];
+//# sourceMappingURL=capabilityBridgeRules.d.ts.map

package/dist/permissions/capabilityBridgeRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityBridgeRules.d.ts","sourceRoot":"","sources":["../../src/permissions/capabilityBridgeRules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAG9D,CAAC;AAEF,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAM9D,CAAC;AAIF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAsB3E;AAmBD;;GAEG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAkBvF;AAED,mEAAmE;AACnE,eAAO,MAAM,4BAA4B,kCAAmC,CAAC;AAE7E,eAAO,MAAM,sCAAsC,mHAIzC,CAAC"}

package/dist/permissions/capabilityBridgeRules.js

@@ -0,0 +1,83 @@
+/**
+ * Shared capability bridge rules — single source for client JWT fallback checks.
+ * Server uses the same helpers from pi-kiosk-shared in PermissionInheritanceResolver.
+ */
+export const ADMIN_USERS_MANAGE_BRIDGE_SOURCES = [
+    'users:admins:create',
+    'tenant.adminUsers.manage',
+];
+export const ADMIN_USERS_MANAGE_BRIDGE_TARGETS = [
+    'users:admins:create',
+    'tenant.adminUsers.manage',
+    'tenant.adminUsers.view',
+    'tenant.adminUserCapabilities.view',
+    'tenant.adminUserCapabilities.manage',
+];
+const BRIDGE_SOURCE_SET = new Set(ADMIN_USERS_MANAGE_BRIDGE_SOURCES);
+/**
+ * Forward-only implication used by client expansion and server bridge checks.
+ */
+export function grantImpliesTarget(granted, target) {
+    if (granted === target) {
+        return true;
+    }
+    if (BRIDGE_SOURCE_SET.has(granted) && ADMIN_USERS_MANAGE_BRIDGE_TARGETS.includes(target)) {
+        return true;
+    }
+    if (granted.endsWith('.manage') && target === `${granted.slice(0, -'.manage'.length)}.view`) {
+        return true;
+    }
+    if (granted.endsWith(':manage') && target === granted.replace(/:manage$/, ':read')) {
+        return true;
+    }
+    if (granted.endsWith(':write') && target === granted.replace(/:write$/, ':read')) {
+        return true;
+    }
+    return false;
+}
+function impliedTargetsFromGrant(grant) {
+    const implied = [];
+    for (const target of ADMIN_USERS_MANAGE_BRIDGE_TARGETS) {
+        if (grantImpliesTarget(grant, target)) {
+            implied.push(target);
+        }
+    }
+    if (grant.endsWith(':manage')) {
+        implied.push(grant.replace(/:manage$/, ':read'));
+    }
+    else if (grant.endsWith(':write')) {
+        implied.push(grant.replace(/:write$/, ':read'));
+    }
+    else if (grant.endsWith('.manage')) {
+        implied.push(`${grant.slice(0, -'.manage'.length)}.view`);
+    }
+    return implied;
+}
+/**
+ * Expands grants with bridge rules and manage→view / manage→read (no reverse implications).
+ */
+export function expandCapabilitiesForClientCheck(grants) {
+    const result = new Set();
+    const pending = [...grants];
+    while (pending.length > 0) {
+        const grant = pending.pop();
+        if (grant === undefined || result.has(grant)) {
+            continue;
+        }
+        result.add(grant);
+        for (const target of impliedTargetsFromGrant(grant)) {
+            if (!result.has(target)) {
+                pending.push(target);
+            }
+        }
+    }
+    return result;
+}
+/** Parity fixture — both backend and shared tests must satisfy. */
+export const BRIDGE_PARITY_FIXTURE_GRANTS = ['users:admins:create'];
+export const BRIDGE_PARITY_FIXTURE_EXPECTED_TARGETS = [
+    'tenant.adminUserCapabilities.view',
+    'tenant.adminUserCapabilities.manage',
+    'tenant.adminUsers.manage',
+];
+//# sourceMappingURL=capabilityBridgeRules.js.map

package/dist/permissions/capabilityBridgeRules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilityBridgeRules.js","sourceRoot":"","sources":["../../src/permissions/capabilityBridgeRules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAAsB;IAClE,qBAAqB;IACrB,0BAA0B;CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAsB;IAClE,qBAAqB;IACrB,0BAA0B;IAC1B,wBAAwB;IACxB,mCAAmC;IACnC,qCAAqC;CACtC,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,iCAAiC,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAAc;IAChE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,iCAAiC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,iCAAiC,EAAE,CAAC;QACvD,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAAyB;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAE5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,qBAAqB,CAAU,CAAC;AAE7E,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,mCAAmC;IACnC,qCAAqC;IACrC,0BAA0B;CAClB,CAAC"}

package/dist/permissions/effectiveCapabilities.d.ts

@@ -0,0 +1,5 @@
+export { expandCapabilitiesForClientCheck } from './capabilityBridgeRules.js';
+export { ADMIN_USERS_MANAGE_BRIDGE_SOURCES, ADMIN_USERS_MANAGE_BRIDGE_TARGETS, BRIDGE_PARITY_FIXTURE_EXPECTED_TARGETS, BRIDGE_PARITY_FIXTURE_GRANTS, grantImpliesTarget, } from './capabilityBridgeRules.js';
+export declare function hasEffectiveCapability(grants: readonly string[], required: string): boolean;
+export declare function hasAnyEffectiveCapability(grants: readonly string[], required: readonly string[]): boolean;
+//# sourceMappingURL=effectiveCapabilities.d.ts.map

package/dist/permissions/effectiveCapabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effectiveCapabilities.d.ts","sourceRoot":"","sources":["../../src/permissions/effectiveCapabilities.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAE9E,OAAO,EACL,iCAAiC,EACjC,iCAAiC,EACjC,sCAAsC,EACtC,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAEpC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,QAAQ,EAAE,MAAM,GACf,OAAO,CAWT;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,OAAO,CAET"}

package/dist/permissions/effectiveCapabilities.js

@@ -0,0 +1,23 @@
+/**
+ * Client-side effective capability checks — mirrors server JWT expansion for UI gates.
+ * Prefer capabilities from GET /admin/me (server-expanded); use this as fallback only.
+ */
+import { expandCapabilitiesForClientCheck, grantImpliesTarget, } from './capabilityBridgeRules.js';
+export { expandCapabilitiesForClientCheck } from './capabilityBridgeRules.js';
+export { ADMIN_USERS_MANAGE_BRIDGE_SOURCES, ADMIN_USERS_MANAGE_BRIDGE_TARGETS, BRIDGE_PARITY_FIXTURE_EXPECTED_TARGETS, BRIDGE_PARITY_FIXTURE_GRANTS, grantImpliesTarget, } from './capabilityBridgeRules.js';
+export function hasEffectiveCapability(grants, required) {
+    const expanded = expandCapabilitiesForClientCheck(grants);
+    if (expanded.has(required)) {
+        return true;
+    }
+    for (const grant of expanded) {
+        if (grantImpliesTarget(grant, required)) {
+            return true;
+        }
+    }
+    return false;
+}
+export function hasAnyEffectiveCapability(grants, required) {
+    return required.some((cap) => hasEffectiveCapability(grants, cap));
+}
+//# sourceMappingURL=effectiveCapabilities.js.map

package/dist/permissions/effectiveCapabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effectiveCapabilities.js","sourceRoot":"","sources":["../../src/permissions/effectiveCapabilities.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAE9E,OAAO,EACL,iCAAiC,EACjC,iCAAiC,EACjC,sCAAsC,EACtC,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,UAAU,sBAAsB,CACpC,MAAyB,EACzB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAyB,EACzB,QAA2B;IAE3B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/permissions/permissionLabels.d.ts

@@ -0,0 +1,7 @@
+import type { LabelLocale, LocalizedLabel } from '../labels/localizedLabel.js';
+export type PermissionLevel = 'view' | 'manage';
+export declare const PERMISSION_LEVEL_LABELS: Record<PermissionLevel, LocalizedLabel>;
+export declare const PERMISSION_DOMAIN_LABELS: Record<string, LocalizedLabel>;
+export declare function getPermissionLevelLabel(level: PermissionLevel, locale: LabelLocale): string;
+export declare function getPermissionDomainLabel(domain: string, locale: LabelLocale): string;
+//# sourceMappingURL=permissionLabels.d.ts.map

package/dist/permissions/permissionLabels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionLabels.d.ts","sourceRoot":"","sources":["../../src/permissions/permissionLabels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE/E,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEhD,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,eAAe,EAAE,cAAc,CAG3E,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAQnE,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAE3F;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAWpF"}

package/dist/permissions/permissionLabels.js

@@ -0,0 +1,29 @@
+export const PERMISSION_LEVEL_LABELS = {
+    view: { en: 'View', cs: 'Zobrazení' },
+    manage: { en: 'Manage', cs: 'Správa' },
+};
+export const PERMISSION_DOMAIN_LABELS = {
+    principal: { en: 'Account access', cs: 'Přístup k účtu' },
+    account: { en: 'Account', cs: 'Účet' },
+    permissions: { en: 'Permissions catalog', cs: 'Katalog oprávnění' },
+    tenant: { en: 'Tenant operations', cs: 'Provoz tenantu' },
+    platform: { en: 'Platform administration', cs: 'Správa platformy' },
+    exceptions: { en: 'High-risk exceptions', cs: 'Vysoce rizikové výjimky' },
+    compliance: { en: 'Compliance', cs: 'Compliance' },
+};
+export function getPermissionLevelLabel(level, locale) {
+    return PERMISSION_LEVEL_LABELS[level][locale];
+}
+export function getPermissionDomainLabel(domain, locale) {
+    const known = PERMISSION_DOMAIN_LABELS[domain];
+    if (known !== undefined) {
+        return known[locale];
+    }
+    const fallback = domain
+        .split(/[._-]/)
+        .filter(Boolean)
+        .map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1))
+        .join(' ');
+    return fallback.length > 0 ? fallback : 'Permissions';
+}
+//# sourceMappingURL=permissionLabels.js.map

package/dist/permissions/permissionLabels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionLabels.js","sourceRoot":"","sources":["../../src/permissions/permissionLabels.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,uBAAuB,GAA4C;IAC9E,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE;IACrC,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE;CACvC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAmC;IACtE,SAAS,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,gBAAgB,EAAE;IACzD,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE;IACtC,WAAW,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,mBAAmB,EAAE;IACnE,MAAM,EAAE,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,gBAAgB,EAAE;IACzD,QAAQ,EAAE,EAAE,EAAE,EAAE,yBAAyB,EAAE,EAAE,EAAE,kBAAkB,EAAE;IACnE,UAAU,EAAE,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,yBAAyB,EAAE;IACzE,UAAU,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE;CACnD,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,KAAsB,EAAE,MAAmB;IACjF,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,MAAmB;IAC1E,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM;SACpB,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SACpE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC;AACxD,CAAC"}

package/dist/sentry/initSentry.d.ts

@@ -0,0 +1,13 @@
+import type { ErrorInfo } from 'react';
+export type SentryAppName = 'admin' | 'kiosk' | 'customer';
+export interface InitSentryOptions {
+    readonly dsn?: string;
+    readonly environment?: string;
+    readonly release?: string;
+    readonly app: SentryAppName;
+    readonly isProd: boolean;
+}
+export declare function initSentry(options: InitSentryOptions): void;
+export declare function captureException(error: unknown, context?: Record<string, unknown>): void;
+export declare function captureBoundaryError(error: Error, errorInfo: ErrorInfo): void;
+//# sourceMappingURL=initSentry.d.ts.map

package/dist/sentry/initSentry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initSentry.d.ts","sourceRoot":"","sources":["../../src/sentry/initSentry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAIvC,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAsBD,wBAAgB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CA0B3D;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CASN;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI,CAgB7E"}

package/dist/sentry/initSentry.js

@@ -0,0 +1,72 @@
+/**
+ * Shared Sentry browser init for admin, kiosk, and customer PWAs.
+ */
+import * as Sentry from '@sentry/react';
+import { redactClientLogMeta, redactStringSecrets } from '../clientLogRedaction.js';
+let initialized = false;
+function scrubEvent(event) {
+    if (event.message) {
+        event.message = redactStringSecrets(event.message);
+    }
+    if (event.extra) {
+        event.extra = redactClientLogMeta(event.extra);
+    }
+    if (event.contexts) {
+        event.contexts = redactClientLogMeta(event.contexts);
+    }
+    return event;
+}
+export function initSentry(options) {
+    if (initialized) {
+        return;
+    }
+    const dsn = options.dsn?.trim();
+    if (!options.isProd || !dsn) {
+        return;
+    }
+    try {
+        Sentry.init({
+            dsn,
+            environment: options.environment ?? 'development',
+            release: options.release,
+            sendDefaultPii: false,
+            sampleRate: 1.0,
+            beforeSend: scrubEvent,
+            initialScope: {
+                tags: {
+                    app: options.app,
+                },
+            },
+        });
+        initialized = true;
+    }
+    catch {
+        // UI may run without Sentry — not critical path
+    }
+}
+export function captureException(error, context) {
+    if (!initialized) {
+        return;
+    }
+    const extra = context !== undefined
+        ? redactClientLogMeta(context)
+        : undefined;
+    Sentry.captureException(error, extra !== undefined ? { extra } : undefined);
+}
+export function captureBoundaryError(error, errorInfo) {
+    if (!initialized) {
+        return;
+    }
+    const rawStack = errorInfo.componentStack;
+    const componentStack = rawStack !== undefined && rawStack !== null
+        ? redactStringSecrets(rawStack)
+        : undefined;
+    Sentry.captureException(error, {
+        contexts: {
+            react: {
+                componentStack,
+            },
+        },
+    });
+}
+//# sourceMappingURL=initSentry.js.map

package/dist/sentry/initSentry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initSentry.js","sourceRoot":"","sources":["../../src/sentry/initSentry.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAYpF,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,SAAS,UAAU,CAAC,KAAwB;IAC1C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,CAAC,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAgC,CAGvE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,KAAK,CAAC,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAmC,CAE7E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAA0B;IACnD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,GAAG;YACH,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,aAAa;YACjD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,KAAK;YACrB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB;aACF;SACF,CAAC,CAAC;QACH,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,OAAiC;IAEjC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GACT,OAAO,KAAK,SAAS;QACnB,CAAC,CAAE,mBAAmB,CAAC,OAAO,CAA6B;QAC3D,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAY,EAAE,SAAoB;IACrE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,cAAc,CAAC;IAC1C,MAAM,cAAc,GAClB,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QACzC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC;QAC/B,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE;QAC7B,QAAQ,EAAE;YACR,KAAK,EAAE;gBACL,cAAc;aACf;SACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-kiosk-shared",
-  "version": "2.1.49",
+  "version": "2.1.52",
   "type": "module",
   "private": false,
   "description": "Shared types, API contracts, and error classes for Pi Kiosk system",
@@ -64,8 +64,17 @@
       "import": "./dist/clientLogRedaction.js",
       "require": "./dist/clientLogRedaction.js",
       "types": "./dist/clientLogRedaction.d.ts"
+    },
+    "./sentry": {
+      "import": "./dist/sentry/initSentry.js",
+      "require": "./dist/sentry/initSentry.js",
+      "types": "./dist/sentry/initSentry.d.ts"
     }
   },
+  "peerDependencies": {
+    "@sentry/react": "^8.0.0",
+    "react": "^18.0.0"
+  },
   "scripts": {
     "build": "npm run clean && tsc",
     "dev": "tsc --watch",
@@ -83,6 +92,7 @@
     "README.md"
   ],
   "devDependencies": {
+    "@sentry/react": "^8.55.0",
     "@types/jest": "^29.5.0",
     "@types/node": "^20.19.41",
     "@types/react": "^18.2.0",