run402 2.41.1 → 2.43.0

package/sdk/dist/namespaces/operator.js

@@ -17,7 +17,7 @@
  *
  * Gateway contract: kychee-com/run402-private#443 (RFC 8628 device-auth bridge).
  */
-import { ApiError, NetworkError } from "../errors.js";
+import { ApiError, LocalError, NetworkError } from "../errors.js";
 import { OperatorSession } from "./operator-session.js";
 const POLL_ERROR_CODES = new Set([
     "authorization_pending",
@@ -25,6 +25,58 @@ const POLL_ERROR_CODES = new Set([
     "access_denied",
     "expired_token",
 ]);
+/**
+ * Wallet-owned org claim — `r.operator.claimWalletOrg.*`. The isomorphic
+ * (raw-proof) seam: `challenge` issues a nonce; `submit` posts the dual proof
+ * (control-plane session bearer + a fresh `SIGN-IN-WITH-X` wallet signature). The
+ * Node convenience `signWalletOrgClaim` / `claimWalletOrg` in `@run402/sdk/node`
+ * runs the whole dance (read session → challenge → sign → submit).
+ */
+export class ClaimWalletOrg {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    /** Request a single-use challenge nonce the wallet must sign (`POST …/claim-wallet-org/challenge`). */
+    async challenge(input) {
+        if (!input?.wallet) {
+            throw new LocalError("claimWalletOrg.challenge requires { wallet }", "requesting wallet-org claim challenge");
+        }
+        return this.client.request("/agent/v1/operator/claim-wallet-org/challenge", {
+            method: "POST",
+            body: { wallet: input.wallet },
+            ...(input.token ? { headers: { Authorization: `Bearer ${input.token}` }, withAuth: false } : {}),
+            context: "requesting wallet-org claim challenge",
+        });
+    }
+    /**
+     * Execute the claim (`POST …/claim-wallet-org`) carrying both proofs: the
+     * control-plane session bearer (the human) and the `SIGN-IN-WITH-X` wallet
+     * signature. Returns a discriminated {@link ClaimResult}; a `select_org` result
+     * is returned (not thrown). Throws {@link StepUpRequiredError} when the session
+     * is not passkey-fresh, and `ApiError` (`WALLET_PROOF_INVALID`) on a bad proof.
+     */
+    async submit(input) {
+        if (!input?.siwx) {
+            throw new LocalError("claimWalletOrg.submit requires { siwx } (the SIGN-IN-WITH-X proof)", "claiming wallet org");
+        }
+        const headers = { "SIGN-IN-WITH-X": input.siwx };
+        if (input.token)
+            headers.Authorization = `Bearer ${input.token}`;
+        const body = {};
+        if (input.orgId !== undefined)
+            body.org_id = input.orgId;
+        if (input.displayName !== undefined)
+            body.display_name = input.displayName;
+        return this.client.request("/agent/v1/operator/claim-wallet-org", {
+            method: "POST",
+            body,
+            headers,
+            withAuth: !input.token,
+            context: "claiming wallet org",
+        });
+    }
+}
 export class Operator {
     client;
     /**
@@ -36,9 +88,16 @@ export class Operator {
      * CLI write-login below. See {@link OperatorSession}.
      */
     session;
+    /**
+     * Wallet-owned org claim (v1.82): `r.operator.claimWalletOrg.challenge()` +
+     * `.submit()`. The raw dual-proof seam; the Node convenience `claimWalletOrg`
+     * in `@run402/sdk/node` runs the full dance.
+     */
+    claimWalletOrg;
     constructor(client) {
         this.client = client;
         this.session = new OperatorSession(client);
+        this.claimWalletOrg = new ClaimWalletOrg(client);
     }
     /**
      * Begin the device-authorization flow. Unauthenticated. Returns the codes the

package/sdk/dist/namespaces/operator.js.map

@@ -1 +1 @@
-{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../src/namespaces/operator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA+FxD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,uBAAuB;IACvB,WAAW;IACX,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,OAAO,QAAQ;IAWU;IAV7B;;;;;;;OAOG;IACM,OAAO,CAAkB;IAElC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAgC,EAAE;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAkB,mCAAmC,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;YAC7D,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yCAAyC,CAAC;QAC5E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CACpB,sDAAuD,GAAa,CAAC,OAAO,EAAE,EAC9E,GAAG,EACH,+BAA+B,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAmC,CAAC;QACpF,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAuC,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,IAAI,KAAK,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,KAAsD,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,mDAAmD,GAAG,CAAC,MAAM,GAAG,EAChE,GAAG,CAAC,MAAM,EACV,IAAI,EACJ,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA2B,EAAE;QAC1C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmB,6BAA6B,EAAE;gBAC1E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;gBAClD,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmB,6BAA6B,EAAE;YAC1E,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,IAAuB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAU,mCAAmC,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;YAClD,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,gEAAgE;IAChE,8EAA8E;IAC9E,+DAA+D;IAE/D;;;;OAIG;IACH,oBAAoB,CAAC,MAA0B;QAC7C,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,qBAAqB,EAAE,MAAM;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yCAAyC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAwB;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,mCAAmC,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;YACD,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../src/namespaces/operator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA+FxD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,uBAAuB;IACvB,WAAW;IACX,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAgFH;;;;;;GAMG;AACH,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,uGAAuG;IACvG,KAAK,CAAC,SAAS,CAAC,KAA0B;QACxC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC,8CAA8C,EAAE,uCAAuC,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAiB,+CAA+C,EAAE;YAC1F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;YAC9B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,UAAU,CAAC,oEAAoE,EAAE,qBAAqB,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,OAAO,GAA2B,EAAE,gBAAgB,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC;QACjE,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QACzD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAc,qCAAqC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,OAAO;YACP,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK;YACtB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,OAAO,QAAQ;IAkBU;IAjB7B;;;;;;;OAOG;IACM,OAAO,CAAkB;IAElC;;;;OAIG;IACM,cAAc,CAAiB;IAExC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAgC,EAAE;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAkB,mCAAmC,EAAE;YAC/E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE;YAC7D,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yCAAyC,CAAC;QAC5E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CACpB,sDAAuD,GAAa,CAAC,OAAO,EAAE,EAC9E,GAAG,EACH,+BAA+B,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAmC,CAAC;QACpF,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,sBAAsB,KAAK,QAAQ,EAAE,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAuC,EAAE,CAAC;QAChF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,IAAI,KAAK,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,IAAI,EAAE,KAAsD,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,mDAAmD,GAAG,CAAC,MAAM,GAAG,EAChE,GAAG,CAAC,MAAM,EACV,IAAI,EACJ,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA2B,EAAE;QAC1C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmB,6BAA6B,EAAE;gBAC1E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;gBAClD,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAmB,6BAA6B,EAAE;YAC1E,OAAO,EAAE,4BAA4B;SACtC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,IAAuB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAU,mCAAmC,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;YAClD,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,gEAAgE;IAChE,8EAA8E;IAC9E,+DAA+D;IAE/D;;;;OAIG;IACH,oBAAoB,CAAC,MAA0B;QAC7C,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;YAChC,cAAc,EAAE,MAAM,CAAC,aAAa;YACpC,qBAAqB,EAAE,MAAM;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,yCAAyC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IACvF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAwB;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAsB,mCAAmC,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,aAAa,EAAE,MAAM,CAAC,YAAY;gBAClC,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;YACD,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;CACF"}

package/sdk/dist/namespaces/org.d.ts

@@ -1,73 +1,111 @@
 /**
- * `org` namespace — the org-owned control plane (gateway v1.77+). Read the
- * resolved principal + memberships, list orgs, manage members and email
- * invites (owner-gated), and read the control-plane audit trail. All routes use
- * the existing SIWX auth; authorization is a membership lookup, never
- * `wallet == signer`.
+ * `org` namespace — the org-owned control plane (gateway v1.77+, first-class in
+ * v1.82). Mirrors the `r.projects` / `r.project(id)` idiom:
  *
- * Sub-resources are grouped so the surface scales: `r.org.members.*` and
- * `r.org.invites.*`. Org-level reads stay on the namespace itself
- * (`r.org.whoami` / `r.org.list` / `r.org.audit`).
+ *   - `r.orgs`        — collection + identity: `create`, `list`, `whoami`.
+ *   - `r.org(id)`     — a resource-scoped sub-client (id pre-bound): `get`,
+ *                       `rename`, `members.*`, `invites.*`, `audit`.
+ *
+ * All routes use the existing SIWX (or control-plane-session) auth; authorization
+ * is a membership lookup, never `wallet == signer`. Mutations (`create`,
+ * `rename`, member/invite changes) are step-up gated server-side and may return
+ * `STEP_UP_REQUIRED` when driven by a stale control-plane session.
  */
 import type { Client } from "../kernel.js";
-import type { AddMemberInput, AuditEvent, AuditOptions, CreateInviteInput, MemberMutationResult, MemberRevokeResult, OrgInvite, OrgInviteRevokeResult, OrgMember, OrgMembership, OrgRole, WhoAmIResult } from "./org.types.js";
-/** Member management — `r.org.members.*`. */
+import type { AddMemberInput, AuditEvent, AuditOptions, CreateInviteInput, CreateOrgInput, MemberMutationResult, MemberRevokeResult, OrgDetail, OrgInvite, OrgInviteRevokeResult, OrgMember, OrgMembership, OrgRole, OrgSummary, WhoAmIResult } from "./org.types.js";
+/** Member management — `r.org(id).members.*`. The org id is bound at construction. */
 export declare class OrgMembers {
     private readonly client;
-    constructor(client: Client);
-    /** List members of an org (`GET /orgs/v1/:billing_account_id/members`). Any active member. */
-    list(billingAccountId: string): Promise<OrgMember[]>;
+    private readonly orgId;
+    constructor(client: Client, orgId: string);
+    /** List members of the org (`GET /orgs/v1/:org_id/members`). Any active member. */
+    list(): Promise<OrgMember[]>;
     /**
-     * Add a member by wallet (`POST /orgs/v1/:billing_account_id/members`).
-     * Requires an active `owner` membership. A brand-new wallet is provisioned as
-     * a `human` principal; `role` defaults to `"developer"` server-side.
+     * Add a member by wallet (`POST /orgs/v1/:org_id/members`). Requires an active
+     * `owner` membership. A brand-new wallet is provisioned as a `human` principal;
+     * `role` defaults to `"developer"` server-side.
      */
-    add(billingAccountId: string, input: AddMemberInput): Promise<MemberMutationResult>;
+    add(input: AddMemberInput): Promise<MemberMutationResult>;
     /**
      * Change a member's role (`PATCH …/members/:principal_id`). Requires `owner`;
      * demoting the org's only active owner fails with `409 LAST_OWNER`.
      */
-    setRole(billingAccountId: string, principalId: string, role: OrgRole): Promise<MemberMutationResult>;
+    setRole(principalId: string, role: OrgRole): Promise<MemberMutationResult>;
     /**
      * Revoke a member (`DELETE …/members/:principal_id`) — one row, status
      * `revoked`, no key rotation. Requires `owner`; revoking the org's only active
      * owner fails with `409 LAST_OWNER`.
      */
-    revoke(billingAccountId: string, principalId: string): Promise<MemberRevokeResult>;
+    revoke(principalId: string): Promise<MemberRevokeResult>;
 }
-/** Email-invite management — `r.org.invites.*`. */
+/** Email-invite management — `r.org(id).invites.*`. The org id is bound at construction. */
 export declare class OrgInvites {
     private readonly client;
-    constructor(client: Client);
-    /** List pending email invites (`GET /orgs/v1/:billing_account_id/invites`). Any active member. */
-    list(billingAccountId: string): Promise<OrgInvite[]>;
+    private readonly orgId;
+    constructor(client: Client, orgId: string);
+    /** List pending email invites (`GET /orgs/v1/:org_id/invites`). Any active member. */
+    list(): Promise<OrgInvite[]>;
     /**
      * Invite a person by email (`POST …/invites`); claimed at their first login.
      * Requires `owner` (plus step-up when driven by a control-plane session).
      */
-    create(billingAccountId: string, input: CreateInviteInput): Promise<OrgInvite>;
+    create(input: CreateInviteInput): Promise<OrgInvite>;
     /** Revoke a pending invite by its pending principal id (`DELETE …/invites/:principal_id`). Requires `owner`. */
-    revoke(billingAccountId: string, principalId: string): Promise<OrgInviteRevokeResult>;
+    revoke(principalId: string): Promise<OrgInviteRevokeResult>;
 }
-export declare class Org {
+/**
+ * A resource-scoped org sub-client returned by `r.org(id)`. The org id is bound
+ * at construction; instance operations take no repeated id argument. Mirrors the
+ * project-scoped `r.project(id)` shape (narrower scope).
+ */
+export declare class ScopedOrg {
     private readonly client;
-    /** Member management (`r.org.members.*`). */
+    /** Member management (`r.org(id).members.*`). */
     readonly members: OrgMembers;
-    /** Email-invite management (`r.org.invites.*`). */
+    /** Email-invite management (`r.org(id).invites.*`). */
     readonly invites: OrgInvites;
+    /** The org id this sub-client is bound to. Read-only. */
+    readonly orgId: string;
+    constructor(client: Client, orgId: string);
+    /**
+     * Read this org (`GET /orgs/v1/:org_id`) — `{ org_id, display_name, tier, role }`.
+     * Any active member may view; a non-member (including a guessed id) gets the
+     * same non-revealing `403`.
+     */
+    get(): Promise<OrgDetail>;
+    /**
+     * Rename this org (`PATCH /orgs/v1/:org_id`). Owner-only + step-up gated. Pass
+     * `null` or `""` to clear the label. Returns the updated `{ org_id,
+     * display_name, tier }`.
+     */
+    rename(displayName: string | null): Promise<OrgSummary>;
+    /**
+     * Control-plane audit trail for this org (`GET /orgs/v1/:org_id/audit`).
+     * admin+. Newest-first; page with the `before` cursor.
+     */
+    audit(opts?: AuditOptions): Promise<AuditEvent[]>;
+}
+/**
+ * Org collection + identity — `r.orgs.*`. Operations that are not bound to a
+ * single org: create a new org, list the caller's orgs, resolve the principal.
+ */
+export declare class Orgs {
+    private readonly client;
     constructor(client: Client);
+    /**
+     * Create an empty org on the `prototype` tier (`POST /orgs/v1`); the caller
+     * becomes `owner`. Accepts only an optional `displayName` — there is no tier at
+     * create (paid tiers are a separate flow). Step-up gated; the soft per-owner
+     * free-org cap may return `FREE_ORG_OWNER_LIMIT_EXCEEDED`.
+     */
+    create(input?: CreateOrgInput): Promise<OrgSummary>;
+    /** List the orgs the caller is an active member of (`GET /orgs/v1`), as memberships. */
+    list(): Promise<OrgMembership[]>;
     /**
      * Resolve the caller's control-plane principal and its org memberships
      * (`GET /agent/v1/whoami`). This is the REMOTE identity; for the local,
      * network-free wallet/profile identity use `r.whoami()`.
      */
     whoami(): Promise<WhoAmIResult>;
-    /** List the orgs the caller is a member of (`GET /orgs/v1`), as memberships. */
-    list(): Promise<OrgMembership[]>;
-    /**
-     * Control-plane audit trail for an org (`GET /orgs/v1/:billing_account_id/audit`).
-     * admin+. Newest-first; page with the `before` cursor.
-     */
-    audit(billingAccountId: string, opts?: AuditOptions): Promise<AuditEvent[]>;
 }
 //# sourceMappingURL=org.d.ts.map

package/sdk/dist/namespaces/org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/namespaces/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,EACT,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,OAAO,EACP,YAAY,EACb,MAAM,gBAAgB,CAAC;AAQxB,6CAA6C;AAC7C,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,8FAA8F;IACxF,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAS1D;;;;OAIG;IACG,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAazF;;;OAGG;IACG,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAU1G;;;;OAIG;IACG,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAQzF;AAED,mDAAmD;AACnD,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C,kGAAkG;IAC5F,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAS1D;;;OAGG;IACG,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;IAYpF,gHAAgH;IAC1G,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAQ5F;AAED,qBAAa,GAAG;IAMF,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;gBAEA,MAAM,EAAE,MAAM;IAK3C;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAMrC,gFAAgF;IAC1E,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAOtC;;;OAGG;IACG,KAAK,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CAatF"}
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../../src/namespaces/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,OAAO,EACP,UAAU,EACV,YAAY,EACb,MAAM,gBAAgB,CAAC;AAExB,sFAAsF;AACtF,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAU,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAtC,MAAM,EAAE,MAAM,EAAmB,KAAK,EAAE,MAAM;IAE3E,mFAAmF;IAC7E,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAQlC;;;;OAIG;IACG,GAAG,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAY/D;;;OAGG;IACG,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAShF;;;;OAIG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAO/D;AAED,4FAA4F;AAC5F,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAU,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAtC,MAAM,EAAE,MAAM,EAAmB,KAAK,EAAE,MAAM;IAE3E,sFAAsF;IAChF,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;IAQlC;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;IAW1D,gHAAgH;IAC1G,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAOlE;AAED;;;;GAIG;AACH,qBAAa,SAAS;IAQR,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPnC,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEM,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAO1D;;;;OAIG;IACG,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;IAM/B;;;;OAIG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ7D;;;OAGG;IACG,KAAK,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;CAY5D;AAED;;;GAGG;AACH,qBAAa,IAAI;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;;OAKG;IACG,MAAM,CAAC,KAAK,GAAE,cAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IAU7D,wFAAwF;IAClF,IAAI,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAOtC;;;;OAIG;IACG,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;CAKtC"}

package/sdk/dist/namespaces/org.js

@@ -1,149 +1,200 @@
 /**
- * `org` namespace — the org-owned control plane (gateway v1.77+). Read the
- * resolved principal + memberships, list orgs, manage members and email
- * invites (owner-gated), and read the control-plane audit trail. All routes use
- * the existing SIWX auth; authorization is a membership lookup, never
- * `wallet == signer`.
+ * `org` namespace — the org-owned control plane (gateway v1.77+, first-class in
+ * v1.82). Mirrors the `r.projects` / `r.project(id)` idiom:
  *
- * Sub-resources are grouped so the surface scales: `r.org.members.*` and
- * `r.org.invites.*`. Org-level reads stay on the namespace itself
- * (`r.org.whoami` / `r.org.list` / `r.org.audit`).
+ *   - `r.orgs`        — collection + identity: `create`, `list`, `whoami`.
+ *   - `r.org(id)`     — a resource-scoped sub-client (id pre-bound): `get`,
+ *                       `rename`, `members.*`, `invites.*`, `audit`.
+ *
+ * All routes use the existing SIWX (or control-plane-session) auth; authorization
+ * is a membership lookup, never `wallet == signer`. Mutations (`create`,
+ * `rename`, member/invite changes) are step-up gated server-side and may return
+ * `STEP_UP_REQUIRED` when driven by a stale control-plane session.
  */
 import { LocalError } from "../errors.js";
-function requireBa(billingAccountId, method, context) {
-    if (!billingAccountId) {
-        throw new LocalError(`${method} requires a billing_account_id`, context);
-    }
-}
-/** Member management — `r.org.members.*`. */
+/** Member management — `r.org(id).members.*`. The org id is bound at construction. */
 export class OrgMembers {
     client;
-    constructor(client) {
+    orgId;
+    constructor(client, orgId) {
         this.client = client;
+        this.orgId = orgId;
     }
-    /** List members of an org (`GET /orgs/v1/:billing_account_id/members`). Any active member. */
-    async list(billingAccountId) {
-        requireBa(billingAccountId, "org.members.list", "listing org members");
-        const res = await this.client.request(`/orgs/v1/${encodeURIComponent(billingAccountId)}/members`, { context: "listing org members" });
+    /** List members of the org (`GET /orgs/v1/:org_id/members`). Any active member. */
+    async list() {
+        const res = await this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}/members`, { context: "listing org members" });
         return res.members ?? [];
     }
     /**
-     * Add a member by wallet (`POST /orgs/v1/:billing_account_id/members`).
-     * Requires an active `owner` membership. A brand-new wallet is provisioned as
-     * a `human` principal; `role` defaults to `"developer"` server-side.
+     * Add a member by wallet (`POST /orgs/v1/:org_id/members`). Requires an active
+     * `owner` membership. A brand-new wallet is provisioned as a `human` principal;
+     * `role` defaults to `"developer"` server-side.
      */
-    async add(billingAccountId, input) {
-        requireBa(billingAccountId, "org.members.add", "adding org member");
+    async add(input) {
         if (!input?.wallet) {
-            throw new LocalError("org.members.add requires { wallet }", "adding org member");
+            throw new LocalError("org members.add requires { wallet }", "adding org member");
         }
         const body = { wallet: input.wallet };
         if (input.role !== undefined)
             body.role = input.role;
-        return this.client.request(`/orgs/v1/${encodeURIComponent(billingAccountId)}/members`, { method: "POST", body, context: "adding org member" });
+        return this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}/members`, { method: "POST", body, context: "adding org member" });
     }
     /**
      * Change a member's role (`PATCH …/members/:principal_id`). Requires `owner`;
      * demoting the org's only active owner fails with `409 LAST_OWNER`.
      */
-    async setRole(billingAccountId, principalId, role) {
-        requireBa(billingAccountId, "org.members.setRole", "setting member role");
+    async setRole(principalId, role) {
         if (!principalId)
-            throw new LocalError("org.members.setRole requires a principalId", "setting member role");
+            throw new LocalError("org members.setRole requires a principalId", "setting member role");
         if (!role)
-            throw new LocalError("org.members.setRole requires a role", "setting member role");
-        return this.client.request(`/orgs/v1/${encodeURIComponent(billingAccountId)}/members/${encodeURIComponent(principalId)}`, { method: "PATCH", body: { role }, context: "setting member role" });
+            throw new LocalError("org members.setRole requires a role", "setting member role");
+        return this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}/members/${encodeURIComponent(principalId)}`, { method: "PATCH", body: { role }, context: "setting member role" });
     }
     /**
      * Revoke a member (`DELETE …/members/:principal_id`) — one row, status
      * `revoked`, no key rotation. Requires `owner`; revoking the org's only active
      * owner fails with `409 LAST_OWNER`.
      */
-    async revoke(billingAccountId, principalId) {
-        requireBa(billingAccountId, "org.members.revoke", "revoking org member");
+    async revoke(principalId) {
         if (!principalId)
-            throw new LocalError("org.members.revoke requires a principalId", "revoking org member");
-        return this.client.request(`/orgs/v1/${encodeURIComponent(billingAccountId)}/members/${encodeURIComponent(principalId)}`, { method: "DELETE", context: "revoking org member" });
+            throw new LocalError("org members.revoke requires a principalId", "revoking org member");
+        return this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}/members/${encodeURIComponent(principalId)}`, { method: "DELETE", context: "revoking org member" });
     }
 }
-/** Email-invite management — `r.org.invites.*`. */
+/** Email-invite management — `r.org(id).invites.*`. The org id is bound at construction. */
 export class OrgInvites {
     client;
-    constructor(client) {
+    orgId;
+    constructor(client, orgId) {
         this.client = client;
+        this.orgId = orgId;
     }
-    /** List pending email invites (`GET /orgs/v1/:billing_account_id/invites`). Any active member. */
-    async list(billingAccountId) {
-        requireBa(billingAccountId, "org.invites.list", "listing org invites");
-        const res = await this.client.request(`/orgs/v1/${encodeURIComponent(billingAccountId)}/invites`, { context: "listing org invites" });
+    /** List pending email invites (`GET /orgs/v1/:org_id/invites`). Any active member. */
+    async list() {
+        const res = await this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}/invites`, { context: "listing org invites" });
         return res.invites ?? [];
     }
     /**
      * Invite a person by email (`POST …/invites`); claimed at their first login.
      * Requires `owner` (plus step-up when driven by a control-plane session).
      */
-    async create(billingAccountId, input) {
-        requireBa(billingAccountId, "org.invites.create", "creating org invite");
+    async create(input) {
         if (!input?.email)
-            throw new LocalError("org.invites.create requires { email }", "creating org invite");
+            throw new LocalError("org invites.create requires { email }", "creating org invite");
         if (!input?.role)
-            throw new LocalError("org.invites.create requires { role }", "creating org invite");
+            throw new LocalError("org invites.create requires { role }", "creating org invite");
         const body = { email: input.email, role: input.role };
         if (input.inviteTtlHours !== undefined)
             body.invite_ttl_hours = input.inviteTtlHours;
-        return this.client.request(`/orgs/v1/${encodeURIComponent(billingAccountId)}/invites`, { method: "POST", body, context: "creating org invite" });
+        return this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}/invites`, { method: "POST", body, context: "creating org invite" });
     }
     /** Revoke a pending invite by its pending principal id (`DELETE …/invites/:principal_id`). Requires `owner`. */
-    async revoke(billingAccountId, principalId) {
-        requireBa(billingAccountId, "org.invites.revoke", "revoking org invite");
+    async revoke(principalId) {
         if (!principalId)
-            throw new LocalError("org.invites.revoke requires a principalId", "revoking org invite");
-        return this.client.request(`/orgs/v1/${encodeURIComponent(billingAccountId)}/invites/${encodeURIComponent(principalId)}`, { method: "DELETE", context: "revoking org invite" });
+            throw new LocalError("org invites.revoke requires a principalId", "revoking org invite");
+        return this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}/invites/${encodeURIComponent(principalId)}`, { method: "DELETE", context: "revoking org invite" });
     }
 }
-export class Org {
+/**
+ * A resource-scoped org sub-client returned by `r.org(id)`. The org id is bound
+ * at construction; instance operations take no repeated id argument. Mirrors the
+ * project-scoped `r.project(id)` shape (narrower scope).
+ */
+export class ScopedOrg {
     client;
-    /** Member management (`r.org.members.*`). */
+    /** Member management (`r.org(id).members.*`). */
     members;
-    /** Email-invite management (`r.org.invites.*`). */
+    /** Email-invite management (`r.org(id).invites.*`). */
     invites;
-    constructor(client) {
+    /** The org id this sub-client is bound to. Read-only. */
+    orgId;
+    constructor(client, orgId) {
         this.client = client;
-        this.members = new OrgMembers(client);
-        this.invites = new OrgInvites(client);
+        if (!orgId)
+            throw new LocalError("r.org(id) requires an org id", "scoping client to org");
+        this.orgId = orgId;
+        this.members = new OrgMembers(client, orgId);
+        this.invites = new OrgInvites(client, orgId);
     }
     /**
-     * Resolve the caller's control-plane principal and its org memberships
-     * (`GET /agent/v1/whoami`). This is the REMOTE identity; for the local,
-     * network-free wallet/profile identity use `r.whoami()`.
+     * Read this org (`GET /orgs/v1/:org_id`) — `{ org_id, display_name, tier, role }`.
+     * Any active member may view; a non-member (including a guessed id) gets the
+     * same non-revealing `403`.
      */
-    async whoami() {
-        return this.client.request("/agent/v1/whoami", {
-            context: "resolving principal identity",
+    async get() {
+        return this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}`, {
+            context: "reading org",
         });
     }
-    /** List the orgs the caller is a member of (`GET /orgs/v1`), as memberships. */
-    async list() {
-        const res = await this.client.request("/orgs/v1", {
-            context: "listing organizations",
+    /**
+     * Rename this org (`PATCH /orgs/v1/:org_id`). Owner-only + step-up gated. Pass
+     * `null` or `""` to clear the label. Returns the updated `{ org_id,
+     * display_name, tier }`.
+     */
+    async rename(displayName) {
+        return this.client.request(`/orgs/v1/${encodeURIComponent(this.orgId)}`, {
+            method: "PATCH",
+            body: { display_name: displayName },
+            context: "renaming org",
         });
-        return res.orgs ?? [];
     }
     /**
-     * Control-plane audit trail for an org (`GET /orgs/v1/:billing_account_id/audit`).
+     * Control-plane audit trail for this org (`GET /orgs/v1/:org_id/audit`).
      * admin+. Newest-first; page with the `before` cursor.
      */
-    async audit(billingAccountId, opts = {}) {
-        requireBa(billingAccountId, "org.audit", "reading org audit trail");
+    async audit(opts = {}) {
         const parts = [];
         if (opts.limit !== undefined)
             parts.push(`limit=${encodeURIComponent(String(opts.limit))}`);
         if (opts.before !== undefined)
             parts.push(`before=${encodeURIComponent(opts.before)}`);
         const q = parts.join("&");
-        const base = `/orgs/v1/${encodeURIComponent(billingAccountId)}/audit`;
+        const base = `/orgs/v1/${encodeURIComponent(this.orgId)}/audit`;
         const res = await this.client.request(q ? `${base}?${q}` : base, { context: "reading org audit trail" });
         return res.events ?? res.audit_events ?? [];
     }
 }
+/**
+ * Org collection + identity — `r.orgs.*`. Operations that are not bound to a
+ * single org: create a new org, list the caller's orgs, resolve the principal.
+ */
+export class Orgs {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    /**
+     * Create an empty org on the `prototype` tier (`POST /orgs/v1`); the caller
+     * becomes `owner`. Accepts only an optional `displayName` — there is no tier at
+     * create (paid tiers are a separate flow). Step-up gated; the soft per-owner
+     * free-org cap may return `FREE_ORG_OWNER_LIMIT_EXCEEDED`.
+     */
+    async create(input = {}) {
+        const body = {};
+        if (input.displayName !== undefined)
+            body.display_name = input.displayName;
+        return this.client.request("/orgs/v1", {
+            method: "POST",
+            body,
+            context: "creating organization",
+        });
+    }
+    /** List the orgs the caller is an active member of (`GET /orgs/v1`), as memberships. */
+    async list() {
+        const res = await this.client.request("/orgs/v1", {
+            context: "listing organizations",
+        });
+        return res.orgs ?? [];
+    }
+    /**
+     * Resolve the caller's control-plane principal and its org memberships
+     * (`GET /agent/v1/whoami`). This is the REMOTE identity; for the local,
+     * network-free wallet/profile identity use `r.whoami()`.
+     */
+    async whoami() {
+        return this.client.request("/agent/v1/whoami", {
+            context: "resolving principal identity",
+        });
+    }
+}
 //# sourceMappingURL=org.js.map

package/sdk/dist/namespaces/org.js.map

@@ -1 +1 @@
-{"version":3,"file":"org.js","sourceRoot":"","sources":["../../src/namespaces/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAgB1C,SAAS,SAAS,CAAC,gBAAwB,EAAE,MAAc,EAAE,OAAe;IAC1E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,gCAAgC,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,8FAA8F;IAC9F,KAAK,CAAC,IAAI,CAAC,gBAAwB;QACjC,SAAS,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACnC,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,UAAU,EAC1D,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,gBAAwB,EAAE,KAAqB;QACvD,SAAS,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,mBAAmB,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,UAAU,EAC1D,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CACvD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,gBAAwB,EAAE,WAAmB,EAAE,IAAa;QACxE,SAAS,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,qBAAqB,CAAC,CAAC;QAC5G,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,qBAAqB,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAC7F,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACpE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,gBAAwB,EAAE,WAAmB;QACxD,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;QACzE,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,EAAE,qBAAqB,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAC7F,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACrD,CAAC;IACJ,CAAC;CACF;AAED,mDAAmD;AACnD,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,kGAAkG;IAClG,KAAK,CAAC,IAAI,CAAC,gBAAwB;QACjC,SAAS,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACnC,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,UAAU,EAC1D,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,gBAAwB,EAAE,KAAwB;QAC7D,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,EAAE,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,EAAE,qBAAqB,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK,EAAE,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,EAAE,qBAAqB,CAAC,CAAC;QACtG,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,cAAc,CAAC;QACrF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,UAAU,EAC1D,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,gHAAgH;IAChH,KAAK,CAAC,MAAM,CAAC,gBAAwB,EAAE,WAAmB;QACxD,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;QACzE,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,EAAE,qBAAqB,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAC7F,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACrD,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,GAAG;IAMe;IAL7B,6CAA6C;IACpC,OAAO,CAAa;IAC7B,mDAAmD;IAC1C,OAAO,CAAa;IAE7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAe,kBAAkB,EAAE;YAC3D,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAA4B,UAAU,EAAE;YAC3E,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,gBAAwB,EAAE,OAAqB,EAAE;QAC3D,SAAS,CAAC,gBAAgB,EAAE,WAAW,EAAE,yBAAyB,CAAC,CAAC;QACpE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,YAAY,kBAAkB,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACnC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EACzB,EAAE,OAAO,EAAE,yBAAyB,EAAE,CACvC,CAAC;QACF,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,CAAC;CACF"}
+{"version":3,"file":"org.js","sourceRoot":"","sources":["../../src/namespaces/org.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAmB1C,sFAAsF;AACtF,MAAM,OAAO,UAAU;IACQ;IAAiC;IAA9D,YAA6B,MAAc,EAAmB,KAAa;QAA9C,WAAM,GAAN,MAAM,CAAQ;QAAmB,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE/E,mFAAmF;IACnF,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACnC,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EACpD,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,KAAqB;QAC7B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,mBAAmB,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACrD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EACpD,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CACvD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,IAAa;QAC9C,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,4CAA4C,EAAE,qBAAqB,CAAC,CAAC;QAC5G,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,qBAAqB,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,EACvF,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACpE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,EAAE,qBAAqB,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,EACvF,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACrD,CAAC;IACJ,CAAC;CACF;AAED,4FAA4F;AAC5F,MAAM,OAAO,UAAU;IACQ;IAAiC;IAA9D,YAA6B,MAAc,EAAmB,KAAa;QAA9C,WAAM,GAAN,MAAM,CAAQ;QAAmB,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE/E,sFAAsF;IACtF,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACnC,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EACpD,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,KAAwB;QACnC,IAAI,CAAC,KAAK,EAAE,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,uCAAuC,EAAE,qBAAqB,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK,EAAE,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,EAAE,qBAAqB,CAAC,CAAC;QACtG,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/E,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,cAAc,CAAC;QACrF,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EACpD,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,gHAAgH;IAChH,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,EAAE,qBAAqB,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CACxB,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,EACvF,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACrD,CAAC;IACJ,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,SAAS;IAQS;IAP7B,iDAAiD;IACxC,OAAO,CAAa;IAC7B,uDAAuD;IAC9C,OAAO,CAAa;IAC7B,yDAAyD;IAChD,KAAK,CAAS;IAEvB,YAA6B,MAAc,EAAE,KAAa;QAA7B,WAAM,GAAN,MAAM,CAAQ;QACzC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAY,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;YAClF,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAAC,WAA0B;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAa,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;YACnF,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE;YACnC,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,OAAqB,EAAE;QACjC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,YAAY,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CACnC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EACzB,EAAE,OAAO,EAAE,yBAAyB,EAAE,CACvC,CAAC;QACF,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,IAAI;IACc;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,QAAwB,EAAE;QACrC,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAa,UAAU,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;IACL,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAA4B,UAAU,EAAE;YAC3E,OAAO,EAAE,uBAAuB;SACjC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAe,kBAAkB,EAAE;YAC3D,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACL,CAAC;CACF"}