tapimo 0.13.0 → 0.15.0

package/dist/apps/management/routes/faucet.d.ts

@@ -118,14 +118,14 @@ export declare function faucet(): import("hono/hono-base").HonoBase<Environment,
         } | {
             output: {
                 error: {
-                    code: "forbidden";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -138,14 +138,14 @@ export declare function faucet(): import("hono/hono-base").HonoBase<Environment,
         } | {
             output: {
                 error: {
-                    code: "organization_not_found";
+                    code: "forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 403;
             input: {
                 param: {
                     orgId: string;
@@ -158,14 +158,14 @@ export declare function faucet(): import("hono/hono-base").HonoBase<Environment,
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "organization_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     orgId: string;

package/dist/apps/management/routes/faucet.js

@@ -44,7 +44,7 @@ export var schema;
         transactionHashes: z
             .array(Schema.Hash)
             .check(z.describe('Transactions that minted the configured test tokens.'), z.meta({ examples: [[]] })),
-    }), 'Test tokens minted while funding the account.'), 'FundTestnetAccountResponse');
+    }), 'Test tokens minted while routes the account.'), 'FundTestnetAccountResponse');
     /** Faucet path parameters. */
     schema.Params = Schema.describe(z.object({
         orgId: z

package/dist/apps/management/routes/faucet.js.map

@@ -1 +1 @@
-{"version":3,"file":"faucet.js","sourceRoot":"","sources":["../../../../src/apps/management/routes/faucet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAA;AACzC,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAE7B,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAA;AACvD,OAAO,KAAK,SAAS,MAAM,gCAAgC,CAAA;AAC3D,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,6BAA6B,CAAA;AACrD,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AAGjD,MAAM,gBAAgB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAA4B,CAAA;AACjF,MAAM,aAAa,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAA4B,CAAA;AAE9E,mDAAmD;AACnD,MAAM,KAAW,MAAM,CA0FtB;AA1FD,WAAiB,MAAM;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAC7B,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAChC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CACzD;QACD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,GAAG,EAAE,EACP,CAAC,CAAC,WAAW,EAAE,EACf,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EACnD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1B;QACH,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAC9C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CACnC;QACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KAC5F,CAAC,EACF,oCAAoC,CACrC,EACD,aAAa,CACd,CAAA;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CACnC,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAC9B,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAC1C,CAAC,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE;gBACR,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;aAC7E;SACF,CAAC,CACH;QACD,KAAK,EAAE,KAAK;QACZ,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;KAC1F,CAAC,EACF,wCAAwC,CACzC,EACD,mBAAmB,CACpB,CAAA;IAED,2BAA2B;IACd,eAAQ,GAAG,OAAO,CAAC,SAAS,CACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,kCAAkC,CAAC,EAC1F,2BAA2B,CAC5B,CAAA;IAED,uBAAuB;IACV,mBAAY,GAAG,OAAO,CAAC,SAAS,CAC3C,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,WAAW,CAAC;aAClB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAC/D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAC3B;QACH,iBAAiB,EAAE,CAAC;aACjB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;aAClB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAClE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAC3B;KACJ,CAAC,EACF,+CAA+C,CAChD,EACD,4BAA4B,CAC7B,CAAA;IAED,8BAA8B;IACjB,aAAM,GAAG,MAAM,CAAC,QAAQ,CACnC,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;KACJ,CAAC,EACF,8CAA8C,CAC/C,CAAA;AACH,CAAC,EA1FgB,MAAM,KAAN,MAAM,QA0FtB;AAED,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,8BAA8B;CAC/B,CAAA;AACV,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,0CAA0C;CAC3C,CAAA;AAEV,6DAA6D;AAC7D,MAAM,UAAU,MAAM;IACpB,OAAO,IAAI,IAAI,EAAe,CAAC,IAAI,CACjC,4CAA4C,EAC5C,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,EAAE,EAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,EACzD,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EACT,uJAAuJ;QACzJ,WAAW,EAAE,oBAAoB;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;oBACxC,WAAW,EAAE,yCAAyC;iBACvD;gBACD,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,wBAAwB,CAAC;oBACjC,WAAW,EAAE,uCAAuC;iBACrD;gBACD,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,qBAAqB,CAAC;oBAC9B,WAAW,EAAE,gDAAgD;iBAC9D;aACF;YACD,OAAO,EAAE;gBACP,WAAW,EAAE,yBAAyB;gBACtC,MAAM,EAAE,MAAM,CAAC,YAAY;aAC5B;SACF,CAAC;QACF,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAChF,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAE/E,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAClD,IAAI,OAAO;YAAE,OAAO,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YACpF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBACzE,OAAO;oBACL,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;wBACxB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;wBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;qBAC5B,CAAC;oBACF,KAAK,EAAE;wBACL,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB;oBACD,eAAe,EAAE,OAAO,CAAC,eAAe;iBACzC,CAAA;YACH,CAAC,CAAC,CACH,CAAA;YACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAC5F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,CAAuB,EAAE,OAAe;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAA;IACrC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,eAAe,SAAS,CAAC,EAAE,EAAE;QAClC,KAAK,EAAE,aAAa;KACrB,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;IAEhE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,kBAAkB,OAAO,EAAE;QAChC,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAA;IACzE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,cAAc,CACrB,CAAuB,EACvB,OAKC;IAED,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACjC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IACzD,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1F,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"faucet.js","sourceRoot":"","sources":["../../../../src/apps/management/routes/faucet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAA;AACzC,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAE7B,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAA;AACvD,OAAO,KAAK,SAAS,MAAM,gCAAgC,CAAA;AAC3D,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AACzD,OAAO,KAAK,MAAM,MAAM,6BAA6B,CAAA;AACrD,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AACnD,OAAO,KAAK,IAAI,MAAM,2BAA2B,CAAA;AAGjD,MAAM,gBAAgB,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAA4B,CAAA;AACjF,MAAM,aAAa,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAA4B,CAAA;AAE9E,mDAAmD;AACnD,MAAM,KAAW,MAAM,CA0FtB;AA1FD,WAAiB,MAAM;IACrB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAC7B,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,CAChC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CACzD;QACD,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,GAAG,EAAE,EACP,CAAC,CAAC,WAAW,EAAE,EACf,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EACnD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1B;QACH,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAC9C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CACnC;QACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KAC5F,CAAC,EACF,oCAAoC,CACrC,EACD,aAAa,CACd,CAAA;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CACnC,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAC9B,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAC1C,CAAC,CAAC,IAAI,CAAC;YACL,QAAQ,EAAE;gBACR,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;aAC7E;SACF,CAAC,CACH;QACD,KAAK,EAAE,KAAK;QACZ,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;KAC1F,CAAC,EACF,wCAAwC,CACzC,EACD,mBAAmB,CACpB,CAAA;IAED,2BAA2B;IACd,eAAQ,GAAG,OAAO,CAAC,SAAS,CACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,kCAAkC,CAAC,EAC1F,2BAA2B,CAC5B,CAAA;IAED,uBAAuB;IACV,mBAAY,GAAG,OAAO,CAAC,SAAS,CAC3C,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,WAAW,CAAC;aAClB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAC/D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAC3B;QACH,iBAAiB,EAAE,CAAC;aACjB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;aAClB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAClE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAC3B;KACJ,CAAC,EACF,8CAA8C,CAC/C,EACD,4BAA4B,CAC7B,CAAA;IAED,8BAA8B;IACjB,aAAM,GAAG,MAAM,CAAC,QAAQ,CACnC,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAC5C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;KACJ,CAAC,EACF,8CAA8C,CAC/C,CAAA;AACH,CAAC,EA1FgB,MAAM,KAAN,MAAM,QA0FtB;AAED,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,8BAA8B;CAC/B,CAAA;AACV,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,0CAA0C;CAC3C,CAAA;AAEV,6DAA6D;AAC7D,MAAM,UAAU,MAAM;IACpB,OAAO,IAAI,IAAI,EAAe,CAAC,IAAI,CACjC,4CAA4C,EAC5C,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAC9B,IAAI,CAAC,SAAS,EAAE,EAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,EACzD,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,EACzD,OAAO,CAAC,aAAa,CAAC;QACpB,WAAW,EACT,uJAAuJ;QACzJ,WAAW,EAAE,oBAAoB;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;YAC3B,MAAM,EAAE;gBACN,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC;oBACxC,WAAW,EAAE,yCAAyC;iBACvD;gBACD,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,wBAAwB,CAAC;oBACjC,WAAW,EAAE,uCAAuC;iBACrD;gBACD,GAAG,EAAE;oBACH,KAAK,EAAE,CAAC,qBAAqB,CAAC;oBAC9B,WAAW,EAAE,gDAAgD;iBAC9D;aACF;YACD,OAAO,EAAE;gBACP,WAAW,EAAE,yBAAyB;gBACtC,MAAM,EAAE,MAAM,CAAC,YAAY;aAC5B;SACF,CAAC;QACF,OAAO,EAAE,sBAAsB;QAC/B,IAAI,EAAE,CAAC,QAAQ,CAAC;KACjB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QAChF,IAAI,OAAO,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QAE/E,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAClD,IAAI,OAAO;YAAE,OAAO,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAE9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;YACpF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC1D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBACzE,OAAO;oBACL,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC;wBACxB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;wBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;qBAC5B,CAAC;oBACF,KAAK,EAAE;wBACL,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;wBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB;oBACD,eAAe,EAAE,OAAO,CAAC,eAAe;iBACzC,CAAA;YACH,CAAC,CAAC,CACH,CAAA;YACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QAC5F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC,CACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,CAAuB,EAAE,OAAe;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAA;IACrC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QAC/B,GAAG,EAAE,eAAe,SAAS,CAAC,EAAE,EAAE;QAClC,KAAK,EAAE,aAAa;KACrB,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;IAEhE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,kBAAkB,OAAO,EAAE;QAChC,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAA;IACzE,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,cAAc,CACrB,CAAuB,EACvB,OAKC;IAED,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IACjC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IACzD,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;IAClC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1F,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE;QACvB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,iEAAiE;QAC1E,MAAM,EAAE,GAAG;KACZ,CAAC,CAAA;AACJ,CAAC"}

package/dist/apps/management/routes/invitations.d.ts

@@ -1,4 +1,9 @@
 import * as z from 'zod/mini';
+import * as Db from '../../../db/Db.js';
+import * as Email from '../../../internal/Email.js';
+import * as Memberships from '../../../db/tables/memberships.js';
+import type * as Metrics from '../../../Metrics.js';
+import * as RateLimit from '../../../internal/RateLimit.js';
 import * as Response from '../../../internal/Response.js';
 import type { Environment } from '../App.js';
 /** Zod schemas owned by the invitations resource. */
@@ -236,14 +241,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "body_invalid";
+                    code: "organization_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     orgId: string;
@@ -257,14 +262,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     orgId: string;
@@ -278,14 +283,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "forbidden";
+                    code: "body_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -299,14 +304,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "organization_not_found";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -426,14 +431,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "organization_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     orgId: string;
@@ -458,14 +463,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "organization_not_found";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 400;
             input: {
                 param: {
                     orgId: string;
@@ -582,14 +587,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "organization_not_found";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 404;
             input: {
                 param: {
                     invitationId: string;
@@ -616,14 +621,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "organization_not_found";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 404;
+            status: 400;
             input: {
                 param: {
                     invitationId: string;
@@ -782,14 +787,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     invitationId: string;
@@ -798,14 +803,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "forbidden";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     invitationId: string;
@@ -895,14 +900,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "param_invalid";
+                    code: "forbidden";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 400;
+            status: 403;
             input: {
                 param: {
                     invitationId: string;
@@ -911,14 +916,14 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         } | {
             output: {
                 error: {
-                    code: "forbidden";
+                    code: "param_invalid";
                     details?: readonly Response.error.Detail[] | undefined;
                     message: string;
                 };
                 requestId: string;
             };
             outputFormat: "json";
-            status: 403;
+            status: 400;
             input: {
                 param: {
                     invitationId: string;
@@ -954,4 +959,74 @@ export declare function invitations(): import("hono/hono-base").HonoBase<Environ
         };
     };
 }, "/", "/v1/invitations/:invitationId{inv_[A-Za-z0-9_-]+}/decline">;
+/** Consumes the shared quotas protecting invitation email dispatch. */
+export declare function consumeEmailRateLimit(options: consumeEmailRateLimit.Options): Promise<{
+    result: RateLimit.Result;
+    scope: string;
+} | undefined>;
+export declare namespace consumeEmailRateLimit {
+    /** Fields used to protect one invitation email dispatch. */
+    type Options = {
+        /** Stable identity for the initiating actor, when the caller has one. */
+        actor?: string | undefined;
+        /** Intended invitation recipient. */
+        email: string;
+        /** Whether this app has an email sender configured. */
+        enabled: boolean;
+        /** Bounded operational metrics sink for fail-open degradation. */
+        metrics?: Metrics.Metrics | undefined;
+        /** Shared counter store used by every invitation email entrypoint. */
+        rateLimit?: RateLimit.Store | undefined;
+    };
+}
+/** Records bounded invitation limiter degradation for operational alerting. */
+export declare function recordEmailRateLimitDegradation(options: recordEmailRateLimitDegradation.Options): void;
+export declare namespace recordEmailRateLimitDegradation {
+    /** Inputs for recording one invitation limiter degradation. */
+    type Options = {
+        /** Bounded operational metrics sink. */
+        metrics?: Metrics.Metrics | undefined;
+        /** Quota dimension whose counter degraded. */
+        scope: 'invitation-email-actor' | 'invitation-email-global' | 'invitation-email-recipient';
+    };
+}
+/** Creates an organization invitation and dispatches its email. */
+export declare function createInvitation(options: createInvitation.Options): Promise<{
+    acceptedAt: string | null;
+    createdAt: string;
+    email: string;
+    expiresAt: string;
+    grantsEarlyAccess: boolean;
+    id: string;
+    invitedBy: string;
+    orgId: string;
+    revokedAt: string | null;
+    role: "admin" | "member" | "owner";
+}>;
+export declare namespace createInvitation {
+    /** Fields required to create and deliver an invitation. */
+    type Options = {
+        /** Session user whose current organization role authorizes this write. */
+        callerUserId?: string | undefined;
+        /** Database receiving the pending invitation. */
+        db: Db.Db;
+        /** Invitee email. */
+        email: string;
+        /** Invitation expiry timestamp. */
+        expiresAt?: string | undefined;
+        /** Transactional email sender, when configured. */
+        invitationEmail?: Email.Sender | undefined;
+        /** Identity attributed with creating the invitation. */
+        invitedBy: string;
+        /** Organization receiving the invited member. */
+        org: {
+            id: string;
+            name: string;
+        };
+        /** Role granted after acceptance. */
+        role: Memberships.Role;
+        /** Keeps email delivery alive after the response. */
+        waitUntil?: ((promise: Promise<unknown>) => void) | undefined;
+    };
+}
 //# sourceMappingURL=invitations.d.ts.map

package/dist/apps/management/routes/invitations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../../src/apps/management/routes/invitations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAO7B,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AAIzD,OAAO,KAAK,EAAS,WAAW,EAAE,MAAM,WAAW,CAAA;AAKnD,qDAAqD;AACrD,yBAAiB,MAAM,CAAC;IAMtB,8BAA8B;IACvB,MAAM,UAAU;;;;;;;;;;;;qBA4CtB,CAAA;IAED,0EAA0E;IACnE,MAAM,MAAM;;qBASuD,CAAA;IAE1E,4DAA4D;IACrD,MAAM,gBAAgB;;;qBAe8B,CAAA;IAE3D,kEAAkE;IAC3D,MAAM,YAAY;;qBASmD,CAAA;IAE5E,2CAA2C;IACpC,MAAM,uBAAuB;;;;;;;qBAUnC,CAAA;IAED,sEAAsE;IACtE,UAAiB,eAAe,CAAC;QAC/B,iDAAiD;QAC1C,MAAM,QAAQ;;;;;;;;;;;;;;yBAUpB,CAAA;KACF;IAED,mDAAmD;IACnD,UAAiB,iBAAiB,CAAC;QACjC,kFAAkF;QAC3E,MAAM,IAAI;;;;;;;;;;;;;yBAahB,CAAA;QAED,8DAA8D;QACvD,MAAM,QAAQ;;;;;;;;;;;;;;;yBAUpB,CAAA;KACF;IAED,kDAAkD;IAClD,UAAiB,gBAAgB,CAAC;QAChC,2CAA2C;QACpC,MAAM,QAAQ;;;;;;;;yBAsBpB,CAAA;KACF;IAED,mDAAmD;IACnD,UAAiB,iBAAiB,CAAC;QACjC,qDAAqD;QAC9C,MAAM,QAAQ;;yBAYpB,CAAA;KACF;IAED,kDAAkD;IAClD,UAAiB,gBAAgB,CAAC;QAChC,oDAAoD;QAC7C,MAAM,QAAQ;;yBAYpB,CAAA;KACF;CACF;AAED;;;;GAIG;AACH,wBAAgB,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qEA8V1B"}
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../../src/apps/management/routes/invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAG7B,OAAO,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,4BAA4B,CAAA;AAEnD,OAAO,KAAK,WAAW,MAAM,mCAAmC,CAAA;AAChE,OAAO,KAAK,KAAK,OAAO,MAAM,qBAAqB,CAAA;AAEnD,OAAO,KAAK,SAAS,MAAM,gCAAgC,CAAA;AAC3D,OAAO,KAAK,QAAQ,MAAM,+BAA+B,CAAA;AAIzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAQ5C,qDAAqD;AACrD,yBAAiB,MAAM,CAAC;IAMtB,8BAA8B;IACvB,MAAM,UAAU;;;;;;;;;;;;qBA4CtB,CAAA;IAED,0EAA0E;IACnE,MAAM,MAAM;;qBASuD,CAAA;IAE1E,4DAA4D;IACrD,MAAM,gBAAgB;;;qBAe8B,CAAA;IAE3D,kEAAkE;IAC3D,MAAM,YAAY;;qBASmD,CAAA;IAE5E,2CAA2C;IACpC,MAAM,uBAAuB;;;;;;;qBAUnC,CAAA;IAED,sEAAsE;IACtE,UAAiB,eAAe,CAAC;QAC/B,iDAAiD;QAC1C,MAAM,QAAQ;;;;;;;;;;;;;;yBAUpB,CAAA;KACF;IAED,mDAAmD;IACnD,UAAiB,iBAAiB,CAAC;QACjC,kFAAkF;QAC3E,MAAM,IAAI;;;;;;;;;;;;;yBAahB,CAAA;QAED,8DAA8D;QACvD,MAAM,QAAQ;;;;;;;;;;;;;;;yBAUpB,CAAA;KACF;IAED,kDAAkD;IAClD,UAAiB,gBAAgB,CAAC;QAChC,2CAA2C;QACpC,MAAM,QAAQ;;;;;;;;yBAsBpB,CAAA;KACF;IAED,mDAAmD;IACnD,UAAiB,iBAAiB,CAAC;QACjC,qDAAqD;QAC9C,MAAM,QAAQ;;yBAYpB,CAAA;KACF;IAED,kDAAkD;IAClD,UAAiB,gBAAgB,CAAC;QAChC,oDAAoD;QAC7C,MAAM,QAAQ;;yBAYpB,CAAA;KACF;CACF;AAED;;;;GAIG;AACH,wBAAgB,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qEAmX1B;AAED,uEAAuE;AACvE,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,CAAC,OAAO;;;eAoCjF;AAED,MAAM,CAAC,OAAO,WAAW,qBAAqB,CAAC;IAC7C,4DAA4D;IAC5D,KAAK,OAAO,GAAG;QACb,yEAAyE;QACzE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC1B,qCAAqC;QACrC,KAAK,EAAE,MAAM,CAAA;QACb,uDAAuD;QACvD,OAAO,EAAE,OAAO,CAAA;QAChB,kEAAkE;QAClE,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAA;QACrC,sEAAsE;QACtE,SAAS,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,SAAS,CAAA;KACxC,CAAA;CACF;AAED,+EAA+E;AAC/E,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,+BAA+B,CAAC,OAAO,QAI/F;AAED,MAAM,CAAC,OAAO,WAAW,+BAA+B,CAAC;IACvD,+DAA+D;IAC/D,KAAK,OAAO,GAAG;QACb,wCAAwC;QACxC,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,SAAS,CAAA;QACrC,8CAA8C;QAC9C,KAAK,EAAE,wBAAwB,GAAG,yBAAyB,GAAG,4BAA4B,CAAA;KAC3F,CAAA;CACF;AAwBD,mEAAmE;AACnE,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,CAAC,OAAO;;;;;;;;;;;GAWvE;AAED,MAAM,CAAC,OAAO,WAAW,gBAAgB,CAAC;IACxC,2DAA2D;IAC3D,KAAK,OAAO,GAAG;QACb,0EAA0E;QAC1E,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,iDAAiD;QACjD,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;QACT,qBAAqB;QACrB,KAAK,EAAE,MAAM,CAAA;QACb,mCAAmC;QACnC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,mDAAmD;QACnD,eAAe,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAA;QAC1C,wDAAwD;QACxD,SAAS,EAAE,MAAM,CAAA;QACjB,iDAAiD;QACjD,GAAG,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;QACjC,qCAAqC;QACrC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAA;QACtB,qDAAqD;QACrD,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAA;KAC9D,CAAA;CACF"}

package/dist/apps/management/routes/invitations.js

@@ -1,15 +1,21 @@
 import { Hono } from 'hono';
+import { Hash, Hex } from 'ox';
 import * as z from 'zod/mini';
 import * as Auth from '../../../internal/Auth.js';
 import * as Db from '../../../db/Db.js';
+import * as Email from '../../../internal/Email.js';
 import * as Invitations from '../../../db/tables/invitations.js';
 import * as Memberships from '../../../db/tables/memberships.js';
 import * as OpenApi from '../../../internal/OpenApi.js';
+import * as RateLimit from '../../../internal/RateLimit.js';
 import * as Response from '../../../internal/Response.js';
 import * as Schema from '../../../internal/Schema.js';
 import * as ManagementError from '../Error.js';
 /** How long an invitation stays acceptable. */
 const ttlDays = 7;
+const actorRateLimit = { limit: 10, period: 'minute' };
+const globalRateLimit = { limit: 100, period: 'minute' };
+const recipientRateLimit = { limit: 2, period: 'minute' };
 /** Zod schemas owned by the invitations resource. */
 export var schema;
 (function (schema) {
@@ -168,6 +174,10 @@ export function invitations() {
                     codes: ['organization_not_found'],
                     description: 'No accessible organization was found for this id.',
                 },
+                429: {
+                    codes: ['rate_limit_exceeded'],
+                    description: 'The invitation email rate limit was exceeded.',
+                },
             },
             success: { description: 'The created invitation.', schema: schema.Invitation },
         }),
@@ -191,11 +201,11 @@ export function invitations() {
                 message: 'Check the request body and try again.',
             });
         const body = c.req.valid('json');
-        // Owners, write-scoped keys, and the super admin grant any role; admins grant only members.
+        // Owners, write-scoped keys, and the super admin grant any role; admins cannot grant owner.
         const caller = Auth.membership(c);
         if (caller &&
             caller.role !== 'owner' &&
-            Memberships.rank[body.role] >= Memberships.rank[caller.role])
+            Memberships.rank[body.role] > Memberships.rank[caller.role])
             return Response.error(c, {
                 code: 'forbidden',
                 message: 'Cannot invite at or above your own role',
@@ -203,19 +213,33 @@ export function invitations() {
             });
         const principal = Auth.getPrincipal(c);
         const invitedBy = principal?.type === 'api_key' ? principal.id : (caller?.userId ?? 'super_admin');
+        const invitationEmail = Email.get(c);
+        const limited = await consumeEmailRateLimit({
+            actor: principal ? `${principal.type}:${principal.id}` : undefined,
+            email: body.email,
+            enabled: !!invitationEmail,
+            metrics: c.get('metrics'),
+            rateLimit: c.get('auth').rateLimit,
+        });
+        if (limited)
+            return rateLimitError(c, limited);
         const db = Db.get(c.get('db'));
         try {
-            const record = await Invitations.create(db, {
+            const record = await createInvitation({
+                ...(caller ? { callerUserId: caller.userId } : {}),
+                db,
                 email: body.email,
-                expiresAt: new Date(Date.now() + ttlDays * 86_400_000).toISOString(),
+                invitationEmail,
                 invitedBy,
-                orgId: Auth.org(c).id,
+                org: Auth.org(c),
                 role: body.role,
+                waitUntil: (promise) => c.executionCtx.waitUntil(promise),
             });
-            dispatchEmail(c, { email: c.get('email'), org: Auth.org(c).name, record });
             return c.json(Response.validated(schema.Invitation, serializeInvitation(record)), 200);
         }
         catch (cause) {
+            if (cause instanceof Invitations.InvitationRoleForbiddenError)
+                return invitationRoleForbidden(c);
             return Response.upstream(c, cause);
         }
     })
@@ -297,16 +321,18 @@ export function invitations() {
         const { invitationId } = c.req.valid('param');
         const db = Db.get(c.get('db'));
         try {
-            // Bind the invitation to the scoped org before revoking.
-            const record = await Invitations.get(db, invitationId);
-            if (!record || record.orgId !== Auth.org(c).id)
-                return invitationNotFound(c);
-            const revoked = await Invitations.revoke(db, invitationId);
+            const caller = Auth.membership(c);
+            const revoked = await Invitations.revoke(db, invitationId, {
+                ...(caller ? { callerUserId: caller.userId } : {}),
+                orgId: Auth.org(c).id,
+            });
             if (!revoked)
                 return invitationNotFound(c);
             return c.json(Response.validated(schema.revokeInvitation.Response, { id: invitationId }), 200);
         }
         catch (cause) {
+            if (cause instanceof Invitations.InvitationRoleForbiddenError)
+                return invitationRoleForbidden(c);
             return Response.upstream(c, cause);
         }
     })
@@ -456,8 +482,86 @@ export function invitations() {
         }
     });
 }
+/** Consumes the shared quotas protecting invitation email dispatch. */
+export async function consumeEmailRateLimit(options) {
+    if (!options.enabled)
+        return undefined;
+    if (!options.rateLimit)
+        return undefined;
+    const auth = { rateLimit: options.rateLimit };
+    if (options.actor) {
+        const actor = await Auth.consumeRateLimit(auth, {
+            key: `invitation-email:actor:${options.actor}`,
+            limit: actorRateLimit,
+        });
+        if (!actor)
+            recordEmailRateLimitDegradation({ metrics: options.metrics, scope: 'invitation-email-actor' });
+        if (actor && !actor.allowed)
+            return { result: actor, scope: 'invitation-email-actor' };
+    }
+    const recipientHash = Hash.sha256(Hex.fromString(options.email.toLowerCase())).slice(2);
+    const recipient = await Auth.consumeRateLimit(auth, {
+        key: `invitation-email:recipient:${recipientHash}`,
+        limit: recipientRateLimit,
+    });
+    if (!recipient)
+        recordEmailRateLimitDegradation({
+            metrics: options.metrics,
+            scope: 'invitation-email-recipient',
+        });
+    if (recipient && !recipient.allowed)
+        return { result: recipient, scope: 'invitation-email-recipient' };
+    const global = await Auth.consumeRateLimit(auth, {
+        key: 'invitation-email:global',
+        limit: globalRateLimit,
+    });
+    if (!global)
+        recordEmailRateLimitDegradation({ metrics: options.metrics, scope: 'invitation-email-global' });
+    if (global && !global.allowed)
+        return { result: global, scope: 'invitation-email-global' };
+    return undefined;
+}
+/** Records bounded invitation limiter degradation for operational alerting. */
+export function recordEmailRateLimitDegradation(options) {
+    options.metrics?.count('invitation_email_rate_limit_degraded_count', 1, {
+        scope: options.scope,
+    });
+}
+function rateLimitError(c, limited) {
+    const { result, scope } = limited;
+    c.header('RateLimit-Limit', String(result.limit));
+    c.header('RateLimit-Remaining', String(result.remaining));
+    c.header('RateLimit-Reset', String(result.reset));
+    c.header('RateLimit-Scope', scope);
+    c.header('Retry-After', String(Math.max(result.reset - Math.ceil(Date.now() / 1_000), 1)));
+    return Response.error(c, {
+        code: 'rate_limit_exceeded',
+        message: 'Rate limit exceeded',
+        status: 429,
+    });
+}
+/** Creates an organization invitation and dispatches its email. */
+export async function createInvitation(options) {
+    const record = await Invitations.create(options.db, {
+        ...(options.callerUserId === undefined ? {} : { callerUserId: options.callerUserId }),
+        email: options.email,
+        expiresAt: options.expiresAt ?? new Date(Date.now() + ttlDays * 86_400_000).toISOString(),
+        invitedBy: options.invitedBy,
+        orgId: options.org.id,
+        role: options.role,
+    });
+    dispatchEmail({ email: options.invitationEmail, org: options.org.name, record, waitUntil: options.waitUntil }); // prettier-ignore
+    return record;
+}
+function invitationRoleForbidden(c) {
+    return Response.error(c, {
+        code: 'forbidden',
+        message: 'Cannot manage an invitation above your own role',
+        status: 403,
+    });
+}
 /** Dispatches the invitation email through the app's sender, best-effort. */
-function dispatchEmail(c, options) {
+function dispatchEmail(options) {
     const { email: sender, org, record } = options;
     if (!sender)
         return;
@@ -476,7 +580,7 @@ function dispatchEmail(c, options) {
         to: record.email,
     })).catch((error) => console.error('invitation email dispatch failed', error));
     try {
-        c.executionCtx.waitUntil(dispatch);
+        options.waitUntil?.(dispatch);
     }
     catch {
         // Non-Workers runtime: the floating promise settles on its own.