uapp-communication-sdk 1.0.0-dev.54

package/types/features/org/application/use-cases/switch-my-user-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"switch-my-user-type.d.ts","sourceRoot":"","sources":["../../../../../../../src/features/org/application/use-cases/switch-my-user-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAErE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,kGAAkG;AAClG,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEb,IAAI,EAAE,2BAA2B;IAKvC,OAAO,CAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC;CAOpD"}

package/types/features/org/domain/branch.d.ts

@@ -0,0 +1,43 @@
+import { type Result } from '@core/result';
+import { InvalidBranchError } from './errors/org-errors';
+/** Field bounds — mirror the backend `BranchConsts`. */
+export declare const BRANCH_KEY_MAX = 64;
+export declare const BRANCH_NAME_MAX = 128;
+export declare const BRANCH_DESCRIPTION_MAX = 512;
+/**
+ * A branch in the tenant's registry (admin view). The {@link key} is the stable, immutable business
+ * identifier that user↔branch assignments, staff rows and scope resolution reference; for the uapp
+ * tenant branches also arrive from UAPP SSO.
+ */
+export interface OrgBranch {
+    readonly id: string;
+    readonly key: string;
+    readonly name: string;
+    readonly description: string;
+    readonly address: string;
+    readonly flag: string;
+    readonly color: string;
+    readonly timezone: string;
+    readonly isActive: boolean;
+    readonly isDefault: boolean;
+    readonly refId: string | null;
+    readonly userCount: number;
+}
+/** Create/update payload for a branch (validated by {@link validateBranchDraft}). The key is set on create only. */
+export interface BranchDraft {
+    readonly key: string;
+    readonly name: string;
+    readonly description: string;
+    readonly address: string;
+    readonly flag: string;
+    readonly color: string;
+    readonly timezone: string;
+    readonly isActive: boolean;
+}
+/**
+ * Domain validation for a branch draft — the form resolver calls this, so the rules live here (not in
+ * the UI): a trimmed non-empty name + key within bounds. `requireKey` is false when editing (the key is
+ * immutable and not part of the update).
+ */
+export declare const validateBranchDraft: (draft: BranchDraft, requireKey?: boolean) => Result<BranchDraft, InvalidBranchError>;
+//# sourceMappingURL=branch.d.ts.map

package/types/features/org/domain/branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch.d.ts","sourceRoot":"","sources":["../../../../../../src/features/org/domain/branch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,wDAAwD;AACxD,eAAO,MAAM,cAAc,KAAK,CAAC;AACjC,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,oHAAoH;AACpH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAC9B,OAAO,WAAW,EAClB,oBAAiB,KAChB,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAqCxC,CAAC"}

package/types/features/org/domain/data-access-scope.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Data-row/people visibility a user type grants its assignees. Mirrors the backend `DataAccessScope`
+ * enum: who a user may add to a CHAT GROUP (the member pool). The Team Updates feed is driven separately
+ * by the Team ↔ user-type mapping, not by this scope.
+ */
+export type DataAccessScope = 'self' | 'team' | 'branch' | 'org';
+export declare const DATA_ACCESS_SCOPES: readonly DataAccessScope[];
+/** Human labels for the scope selector + list badges. */
+export declare const DATA_ACCESS_SCOPE_LABELS: Readonly<Record<DataAccessScope, string>>;
+/** One-line helper copy shown under the scope selector. */
+export declare const DATA_ACCESS_SCOPE_HINTS: Readonly<Record<DataAccessScope, string>>;
+//# sourceMappingURL=data-access-scope.d.ts.map

package/types/features/org/domain/data-access-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-access-scope.d.ts","sourceRoot":"","sources":["../../../../../../src/features/org/domain/data-access-scope.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEjE,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAKxD,CAAC;AAEF,yDAAyD;AACzD,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAK9E,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAK7E,CAAC"}

package/types/features/org/domain/errors/org-errors.d.ts

@@ -0,0 +1,33 @@
+import { DomainError } from '@core/errors';
+/** Base type for org access-control failures (user types, hierarchy, branch assignments). */
+export declare abstract class OrgError extends DomainError {
+}
+/** The org backend could not be reached or returned an unexpected shape. */
+export declare class OrgUnavailableError extends OrgError {
+    readonly code = "ORG_UNAVAILABLE";
+    constructor(cause?: unknown);
+}
+/** A user-type draft failed domain validation (see `validateUserTypeDraft`). */
+export declare class InvalidUserTypeError extends OrgError {
+    readonly code = "ORG_INVALID_USER_TYPE";
+    constructor(reason: string);
+}
+/** A team draft failed domain validation (see `validateTeamDraft`). */
+export declare class InvalidTeamError extends OrgError {
+    readonly code = "ORG_INVALID_TEAM";
+    constructor(reason: string);
+}
+/** A branch draft failed domain validation (see `validateBranchDraft`). */
+export declare class InvalidBranchError extends OrgError {
+    readonly code = "ORG_INVALID_BRANCH";
+    constructor(reason: string);
+}
+/**
+ * The server rejected the write with a business rule (duplicate name, reporting cycle, rank rule,
+ * unknown branch, type in use…). The message is the server's localized explanation.
+ */
+export declare class OrgRuleViolationError extends OrgError {
+    readonly code = "ORG_RULE_VIOLATION";
+    constructor(message: string, cause?: unknown);
+}
+//# sourceMappingURL=org-errors.d.ts.map

package/types/features/org/domain/errors/org-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-errors.d.ts","sourceRoot":"","sources":["../../../../../../../src/features/org/domain/errors/org-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,6FAA6F;AAC7F,8BAAsB,QAAS,SAAQ,WAAW;CAAG;AAErD,4EAA4E;AAC5E,qBAAa,mBAAoB,SAAQ,QAAQ;IAC/C,SAAgB,IAAI,qBAAqB;gBAEtB,KAAK,CAAC,EAAE,OAAO;CAKnC;AAED,gFAAgF;AAChF,qBAAa,oBAAqB,SAAQ,QAAQ;IAChD,SAAgB,IAAI,2BAA2B;gBAE5B,MAAM,EAAE,MAAM;CAGlC;AAED,uEAAuE;AACvE,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,SAAgB,IAAI,sBAAsB;gBAEvB,MAAM,EAAE,MAAM;CAGlC;AAED,2EAA2E;AAC3E,qBAAa,kBAAmB,SAAQ,QAAQ;IAC9C,SAAgB,IAAI,wBAAwB;gBAEzB,MAAM,EAAE,MAAM;CAGlC;AAED;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,QAAQ;IACjD,SAAgB,IAAI,wBAAwB;gBAEzB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAGpD"}

package/types/features/org/domain/hierarchy.d.ts

@@ -0,0 +1,63 @@
+/** Origin of an org-structure row — mirrors the backend `AssignmentSource` ("local wins" on sync). */
+export type AssignmentSource = 'portal' | 'local';
+/** One person who holds a role — name + email for the assign-manager person card. */
+export interface AssignableRoleMember {
+    readonly userId: string;
+    readonly userName: string;
+    readonly email: string;
+}
+/**
+ * A role (user type) at least one member holds, with those members — the ROLE-FIRST source for the
+ * assign-manager picker (mirrors Leads: pick the role, then the person). Roles arrive senior-first,
+ * prepared server-side, so the UI does no grouping or ordering.
+ */
+export interface AssignableRole {
+    readonly userTypeId: string;
+    readonly userTypeName: string;
+    readonly hierarchyLevel: number;
+    readonly members: readonly AssignableRoleMember[];
+}
+/** One reporting edge within a branch: (subordinate acting as a type) → (manager acting as a type). */
+export interface HierarchyEdge {
+    readonly subordinateId: string;
+    readonly subordinateUserTypeId: string;
+    /** The branch this reporting line lives in (reporting is branch-scoped). */
+    readonly branchKey: string;
+    readonly managerId: string;
+    readonly managerUserTypeId: string;
+    readonly source: AssignmentSource;
+}
+/**
+ * A reporting edge with its labels resolved server-side (one Dapper join) — the admin org-chart row.
+ * Names are nullable because an edge can outlive the staff/type row it points at; the UI falls back.
+ */
+export interface HierarchyEdgeView extends HierarchyEdge {
+    readonly subordinateName: string | null;
+    readonly managerName: string | null;
+    readonly subordinateTypeName: string | null;
+    readonly managerTypeName: string | null;
+}
+/**
+ * Sets the manager for a (subordinate, role) node within a branch — written as a Local admin override.
+ * Reporting is branch-scoped: both parties must belong to `branchKey`.
+ */
+export interface AssignManagerDraft {
+    readonly subordinateId: string;
+    readonly subordinateUserTypeId: string;
+    readonly branchKey: string;
+    readonly managerId: string;
+    readonly managerUserTypeId: string;
+}
+/** A user's branch assignment (multi-branch; exactly one primary). */
+export interface UserBranchAssignment {
+    readonly userId: string;
+    readonly branchKey: string;
+    readonly isPrimary: boolean;
+    readonly source: AssignmentSource;
+}
+/** A branch option for the assignment picker (from the organisation's branch registry). */
+export interface OrgBranchOption {
+    readonly branchKey: string;
+    readonly name: string;
+}
+//# sourceMappingURL=hierarchy.d.ts.map

package/types/features/org/domain/hierarchy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hierarchy.d.ts","sourceRoot":"","sources":["../../../../../../src/features/org/domain/hierarchy.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,CAAC;AAElD,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACnD;AAED,uGAAuG;AACvG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IACtD,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB"}

package/types/features/org/domain/index.d.ts

@@ -0,0 +1,8 @@
+export * from './data-access-scope';
+export * from './user-type';
+export * from './team';
+export * from './branch';
+export * from './hierarchy';
+export * from './errors/org-errors';
+export * from './ports/org-gateway';
+//# sourceMappingURL=index.d.ts.map

package/types/features/org/domain/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/features/org/domain/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,qBAAqB,CAAC"}

package/types/features/org/domain/ports/org-gateway.d.ts

@@ -0,0 +1,59 @@
+import type { Result } from '@core/result';
+import type { AssignableRole, AssignManagerDraft, HierarchyEdgeView, OrgBranchOption, UserBranchAssignment } from '../hierarchy';
+import type { HierarchyInsertPlan, MyUserType, OrgUserType, UserTypeDraft } from '../user-type';
+import type { OrgTeam, TeamDraft } from '../team';
+import type { BranchDraft, OrgBranch } from '../branch';
+import type { OrgError } from '../errors/org-errors';
+/**
+ * Port to the org access-control backend: the user-type catalogue, per-user type assignments, the
+ * reporting hierarchy (Local admin overrides — they win over portal sync), and user↔branch
+ * assignments. One seam so the admin pages, the account-menu type switcher, and tests share a
+ * single contract.
+ */
+export interface OrgGateway {
+    listUserTypes(): Promise<Result<readonly OrgUserType[], OrgError>>;
+    createUserType(draft: UserTypeDraft): Promise<Result<OrgUserType, OrgError>>;
+    updateUserType(id: string, draft: UserTypeDraft): Promise<Result<OrgUserType, OrgError>>;
+    deleteUserType(id: string): Promise<Result<void, OrgError>>;
+    /** The prepared hierarchy insert plan (role ladder + per-slot level); `excludeId` omits the edited type. */
+    getHierarchyPlan(excludeId?: string): Promise<Result<HierarchyInsertPlan, OrgError>>;
+    getUserTypesFor(userId: string): Promise<Result<readonly MyUserType[], OrgError>>;
+    assignUserType(userId: string, userTypeId: string): Promise<Result<void, OrgError>>;
+    removeUserType(userId: string, userTypeId: string): Promise<Result<void, OrgError>>;
+    getMyUserTypes(): Promise<Result<readonly MyUserType[], OrgError>>;
+    switchMyUserType(userTypeId: string): Promise<Result<readonly MyUserType[], OrgError>>;
+    /** Every reporting line, labelled server-side (names resolved in one Dapper join). */
+    listHierarchyEdges(): Promise<Result<readonly HierarchyEdgeView[], OrgError>>;
+    /**
+     * Members who hold ≥1 active type, with their held types — the assign-manager picker's source (so it
+     * only offers assignable people, never the raw directory). Assignment rules stay enforced server-side.
+     */
+    /**
+     * Roles (senior-first) each with the members holding them — the role-first assign-manager source.
+     * When `branchKey` is given, only members assigned to that branch are offered (branch-scoped reporting).
+     */
+    getAssignableRoles(branchKey?: string): Promise<Result<readonly AssignableRole[], OrgError>>;
+    assignManager(draft: AssignManagerDraft): Promise<Result<void, OrgError>>;
+    removeManager(subordinateId: string, subordinateUserTypeId: string, branchKey: string): Promise<Result<void, OrgError>>;
+    /** Tenant flag: is chat group membership restricted to the creator's hierarchy scope? */
+    getGroupMembershipHierarchy(): Promise<Result<boolean, OrgError>>;
+    setGroupMembershipHierarchy(enabled: boolean): Promise<Result<void, OrgError>>;
+    getUserBranches(userId: string): Promise<Result<readonly UserBranchAssignment[], OrgError>>;
+    assignUserBranch(userId: string, branchKey: string, asPrimary: boolean): Promise<Result<void, OrgError>>;
+    removeUserBranch(userId: string, branchKey: string): Promise<Result<void, OrgError>>;
+    /** The organisation's branch registry (for the assignment picker). */
+    listBranchOptions(): Promise<Result<readonly OrgBranchOption[], OrgError>>;
+    /** The tenant's feed teams — audience groups mapping user types to a feed audience. */
+    listTeams(): Promise<Result<readonly OrgTeam[], OrgError>>;
+    createTeam(draft: TeamDraft): Promise<Result<OrgTeam, OrgError>>;
+    updateTeam(id: string, draft: TeamDraft): Promise<Result<OrgTeam, OrgError>>;
+    deleteTeam(id: string): Promise<Result<void, OrgError>>;
+    /** The tenant's branches (with assigned-user counts). */
+    listBranches(): Promise<Result<readonly OrgBranch[], OrgError>>;
+    createBranch(draft: BranchDraft): Promise<Result<OrgBranch, OrgError>>;
+    updateBranch(id: string, draft: BranchDraft): Promise<Result<OrgBranch, OrgError>>;
+    deleteBranch(id: string): Promise<Result<void, OrgError>>;
+    /** Makes the branch the tenant's default (unsets the previous default). */
+    setDefaultBranch(id: string): Promise<Result<OrgBranch, OrgError>>;
+}
+//# sourceMappingURL=org-gateway.d.ts.map

package/types/features/org/domain/ports/org-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-gateway.d.ts","sourceRoot":"","sources":["../../../../../../../src/features/org/domain/ports/org-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EACV,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,aAAa,EACd,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IAEzB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,cAAc,CACZ,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1C,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,4GAA4G;IAC5G,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC;IAGrF,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAGpF,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAGvF,sFAAsF;IACtF,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,iBAAiB,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9E;;;OAGG;IACH;;;OAGG;IACH,kBAAkB,CAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,SAAS,cAAc,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,aAAa,CACX,aAAa,EAAE,MAAM,EACrB,qBAAqB,EAAE,MAAM,EAC7B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnC,yFAAyF;IACzF,2BAA2B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAG/E,eAAe,CACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,SAAS,oBAAoB,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,sEAAsE;IACtE,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,eAAe,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAG3E,uFAAuF;IACvF,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAGxD,yDAAyD;IACzD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnF,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;CACpE"}

package/types/features/org/domain/team.d.ts

@@ -0,0 +1,28 @@
+import { type Result } from '@core/result';
+import { InvalidTeamError } from './errors/org-errors';
+/** Field bounds — mirror the backend `TeamConsts`. */
+export declare const TEAM_NAME_MAX = 128;
+export declare const TEAM_DESCRIPTION_MAX = 512;
+/**
+ * A feed team (admin view): an audience group mapping user types to a feed audience. A user belongs to
+ * the team when they hold any of {@link userTypeIds}; a post targeted at the team is shown to every
+ * member under "Team Updates".
+ */
+export interface OrgTeam {
+    readonly id: string;
+    readonly name: string;
+    readonly description: string;
+    readonly userTypeIds: readonly string[];
+}
+/** Create/update payload for a team (validated by {@link validateTeamDraft}). */
+export interface TeamDraft {
+    readonly name: string;
+    readonly description: string;
+    readonly userTypeIds: readonly string[];
+}
+/**
+ * Domain validation for a team draft — the form resolver calls this, so the rules live here (not in
+ * the UI): a trimmed non-empty name within bounds and a bounded description.
+ */
+export declare const validateTeamDraft: (draft: TeamDraft) => Result<TeamDraft, InvalidTeamError>;
+//# sourceMappingURL=team.d.ts.map

package/types/features/org/domain/team.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.d.ts","sourceRoot":"","sources":["../../../../../../src/features/org/domain/team.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,sDAAsD;AACtD,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,iFAAiF;AACjF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAC5B,OAAO,SAAS,KACf,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAmBpC,CAAC"}

package/types/features/org/domain/user-type.d.ts

@@ -0,0 +1,67 @@
+import { type Result } from '@core/result';
+import type { DataAccessScope } from './data-access-scope';
+import { InvalidUserTypeError } from './errors/org-errors';
+/** Field bounds — mirror the backend `UserTypeConsts`. */
+export declare const USER_TYPE_NAME_MAX = 128;
+export declare const USER_TYPE_DESCRIPTION_MAX = 512;
+/** A role type from the tenant's catalogue (admin view). */
+export interface OrgUserType {
+    readonly id: string;
+    readonly name: string;
+    readonly refId: string | null;
+    readonly description: string;
+    readonly isActive: boolean;
+    readonly isAdmin: boolean;
+    readonly scope: DataAccessScope;
+    readonly hierarchyLevel: number;
+    readonly displayOrder: number;
+    readonly roleNames: readonly string[];
+}
+/**
+ * A type the CURRENT user holds; `isCurrent` marks the one in effect for the session. Deliberately
+ * NOT `isActive` — that name belongs to {@link OrgUserType.isActive}, the catalogue enable flag; this
+ * is "the type I am acting as right now".
+ */
+export interface MyUserType {
+    readonly id: string;
+    readonly name: string;
+    readonly scope: DataAccessScope;
+    readonly isCurrent: boolean;
+}
+/** One rung of the hierarchy ladder: a role and the role directly above it (its "reports to"). */
+export interface HierarchyPlanRole {
+    readonly id: string;
+    readonly name: string;
+    readonly hierarchyLevel: number;
+    readonly reportsToName: string | null;
+}
+/** One insertion point: its position (0 = top) and the seniority rank a role placed there receives. */
+export interface HierarchyPlanSlot {
+    readonly position: number;
+    readonly level: number;
+}
+/**
+ * The prepared "insert plan" the hierarchy picker renders — the active role ladder plus the seniority
+ * rank a new role gets at each insertion point. Computed server-side (`UserTypeHierarchyPlanner`); the
+ * UI does no rank math.
+ */
+export interface HierarchyInsertPlan {
+    readonly roles: readonly HierarchyPlanRole[];
+    readonly slots: readonly HierarchyPlanSlot[];
+}
+/** Create/update payload for a catalogue type (validated by {@link validateUserTypeDraft}). */
+export interface UserTypeDraft {
+    readonly name: string;
+    readonly description: string;
+    readonly isActive: boolean;
+    readonly isAdmin: boolean;
+    readonly scope: DataAccessScope;
+    readonly hierarchyLevel: number;
+    readonly roleNames: readonly string[];
+}
+/**
+ * Domain validation for a user-type draft — the form resolver calls this, so the rules live here
+ * (not in the UI): a trimmed non-empty name within bounds and a non-negative hierarchy rank.
+ */
+export declare const validateUserTypeDraft: (draft: UserTypeDraft) => Result<UserTypeDraft, InvalidUserTypeError>;
+//# sourceMappingURL=user-type.d.ts.map

package/types/features/org/domain/user-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-type.d.ts","sourceRoot":"","sources":["../../../../../../src/features/org/domain/user-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAE7C,4DAA4D;AAC5D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,kGAAkG;AAClG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,uGAAuG;AACvG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC9C;AAED,+FAA+F;AAC/F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAChC,OAAO,aAAa,KACnB,MAAM,CAAC,aAAa,EAAE,oBAAoB,CA4B5C,CAAC"}

package/types/features/org/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Public API of the `org` feature (access control: user types, hierarchy, branch assignments).
+ * Other features and the app shell import ONLY from here.
+ */
+export { createOrgModule, type OrgModule, type OrgModuleDeps } from './org-module';
+export { OrgModuleProvider, TypeSwitcher, useMyUserTypes, useTeams, useUserTypes, } from './presentation';
+export type { DataAccessScope, MyUserType, OrgTeam, OrgUserType } from './domain';
+//# sourceMappingURL=index.d.ts.map

package/types/features/org/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/features/org/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,QAAQ,EAGR,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC"}