@7365admin1/core 3.52.1-staging.233 → 3.52.2-staging.234

package/.changeset/mailer-transport-defaults.md

@@ -0,0 +1,5 @@
+---
+"@7365admin1/core": patch
+---
+
+Fix the mailer transport defaults: an unset or unparseable port no longer resolves to `NaN`, and `MAILER_TRANSPORT_SECURE` now defaults to match the port instead of a fixed `false`. Same `Number(...) ?? n` fix applied to `PORT` and `REDIS_PORT`.

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @iservice365/core
 
+## 3.52.1
+
+### Patch Changes
+
+- a90696f: Let a client owner save their organisation details during onboarding.
+
+  `PUT /api/organizations/:id` — the write behind step 1 of the onboarding wizard —
+  was gated on `requireOrgAccess` (staff, or a live member of the organisation).
+  The client owner has no `members` row at that point; theirs is created at the
+  last step of the wizard. Every new client therefore got 401 on the first step of
+  onboarding and could not leave it.
+
+  The gate is now `requireOrgReach`: staff, a live member, **or** somebody holding
+  an invitation naming that organisation — the same rule the roles, members and
+  invite endpoints already use for the three pre-membership flows. Nothing is
+  widened: a member of another client, and a caller holding only a password-reset
+  row, are still refused.
+
 ## 3.52.0
 
 ### Minor Changes

package/dist/index.js

@@ -11545,11 +11545,11 @@ var dotenv = __toESM(require("dotenv"));
 dotenv.config();
 var MONGO_URI = process.env.MONGO_URI ?? "mongodb://localhost:27017";
 var MONGO_DB = process.env.MONGO_DB ?? "default";
-var PORT = Number(process.env.PORT) ?? 3e3;
+var PORT = Number(process.env.PORT) || 3e3;
 var isDev = process.env.NODE_ENV !== "production";
 var MAILER_TRANSPORT_HOST = process.env.MAILER_TRANSPORT_HOST ?? "smtp.gmail.com";
-var MAILER_TRANSPORT_PORT = Number(process.env.MAILER_TRANSPORT_PORT) ?? 465;
-var MAILER_TRANSPORT_SECURE = process.env.MAILER_TRANSPORT_SECURE === "true";
+var MAILER_TRANSPORT_PORT = Number(process.env.MAILER_TRANSPORT_PORT) || 465;
+var MAILER_TRANSPORT_SECURE = process.env.MAILER_TRANSPORT_SECURE ? process.env.MAILER_TRANSPORT_SECURE === "true" : MAILER_TRANSPORT_PORT === 465;
 var MAILER_EMAIL = process.env.MAILER_EMAIL ?? "default@gmail.com";
 var MAILER_PASSWORD = process.env.MAILER_PASSWORD ?? "password";
 var MAILER_FROM_EMAIL = process.env.MAILER_FROM_EMAIL || void 0;
@@ -11564,7 +11564,7 @@ var APP_ACCOUNT = process.env.APP_ACCOUNT ?? "http://localhost:3000";
 var VERIFICATION_FORGET_PASSWORD_DURATION = process.env.VERIFICATION_FORGET_PASSWORD_DURATION ?? "10 minutes";
 var VERIFICATION_USER_INVITE_DURATION = process.env.VERIFICATION_USER_INVITE_DURATION ?? "3 days";
 var REDIS_HOST = process.env.REDIS_HOST ?? "localhost";
-var REDIS_PORT = Number(process.env.REDIS_PORT) ?? 6379;
+var REDIS_PORT = Number(process.env.REDIS_PORT) || 6379;
 var REDIS_PASSWORD = process.env.REDIS_PASSWORD ?? "password";
 var DEFAULT_USER_EMAIL = process.env.DEFAULT_USER_EMAIL ?? "";
 var DEFAULT_USER_PASSWORD = process.env.DEFAULT_USER_PASSWORD ?? "";