@agent-native/core 0.10.0 → 0.11.1

package/dist/org/accept-pending.js.map

@@ -1 +1 @@
-{"version":3,"file":"accept-pending.js","sourceRoot":"","sources":["../../src/org/accept-pending.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,MAAM,GAAG,GAAW,EAAE,CAC1B,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAOhE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,QAAgB;IAEhB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,IAAI,IAAI,GAAyC,EAAE,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC3B,GAAG,EAAE;;qCAE0B;YAC/B,IAAI,EAAE,CAAC,KAAK,CAAC;SACd,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iEAAiE;QACjE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAoC,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAChC,GAAG,EAAE,yEAAyE;YAC9E,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,4FAA4F;gBACjG,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SACf,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,qCAAqC;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\nimport { putUserSetting } from \"../settings/user-settings.js\";\n\nconst nanoid = (): string =>\n  globalThis.crypto?.randomUUID?.().replace(/-/g, \"\") ??\n  Math.random().toString(36).slice(2) + Date.now().toString(36);\n\nexport interface AcceptPendingResult {\n  accepted: Array<{ invitationId: string; orgId: string }>;\n  activeOrgId: string | null;\n}\n\n/**\n * Accept every pending `org_invitations` row for this email:\n *   - insert a matching `org_members` row (role 'member') when one doesn't exist\n *   - flip the invitation's status to 'accepted'\n *   - set the user's `active-org-id` to the most-recently-created invite\n *\n * Called from the Better Auth `user.create.after` hook so that a user who signs\n * up with an email they were just invited to lands in the org immediately,\n * rather than seeing a blank-slate app until they navigate to /team.\n *\n * Safe to call when the org tables don't exist (some templates don't use the\n * org module) — it swallows the \"no such table\" error and returns empty.\n */\nexport async function acceptPendingInvitationsForEmail(\n  rawEmail: string,\n): Promise<AcceptPendingResult> {\n  const email = rawEmail.trim().toLowerCase();\n  if (!email) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const db = getDbExec();\n\n  let rows: Array<{ id: string; orgId: string }> = [];\n  try {\n    const res = await db.execute({\n      sql: `SELECT id, org_id AS \"orgId\" FROM org_invitations\n            WHERE LOWER(email) = ? AND status = 'pending'\n            ORDER BY created_at DESC`,\n      args: [email],\n    });\n    rows = res.rows.map((r: any) => ({\n      id: String(r.id),\n      orgId: String(r.orgId ?? r.org_id),\n    }));\n  } catch (err) {\n    // Template doesn't use the org module / tables not migrated yet.\n    return { accepted: [], activeOrgId: null };\n  }\n\n  if (rows.length === 0) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const accepted: AcceptPendingResult[\"accepted\"] = [];\n  for (const inv of rows) {\n    const existing = await db.execute({\n      sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [inv.orgId, email],\n    });\n    if (existing.rows.length === 0) {\n      await db.execute({\n        sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, 'member', ?)`,\n        args: [nanoid(), inv.orgId, email, Date.now()],\n      });\n    }\n    await db.execute({\n      sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,\n      args: [inv.id],\n    });\n    accepted.push({ invitationId: inv.id, orgId: inv.orgId });\n  }\n\n  // Set active-org-id to the most recent invite so the user lands in a\n  // populated workspace on first load.\n  const activeOrgId = accepted[0]?.orgId ?? null;\n  if (activeOrgId) {\n    try {\n      await putUserSetting(email, \"active-org-id\", { orgId: activeOrgId });\n    } catch {\n      // user_settings table might not exist in a minimal template — not fatal.\n    }\n  }\n\n  return { accepted, activeOrgId };\n}\n"]}
+{"version":3,"file":"accept-pending.js","sourceRoot":"","sources":["../../src/org/accept-pending.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,MAAM,MAAM,GAAG,GAAW,EAAE,CAC1B,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAOhE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,QAAgB;IAEhB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,IAAI,IAAI,GAA8D,EAAE,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC3B,GAAG,EAAE;;qCAE0B;YAC/B,IAAI,EAAE,CAAC,KAAK,CAAC;SACd,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YAClC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;SAC7C,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iEAAiE;QACjE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAoC,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAChC,GAAG,EAAE,yEAAyE;YAC9E,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC;SACzB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvD,MAAM,EAAE,CAAC,OAAO,CAAC;gBACf,GAAG,EAAE,qFAAqF;gBAC1F,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;SACf,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,qCAAqC;IACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC","sourcesContent":["import { getDbExec } from \"../db/client.js\";\nimport { putUserSetting } from \"../settings/user-settings.js\";\n\nconst nanoid = (): string =>\n  globalThis.crypto?.randomUUID?.().replace(/-/g, \"\") ??\n  Math.random().toString(36).slice(2) + Date.now().toString(36);\n\nexport interface AcceptPendingResult {\n  accepted: Array<{ invitationId: string; orgId: string }>;\n  activeOrgId: string | null;\n}\n\n/**\n * Accept every pending `org_invitations` row for this email:\n *   - insert a matching `org_members` row (role 'member') when one doesn't exist\n *   - flip the invitation's status to 'accepted'\n *   - set the user's `active-org-id` to the most-recently-created invite\n *\n * Called from the Better Auth `user.create.after` hook so that a user who signs\n * up with an email they were just invited to lands in the org immediately,\n * rather than seeing a blank-slate app until they navigate to /team.\n *\n * Safe to call when the org tables don't exist (some templates don't use the\n * org module) — it swallows the \"no such table\" error and returns empty.\n */\nexport async function acceptPendingInvitationsForEmail(\n  rawEmail: string,\n): Promise<AcceptPendingResult> {\n  const email = rawEmail.trim().toLowerCase();\n  if (!email) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const db = getDbExec();\n\n  let rows: Array<{ id: string; orgId: string; role: string | null }> = [];\n  try {\n    const res = await db.execute({\n      sql: `SELECT id, org_id AS \"orgId\", role FROM org_invitations\n            WHERE LOWER(email) = ? AND status = 'pending'\n            ORDER BY created_at DESC`,\n      args: [email],\n    });\n    rows = res.rows.map((r: any) => ({\n      id: String(r.id),\n      orgId: String(r.orgId ?? r.org_id),\n      role: r.role == null ? null : String(r.role),\n    }));\n  } catch (err) {\n    // Template doesn't use the org module / tables not migrated yet.\n    return { accepted: [], activeOrgId: null };\n  }\n\n  if (rows.length === 0) {\n    return { accepted: [], activeOrgId: null };\n  }\n\n  const accepted: AcceptPendingResult[\"accepted\"] = [];\n  for (const inv of rows) {\n    const existing = await db.execute({\n      sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,\n      args: [inv.orgId, email],\n    });\n    if (existing.rows.length === 0) {\n      const role = inv.role === \"admin\" ? \"admin\" : \"member\";\n      await db.execute({\n        sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, ?, ?)`,\n        args: [nanoid(), inv.orgId, email, role, Date.now()],\n      });\n    }\n    await db.execute({\n      sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,\n      args: [inv.id],\n    });\n    accepted.push({ invitationId: inv.id, orgId: inv.orgId });\n  }\n\n  // Set active-org-id to the most recent invite so the user lands in a\n  // populated workspace on first load.\n  const activeOrgId = accepted[0]?.orgId ?? null;\n  if (activeOrgId) {\n    try {\n      await putUserSetting(email, \"active-org-id\", { orgId: activeOrgId });\n    } catch {\n      // user_settings table might not exist in a minimal template — not fatal.\n    }\n  }\n\n  return { accepted, activeOrgId };\n}\n"]}

package/dist/org/free-email-providers.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Free / public mailbox providers that should NOT be allowed as an
+ * organization's auto-join domain.
+ *
+ * Why: the auto-join feature lets anyone who signs up with an email at the
+ * org's `allowed_domain` join the org without an invitation. That is safe
+ * for company-owned domains (`acme.com`) — the company controls who gets
+ * an `@acme.com` address. It is catastrophic for shared mailbox providers
+ * (`gmail.com`, `outlook.com`, etc.) — anyone in the world can create a
+ * matching address and would be auto-added to the org.
+ *
+ * The list intentionally errs on the side of well-known providers; if a
+ * future provider isn't here we'll learn from a bug report rather than
+ * pretend we have an exhaustive registry.
+ */
+export declare const FREE_EMAIL_PROVIDER_DOMAINS: ReadonlySet<string>;
+export declare function isFreeEmailProvider(domain: string): boolean;
+//# sourceMappingURL=free-email-providers.d.ts.map

package/dist/org/free-email-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"free-email-providers.d.ts","sourceRoot":"","sources":["../../src/org/free-email-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAwG1D,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE3D"}

package/dist/org/free-email-providers.js

@@ -0,0 +1,124 @@
+/**
+ * Free / public mailbox providers that should NOT be allowed as an
+ * organization's auto-join domain.
+ *
+ * Why: the auto-join feature lets anyone who signs up with an email at the
+ * org's `allowed_domain` join the org without an invitation. That is safe
+ * for company-owned domains (`acme.com`) — the company controls who gets
+ * an `@acme.com` address. It is catastrophic for shared mailbox providers
+ * (`gmail.com`, `outlook.com`, etc.) — anyone in the world can create a
+ * matching address and would be auto-added to the org.
+ *
+ * The list intentionally errs on the side of well-known providers; if a
+ * future provider isn't here we'll learn from a bug report rather than
+ * pretend we have an exhaustive registry.
+ */
+export const FREE_EMAIL_PROVIDER_DOMAINS = new Set([
+    // Google
+    "gmail.com",
+    "googlemail.com",
+    // Microsoft
+    "outlook.com",
+    "hotmail.com",
+    "live.com",
+    "msn.com",
+    "outlook.co.uk",
+    "hotmail.co.uk",
+    "live.co.uk",
+    "outlook.de",
+    "hotmail.de",
+    "live.de",
+    "outlook.fr",
+    "hotmail.fr",
+    "live.fr",
+    // Yahoo
+    "yahoo.com",
+    "yahoo.co.uk",
+    "yahoo.co.jp",
+    "yahoo.fr",
+    "yahoo.de",
+    "yahoo.it",
+    "yahoo.es",
+    "yahoo.ca",
+    "yahoo.com.au",
+    "yahoo.com.br",
+    "ymail.com",
+    "rocketmail.com",
+    // Apple
+    "icloud.com",
+    "me.com",
+    "mac.com",
+    // AOL / Verizon
+    "aol.com",
+    "aim.com",
+    // Privacy / disposable / forwarding
+    "proton.me",
+    "protonmail.com",
+    "pm.me",
+    "tutanota.com",
+    "tutanota.de",
+    "tuta.io",
+    "fastmail.com",
+    "fastmail.fm",
+    "duck.com",
+    "hey.com",
+    // Russian / Chinese majors
+    "yandex.com",
+    "yandex.ru",
+    "mail.ru",
+    "list.ru",
+    "bk.ru",
+    "inbox.ru",
+    "qq.com",
+    "163.com",
+    "126.com",
+    "sina.com",
+    "sina.cn",
+    "sohu.com",
+    // ISP / legacy / misc
+    "gmx.com",
+    "gmx.de",
+    "gmx.net",
+    "web.de",
+    "t-online.de",
+    "freenet.de",
+    "zoho.com",
+    "zohomail.com",
+    "rediffmail.com",
+    "mail.com",
+    "att.net",
+    "comcast.net",
+    "verizon.net",
+    "sbcglobal.net",
+    "bellsouth.net",
+    "cox.net",
+    "earthlink.net",
+    "btinternet.com",
+    "btopenworld.com",
+    "talktalk.net",
+    "sky.com",
+    "ntlworld.com",
+    "virginmedia.com",
+    "free.fr",
+    "orange.fr",
+    "wanadoo.fr",
+    "laposte.net",
+    "libero.it",
+    "tiscali.it",
+    "uol.com.br",
+    "bol.com.br",
+    "terra.com.br",
+    // Disposable
+    "mailinator.com",
+    "guerrillamail.com",
+    "10minutemail.com",
+    "trashmail.com",
+    "yopmail.com",
+    "tempmail.com",
+    "throwawaymail.com",
+    "sharklasers.com",
+]);
+export function isFreeEmailProvider(domain) {
+    return FREE_EMAIL_PROVIDER_DOMAINS.has(domain.trim().toLowerCase());
+}
+//# sourceMappingURL=free-email-providers.js.map

package/dist/org/free-email-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"free-email-providers.js","sourceRoot":"","sources":["../../src/org/free-email-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC;IACtE,SAAS;IACT,WAAW;IACX,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,aAAa;IACb,UAAU;IACV,SAAS;IACT,eAAe;IACf,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,WAAW;IACX,aAAa;IACb,aAAa;IACb,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,UAAU;IACV,cAAc;IACd,cAAc;IACd,WAAW;IACX,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT,oCAAoC;IACpC,WAAW;IACX,gBAAgB;IAChB,OAAO;IACP,cAAc;IACd,aAAa;IACb,SAAS;IACT,cAAc;IACd,aAAa;IACb,UAAU;IACV,SAAS;IACT,2BAA2B;IAC3B,YAAY;IACZ,WAAW;IACX,SAAS;IACT,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,UAAU;IACV,SAAS;IACT,UAAU;IACV,sBAAsB;IACtB,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,UAAU;IACV,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,SAAS;IACT,aAAa;IACb,aAAa;IACb,eAAe;IACf,eAAe;IACf,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,SAAS;IACT,cAAc;IACd,iBAAiB;IACjB,SAAS;IACT,WAAW;IACX,YAAY;IACZ,aAAa;IACb,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACtE,CAAC","sourcesContent":["/**\n * Free / public mailbox providers that should NOT be allowed as an\n * organization's auto-join domain.\n *\n * Why: the auto-join feature lets anyone who signs up with an email at the\n * org's `allowed_domain` join the org without an invitation. That is safe\n * for company-owned domains (`acme.com`) — the company controls who gets\n * an `@acme.com` address. It is catastrophic for shared mailbox providers\n * (`gmail.com`, `outlook.com`, etc.) — anyone in the world can create a\n * matching address and would be auto-added to the org.\n *\n * The list intentionally errs on the side of well-known providers; if a\n * future provider isn't here we'll learn from a bug report rather than\n * pretend we have an exhaustive registry.\n */\nexport const FREE_EMAIL_PROVIDER_DOMAINS: ReadonlySet<string> = new Set([\n  // Google\n  \"gmail.com\",\n  \"googlemail.com\",\n  // Microsoft\n  \"outlook.com\",\n  \"hotmail.com\",\n  \"live.com\",\n  \"msn.com\",\n  \"outlook.co.uk\",\n  \"hotmail.co.uk\",\n  \"live.co.uk\",\n  \"outlook.de\",\n  \"hotmail.de\",\n  \"live.de\",\n  \"outlook.fr\",\n  \"hotmail.fr\",\n  \"live.fr\",\n  // Yahoo\n  \"yahoo.com\",\n  \"yahoo.co.uk\",\n  \"yahoo.co.jp\",\n  \"yahoo.fr\",\n  \"yahoo.de\",\n  \"yahoo.it\",\n  \"yahoo.es\",\n  \"yahoo.ca\",\n  \"yahoo.com.au\",\n  \"yahoo.com.br\",\n  \"ymail.com\",\n  \"rocketmail.com\",\n  // Apple\n  \"icloud.com\",\n  \"me.com\",\n  \"mac.com\",\n  // AOL / Verizon\n  \"aol.com\",\n  \"aim.com\",\n  // Privacy / disposable / forwarding\n  \"proton.me\",\n  \"protonmail.com\",\n  \"pm.me\",\n  \"tutanota.com\",\n  \"tutanota.de\",\n  \"tuta.io\",\n  \"fastmail.com\",\n  \"fastmail.fm\",\n  \"duck.com\",\n  \"hey.com\",\n  // Russian / Chinese majors\n  \"yandex.com\",\n  \"yandex.ru\",\n  \"mail.ru\",\n  \"list.ru\",\n  \"bk.ru\",\n  \"inbox.ru\",\n  \"qq.com\",\n  \"163.com\",\n  \"126.com\",\n  \"sina.com\",\n  \"sina.cn\",\n  \"sohu.com\",\n  // ISP / legacy / misc\n  \"gmx.com\",\n  \"gmx.de\",\n  \"gmx.net\",\n  \"web.de\",\n  \"t-online.de\",\n  \"freenet.de\",\n  \"zoho.com\",\n  \"zohomail.com\",\n  \"rediffmail.com\",\n  \"mail.com\",\n  \"att.net\",\n  \"comcast.net\",\n  \"verizon.net\",\n  \"sbcglobal.net\",\n  \"bellsouth.net\",\n  \"cox.net\",\n  \"earthlink.net\",\n  \"btinternet.com\",\n  \"btopenworld.com\",\n  \"talktalk.net\",\n  \"sky.com\",\n  \"ntlworld.com\",\n  \"virginmedia.com\",\n  \"free.fr\",\n  \"orange.fr\",\n  \"wanadoo.fr\",\n  \"laposte.net\",\n  \"libero.it\",\n  \"tiscali.it\",\n  \"uol.com.br\",\n  \"bol.com.br\",\n  \"terra.com.br\",\n  // Disposable\n  \"mailinator.com\",\n  \"guerrillamail.com\",\n  \"10minutemail.com\",\n  \"trashmail.com\",\n  \"yopmail.com\",\n  \"tempmail.com\",\n  \"throwawaymail.com\",\n  \"sharklasers.com\",\n]);\n\nexport function isFreeEmailProvider(domain: string): boolean {\n  return FREE_EMAIL_PROVIDER_DOMAINS.has(domain.trim().toLowerCase());\n}\n"]}

package/dist/org/handlers.d.ts

@@ -37,13 +37,23 @@ export declare const listMembersHandler: import("h3").EventHandlerWithFetch<impo
         joinedAt: number;
     }[];
 }>>;
-/** POST /_agent-native/org/invitations — invite a user by email */
-export declare const createInvitationHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+interface SingleInviteResult {
     id: string;
-    email: any;
-    status: string;
+    email: string;
+    role: "member" | "admin";
+    status: "pending";
     emailSent: boolean;
-    emailError: string;
+    emailError?: string;
+}
+interface SingleInviteFailure {
+    email: string;
+    error: string;
+}
+/** POST /_agent-native/org/invitations — invite one or many users by email */
+export declare const createInvitationHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<SingleInviteResult | {
+    succeeded: SingleInviteResult[];
+    failed: SingleInviteFailure[];
+    total: number;
 }>>;
 /** GET /_agent-native/org/invitations — list pending invitations for the org */
 export declare const listInvitationsHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
@@ -53,6 +63,7 @@ export declare const listInvitationsHandler: import("h3").EventHandlerWithFetch<
         invitedBy: string;
         createdAt: number;
         status: string;
+        role: string;
     }[];
 }>>;
 /** POST /_agent-native/org/invitations/:id/accept — accept an invitation */
@@ -65,6 +76,18 @@ export declare const acceptInvitationHandler: import("h3").EventHandlerWithFetch
 export declare const removeMemberHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     success: boolean;
 }>>;
+/**
+ * PUT /_agent-native/org/members/:email/role — change a member's role
+ * (owner/admin only). Body: { role: "admin" | "member" }.
+ *
+ * Only owners can promote/demote admins. (Admins can manage members but
+ * not other admins — otherwise an admin could escalate themselves to
+ * owner-equivalent control by promoting a confederate.)
+ */
+export declare const changeMemberRoleHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    email: string;
+    role: string;
+}>>;
 /** PATCH /_agent-native/org — rename the current organization (owner/admin only) */
 export declare const updateOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     orgId: string;
@@ -141,4 +164,5 @@ export declare const receiveA2ASecretHandler: import("h3").EventHandlerWithFetch
     ok: boolean;
     orgId: string;
 }>>;
+export {};
 //# sourceMappingURL=handlers.d.ts.map

package/dist/org/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA2B1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GA0EzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAkC3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cAWH,OAAO;;;GAIjC,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;GA+EnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;GAqBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAmD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GA2C3B,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GAyDnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AA+CA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AA2B1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GA0EzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAkC3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cAWH,OAAO;;;GAIjC,CAAC;AAMH,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAsED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;GAuEnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;;GAyBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAoD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;GAqEnC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GAsE3B,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GAyDnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}

package/dist/org/handlers.js

@@ -14,13 +14,15 @@ function extractInvitationId(event) {
         path.match(/\/org\/invitations\/([^\/]+)\/accept\/?$/);
     return match?.[1] ? decodeURIComponent(match[1]) : undefined;
 }
-/** Extract the :email from member-delete paths. Same prefix-stripping caveat. */
+/** Extract the :email from member-delete and member-role paths. Same prefix-stripping caveat. */
 function extractMemberEmail(event) {
     const fromRouter = getRouterParam(event, "email");
     if (fromRouter)
         return fromRouter;
     const path = getRequestURL(event).pathname;
-    const match = path.match(/^\/([^\/]+)\/?$/) ?? path.match(/\/org\/members\/([^\/]+)\/?$/);
+    const match = path.match(/^\/([^\/]+)\/role\/?$/) ??
+        path.match(/^\/([^\/]+)\/?$/) ??
+        path.match(/\/org\/members\/([^\/]+)(?:\/role)?\/?$/);
     return match?.[1] ? decodeURIComponent(match[1]) : undefined;
 }
 const nanoid = () => globalThis.crypto?.randomUUID?.().replace(/-/g, "") ??
@@ -33,6 +35,7 @@ import { sendEmail, isEmailConfigured } from "../server/email.js";
 import { renderInviteEmail } from "../server/email-templates.js";
 import { getAppProductionUrl } from "../server/app-url.js";
 import { getOrgContext } from "./context.js";
+import { isFreeEmailProvider } from "./free-email-providers.js";
 function getInviteAppUrl(event) {
     return getAppProductionUrl(event);
 }
@@ -189,58 +192,45 @@ export const listMembersHandler = defineEventHandler(async (event) => {
     }));
     return { members };
 });
-/** POST /_agent-native/org/invitations — invite a user by email */
-export const createInvitationHandler = defineEventHandler(async (event) => {
-    const ctx = await getOrgContext(event);
-    if (!ctx.orgId) {
-        throw createError({
-            statusCode: 400,
-            message: "You must belong to an organization to invite members",
-        });
+function normalizeInviteRole(input) {
+    return input === "admin" ? "admin" : "member";
+}
+async function inviteOne(ctx, rawEmail, role, event) {
+    const email = rawEmail.trim().toLowerCase();
+    if (!email) {
+        throw createError({ statusCode: 400, message: "Email is required" });
     }
-    if (ctx.role !== "owner" && ctx.role !== "admin") {
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
         throw createError({
-            statusCode: 403,
-            message: "Only owners and admins can invite members",
+            statusCode: 400,
+            message: `Invalid email: ${rawEmail}`,
         });
     }
-    const body = await readBody(event);
-    const email = body?.email?.trim()?.toLowerCase();
-    if (!email) {
-        throw createError({ statusCode: 400, message: "Email is required" });
-    }
     const e = await exec();
-    // Existing rows in org_members / org_invitations may have any case
-    // (writes haven't been normalized historically). Compare with LOWER
-    // on both sides so an "alice@..." invite check correctly recognizes
-    // an existing "Alice@..." membership. `email` is already lowercased
-    // at parse time above, but call .toLowerCase() explicitly here so
-    // the contract at the SQL boundary matches every other handler in
-    // this file.
     const existingMember = await e.execute({
         sql: `SELECT 1 FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,
-        args: [ctx.orgId, email.toLowerCase()],
+        args: [ctx.orgId, email],
     });
     if (existingMember.rows.length > 0) {
         throw createError({
             statusCode: 409,
-            message: "User is already a member of this organization",
+            message: `${email} is already a member`,
         });
     }
     const existingInvite = await e.execute({
         sql: `SELECT 1 FROM org_invitations WHERE org_id = ? AND LOWER(email) = ? AND status = 'pending' LIMIT 1`,
-        args: [ctx.orgId, email.toLowerCase()],
+        args: [ctx.orgId, email],
     });
     if (existingInvite.rows.length > 0) {
         throw createError({
             statusCode: 409,
-            message: "An invitation is already pending for this email",
+            message: `An invitation is already pending for ${email}`,
         });
     }
     const id = nanoid();
     await e.execute({
-        sql: `INSERT INTO org_invitations (id, org_id, email, invited_by, created_at, status) VALUES (?, ?, ?, ?, ?, 'pending')`,
-        args: [id, ctx.orgId, email, ctx.email, Date.now()],
+        sql: `INSERT INTO org_invitations (id, org_id, email, invited_by, created_at, status, role) VALUES (?, ?, ?, ?, ?, 'pending', ?)`,
+        args: [id, ctx.orgId, email, ctx.email, Date.now(), role],
     });
     let emailSent = false;
     let emailError;
@@ -260,7 +250,63 @@ export const createInvitationHandler = defineEventHandler(async (event) => {
             console.error("[org/invitations] failed to send invite email", err);
         }
     }
-    return { id, email, status: "pending", emailSent, emailError };
+    return { id, email, role, status: "pending", emailSent, emailError };
+}
+/** POST /_agent-native/org/invitations — invite one or many users by email */
+export const createInvitationHandler = defineEventHandler(async (event) => {
+    const ctx = await getOrgContext(event);
+    if (!ctx.orgId) {
+        throw createError({
+            statusCode: 400,
+            message: "You must belong to an organization to invite members",
+        });
+    }
+    if (ctx.role !== "owner" && ctx.role !== "admin") {
+        throw createError({
+            statusCode: 403,
+            message: "Only owners and admins can invite members",
+        });
+    }
+    const body = await readBody(event);
+    // Bulk shape: { invites: [{ email, role }, ...] } — preferred for any
+    // multi-recipient flow (paste-many, CSV upload). Single shape:
+    // { email, role } — kept for backwards compatibility.
+    const invitesInput = Array.isArray(body?.invites)
+        ? body.invites.map((inv) => ({
+            email: String(inv?.email ?? ""),
+            role: inv?.role,
+        }))
+        : null;
+    if (invitesInput) {
+        const succeeded = [];
+        const failed = [];
+        const seen = new Set();
+        for (const inv of invitesInput) {
+            const lower = inv.email.trim().toLowerCase();
+            if (!lower)
+                continue;
+            if (seen.has(lower))
+                continue;
+            seen.add(lower);
+            try {
+                const result = await inviteOne({ orgId: ctx.orgId, orgName: ctx.orgName, email: ctx.email }, inv.email, normalizeInviteRole(inv.role), event);
+                succeeded.push(result);
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                failed.push({ email: lower, error: message });
+            }
+        }
+        return {
+            succeeded,
+            failed,
+            total: succeeded.length + failed.length,
+        };
+    }
+    // Single-invite shape.
+    const role = normalizeInviteRole(body?.role);
+    const result = await inviteOne({ orgId: ctx.orgId, orgName: ctx.orgName, email: ctx.email }, body?.email ?? "", role, event);
+    return result;
 });
 /** GET /_agent-native/org/invitations — list pending invitations for the org */
 export const listInvitationsHandler = defineEventHandler(async (event) => {
@@ -269,7 +315,7 @@ export const listInvitationsHandler = defineEventHandler(async (event) => {
         return { invitations: [] };
     const e = await exec();
     const { rows } = await e.execute({
-        sql: `SELECT id, email, invited_by AS "invitedBy", created_at AS "createdAt", status
+        sql: `SELECT id, email, invited_by AS "invitedBy", created_at AS "createdAt", status, role
             FROM org_invitations
             WHERE org_id = ? AND status = 'pending'`,
         args: [ctx.orgId],
@@ -280,6 +326,9 @@ export const listInvitationsHandler = defineEventHandler(async (event) => {
         invitedBy: String(r.invitedBy ?? r.invited_by),
         createdAt: Number(r.createdAt ?? r.created_at),
         status: String(r.status),
+        role: String(r.role ?? "member") === "admin"
+            ? "admin"
+            : "member",
     }));
     return { invitations };
 });
@@ -298,7 +347,7 @@ export const acceptInvitationHandler = defineEventHandler(async (event) => {
     const invRes = await e.execute({
         // Case-insensitive on email — see comment on the analogous
         // pending-invitations query in getMyOrgHandler.
-        sql: `SELECT id, org_id AS "orgId" FROM org_invitations
+        sql: `SELECT id, org_id AS "orgId", role FROM org_invitations
             WHERE id = ? AND LOWER(email) = ? AND status = 'pending' LIMIT 1`,
         args: [invitationId, email.toLowerCase()],
     });
@@ -310,6 +359,7 @@ export const acceptInvitationHandler = defineEventHandler(async (event) => {
     }
     const inv = invRes.rows[0];
     const invOrgId = String(inv.orgId ?? inv.org_id);
+    const inviteRole = inv.role === "admin" ? "admin" : "member";
     const existingMembership = await e.execute({
         sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,
         args: [invOrgId, email.toLowerCase()],
@@ -332,15 +382,15 @@ export const acceptInvitationHandler = defineEventHandler(async (event) => {
         };
     }
     await e.execute({
-        sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, 'member', ?)`,
-        args: [nanoid(), invOrgId, email, Date.now()],
+        sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, ?, ?)`,
+        args: [nanoid(), invOrgId, email, inviteRole, Date.now()],
     });
     await e.execute({
         sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,
         args: [invitationId],
     });
     await putUserSetting(email, "active-org-id", { orgId: invOrgId });
-    return { orgId: invOrgId, orgName, role: "member" };
+    return { orgId: invOrgId, orgName, role: inviteRole };
 });
 /** DELETE /_agent-native/org/members/:email — remove a member (owner/admin only) */
 export const removeMemberHandler = defineEventHandler(async (event) => {
@@ -397,6 +447,73 @@ export const removeMemberHandler = defineEventHandler(async (event) => {
     });
     return { success: true };
 });
+/**
+ * PUT /_agent-native/org/members/:email/role — change a member's role
+ * (owner/admin only). Body: { role: "admin" | "member" }.
+ *
+ * Only owners can promote/demote admins. (Admins can manage members but
+ * not other admins — otherwise an admin could escalate themselves to
+ * owner-equivalent control by promoting a confederate.)
+ */
+export const changeMemberRoleHandler = defineEventHandler(async (event) => {
+    const ctx = await getOrgContext(event);
+    if (!ctx.orgId) {
+        throw createError({ statusCode: 400, message: "No organization found" });
+    }
+    if (ctx.role !== "owner" && ctx.role !== "admin") {
+        throw createError({
+            statusCode: 403,
+            message: "Only owners and admins can change member roles",
+        });
+    }
+    const memberEmail = extractMemberEmail(event);
+    if (!memberEmail) {
+        throw createError({ statusCode: 400, message: "Email is required" });
+    }
+    const memberEmailLower = memberEmail.toLowerCase();
+    const body = await readBody(event);
+    const role = body?.role === "admin" ? "admin" : "member";
+    const e = await exec();
+    // Look up the target member's current role to enforce sensible rules
+    // about what changes are allowed.
+    const current = await e.execute({
+        sql: `SELECT role FROM org_members WHERE org_id = ? AND LOWER(email) = ? LIMIT 1`,
+        args: [ctx.orgId, memberEmailLower],
+    });
+    if (current.rows.length === 0) {
+        throw createError({ statusCode: 404, message: "Member not found" });
+    }
+    const currentRole = String(current.rows[0].role);
+    if (currentRole === "owner") {
+        throw createError({
+            statusCode: 400,
+            message: "Cannot change the organization owner's role",
+        });
+    }
+    // Admins are scoped to managing members. If they could promote
+    // members to admin, they could grant near-owner powers without owner
+    // approval. Restrict admin/admin role transitions to the owner.
+    if (ctx.role === "admin" && (currentRole === "admin" || role === "admin")) {
+        throw createError({
+            statusCode: 403,
+            message: "Only the organization owner can manage admins",
+        });
+    }
+    // Self-demotion guard: prevent the only admin from removing their own
+    // ability to manage things, and prevent the owner-self edge case
+    // (already filtered above by the currentRole check).
+    if (memberEmailLower === ctx.email.toLowerCase() && ctx.role === "admin") {
+        throw createError({
+            statusCode: 400,
+            message: "Use the owner account to change your own admin role",
+        });
+    }
+    await e.execute({
+        sql: `UPDATE org_members SET role = ? WHERE org_id = ? AND LOWER(email) = ?`,
+        args: [role, ctx.orgId, memberEmailLower],
+    });
+    return { email: memberEmailLower, role };
+});
 /** PATCH /_agent-native/org — rename the current organization (owner/admin only) */
 export const updateOrgHandler = defineEventHandler(async (event) => {
     const ctx = await getOrgContext(event);
@@ -523,6 +640,30 @@ export const setDomainHandler = defineEventHandler(async (event) => {
             message: "Invalid domain format",
         });
     }
+    if (raw) {
+        // Auto-join is "anyone with this domain joins automatically". That is
+        // safe for company domains (the company controls who gets an address)
+        // and catastrophic for shared mailbox providers — anyone in the world
+        // could create a matching mailbox and silently join the org.
+        if (isFreeEmailProvider(raw)) {
+            throw createError({
+                statusCode: 400,
+                message: "Free email providers (gmail.com, outlook.com, etc.) cannot be used as an auto-join domain. Use your company's own domain.",
+            });
+        }
+        // Restrict to the admin's own email domain. Without this, an admin
+        // could set `allowed_domain` to a domain they don't control, and
+        // anyone signing up under that domain would join the org. Even with
+        // the free-provider blocklist above, that would still let an admin
+        // hijack a competitor's domain.
+        const ownDomain = ctx.email.split("@")[1]?.toLowerCase() ?? "";
+        if (raw !== ownDomain) {
+            throw createError({
+                statusCode: 400,
+                message: `You can only auto-join your own email domain (${ownDomain}).`,
+            });
+        }
+    }
     const e = await exec();
     if (raw) {
         const existing = await e.execute({