@agent-native/core 0.122.3 → 0.123.0

package/dist/org/handlers.d.ts

@@ -21,7 +21,7 @@ export declare const getMyOrgHandler: import("h3").EventHandlerWithFetch<import(
         orgName: string;
     }[];
     allowedDomain: string;
-    a2aSecret: string;
+    a2aSecretSet: boolean;
 }>>;
 /** POST /_agent-native/org — create a new organization */
 export declare const createOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
@@ -95,6 +95,21 @@ export declare const updateOrgHandler: import("h3").EventHandlerWithFetch<import
     orgId: string;
     name: any;
 }>>;
+/**
+ * DELETE /_agent-native/org — permanently delete the current organization
+ * (owner only). Body: { name: string } must match the org's current name
+ * (trim + case-insensitive) as a confirmation guard against misclicks.
+ *
+ * Deletes org_invitations, org-scoped settings, org_members, and the
+ * organizations row, then repoints the caller's active-org-id to another
+ * membership of theirs (or null for Personal) so they aren't left pointing
+ * at a deleted org.
+ */
+export declare const deleteOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    success: boolean;
+    orgId: string;
+    nextOrgId: string;
+}>>;
 /** PUT /_agent-native/org/switch — switch the user's active organization */
 export declare const switchOrgHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     orgId: any;
@@ -111,6 +126,14 @@ export declare const joinByDomainHandler: import("h3").EventHandlerWithFetch<imp
 export declare const setDomainHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     domain: any;
 }>>;
+/**
+ * GET /_agent-native/org/a2a-secret — reveal the org's A2A secret
+ * (owner/admin only). Separate from `/org/me` so the secret is only ever sent
+ * to the browser when an operator explicitly asks to see or copy it.
+ */
+export declare const revealA2ASecretHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
+    a2aSecret: string;
+}>>;
 /** PUT /_agent-native/org/a2a-secret — regenerate or set the org's A2A secret (owner/admin only) */
 export declare const setA2ASecretHandler: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<{
     a2aSecret: any;

package/dist/org/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAkB1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GA0EzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAe3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cA2CH,OAAO;;;;;GAQjC,CAAC;AAqBH,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAsED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;GAuEnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;;GAyBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAoD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;GAqEnC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GAsE3B,CAAC;AAEH,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GA6DnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/org/handlers.ts"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAkB1C,2FAA2F;AAC3F,eAAO,MAAM,eAAe;;;;;;;cAaA,OAAO;;;;;;;;;;eAIC,MAAM;iBAAW,MAAM;;;;GAgFzD,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB;;;;GAe3B,CAAC;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;cA2CH,OAAO;;;;;GAQjC,CAAC;AAqBH,UAAU,kBAAkB;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAsED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;GAuEnC,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,sBAAsB;;;;;;;;;GAyBlC,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB;;;UAoD8B,OAAO;GAkBxE,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,mBAAmB;;GA2D/B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;GAqEnC,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,gBAAgB;;;GA4B3B,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;GAuF3B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;UAkCC,OAAO;GAEnC,CAAC;AAEH,mGAAmG;AACnG,eAAO,MAAM,mBAAmB;;;UAqDR,OAAO;GAG9B,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gBAAgB;;GAsE3B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;GA0BlC,CAAC;AAEF,oGAAoG;AACpG,eAAO,MAAM,mBAAmB;;;GA0C/B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,oBAAoB;;;;;YA2DvB,MAAM;cACJ,MAAM;aACP,MAAM;YACP,OAAO;iBACF,MAAM;gBACP,MAAM;;GA6DnB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB;;;GAgGnC,CAAC"}

package/dist/org/handlers.js

@@ -27,14 +27,14 @@ function extractMemberEmail(event) {
 }
 const nanoid = () => globalThis.crypto?.randomUUID?.().replace(/-/g, "") ??
     Math.random().toString(36).slice(2) + Date.now().toString(36);
-import { getDbExec } from "../db/client.js";
+import { getDbExec, isPostgres } from "../db/client.js";
 import { ssrfSafeFetch } from "../extensions/url-safety.js";
 import { getAppProductionUrl } from "../server/app-url.js";
 import { getSession } from "../server/auth.js";
 import { renderInviteEmail } from "../server/email-templates.js";
 import { sendEmail, isEmailConfigured } from "../server/email.js";
 import { readBody } from "../server/h3-helpers.js";
-import { putUserSetting } from "../settings/user-settings.js";
+import { setActiveOrgId } from "./active-org.js";
 import { getOrgContext, createOrganization } from "./context.js";
 import { isFreeEmailProvider } from "./free-email-providers.js";
 function getInviteAppUrl(event) {
@@ -92,7 +92,7 @@ export const getMyOrgHandler = defineEventHandler(async (event) => {
         }
     }
     let allowedDomain = null;
-    let a2aSecret = null;
+    let a2aSecretSet = false;
     if (ctx.orgId) {
         try {
             const adRes = await e.execute({
@@ -102,7 +102,7 @@ export const getMyOrgHandler = defineEventHandler(async (event) => {
             if (adRes.rows[0]) {
                 allowedDomain =
                     String(adRes.rows[0].allowed_domain ?? "") || null;
-                a2aSecret = String(adRes.rows[0].a2a_secret ?? "") || null;
+                a2aSecretSet = Boolean(String(adRes.rows[0].a2a_secret ?? "").trim());
             }
         }
         catch {
@@ -136,7 +136,11 @@ export const getMyOrgHandler = defineEventHandler(async (event) => {
         pendingInvitations,
         domainMatches,
         allowedDomain,
-        a2aSecret: isOwnerOrAdmin ? a2aSecret : undefined,
+        // Never serialize the A2A secret here. This route runs on every page load,
+        // so the value would sit in JSON any script on the page can read, and it
+        // signs the JWTs peers accept as first-party callers. Reveal is an explicit
+        // owner/admin GET on /_agent-native/org/a2a-secret.
+        a2aSecretSet: isOwnerOrAdmin ? a2aSecretSet : undefined,
     };
 });
 /** POST /_agent-native/org — create a new organization */
@@ -394,7 +398,7 @@ export const acceptInvitationHandler = defineEventHandler(async (event) => {
             sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,
             args: [invitationId],
         });
-        await putUserSetting(email, "active-org-id", { orgId: invOrgId });
+        await setActiveOrgId(email, invOrgId, "accepted invitation");
         return {
             orgId: invOrgId,
             orgName,
@@ -409,7 +413,7 @@ export const acceptInvitationHandler = defineEventHandler(async (event) => {
         sql: `UPDATE org_invitations SET status = 'accepted' WHERE id = ?`,
         args: [invitationId],
     });
-    await putUserSetting(email, "active-org-id", { orgId: invOrgId });
+    await setActiveOrgId(email, invOrgId, "accepted invitation");
     return { orgId: invOrgId, orgName, role: inviteRole };
 });
 /** DELETE /_agent-native/org/members/:email — remove a member (owner/admin only) */
@@ -561,6 +565,93 @@ export const updateOrgHandler = defineEventHandler(async (event) => {
     });
     return { orgId: ctx.orgId, name };
 });
+/**
+ * DELETE /_agent-native/org — permanently delete the current organization
+ * (owner only). Body: { name: string } must match the org's current name
+ * (trim + case-insensitive) as a confirmation guard against misclicks.
+ *
+ * Deletes org_invitations, org-scoped settings, org_members, and the
+ * organizations row, then repoints the caller's active-org-id to another
+ * membership of theirs (or null for Personal) so they aren't left pointing
+ * at a deleted org.
+ */
+export const deleteOrgHandler = defineEventHandler(async (event) => {
+    const ctx = await getOrgContext(event);
+    if (!ctx.orgId) {
+        throw createError({ statusCode: 400, message: "No active organization" });
+    }
+    if (ctx.role !== "owner") {
+        throw createError({
+            statusCode: 403,
+            message: "Only the organization owner can delete an organization",
+        });
+    }
+    const body = await readBody(event);
+    const confirmName = String(body?.name ?? "").trim();
+    const e = await exec();
+    const orgRes = await e.execute({
+        sql: `SELECT name FROM organizations WHERE id = ? LIMIT 1`,
+        args: [ctx.orgId],
+    });
+    if (orgRes.rows.length === 0) {
+        throw createError({ statusCode: 404, message: "Organization not found" });
+    }
+    const actualName = String(orgRes.rows[0].name ?? "").trim();
+    if (confirmName.toLowerCase() !== actualName.toLowerCase()) {
+        throw createError({
+            statusCode: 400,
+            message: "Organization name does not match",
+        });
+    }
+    const settingsTable = isPostgres() ? "public.settings" : "settings";
+    const settingsPrefix = `o:${ctx.orgId}:`.replace(/[!%_]/g, (character) => `!${character}`);
+    const deleteStatements = [
+        {
+            sql: `DELETE FROM org_invitations WHERE org_id = ?`,
+            args: [ctx.orgId],
+        },
+        {
+            sql: `DELETE FROM app_secrets WHERE scope IN ('org', 'workspace') AND scope_id = ?`,
+            args: [ctx.orgId],
+        },
+        {
+            sql: `DELETE FROM ${settingsTable} WHERE key LIKE ? ESCAPE '!'`,
+            args: [`${settingsPrefix}%`],
+        },
+        {
+            sql: `DELETE FROM org_members WHERE org_id = ?`,
+            args: [ctx.orgId],
+        },
+        {
+            sql: `DELETE FROM organizations WHERE id = ?`,
+            args: [ctx.orgId],
+        },
+    ];
+    if (e.transaction) {
+        await e.transaction(async (tx) => {
+            for (const statement of deleteStatements)
+                await tx.execute(statement);
+        });
+    }
+    else if (e.atomicBatch) {
+        await e.atomicBatch(deleteStatements);
+    }
+    else {
+        throw createError({
+            statusCode: 503,
+            message: "Organization deletion requires atomic database support",
+        });
+    }
+    const nextRes = await e.execute({
+        sql: `SELECT org_id AS "orgId" FROM org_members WHERE LOWER(email) = ? LIMIT 1`,
+        args: [ctx.email.toLowerCase()],
+    });
+    const nextOrgId = nextRes.rows.length > 0
+        ? String(nextRes.rows[0].orgId ?? nextRes.rows[0].org_id)
+        : null;
+    await setActiveOrgId(ctx.email, nextOrgId, "deleted active organization");
+    return { success: true, orgId: ctx.orgId, nextOrgId };
+});
 /** PUT /_agent-native/org/switch — switch the user's active organization */
 export const switchOrgHandler = defineEventHandler(async (event) => {
     const session = await getSession(event);
@@ -568,7 +659,7 @@ export const switchOrgHandler = defineEventHandler(async (event) => {
     const body = await readBody(event);
     const orgId = body?.orgId;
     if (!orgId) {
-        await putUserSetting(email, "active-org-id", { orgId: null });
+        await setActiveOrgId(email, null, "cleared active organization");
         return { orgId: null, orgName: null, role: null };
     }
     const e = await exec();
@@ -585,7 +676,7 @@ export const switchOrgHandler = defineEventHandler(async (event) => {
             message: "You are not a member of that organization",
         });
     }
-    await putUserSetting(email, "active-org-id", { orgId });
+    await setActiveOrgId(email, orgId, "user switched organization");
     const row = membership.rows[0];
     return {
         orgId,
@@ -633,7 +724,7 @@ export const joinByDomainHandler = defineEventHandler(async (event) => {
         sql: `INSERT INTO org_members (id, org_id, email, role, joined_at) VALUES (?, ?, ?, 'member', ?)`,
         args: [nanoid(), orgId, email, Date.now()],
     });
-    await putUserSetting(email, "active-org-id", { orgId });
+    await setActiveOrgId(email, orgId, "joined domain-matched organization");
     return {
         orgId,
         orgName: String(org.name),
@@ -703,6 +794,34 @@ export const setDomainHandler = defineEventHandler(async (event) => {
     });
     return { domain: raw };
 });
+/**
+ * GET /_agent-native/org/a2a-secret — reveal the org's A2A secret
+ * (owner/admin only). Separate from `/org/me` so the secret is only ever sent
+ * to the browser when an operator explicitly asks to see or copy it.
+ */
+export const revealA2ASecretHandler = defineEventHandler(async (event) => {
+    const ctx = await getOrgContext(event);
+    if (!ctx.orgId) {
+        throw createError({
+            statusCode: 400,
+            message: "No active organization",
+        });
+    }
+    if (ctx.role !== "owner" && ctx.role !== "admin") {
+        throw createError({
+            statusCode: 403,
+            message: "Only owners and admins can read the A2A secret",
+        });
+    }
+    const e = await exec();
+    const res = await e.execute({
+        sql: `SELECT a2a_secret FROM organizations WHERE id = ? LIMIT 1`,
+        args: [ctx.orgId],
+    });
+    return {
+        a2aSecret: String(res.rows[0]?.a2a_secret ?? "") || null,
+    };
+});
 /** PUT /_agent-native/org/a2a-secret — regenerate or set the org's A2A secret (owner/admin only) */
 export const setA2ASecretHandler = defineEventHandler(async (event) => {
     const ctx = await getOrgContext(event);