@augmenting-integrations/auth 8.8.0 → 8.10.0

package/dist/server/invitations.d.ts

@@ -1,5 +1,11 @@
 import "server-only";
 import type { Session } from "next-auth";
+export declare const INVITATION_TTL_HOURS = 72;
+/** 32 random bytes -> base64url, no padding. 256 bits of entropy in 43 chars. */
+export declare function defaultGenerateInvitationToken(): string;
+export declare function defaultInvitationExpiresAt(now?: Date): Date;
+export declare function defaultBuildInvitationUrl(token: string, origin: string): string;
+export declare function defaultRenderInvitationEmail(ctx: InvitationEmailContext): RenderedEmail;
 type AuthFn = () => Promise<Session | null>;
 export type InvitationSendAppUser = {
     id: bigint | string | number;
@@ -58,10 +64,14 @@ export type CreateInvitationSendHandlersOptions = {
     resolveInviteScope: (caller: InvitationSendAppUser, overrideParentId: bigint | null) => bigint | string | number | null;
     /** Optional allow-list. If provided, body.role must be one of these. */
     allowedRoles?: string[];
-    generateInvitationToken: () => string;
-    invitationExpiresAt: () => Date;
-    buildInvitationUrl: (token: string, origin: string) => string;
-    renderInvitationEmail: (ctx: InvitationEmailContext) => RenderedEmail;
+    /** Optional. Defaults to {@link defaultGenerateInvitationToken}. */
+    generateInvitationToken?: () => string;
+    /** Optional. Defaults to {@link defaultInvitationExpiresAt}. */
+    invitationExpiresAt?: () => Date;
+    /** Optional. Defaults to {@link defaultBuildInvitationUrl}. */
+    buildInvitationUrl?: (token: string, origin: string) => string;
+    /** Optional. Defaults to {@link defaultRenderInvitationEmail}. */
+    renderInvitationEmail?: (ctx: InvitationEmailContext) => RenderedEmail;
     sendEmail: (args: {
         to: string;
         subject: string;

package/dist/server/invitations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../src/server/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBzC,KAAK,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAE5C,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3C,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7B,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE;QACJ,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;KAC7E,CAAC;IACF,UAAU,EAAE;QACV,MAAM,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,qBAAqB,CAAA;SAAE,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;KAClF,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACzE,oDAAoD;IACpD,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C;;;OAGG;IACH,kBAAkB,EAAE,CAClB,MAAM,EAAE,qBAAqB,EAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,KAC5B,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACrC,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,uBAAuB,EAAE,MAAM,MAAM,CAAC;IACtC,mBAAmB,EAAE,MAAM,IAAI,CAAC;IAChC,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9D,qBAAqB,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,aAAa,CAAC;IACtE,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAUF,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,mCAAmC;;wBAE5D,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;;EA2GpD"}
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../src/server/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBzC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,iFAAiF;AACjF,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED,wBAAgB,0BAA0B,CAAC,GAAG,GAAE,IAAiB,GAAG,IAAI,CAIvE;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAI/E;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,sBAAsB,GAAG,aAAa,CAgCvF;AAeD,KAAK,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAE5C,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3C,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7B,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE;QACJ,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE;gBAAE,KAAK,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;KAC7E,CAAC;IACF,UAAU,EAAE;QACV,MAAM,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,qBAAqB,CAAA;SAAE,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;KAClF,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACzE,oDAAoD;IACpD,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C;;;OAGG;IACH,kBAAkB,EAAE,CAClB,MAAM,EAAE,qBAAqB,EAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,KAC5B,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACrC,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,oEAAoE;IACpE,uBAAuB,CAAC,EAAE,MAAM,MAAM,CAAC;IACvC,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;IACjC,+DAA+D;IAC/D,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/D,kEAAkE;IAClE,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,sBAAsB,KAAK,aAAa,CAAC;IACvE,SAAS,EAAE,CAAC,IAAI,EAAE;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAUF,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,mCAAmC;;wBAQ5D,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;;EA2GpD"}

package/dist/server/profile-settings.d.ts

@@ -0,0 +1,56 @@
+import "server-only";
+import type { Session } from "next-auth";
+import type { ZodTypeAny, z } from "zod";
+type AuthFn = () => Promise<Session | null>;
+export type ProfileSettingsAppUser = {
+    id: bigint | string | number;
+};
+export type ProfileSettingsDb = {
+    user: {
+        update: (args: {
+            where: {
+                id: bigint | string | number;
+            };
+            data: Record<string, unknown>;
+            select?: Record<string, true>;
+        }) => Promise<Record<string, unknown>>;
+    };
+};
+export type ProfileSettingsSection = "profile" | "account";
+export type SectionConfig<TSchema extends ZodTypeAny> = {
+    /**
+     * Zod schema for the request body. The spoke decides which fields are
+     * accepted. Use `.strict()` to reject unknown keys; otherwise Zod will
+     * silently strip them and the library cannot enforce that boundary.
+     */
+    schema: TSchema;
+    /**
+     * Map the parsed payload to the exact Prisma User patch. The library
+     * does NOT infer columns from schema keys; the spoke chooses what gets
+     * written. Returning an empty object writes nothing.
+     */
+    toPatch: (parsed: z.infer<TSchema>) => Record<string, unknown>;
+    /** Optional Prisma select shape for the response body. */
+    select?: Record<string, true>;
+};
+export type CreateProfileSettingsHandlersOptions<TProfileSchema extends ZodTypeAny = ZodTypeAny, TAccountSchema extends ZodTypeAny = ZodTypeAny> = {
+    auth: AuthFn;
+    getDb: () => Promise<ProfileSettingsDb>;
+    getOrCreateAppUser: (session: Session) => Promise<ProfileSettingsAppUser>;
+    sections: {
+        profile: SectionConfig<TProfileSchema>;
+        account: SectionConfig<TAccountSchema>;
+    };
+    /** Invoked once per successful update with the section name + applied patch. */
+    afterUpdate?: (user: ProfileSettingsAppUser, section: ProfileSettingsSection, patch: Record<string, unknown>) => Promise<void>;
+};
+export declare function createProfileSettingsHandlers<TProfileSchema extends ZodTypeAny, TAccountSchema extends ZodTypeAny>(opts: CreateProfileSettingsHandlersOptions<TProfileSchema, TAccountSchema>): {
+    profile: {
+        PATCH: (request: Request) => Promise<Response>;
+    };
+    account: {
+        PATCH: (request: Request) => Promise<Response>;
+    };
+};
+export {};
+//# sourceMappingURL=profile-settings.d.ts.map

package/dist/server/profile-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-settings.d.ts","sourceRoot":"","sources":["../../src/server/profile-settings.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,CAAC;AAErB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBzC,KAAK,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAE5C,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE;QACJ,MAAM,EAAE,CAAC,IAAI,EAAE;YACb,KAAK,EAAE;gBAAE,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;aAAE,CAAC;YACxC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;SAC/B,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KACxC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,SAAS,CAAC;AAE3D,MAAM,MAAM,aAAa,CAAC,OAAO,SAAS,UAAU,IAAI;IACtD;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,oCAAoC,CAC9C,cAAc,SAAS,UAAU,GAAG,UAAU,EAC9C,cAAc,SAAS,UAAU,GAAG,UAAU,IAC5C;IACF,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxC,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1E,QAAQ,EAAE;QACR,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;QACvC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;KACxC,CAAC;IACF,gFAAgF;IAChF,WAAW,CAAC,EAAE,CACZ,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,CAAC;AAoDF,wBAAgB,6BAA6B,CAC3C,cAAc,SAAS,UAAU,EACjC,cAAc,SAAS,UAAU,EACjC,IAAI,EAAE,oCAAoC,CAAC,cAAc,EAAE,cAAc,CAAC;;yBArCnD,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;;;yBAA3B,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;;EA0CnD"}

package/dist/server.cjs

@@ -33,13 +33,19 @@ __export(server_exports, {
   AuthError: () => AuthError,
   IMPERSONATE_COOKIE_NAME: () => IMPERSONATE_COOKIE_NAME,
   IMPERSONATE_TTL_SECONDS: () => IMPERSONATE_TTL_SECONDS,
+  INVITATION_TTL_HOURS: () => INVITATION_TTL_HOURS,
   createAuth: () => createAuth,
   createGetOrCreateAppUser: () => createGetOrCreateAppUser,
   createImpersonateHandlers: () => createImpersonateHandlers,
   createInvitationHandlers: () => createInvitationHandlers,
   createInvitationSendHandlers: () => createInvitationSendHandlers,
   createMeHandler: () => createMeHandler,
+  createProfileSettingsHandlers: () => createProfileSettingsHandlers,
   createSettingsHandlers: () => createSettingsHandlers,
+  defaultBuildInvitationUrl: () => defaultBuildInvitationUrl,
+  defaultGenerateInvitationToken: () => defaultGenerateInvitationToken,
+  defaultInvitationExpiresAt: () => defaultInvitationExpiresAt,
+  defaultRenderInvitationEmail: () => defaultRenderInvitationEmail,
   getUserGroups: () => getUserGroups,
   hasGroup: () => hasGroup,
   mintImpersonationToken: () => mintImpersonationToken,
@@ -741,16 +747,121 @@ function createSettingsHandlers(opts) {
   return { passwordChange, twoFactorSetup, twoFactorVerify, twoFactorDisable };
 }
 
-// src/server/invitations.ts
+// src/server/profile-settings.ts
 var import_server_only5 = require("server-only");
 var import_server4 = require("next/server");
+function unauthorized() {
+  return import_server4.NextResponse.json(
+    { error: "unauthorized", code: "unauthorized" },
+    { status: 401 }
+  );
+}
+function jsonValidation2(issues) {
+  return import_server4.NextResponse.json({ error: "invalid_body", issues }, { status: 400 });
+}
+function makeHandler(section, config, opts) {
+  return async (request) => {
+    const session = await opts.auth();
+    if (!session?.user) return unauthorized();
+    let body;
+    try {
+      body = await request.json();
+    } catch {
+      return import_server4.NextResponse.json(
+        { error: "invalid_json", code: "validation" },
+        { status: 400 }
+      );
+    }
+    const parsed = config.schema.safeParse(body);
+    if (!parsed.success) return jsonValidation2(parsed.error.issues);
+    const user = await opts.getOrCreateAppUser(session);
+    const patch = config.toPatch(parsed.data);
+    const db = await opts.getDb();
+    const updated = await db.user.update({
+      where: { id: user.id },
+      data: patch,
+      ...config.select ? { select: config.select } : {}
+    });
+    if (opts.afterUpdate) {
+      await opts.afterUpdate(user, section, patch);
+    }
+    return import_server4.NextResponse.json(updated);
+  };
+}
+function createProfileSettingsHandlers(opts) {
+  return {
+    profile: { PATCH: makeHandler("profile", opts.sections.profile, opts) },
+    account: { PATCH: makeHandler("account", opts.sections.account, opts) }
+  };
+}
+
+// src/server/invitations.ts
+var import_server_only6 = require("server-only");
+var import_node_crypto = require("crypto");
+var import_server5 = require("next/server");
+var INVITATION_TTL_HOURS = 72;
+function defaultGenerateInvitationToken() {
+  return (0, import_node_crypto.randomBytes)(32).toString("base64url");
+}
+function defaultInvitationExpiresAt(now = /* @__PURE__ */ new Date()) {
+  const expires = new Date(now);
+  expires.setHours(expires.getHours() + INVITATION_TTL_HOURS);
+  return expires;
+}
+function defaultBuildInvitationUrl(token, origin) {
+  const trimmed = origin.replace(/\/+$/u, "");
+  return `${trimmed}/invitations/${token}`;
+}
+function defaultRenderInvitationEmail(ctx) {
+  const {
+    inviterName,
+    inviteeEmail,
+    intendedRole,
+    invitationUrl,
+    appDisplayName,
+    expiresAt
+  } = ctx;
+  const subject = `${appDisplayName} | You've been invited`;
+  const expiresIso = expiresAt.toISOString();
+  const html = `<!doctype html>
+<html>
+  <body style="font-family: system-ui, sans-serif; max-width: 560px; margin: 0 auto; padding: 24px;">
+    <h1 style="font-size: 20px; margin: 0 0 16px;">You've been invited to ${escapeHtml(appDisplayName)}</h1>
+    <p>${escapeHtml(inviterName)} invited <strong>${escapeHtml(inviteeEmail)}</strong> to join their team as <strong>${escapeHtml(intendedRole)}</strong>.</p>
+    <p>
+      <a href="${escapeAttr(invitationUrl)}" style="display: inline-block; padding: 10px 16px; background: #111; color: #fff; text-decoration: none; border-radius: 6px;">Accept invitation</a>
+    </p>
+    <p style="color: #555; font-size: 13px;">This invitation expires at ${escapeHtml(expiresIso)}. If you didn't expect this, you can ignore this email.</p>
+  </body>
+</html>`;
+  const text = [
+    `You've been invited to ${appDisplayName}`,
+    "",
+    `${inviterName} invited ${inviteeEmail} to join their team as ${intendedRole}.`,
+    "",
+    `Accept the invitation: ${invitationUrl}`,
+    "",
+    `This invitation expires at ${expiresIso}.`
+  ].join("\n");
+  return { subject, html, text };
+}
+function escapeHtml(s) {
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function escapeAttr(s) {
+  return escapeHtml(s);
+}
 var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 var ROLE_RE = /^[a-z_]+$/;
 var PARENT_RE = /^\d+$/;
 function jsonError(status, error, code, extra) {
-  return import_server4.NextResponse.json({ error, code, ...extra ?? {} }, { status });
+  return import_server5.NextResponse.json({ error, code, ...extra ?? {} }, { status });
 }
 function createInvitationSendHandlers(opts) {
+  const generateInvitationToken = opts.generateInvitationToken ?? defaultGenerateInvitationToken;
+  const invitationExpiresAt = opts.invitationExpiresAt ?? defaultInvitationExpiresAt;
+  const buildInvitationUrl = opts.buildInvitationUrl ?? defaultBuildInvitationUrl;
+  const renderInvitationEmail = opts.renderInvitationEmail ?? defaultRenderInvitationEmail;
   const send = {
     POST: async (request) => {
       const session = await opts.auth();
@@ -798,8 +909,8 @@ function createInvitationSendHandlers(opts) {
       if (existing) {
         return jsonError(409, "user with that email already exists", "conflict");
       }
-      const token = opts.generateInvitationToken();
-      const expiresAt = opts.invitationExpiresAt();
+      const token = generateInvitationToken();
+      const expiresAt = invitationExpiresAt();
       const invitation = await db.invitation.create({
         data: {
           token,
@@ -811,8 +922,8 @@ function createInvitationSendHandlers(opts) {
         }
       });
       const origin = opts.appDomainEnv ? `https://${opts.appDomainEnv}` : new URL(request.url).origin;
-      const invitationUrl = opts.buildInvitationUrl(token, origin);
-      const rendered = opts.renderInvitationEmail({
+      const invitationUrl = buildInvitationUrl(token, origin);
+      const rendered = renderInvitationEmail({
         inviterName: caller.name,
         inviteeEmail: email,
         intendedRole: role,
@@ -829,7 +940,7 @@ function createInvitationSendHandlers(opts) {
         });
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
-        return import_server4.NextResponse.json(
+        return import_server5.NextResponse.json(
           {
             invitationId: invitation.id.toString(),
             expiresAt: invitation.expires_at.toISOString(),
@@ -838,7 +949,7 @@ function createInvitationSendHandlers(opts) {
           { status: 202 }
         );
       }
-      return import_server4.NextResponse.json(
+      return import_server5.NextResponse.json(
         {
           invitationId: invitation.id.toString(),
           expiresAt: invitation.expires_at.toISOString()
@@ -854,13 +965,19 @@ function createInvitationSendHandlers(opts) {
   AuthError,
   IMPERSONATE_COOKIE_NAME,
   IMPERSONATE_TTL_SECONDS,
+  INVITATION_TTL_HOURS,
   createAuth,
   createGetOrCreateAppUser,
   createImpersonateHandlers,
   createInvitationHandlers,
   createInvitationSendHandlers,
   createMeHandler,
+  createProfileSettingsHandlers,
   createSettingsHandlers,
+  defaultBuildInvitationUrl,
+  defaultGenerateInvitationToken,
+  defaultInvitationExpiresAt,
+  defaultRenderInvitationEmail,
   getUserGroups,
   hasGroup,
   mintImpersonationToken,