@cedarjs/tenancy 7.0.0-canary.3092

package/dist/web/OrgScope.js

@@ -0,0 +1,107 @@
+import { Fragment, jsx } from "react/jsx-runtime";
+import React from "react";
+import { ApolloProvider } from "@apollo/client/react";
+import { useNoAuth } from "@cedarjs/auth";
+import { navigate, useLocation, useParams } from "@cedarjs/router";
+import { useCreateApolloClient } from "@cedarjs/web/apollo";
+import { getMemberships } from "./getMemberships.js";
+import { hasOrgRole } from "./hasOrgRole.js";
+import { clearOrgClients, dropOrgClient, getOrgClient } from "./orgClients.js";
+import { OrgContext } from "./OrgContext.js";
+const CEDAR_ORG_HEADER = "cedar-org";
+function membershipRoleMap(memberships) {
+  return new Map(memberships.map((m) => [m.organizationId, m.role]));
+}
+function OrgScope({
+  orgSlug: orgSlugProp,
+  notAMember = null,
+  useAuth = useNoAuth,
+  onSetOrg,
+  children
+}) {
+  const params = useParams();
+  const location = useLocation();
+  const createClient = useCreateApolloClient();
+  const { isAuthenticated, currentUser } = useAuth();
+  const orgSlug = orgSlugProp ?? params["orgSlug"];
+  const memberships = getMemberships(currentUser);
+  const userId = typeof currentUser?.["id"] === "string" ? currentUser["id"] : void 0;
+  const membershipSignature = memberships.map((m) => `${m.organizationId}:${m.role}`).sort().join(",");
+  const lastAuthUserIdRef = React.useRef(userId);
+  const lastMembershipsRef = React.useRef(
+    membershipRoleMap(memberships)
+  );
+  const [, forceRenderAfterTeardown] = React.useReducer((c) => c + 1, 0);
+  React.useEffect(() => {
+    const previousUserId = lastAuthUserIdRef.current;
+    const userChanged = previousUserId !== void 0 && previousUserId !== userId;
+    if (!isAuthenticated || userChanged) {
+      lastAuthUserIdRef.current = userId;
+      lastMembershipsRef.current = /* @__PURE__ */ new Map();
+      void clearOrgClients();
+      forceRenderAfterTeardown();
+      return;
+    }
+    lastAuthUserIdRef.current = userId;
+    const nextMemberships = membershipRoleMap(memberships);
+    let dropped = false;
+    if (userId) {
+      for (const [organizationId, role] of lastMembershipsRef.current) {
+        const currentRole = nextMemberships.get(organizationId);
+        if (currentRole === void 0 || currentRole !== role) {
+          void dropOrgClient(userId, organizationId);
+          dropped = true;
+        }
+      }
+    }
+    lastMembershipsRef.current = nextMemberships;
+    if (dropped) {
+      forceRenderAfterTeardown();
+    }
+  }, [isAuthenticated, userId, membershipSignature]);
+  const setOrg = React.useCallback(
+    (idOrSlug) => {
+      if (onSetOrg) {
+        onSetOrg(idOrSlug);
+        return;
+      }
+      const currentSlug = params["orgSlug"];
+      if (!currentSlug) {
+        throw new Error(
+          "useCurrentOrg().setOrg has no orgSlug route param to replace and no onSetOrg prop was given to OrgScope"
+        );
+      }
+      const nextPathname = location.pathname.split("/").map((segment) => segment === currentSlug ? idOrSlug : segment).join("/");
+      navigate(nextPathname + location.search + location.hash);
+    },
+    [onSetOrg, params, location.pathname, location.search, location.hash]
+  );
+  const membership = orgSlug ? memberships.find((m) => m.organization.slug === orgSlug) : void 0;
+  if (!membership || !userId) {
+    return /* @__PURE__ */ jsx(Fragment, { children: notAMember });
+  }
+  const org = {
+    id: membership.organizationId,
+    slug: membership.organization.slug,
+    name: membership.organization.name,
+    role: membership.role,
+    membershipId: membership.id
+  };
+  const orgClient = getOrgClient({
+    userId,
+    organizationId: membership.organizationId,
+    createClient: () => createClient({
+      headers: { [CEDAR_ORG_HEADER]: membership.organizationId }
+    })
+  });
+  const contextValue = {
+    org,
+    memberships,
+    hasOrgRole: (roles, organizationId) => hasOrgRole(memberships, roles, organizationId ?? org.id),
+    setOrg
+  };
+  return /* @__PURE__ */ jsx(ApolloProvider, { client: orgClient, children: /* @__PURE__ */ jsx(OrgContext.Provider, { value: contextValue, children }) });
+}
+export {
+  OrgScope
+};

package/dist/web/getMemberships.d.ts

@@ -0,0 +1,8 @@
+import type { OrgMembership } from './types.js';
+/**
+ * Reads `currentUser.memberships` defensively, since `currentUser` is
+ * `unknown` shape from the app's `useAuth()`. Returns `[]` when it is
+ * missing, not an array, or its entries are not memberships.
+ */
+export declare function getMemberships(currentUser: unknown): OrgMembership[];
+//# sourceMappingURL=getMemberships.d.ts.map

package/dist/web/getMemberships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getMemberships.d.ts","sourceRoot":"","sources":["../../src/web/getMemberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AA+B/C;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,OAAO,GAAG,aAAa,EAAE,CAYpE"}

package/dist/web/getMemberships.js

@@ -0,0 +1,25 @@
+function isOrgMembership(value) {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  const membership = value;
+  const organization = membership["organization"];
+  if (!organization || typeof organization !== "object") {
+    return false;
+  }
+  const org = organization;
+  return typeof membership["id"] === "string" && typeof membership["organizationId"] === "string" && typeof membership["role"] === "string" && typeof org["id"] === "string" && typeof org["slug"] === "string" && typeof org["name"] === "string";
+}
+function getMemberships(currentUser) {
+  if (!currentUser || typeof currentUser !== "object") {
+    return [];
+  }
+  const memberships = currentUser["memberships"];
+  if (!Array.isArray(memberships)) {
+    return [];
+  }
+  return memberships.filter(isOrgMembership);
+}
+export {
+  getMemberships
+};

package/dist/web/hasOrgRole.d.ts

@@ -0,0 +1,12 @@
+import type { OrgMembership } from './types.js';
+/**
+ * Pure role check over a memberships snapshot, with no dependency on auth or
+ * context. `useCurrentOrg().hasOrgRole` and the app's own code (checking a
+ * membership other than the current organization's) both build on this.
+ *
+ * Returns `false` when there is no membership in `organizationId`. An empty
+ * `roles` list returns `true` when a membership exists, matching
+ * `@cedarjs/tenancy`'s server-side `hasOrgRole`.
+ */
+export declare function hasOrgRole(memberships: OrgMembership[] | undefined, roles: string | string[], organizationId: string): boolean;
+//# sourceMappingURL=hasOrgRole.d.ts.map

package/dist/web/hasOrgRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasOrgRole.d.ts","sourceRoot":"","sources":["../../src/web/hasOrgRole.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CACxB,WAAW,EAAE,aAAa,EAAE,GAAG,SAAS,EACxC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EACxB,cAAc,EAAE,MAAM,GACrB,OAAO,CAgBT"}

package/dist/web/hasOrgRole.js

@@ -0,0 +1,16 @@
+function hasOrgRole(memberships, roles, organizationId) {
+  const membership = memberships?.find(
+    (candidate) => candidate.organizationId === organizationId
+  );
+  if (!membership) {
+    return false;
+  }
+  const roleList = Array.isArray(roles) ? roles : [roles];
+  if (roleList.length === 0) {
+    return true;
+  }
+  return roleList.includes(membership.role);
+}
+export {
+  hasOrgRole
+};

package/dist/web/index.d.ts

@@ -0,0 +1,9 @@
+export { getMemberships } from './getMemberships.js';
+export { hasOrgRole } from './hasOrgRole.js';
+export { OrgContext } from './OrgContext.js';
+export type { OrgScopeProps } from './OrgScope.js';
+export { OrgScope } from './OrgScope.js';
+export { clearOrgClients } from './orgClients.js';
+export type { CurrentOrgSummary, OrgContextValue, OrgMembership, } from './types.js';
+export { useCurrentOrg } from './useCurrentOrg.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/web/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/web/index.js

@@ -0,0 +1,14 @@
+import { getMemberships } from "./getMemberships.js";
+import { hasOrgRole } from "./hasOrgRole.js";
+import { OrgContext } from "./OrgContext.js";
+import { OrgScope } from "./OrgScope.js";
+import { clearOrgClients } from "./orgClients.js";
+import { useCurrentOrg } from "./useCurrentOrg.js";
+export {
+  OrgContext,
+  OrgScope,
+  clearOrgClients,
+  getMemberships,
+  hasOrgRole,
+  useCurrentOrg
+};

package/dist/web/orgClients.d.ts

@@ -0,0 +1,27 @@
+import type { ApolloClient } from '@apollo/client';
+export interface GetOrgClientOptions {
+    userId: string;
+    organizationId: string;
+    /** Builds a new client. Only called on a cache miss. */
+    createClient: () => ApolloClient;
+}
+/**
+ * Returns the Apollo client for one user's membership in one organization,
+ * creating and caching it on first use so returning to an organization
+ * reuses its client and cache.
+ */
+export declare function getOrgClient({ userId, organizationId, createClient, }: GetOrgClientOptions): ApolloClient;
+/**
+ * Drops one organization's client, clearing its cache first. Called when a
+ * memberships refresh shows the membership gone or its role changed, so
+ * data cached under the previous authorization does not outlive it.
+ */
+export declare function dropOrgClient(userId: string, organizationId: string): Promise<void>;
+/**
+ * Drops every organization client, clearing each cache first. Called when
+ * `useAuth().isAuthenticated` turns false or `currentUser.id` changes, so a
+ * different user in the same tab is never handed a previous user's client.
+ * Also exported for tests and app logout hooks.
+ */
+export declare function clearOrgClients(): Promise<void>;
+//# sourceMappingURL=orgClients.d.ts.map

package/dist/web/orgClients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgClients.d.ts","sourceRoot":"","sources":["../../src/web/orgClients.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAgBlD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,wDAAwD;IACxD,YAAY,EAAE,MAAM,YAAY,CAAA;CACjC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,EAC3B,MAAM,EACN,cAAc,EACd,YAAY,GACb,EAAE,mBAAmB,GAAG,YAAY,CAYpC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAKrD"}

package/dist/web/orgClients.js

@@ -0,0 +1,37 @@
+const clients = /* @__PURE__ */ new Map();
+function clientKey(userId, organizationId) {
+  return `${userId}:${organizationId}`;
+}
+function getOrgClient({
+  userId,
+  organizationId,
+  createClient
+}) {
+  const key = clientKey(userId, organizationId);
+  const existing = clients.get(key);
+  if (existing) {
+    return existing;
+  }
+  const client = createClient();
+  clients.set(key, client);
+  return client;
+}
+async function dropOrgClient(userId, organizationId) {
+  const key = clientKey(userId, organizationId);
+  const client = clients.get(key);
+  if (!client) {
+    return;
+  }
+  clients.delete(key);
+  await client.clearStore();
+}
+async function clearOrgClients() {
+  const clientsToClear = Array.from(clients.values());
+  clients.clear();
+  await Promise.all(clientsToClear.map((client) => client.clearStore()));
+}
+export {
+  clearOrgClients,
+  dropOrgClient,
+  getOrgClient
+};

package/dist/web/types.d.ts

@@ -0,0 +1,36 @@
+/**
+ * One of the current user's memberships, as `getCurrentUser()` returns them
+ * on the API side (see the plan's "Web entry" section): a snapshot taken at
+ * authentication, refreshed by `reauthenticate()`.
+ */
+export interface OrgMembership {
+    id: string;
+    organizationId: string;
+    role: string;
+    organization: {
+        id: string;
+        slug: string;
+        name: string;
+    };
+}
+/**
+ * The organization `OrgScope` has resolved for the current route, combining
+ * the matching membership with the organization it belongs to.
+ */
+export interface CurrentOrgSummary {
+    id: string;
+    slug: string;
+    name: string;
+    role: string;
+    membershipId: string;
+}
+/**
+ * The value `OrgContext` carries, read through `useCurrentOrg()`.
+ */
+export interface OrgContextValue {
+    org: CurrentOrgSummary | undefined;
+    memberships: OrgMembership[];
+    hasOrgRole(roles: string | string[], organizationId?: string): boolean;
+    setOrg(idOrSlug: string): void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/web/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/web/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,cAAc,EAAE,MAAM,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE;QACZ,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,iBAAiB,GAAG,SAAS,CAAA;IAClC,WAAW,EAAE,aAAa,EAAE,CAAA;IAC5B,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACtE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B"}

package/dist/web/useCurrentOrg.d.ts

@@ -0,0 +1,10 @@
+import type { OrgContextValue } from './types.js';
+/**
+ * Reads the organization `OrgScope` resolved for the current route: the
+ * current organization, the full memberships snapshot, a role check scoped
+ * to it, and `setOrg` to switch organizations.
+ *
+ * Must be called from a component rendered under `OrgScope`.
+ */
+export declare function useCurrentOrg(): OrgContextValue;
+//# sourceMappingURL=useCurrentOrg.d.ts.map

package/dist/web/useCurrentOrg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useCurrentOrg.d.ts","sourceRoot":"","sources":["../../src/web/useCurrentOrg.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,eAAe,CAQ/C"}

package/dist/web/useCurrentOrg.js

@@ -0,0 +1,12 @@
+import React from "react";
+import { OrgContext } from "./OrgContext.js";
+function useCurrentOrg() {
+  const context = React.useContext(OrgContext);
+  if (!context) {
+    throw new Error("useCurrentOrg must be used within an OrgScope");
+  }
+  return context;
+}
+export {
+  useCurrentOrg
+};

package/package.json

@@ -0,0 +1,105 @@
+{
+  "name": "@cedarjs/tenancy",
+  "version": "7.0.0-canary.3092",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cedarjs/cedar.git",
+    "directory": "packages/tenancy"
+  },
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    ".": {
+      "default": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    },
+    "./web": {
+      "default": {
+        "types": "./dist/web/index.d.ts",
+        "default": "./dist/web/index.js"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "!dist/**/*.test.d.*"
+  ],
+  "scripts": {
+    "build": "node ./build.mts",
+    "build:pack": "yarn pack -o cedarjs-tenancy.tgz",
+    "build:types": "tsc --build --verbose ./tsconfig.build.json",
+    "check:attw": "yarn cedar-fwtools-attw",
+    "check:package": "concurrently npm:check:attw yarn publint",
+    "setup:test": "npx prisma db push --accept-data-loss --config ./src/__tests__/prisma.config.ts && npx prisma generate --config ./src/__tests__/prisma.config.ts",
+    "test": "vitest run",
+    "test:types": "yarn setup:test && tstyche",
+    "test:watch": "vitest watch"
+  },
+  "dependencies": {
+    "@cedarjs/api": "7.0.0-canary.3092",
+    "@cedarjs/context": "7.0.0-canary.3092",
+    "@cedarjs/graphql-server": "7.0.0-canary.3092"
+  },
+  "devDependencies": {
+    "@apollo/client": "4.2.12",
+    "@arethetypeswrong/cli": "0.18.5",
+    "@cedarjs/auth": "7.0.0-canary.3092",
+    "@cedarjs/framework-tools": "7.0.0-canary.3092",
+    "@cedarjs/router": "7.0.0-canary.3092",
+    "@cedarjs/web": "7.0.0-canary.3092",
+    "@prisma/adapter-better-sqlite3": "7.10.0",
+    "@prisma/client": "7.10.0",
+    "@testing-library/dom": "10.4.1",
+    "@testing-library/jest-dom": "6.9.1",
+    "@testing-library/react": "16.3.3",
+    "@types/aws-lambda": "8.10.162",
+    "@types/better-sqlite3": "7.6.13",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "better-sqlite3": "12.11.1",
+    "concurrently": "9.2.4",
+    "esbuild": "0.28.2",
+    "graphql": "16.14.2",
+    "jsdom": "27.4.0",
+    "prisma": "7.10.0",
+    "publint": "0.3.24",
+    "react": "19.2.8",
+    "react-dom": "19.2.8",
+    "tstyche": "5.0.2",
+    "typescript": "5.9.3",
+    "vitest": "4.1.11",
+    "zx": "8.8.5"
+  },
+  "peerDependencies": {
+    "@apollo/client": "4.2.12",
+    "@cedarjs/auth": "7.0.0-canary.3092",
+    "@cedarjs/router": "7.0.0-canary.3092",
+    "@cedarjs/web": "7.0.0-canary.3092",
+    "react": "19.2.8"
+  },
+  "peerDependenciesMeta": {
+    "@apollo/client": {
+      "optional": true
+    },
+    "@cedarjs/auth": {
+      "optional": true
+    },
+    "@cedarjs/router": {
+      "optional": true
+    },
+    "@cedarjs/web": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}