@elevasis/core 0.11.2 → 0.12.0

package/src/auth/multi-tenancy/memberships/membership.ts

@@ -1,138 +1,130 @@
-import type { MembershipFeatureConfig } from '../types'
-import { type MembershipStatus } from './api-schemas.js'
-
-export type { MembershipStatus }
-
-/**
- * Organization Membership types based on WorkOS API
- */
-
-export interface OrganizationMembership {
-  object: 'organization_membership'
-  id: string
-  userId: string
-  organizationId: string
-  role: {
-    slug: string
-  }
-  status: 'active' | 'inactive'
-  createdAt: string
-  updatedAt: string
-}
-
-/**
- * Request interfaces for membership operations
- */
-export interface CreateMembershipRequest {
-  userId: string
-  organizationId: string
-  roleSlug?: string
-}
-
-export interface UpdateMembershipRequest {
-  roleSlug: string
-}
-
-export interface ListMembershipsParams {
-  userId?: string
-  organizationId?: string
-  statuses?: MembershipStatus[]
-  limit?: number
-  before?: string
-  after?: string
-  order?: 'asc' | 'desc'
-}
-
-/**
- * Response interfaces
- */
-export interface ListMembershipsResponse {
-  data: OrganizationMembership[]
-  listMetadata?: {
-    before?: string | null
-    after?: string | null
-  }
-}
-
-/**
- * Extended membership with user and organization details for UI
- */
-export interface MembershipWithDetails extends OrganizationMembership {
-  user?: {
-    id: string
-    email: string
-    firstName?: string
-    lastName?: string
-    profilePictureUrl?: string
-  }
-  organization?: {
-    id: string
-    name: string
-    workos_org_id: string
-    primaryDomain?: string
-    is_test?: boolean
-    status?: string
-    metadata?: Record<string, unknown>
-    config?: Record<string, unknown>
-  }
-  config?: MembershipFeatureConfig
-}
-
-/**
- * UI-specific membership table row data
- */
-export interface MembershipTableRow {
-  id: string
-  userId: string
-  organizationId: string
-  userEmail: string
-  userFullName: string
-  organizationName: string
-  role: string
-  status: MembershipStatus
-  statusBadge: 'active' | 'inactive'
-  joinedAt: Date
-  updatedAt: Date
-  canEdit: boolean
-  canRemove: boolean
-}
-
-/**
- * Transform membership to table row format
- */
-export function transformMembershipToTableRow(membership: MembershipWithDetails): MembershipTableRow {
-  return {
-    id: membership.id,
-    userId: membership.userId,
-    organizationId: membership.organizationId,
-    userEmail: membership.user?.email || 'Unknown',
-    userFullName:
-      membership.user?.firstName && membership.user?.lastName
-        ? `${membership.user.firstName} ${membership.user.lastName}`
-        : membership.user?.email || 'Unknown User',
-    organizationName: membership.organization?.name || 'Unknown Organization',
-    role: membership.role.slug,
-    status: membership.status,
-    statusBadge: membership.status,
-    joinedAt: new Date(membership.createdAt),
-    updatedAt: new Date(membership.updatedAt),
-    canEdit: membership.status === 'active',
-    canRemove: true
-  }
-}
-
-/**
- * Membership status color mapping for UI
- */
-export const MEMBERSHIP_STATUS_COLORS = {
-  active: 'green',
-  inactive: 'gray'
-} as const
-
-/**
- * Membership role options (can be extended)
- */
-export const DEFAULT_MEMBERSHIP_ROLES = [
-  { value: 'admin', label: 'Admin' },
-  { value: 'member', label: 'Member' }
-] as const
+import type { MembershipFeatureConfig } from '../types'
+import { type MembershipStatus } from './api-schemas.js'
+
+export type { MembershipStatus }
+
+/**
+ * Organization Membership types based on WorkOS API
+ */
+
+export interface OrganizationMembership {
+  object: 'organization_membership'
+  id: string
+  userId: string
+  organizationId: string
+  role: {
+    slug: string
+  }
+  status: 'active' | 'inactive'
+  createdAt: string
+  updatedAt: string
+}
+
+/**
+ * Request interfaces for membership operations
+ */
+export interface CreateMembershipRequest {
+  userId: string
+  organizationId: string
+  roleSlug?: string
+}
+
+export interface UpdateMembershipRequest {
+  roleSlug: string
+}
+
+export interface ListMembershipsParams {
+  userId?: string
+  organizationId?: string
+  statuses?: MembershipStatus[]
+  limit?: number
+  before?: string
+  after?: string
+  order?: 'asc' | 'desc'
+}
+
+/**
+ * Response interfaces
+ */
+export interface ListMembershipsResponse {
+  data: OrganizationMembership[]
+  listMetadata?: {
+    before?: string | null
+    after?: string | null
+  }
+}
+
+/**
+ * Extended membership with user and organization details for UI
+ */
+export interface MembershipWithDetails extends OrganizationMembership {
+  user?: {
+    id: string
+    email: string
+    firstName?: string
+    lastName?: string
+    profilePictureUrl?: string
+  }
+  organization?: {
+    id: string
+    name: string
+    workos_org_id: string
+    primaryDomain?: string
+    is_test?: boolean
+    status?: string
+    metadata?: Record<string, unknown>
+    config?: Record<string, unknown>
+  }
+  config?: MembershipFeatureConfig
+}
+
+/**
+ * UI-specific membership table row data
+ */
+export interface MembershipTableRow {
+  id: string
+  userId: string
+  organizationId: string
+  userEmail: string
+  userFullName: string
+  organizationName: string
+  role: string
+  status: MembershipStatus
+  statusBadge: 'active' | 'inactive'
+  joinedAt: Date
+  updatedAt: Date
+  canEdit: boolean
+  canRemove: boolean
+}
+
+/**
+ * Transform membership to table row format
+ */
+export function transformMembershipToTableRow(membership: MembershipWithDetails): MembershipTableRow {
+  return {
+    id: membership.id,
+    userId: membership.userId,
+    organizationId: membership.organizationId,
+    userEmail: membership.user?.email || 'Unknown',
+    userFullName:
+      membership.user?.firstName && membership.user?.lastName
+        ? `${membership.user.firstName} ${membership.user.lastName}`
+        : membership.user?.email || 'Unknown User',
+    organizationName: membership.organization?.name || 'Unknown Organization',
+    role: membership.role.slug,
+    status: membership.status,
+    statusBadge: membership.status,
+    joinedAt: new Date(membership.createdAt),
+    updatedAt: new Date(membership.updatedAt),
+    canEdit: membership.status === 'active',
+    canRemove: true
+  }
+}
+
+/**
+ * Membership status color mapping for UI
+ */
+export const MEMBERSHIP_STATUS_COLORS = {
+  active: 'green',
+  inactive: 'gray'
+} as const

package/src/auth/multi-tenancy/role-management/api-schemas.ts

@@ -0,0 +1,78 @@
+import { z } from 'zod'
+
+const PermissionKeySchema = z.string().min(1).max(100)
+
+export const OrgRoleParamsSchema = z
+  .object({
+    orgId: z.string().uuid(),
+    roleId: z.string().uuid()
+  })
+  .strict()
+
+export const OrgRolesParamsSchema = z
+  .object({
+    orgId: z.string().uuid()
+  })
+  .strict()
+
+export const MembershipRoleParamsSchema = z
+  .object({
+    membershipId: z.string().min(1),
+    roleId: z.string().uuid()
+  })
+  .strict()
+
+export const MembershipParamsSchema = z
+  .object({
+    membershipId: z.string().min(1)
+  })
+  .strict()
+
+export const CreateOrgRoleRequestSchema = z
+  .object({
+    name: z.string().min(1).max(100).trim(),
+    slug: z
+      .string()
+      .min(1)
+      .max(100)
+      .regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/, 'Role slug must be lowercase letters, numbers, dashes, or underscores'),
+    description: z.string().max(500).trim().optional(),
+    permissionKeys: z.array(PermissionKeySchema).default([])
+  })
+  .strict()
+
+export const UpdateOrgRoleRequestSchema = z
+  .object({
+    name: z.string().min(1).max(100).trim().optional(),
+    slug: z
+      .string()
+      .min(1)
+      .max(100)
+      .regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/, 'Role slug must be lowercase letters, numbers, dashes, or underscores')
+      .optional(),
+    description: z.string().max(500).trim().nullable().optional(),
+    permissionKeys: z.array(PermissionKeySchema).optional()
+  })
+  .strict()
+  .refine(
+    (data) =>
+      data.name !== undefined ||
+      data.slug !== undefined ||
+      data.description !== undefined ||
+      data.permissionKeys !== undefined,
+    { message: 'At least one field must be provided' }
+  )
+
+export const AssignMembershipRoleRequestSchema = z
+  .object({
+    roleId: z.string().uuid()
+  })
+  .strict()
+
+export type OrgRoleParams = z.infer<typeof OrgRoleParamsSchema>
+export type OrgRolesParams = z.infer<typeof OrgRolesParamsSchema>
+export type MembershipRoleParams = z.infer<typeof MembershipRoleParamsSchema>
+export type MembershipParams = z.infer<typeof MembershipParamsSchema>
+export type CreateOrgRoleInput = z.infer<typeof CreateOrgRoleRequestSchema>
+export type UpdateOrgRoleInput = z.infer<typeof UpdateOrgRoleRequestSchema>
+export type AssignMembershipRoleInput = z.infer<typeof AssignMembershipRoleRequestSchema>

package/src/auth/multi-tenancy/role-management/index.ts

@@ -0,0 +1,16 @@
+export {
+  AssignMembershipRoleRequestSchema,
+  CreateOrgRoleRequestSchema,
+  MembershipParamsSchema,
+  MembershipRoleParamsSchema,
+  OrgRoleParamsSchema,
+  OrgRolesParamsSchema,
+  UpdateOrgRoleRequestSchema,
+  type AssignMembershipRoleInput,
+  type CreateOrgRoleInput,
+  type MembershipParams,
+  type MembershipRoleParams,
+  type OrgRoleParams,
+  type OrgRolesParams,
+  type UpdateOrgRoleInput
+} from './api-schemas'