@elevasis/core 0.11.2 → 0.13.0

package/dist/index.d.ts

@@ -327,6 +327,7 @@ declare const SEO_FEATURE_ID: "seo";
 declare const SALES_PIPELINE_SURFACE_ID: "crm.pipeline";
 declare const PROSPECTING_LISTS_SURFACE_ID: "lead-gen.lists";
 declare const OPERATIONS_COMMAND_VIEW_SURFACE_ID: "operations.command-view";
+declare const SETTINGS_ROLES_SURFACE_ID: "settings.roles";
 
 declare const OrganizationModelBrandingSchema: z.ZodObject<{
     organizationName: z.ZodString;
@@ -695,5 +696,5 @@ declare function createFoundationOrganizationModel(override: DeepPartial<Organiz
     getOrganizationSurface: (surfaceId: string) => FoundationNavigationSurface | undefined;
 };
 
-export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };
+export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, SETTINGS_ROLES_SURFACE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };
 export type { DeepPartial, FoundationBranding, FoundationNavigationSurface, FoundationOrganizationModel, FoundationSurfaceIcon, FoundationSurfaceType, NodeIdPath, NodeIdString, OrganizationModel, OrganizationModelBranding, OrganizationModelCustomerFirmographics, OrganizationModelCustomerSegment, OrganizationModelCustomers, OrganizationModelFeature, OrganizationModelGoals, OrganizationModelKeyResult, OrganizationModelObjective, OrganizationModelOfferings, OrganizationModelOperationEntry, OrganizationModelOperationSemanticClass, OrganizationModelOperations, OrganizationModelPricingModel, OrganizationModelProduct, OrganizationModelProjects, OrganizationModelProspecting, OrganizationModelRole, OrganizationModelRoles, OrganizationModelSales, OrganizationModelStatusEntry, OrganizationModelStatusSemanticClass, OrganizationModelStatuses, OrganizationModelTechStackEntry };

package/dist/index.js

@@ -249,6 +249,7 @@ var SEO_FEATURE_ID = "seo";
 var SALES_PIPELINE_SURFACE_ID = "crm.pipeline";
 var PROSPECTING_LISTS_SURFACE_ID = "lead-gen.lists";
 var OPERATIONS_COMMAND_VIEW_SURFACE_ID = "operations.command-view";
+var SETTINGS_ROLES_SURFACE_ID = "settings.roles";
 
 // src/organization-model/domains/navigation.ts
 var SurfaceTypeSchema = z.enum(["page", "dashboard", "graph", "detail", "list", "settings"]);
@@ -988,6 +989,12 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       path: "/settings/appearance"
     },
+    {
+      id: "settings.roles",
+      label: "My Roles",
+      enabled: true,
+      path: "/settings/roles"
+    },
     {
       id: "settings.organization",
       label: "Organization",
@@ -1173,4 +1180,4 @@ function createFoundationOrganizationModel(override) {
   };
 }
 
-export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };
+export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, SETTINGS_ROLES_SURFACE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };

package/dist/organization-model/index.d.ts

@@ -327,6 +327,7 @@ declare const SEO_FEATURE_ID: "seo";
 declare const SALES_PIPELINE_SURFACE_ID: "crm.pipeline";
 declare const PROSPECTING_LISTS_SURFACE_ID: "lead-gen.lists";
 declare const OPERATIONS_COMMAND_VIEW_SURFACE_ID: "operations.command-view";
+declare const SETTINGS_ROLES_SURFACE_ID: "settings.roles";
 
 declare const OrganizationModelBrandingSchema: z.ZodObject<{
     organizationName: z.ZodString;
@@ -695,5 +696,5 @@ declare function createFoundationOrganizationModel(override: DeepPartial<Organiz
     getOrganizationSurface: (surfaceId: string) => FoundationNavigationSurface | undefined;
 };
 
-export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };
+export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, SETTINGS_ROLES_SURFACE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };
 export type { DeepPartial, FoundationBranding, FoundationNavigationSurface, FoundationOrganizationModel, FoundationSurfaceIcon, FoundationSurfaceType, NodeIdPath, NodeIdString, OrganizationModel, OrganizationModelBranding, OrganizationModelCustomerFirmographics, OrganizationModelCustomerSegment, OrganizationModelCustomers, OrganizationModelFeature, OrganizationModelGoals, OrganizationModelKeyResult, OrganizationModelObjective, OrganizationModelOfferings, OrganizationModelOperationEntry, OrganizationModelOperationSemanticClass, OrganizationModelOperations, OrganizationModelPricingModel, OrganizationModelProduct, OrganizationModelProjects, OrganizationModelProspecting, OrganizationModelRole, OrganizationModelRoles, OrganizationModelSales, OrganizationModelStatusEntry, OrganizationModelStatusSemanticClass, OrganizationModelStatuses, OrganizationModelTechStackEntry };

package/dist/organization-model/index.js

@@ -249,6 +249,7 @@ var SEO_FEATURE_ID = "seo";
 var SALES_PIPELINE_SURFACE_ID = "crm.pipeline";
 var PROSPECTING_LISTS_SURFACE_ID = "lead-gen.lists";
 var OPERATIONS_COMMAND_VIEW_SURFACE_ID = "operations.command-view";
+var SETTINGS_ROLES_SURFACE_ID = "settings.roles";
 
 // src/organization-model/domains/navigation.ts
 var SurfaceTypeSchema = z.enum(["page", "dashboard", "graph", "detail", "list", "settings"]);
@@ -988,6 +989,12 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       path: "/settings/appearance"
     },
+    {
+      id: "settings.roles",
+      label: "My Roles",
+      enabled: true,
+      path: "/settings/roles"
+    },
     {
       id: "settings.organization",
       label: "Organization",
@@ -1173,4 +1180,4 @@ function createFoundationOrganizationModel(override) {
   };
 }
 
-export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };
+export { CustomerSegmentSchema, CustomersDomainSchema, DEFAULT_ORGANIZATION_MODEL, DEFAULT_ORGANIZATION_MODEL_CUSTOMERS, DEFAULT_ORGANIZATION_MODEL_GOALS, DEFAULT_ORGANIZATION_MODEL_OFFERINGS, DEFAULT_ORGANIZATION_MODEL_OPERATIONS, DEFAULT_ORGANIZATION_MODEL_ROLES, DEFAULT_ORGANIZATION_MODEL_STATUSES, FeatureSchema, FirmographicsSchema, GoalsDomainSchema, KeyResultSchema, LinkSchema, MONITORING_FEATURE_ID, NodeIdPathSchema, NodeIdStringSchema, OPERATIONS_COMMAND_VIEW_SURFACE_ID, OPERATIONS_FEATURE_ID, ObjectiveSchema, OfferingsDomainSchema, OperationEntrySchema, OperationSemanticClassSchema, OperationsDomainSchema, OrganizationModelSchema, PROJECTS_FEATURE_ID, PROJECTS_INDEX_SURFACE_ID, PROJECTS_VIEW_CAPABILITY_ID, PROSPECTING_FEATURE_ID, PROSPECTING_LISTS_SURFACE_ID, PricingModelSchema, ProductSchema, RoleSchema, RolesDomainSchema, SALES_FEATURE_ID, SALES_PIPELINE_SURFACE_ID, SEO_FEATURE_ID, SETTINGS_FEATURE_ID, SETTINGS_ROLES_SURFACE_ID, StatusEntrySchema, StatusSemanticClassSchema, StatusesDomainSchema, TechStackEntrySchema, UiPositionSchema, createFoundationOrganizationModel, defineOrganizationModel, resolveOrganizationModel };

package/dist/test-utils/index.d.ts

@@ -413,7 +413,6 @@ type Database = {
             acq_deals: {
                 Row: {
                     activity_log: Json;
-                    cached_stage: string | null;
                     closed_lost_at: string | null;
                     closed_lost_reason: string | null;
                     contact_email: string;
@@ -428,6 +427,7 @@ type Database = {
                     organization_id: string;
                     payment_link_sent_at: string | null;
                     payment_received_at: string | null;
+                    pipeline_key: string;
                     proposal_data: Json | null;
                     proposal_generated_at: string | null;
                     proposal_pdf_url: string | null;
@@ -435,10 +435,11 @@ type Database = {
                     proposal_reviewed_by: string | null;
                     proposal_sent_at: string | null;
                     proposal_signed_at: string | null;
-                    proposal_status: string | null;
                     signature_envelope_id: string | null;
                     source_list_id: string | null;
                     source_type: string | null;
+                    stage_key: string | null;
+                    state_key: string | null;
                     stripe_payment_id: string | null;
                     stripe_payment_link: string | null;
                     stripe_payment_link_id: string | null;
@@ -447,7 +448,6 @@ type Database = {
                 };
                 Insert: {
                     activity_log?: Json;
-                    cached_stage?: string | null;
                     closed_lost_at?: string | null;
                     closed_lost_reason?: string | null;
                     contact_email: string;
@@ -462,6 +462,7 @@ type Database = {
                     organization_id: string;
                     payment_link_sent_at?: string | null;
                     payment_received_at?: string | null;
+                    pipeline_key?: string;
                     proposal_data?: Json | null;
                     proposal_generated_at?: string | null;
                     proposal_pdf_url?: string | null;
@@ -469,10 +470,11 @@ type Database = {
                     proposal_reviewed_by?: string | null;
                     proposal_sent_at?: string | null;
                     proposal_signed_at?: string | null;
-                    proposal_status?: string | null;
                     signature_envelope_id?: string | null;
                     source_list_id?: string | null;
                     source_type?: string | null;
+                    stage_key?: string | null;
+                    state_key?: string | null;
                     stripe_payment_id?: string | null;
                     stripe_payment_link?: string | null;
                     stripe_payment_link_id?: string | null;
@@ -481,7 +483,6 @@ type Database = {
                 };
                 Update: {
                     activity_log?: Json;
-                    cached_stage?: string | null;
                     closed_lost_at?: string | null;
                     closed_lost_reason?: string | null;
                     contact_email?: string;
@@ -496,6 +497,7 @@ type Database = {
                     organization_id?: string;
                     payment_link_sent_at?: string | null;
                     payment_received_at?: string | null;
+                    pipeline_key?: string;
                     proposal_data?: Json | null;
                     proposal_generated_at?: string | null;
                     proposal_pdf_url?: string | null;
@@ -503,10 +505,11 @@ type Database = {
                     proposal_reviewed_by?: string | null;
                     proposal_sent_at?: string | null;
                     proposal_signed_at?: string | null;
-                    proposal_status?: string | null;
                     signature_envelope_id?: string | null;
                     source_list_id?: string | null;
                     source_type?: string | null;
+                    stage_key?: string | null;
+                    state_key?: string | null;
                     stripe_payment_id?: string | null;
                     stripe_payment_link?: string | null;
                     stripe_payment_link_id?: string | null;
@@ -2623,7 +2626,8 @@ type Database = {
                     created_at: string;
                     description: string | null;
                     id: string;
-                    key: string;
+                    key_hash: string;
+                    key_prefix: string | null;
                     last_triggered_at: string | null;
                     name: string;
                     organization_id: string;
@@ -2636,7 +2640,8 @@ type Database = {
                     created_at?: string;
                     description?: string | null;
                     id?: string;
-                    key: string;
+                    key_hash: string;
+                    key_prefix?: string | null;
                     last_triggered_at?: string | null;
                     name: string;
                     organization_id: string;
@@ -2649,7 +2654,8 @@ type Database = {
                     created_at?: string;
                     description?: string | null;
                     id?: string;
-                    key?: string;
+                    key_hash?: string;
+                    key_prefix?: string | null;
                     last_triggered_at?: string | null;
                     name?: string;
                     organization_id?: string;
@@ -2731,6 +2737,10 @@ type Database = {
                     user_id: string;
                 }[];
             };
+            get_platform_credential_kek: {
+                Args: never;
+                Returns: string;
+            };
             get_storage_org_id: {
                 Args: {
                     file_path: string;
@@ -2748,12 +2758,6 @@ type Database = {
                 };
                 Returns: boolean;
             };
-            is_org_admin: {
-                Args: {
-                    org_id: string;
-                };
-                Returns: boolean;
-            };
             is_org_member: {
                 Args: {
                     org_id: string;
@@ -2908,6 +2912,14 @@ declare class RLSTestContext {
      * Create an organization membership
      */
     createMembership(userId: string, organizationId: string, role: Role): Promise<Membership>;
+    /**
+     * Assign a system role to a membership via org_rol_assignments.
+     * After the 2026-04-25 auth refactor, RLS policies read `effective_permissions[]`
+     * (materialized by trigger from org_rol_assignments → org_rol_grants).
+     * Without this assignment, role_slug is informational only and the membership
+     * has zero permissions, causing all has_org_permission() checks to deny.
+     */
+    private assignSystemRole;
     /**
      * Create a pre-provisioned organization membership (without WorkOS membership ID)
      * Used for testing invitation flows where memberships are created before user accepts

package/dist/test-utils/index.js

@@ -1991,6 +1991,7 @@ var RLSTestContext = class {
       throw new Error(`Failed to create membership: ${error.message}`);
     }
     this.createdIds.memberships.push(data.id);
+    await this.assignSystemRole(data.id, role);
     return {
       id: data.id,
       user_id: data.user_id,
@@ -1998,6 +1999,23 @@ var RLSTestContext = class {
       role_slug: data.role_slug
     };
   }
+  /**
+   * Assign a system role to a membership via org_rol_assignments.
+   * After the 2026-04-25 auth refactor, RLS policies read `effective_permissions[]`
+   * (materialized by trigger from org_rol_assignments → org_rol_grants).
+   * Without this assignment, role_slug is informational only and the membership
+   * has zero permissions, causing all has_org_permission() checks to deny.
+   */
+  async assignSystemRole(membershipId, slug) {
+    const { data: roleDef, error: roleErr } = await this.adminClient.from("org_rol_definitions").select("id").is("organization_id", null).eq("slug", slug).single();
+    if (roleErr || !roleDef) {
+      throw new Error(`Failed to look up system role '${slug}': ${roleErr?.message ?? "not found"}`);
+    }
+    const { error: assignErr } = await this.adminClient.from("org_rol_assignments").insert({ membership_id: membershipId, role_id: roleDef.id });
+    if (assignErr) {
+      throw new Error(`Failed to assign system role '${slug}' to membership: ${assignErr.message}`);
+    }
+  }
   /**
    * Create a pre-provisioned organization membership (without WorkOS membership ID)
    * Used for testing invitation flows where memberships are created before user accepts
@@ -2016,6 +2034,7 @@ var RLSTestContext = class {
       throw new Error(`Failed to create pre-provisioned membership: ${error.message}`);
     }
     this.createdIds.memberships.push(data.id);
+    await this.assignSystemRole(data.id, role);
     return {
       id: data.id,
       user_id: data.user_id,
@@ -20318,6 +20337,12 @@ var DEFAULT_ORGANIZATION_MODEL = {
       enabled: true,
       path: "/settings/appearance"
     },
+    {
+      id: "settings.roles",
+      label: "My Roles",
+      enabled: true,
+      path: "/settings/roles"
+    },
     {
       id: "settings.organization",
       label: "Organization",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/core",
-  "version": "0.11.2",
+  "version": "0.13.0",
   "license": "MIT",
   "description": "Minimal shared constants across Elevasis monorepo",
   "sideEffects": false,