@elevasis/core 0.12.0 → 0.14.0

package/dist/test-utils/index.js

@@ -1991,6 +1991,7 @@ var RLSTestContext = class {
       throw new Error(`Failed to create membership: ${error.message}`);
     }
     this.createdIds.memberships.push(data.id);
+    await this.assignSystemRole(data.id, role);
     return {
       id: data.id,
       user_id: data.user_id,
@@ -1998,6 +1999,23 @@ var RLSTestContext = class {
       role_slug: data.role_slug
     };
   }
+  /**
+   * Assign a system role to a membership via org_rol_assignments.
+   * After the 2026-04-25 auth refactor, RLS policies read `effective_permissions[]`
+   * (materialized by trigger from org_rol_assignments → org_rol_grants).
+   * Without this assignment, role_slug is informational only and the membership
+   * has zero permissions, causing all has_org_permission() checks to deny.
+   */
+  async assignSystemRole(membershipId, slug) {
+    const { data: roleDef, error: roleErr } = await this.adminClient.from("org_rol_definitions").select("id").is("organization_id", null).eq("slug", slug).single();
+    if (roleErr || !roleDef) {
+      throw new Error(`Failed to look up system role '${slug}': ${roleErr?.message ?? "not found"}`);
+    }
+    const { error: assignErr } = await this.adminClient.from("org_rol_assignments").insert({ membership_id: membershipId, role_id: roleDef.id });
+    if (assignErr) {
+      throw new Error(`Failed to assign system role '${slug}' to membership: ${assignErr.message}`);
+    }
+  }
   /**
    * Create a pre-provisioned organization membership (without WorkOS membership ID)
    * Used for testing invitation flows where memberships are created before user accepts
@@ -2016,6 +2034,7 @@ var RLSTestContext = class {
       throw new Error(`Failed to create pre-provisioned membership: ${error.message}`);
     }
     this.createdIds.memberships.push(data.id);
+    await this.assignSystemRole(data.id, role);
     return {
       id: data.id,
       user_id: data.user_id,
@@ -20457,9 +20476,16 @@ function deepMerge2(base, override) {
   }
   return result;
 }
-function resolveOrganizationModel(override) {
+function resolveOrganizationModel(override, organizationId) {
   const merged = deepMerge2(DEFAULT_ORGANIZATION_MODEL, override);
-  return OrganizationModelSchema.parse(merged);
+  const model = OrganizationModelSchema.parse(merged);
+  if (!model.sales?.pipelines || model.sales.pipelines.length === 0) {
+    const orgLabel = "Organization";
+    throw new Error(
+      `${orgLabel} has no sales pipeline configuration. This indicates an incomplete provisioning state. Run org provisioning to seed defaults.`
+    );
+  }
+  return model;
 }
 
 // src/test-utils/organization-model.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/core",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "license": "MIT",
   "description": "Minimal shared constants across Elevasis monorepo",
   "sideEffects": false,