@elevasis/core 0.35.1 → 0.37.0

package/dist/auth/index.d.ts

@@ -349,6 +349,18 @@ declare const UpdateOrganizationSchema: z.ZodObject<{
     }, z.core.$strip>>>>;
     metadata: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
 }, z.core.$strict>;
+/**
+ * Update organization auth config
+ * PATCH /organizations/:id/config/auth
+ *
+ * Security:
+ * - Narrow config surface: only appOrigin is accepted
+ * - App origin is an origin URL, not a route URL
+ * - Strict mode prevents accidental writes to unrelated config keys
+ */
+declare const UpdateOrganizationAuthConfigSchema: z.ZodObject<{
+    appOrigin: z.ZodString;
+}, z.core.$strict>;
 /**
  * List organizations with filters
  * GET /organizations
@@ -364,6 +376,7 @@ declare const ListOrganizationsQuerySchema: z.ZodObject<{
 }, z.core.$strip>;
 type CreateOrganizationInput = z.infer<typeof CreateOrganizationSchema>;
 type UpdateOrganizationInput = z.infer<typeof UpdateOrganizationSchema>;
+type UpdateOrganizationAuthConfigInput = z.infer<typeof UpdateOrganizationAuthConfigSchema>;
 type ListOrganizationsQuery = z.infer<typeof ListOrganizationsQuerySchema>;
 type OrganizationIdParam = z.infer<typeof OrganizationIdParamSchema>;
 
@@ -3876,6 +3889,17 @@ type Database = {
                 Args: never;
                 Returns: undefined;
             };
+            repair_membership_role_assignments: {
+                Args: never;
+                Returns: {
+                    membership_id: string;
+                    organization_id: string;
+                    repaired: boolean;
+                    role_id: string;
+                    role_slug: string;
+                    user_id: string;
+                }[];
+            };
             sync_all_memberships_with_role: {
                 Args: {
                     p_role_id: string;
@@ -3888,6 +3912,13 @@ type Database = {
                 };
                 Returns: undefined;
             };
+            update_membership_role_assignment: {
+                Args: {
+                    p_role_slug: string;
+                    p_workos_membership_id: string;
+                };
+                Returns: string;
+            };
             upsert_user_profile: {
                 Args: never;
                 Returns: {
@@ -4108,6 +4139,17 @@ declare const SendInvitationSchema: z.ZodObject<{
 declare const AcceptInvitationSchema: z.ZodObject<{
     invitation_token: z.ZodString;
 }, z.core.$strict>;
+/**
+ * Public invitation router query
+ * GET /api/invite
+ *
+ * Security:
+ * - Token validated as present only; service layer performs WorkOS lookup
+ * - Router redirects with only the token needed by tenant AuthKit login
+ */
+declare const InviteRouterQuerySchema: z.ZodObject<{
+    invitation_token: z.ZodString;
+}, z.core.$strict>;
 /**
  * List invitations with filters
  * GET /invitations
@@ -4130,6 +4172,7 @@ declare const ListInvitationsQuerySchema: z.ZodObject<{
 }, z.core.$strict>;
 type SendInvitationInput = z.infer<typeof SendInvitationSchema>;
 type AcceptInvitationInput = z.infer<typeof AcceptInvitationSchema>;
+type InviteRouterQuery = z.infer<typeof InviteRouterQuerySchema>;
 type ListInvitationsQuery = z.infer<typeof ListInvitationsQuerySchema>;
 type InvitationIdParam = z.infer<typeof InvitationIdParamSchema>;
 
@@ -4527,6 +4570,84 @@ declare const OrganizationModelSchema: z.ZodObject<{
             primary: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<SidebarNode, unknown, z.core.$ZodTypeInternals<SidebarNode, unknown>>>>;
             bottom: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<SidebarNode, unknown, z.core.$ZodTypeInternals<SidebarNode, unknown>>>>;
         }, z.core.$strip>>;
+        topbar: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            tooltip: z.ZodOptional<z.ZodString>;
+            icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
+                message: "message";
+                error: "error";
+                agent: "agent";
+                workflow: "workflow";
+                "google-sheets": "google-sheets";
+                dashboard: "dashboard";
+                calendar: "calendar";
+                sales: "sales";
+                crm: "crm";
+                "lead-gen": "lead-gen";
+                projects: "projects";
+                clients: "clients";
+                operations: "operations";
+                monitoring: "monitoring";
+                knowledge: "knowledge";
+                settings: "settings";
+                admin: "admin";
+                archive: "archive";
+                business: "business";
+                finance: "finance";
+                platform: "platform";
+                seo: "seo";
+                playbook: "playbook";
+                strategy: "strategy";
+                reference: "reference";
+                integration: "integration";
+                database: "database";
+                user: "user";
+                team: "team";
+                gmail: "gmail";
+                attio: "attio";
+                overview: "overview";
+                "command-view": "command-view";
+                "command-queue": "command-queue";
+                pipeline: "pipeline";
+                lists: "lists";
+                resources: "resources";
+                approve: "approve";
+                reject: "reject";
+                retry: "retry";
+                edit: "edit";
+                view: "view";
+                launch: "launch";
+                "message-plus": "message-plus";
+                escalate: "escalate";
+                promote: "promote";
+                submit: "submit";
+                email: "email";
+                success: "success";
+                warning: "warning";
+                info: "info";
+                pending: "pending";
+                bolt: "bolt";
+                building: "building";
+                briefcase: "briefcase";
+                apps: "apps";
+                graph: "graph";
+                shield: "shield";
+                users: "users";
+                "chart-bar": "chart-bar";
+                search: "search";
+            }>, z.ZodString]>>;
+            order: z.ZodOptional<z.ZodNumber>;
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            devOnly: z.ZodOptional<z.ZodBoolean>;
+            requiresAdmin: z.ZodOptional<z.ZodBoolean>;
+            targets: z.ZodOptional<z.ZodDefault<z.ZodObject<{
+                systems: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+                entities: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+                resources: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+                actions: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>;
     identity: z.ZodDefault<z.ZodObject<{
         mission: z.ZodDefault<z.ZodString>;
@@ -5195,6 +5316,7 @@ declare const OrganizationModelSchema: z.ZodObject<{
             edit: "edit";
             view: "view";
             launch: "launch";
+            "message-plus": "message-plus";
             escalate: "escalate";
             promote: "promote";
             submit: "submit";
@@ -5415,5 +5537,5 @@ interface AccessModel {
 declare function checkAccess(input: AccessKeyInput, ctx: AccessContext): AccessAnswer;
 declare function createAccessModel(organizationModel: OrganizationModel): AccessModel;
 
-export { AcceptInvitationSchema, AccessActionSchema, AccessKeyInputSchema, AccessKeyObjectSchema, AccessKeySchema, AccessKeys, AssignMembershipRoleRequestSchema, CreateMembershipSchema, CreateOrgRoleRequestSchema, CreateOrganizationSchema, DEFAULT_ACCESS_ACTION, DIAGNOSTIC_VIEW_ACCESS_KEYS, ExternalIdParamSchema, InvitationIdParamSchema, ListInvitationsQuerySchema, ListMembershipsQuerySchema, ListOrganizationsQuerySchema, ListUsersQuerySchema, MEMBERSHIP_STATUS_COLORS, MembershipIdParamSchema, MembershipParamsSchema, MembershipRoleParamsSchema, MembershipRoleSchema, MembershipStatusSchema, MyOrgPermissionsResponseSchema, NormalizedAccessKeySchema, OrgIdParamSchema, OrgRoleParamsSchema, OrgRolesParamsSchema, OrganizationDomainSchema, OrganizationIdParamSchema, OrganizationNameSchema, PERMISSIONS, PERMISSION_CATALOG, PLATFORM_ADMIN_ACCESS_KEY, PLATFORM_ADMIN_ACCESS_KEY_SHORTHAND, SendInvitationSchema, THEME_PRESETS, ThemePresetEnum, UpdateMembershipSchema, UpdateMyProfileSchema, UpdateOrgRoleRequestSchema, UpdateOrganizationSchema, UpdateUserSchema, UserIdParamSchema, accessKeyToString, asSupabaseOrgId, asSupabaseOrgIdOrNull, asWorkOsOrgId, asWorkOsOrgIdOrNull, brandSupabaseOrgId, brandWorkOsOrgId, checkAccess, createAccessModel, deriveAccessKeyCatalog, findAccessCatalogEntry, isPermissionKey, isSupabaseOrgId, isWorkOsOrgId, listAccessKeys, normalizeAccessKey, rolePermissionForAccessKey, transformMembershipToTableRow, transformSupabaseToInvitation, transformSupabaseToMembership };
-export type { AcceptInvitationInput, AcceptInvitationRequest, AcceptanceResult, AccessAction, AccessAnswer, AccessCatalogEntry, AccessCatalogEntrySource, AccessContext, AccessContextMembership, AccessContextProfile, AccessKey, AccessKeyCatalog, AccessKeyInput, AccessKeyObject, AccessModel, AccessReason, AccessRestrictedBy, AdminOrgInvitation, AssignMembershipRoleInput, CreateCredentialParams, CreateMembershipInput, CreateMembershipRequest, CreateOrgRoleInput, CreateOrganizationInput, CreateUserRequest, CredentialMetadata, DeriveAccessKeyCatalogOptions, ExternalIdParam, Invitation, InvitationIdParam, InvitationListQuery, InvitationState, InvitationSummaryResponse, InvitationWithDetails, ListInvitationsParams, ListInvitationsQuery, ListMembershipsParams, ListMembershipsQuery, ListMembershipsResponse, ListOrganizationsQuery, ListUsersParams, ListUsersQuery, ListUsersResponse, MembershipIdParam, MembershipParams, MembershipRole, MembershipRoleParams, MembershipStatus, MembershipTableRow, MembershipWithDetails, MyOrgPermissionsResponse, NormalizedAccessKey, OrgIdParam, OrgMetadata, OrgRoleParams, OrgRolesParams, Organization, OrganizationIdParam, OrganizationMembership, OrganizationSummary, PermissionDescriptor, PermissionKey, SendInvitationInput, SendInvitationRequest, SupabaseOrgId, SupabaseOrgInvitation, SupabaseOrgInvitationInsert, SupabaseOrgInvitationUpdate, SupabaseOrgMembership, SupabaseOrgMembershipInsert, SupabaseOrgMembershipUpdate, ThemePresetName, UpdateMembershipInput, UpdateMembershipRequest, UpdateMyProfileInput, UpdateOrgRoleInput, UpdateOrganizationInput, UpdateUserInput, UpdateUserRequest, User, UserConfig, UserIdParam, UserSummary, WorkOsOrgId };
+export { AcceptInvitationSchema, AccessActionSchema, AccessKeyInputSchema, AccessKeyObjectSchema, AccessKeySchema, AccessKeys, AssignMembershipRoleRequestSchema, CreateMembershipSchema, CreateOrgRoleRequestSchema, CreateOrganizationSchema, DEFAULT_ACCESS_ACTION, DIAGNOSTIC_VIEW_ACCESS_KEYS, ExternalIdParamSchema, InvitationIdParamSchema, InviteRouterQuerySchema, ListInvitationsQuerySchema, ListMembershipsQuerySchema, ListOrganizationsQuerySchema, ListUsersQuerySchema, MEMBERSHIP_STATUS_COLORS, MembershipIdParamSchema, MembershipParamsSchema, MembershipRoleParamsSchema, MembershipRoleSchema, MembershipStatusSchema, MyOrgPermissionsResponseSchema, NormalizedAccessKeySchema, OrgIdParamSchema, OrgRoleParamsSchema, OrgRolesParamsSchema, OrganizationDomainSchema, OrganizationIdParamSchema, OrganizationNameSchema, PERMISSIONS, PERMISSION_CATALOG, PLATFORM_ADMIN_ACCESS_KEY, PLATFORM_ADMIN_ACCESS_KEY_SHORTHAND, SendInvitationSchema, THEME_PRESETS, ThemePresetEnum, UpdateMembershipSchema, UpdateMyProfileSchema, UpdateOrgRoleRequestSchema, UpdateOrganizationAuthConfigSchema, UpdateOrganizationSchema, UpdateUserSchema, UserIdParamSchema, accessKeyToString, asSupabaseOrgId, asSupabaseOrgIdOrNull, asWorkOsOrgId, asWorkOsOrgIdOrNull, brandSupabaseOrgId, brandWorkOsOrgId, checkAccess, createAccessModel, deriveAccessKeyCatalog, findAccessCatalogEntry, isPermissionKey, isSupabaseOrgId, isWorkOsOrgId, listAccessKeys, normalizeAccessKey, rolePermissionForAccessKey, transformMembershipToTableRow, transformSupabaseToInvitation, transformSupabaseToMembership };
+export type { AcceptInvitationInput, AcceptInvitationRequest, AcceptanceResult, AccessAction, AccessAnswer, AccessCatalogEntry, AccessCatalogEntrySource, AccessContext, AccessContextMembership, AccessContextProfile, AccessKey, AccessKeyCatalog, AccessKeyInput, AccessKeyObject, AccessModel, AccessReason, AccessRestrictedBy, AdminOrgInvitation, AssignMembershipRoleInput, CreateCredentialParams, CreateMembershipInput, CreateMembershipRequest, CreateOrgRoleInput, CreateOrganizationInput, CreateUserRequest, CredentialMetadata, DeriveAccessKeyCatalogOptions, ExternalIdParam, Invitation, InvitationIdParam, InvitationListQuery, InvitationState, InvitationSummaryResponse, InvitationWithDetails, InviteRouterQuery, ListInvitationsParams, ListInvitationsQuery, ListMembershipsParams, ListMembershipsQuery, ListMembershipsResponse, ListOrganizationsQuery, ListUsersParams, ListUsersQuery, ListUsersResponse, MembershipIdParam, MembershipParams, MembershipRole, MembershipRoleParams, MembershipStatus, MembershipTableRow, MembershipWithDetails, MyOrgPermissionsResponse, NormalizedAccessKey, OrgIdParam, OrgMetadata, OrgRoleParams, OrgRolesParams, Organization, OrganizationIdParam, OrganizationMembership, OrganizationSummary, PermissionDescriptor, PermissionKey, SendInvitationInput, SendInvitationRequest, SupabaseOrgId, SupabaseOrgInvitation, SupabaseOrgInvitationInsert, SupabaseOrgInvitationUpdate, SupabaseOrgMembership, SupabaseOrgMembershipInsert, SupabaseOrgMembershipUpdate, ThemePresetName, UpdateMembershipInput, UpdateMembershipRequest, UpdateMyProfileInput, UpdateOrgRoleInput, UpdateOrganizationAuthConfigInput, UpdateOrganizationInput, UpdateUserInput, UpdateUserRequest, User, UserConfig, UserIdParam, UserSummary, WorkOsOrgId };

package/dist/auth/index.js

@@ -226,6 +226,16 @@ var CreateOrganizationSchema = z.object({
 var UpdateOrganizationSchema = CreateOrganizationSchema.partial().strict().refine((data) => Object.keys(data).length > 0, {
   message: "At least one field (name, domainData, or metadata) must be provided"
 });
+var UpdateOrganizationAuthConfigSchema = z.object({
+  appOrigin: z.string().trim().url("App origin must be a valid URL").max(2048, "App origin must be at most 2048 characters").refine((value) => {
+    try {
+      const url = new URL(value);
+      return url.pathname === "/" && url.search === "" && url.hash === "";
+    } catch {
+      return false;
+    }
+  }, "App origin must not include a path, query string, or hash")
+}).strict();
 var ListOrganizationsQuerySchema = z.object({
   limit: z.coerce.number().int().min(1).max(100).default(20),
   before: z.string().optional(),
@@ -394,6 +404,9 @@ var SendInvitationSchema = z.object({
 var AcceptInvitationSchema = z.object({
   invitation_token: z.string().min(1, "Invitation token is required")
 }).strict();
+var InviteRouterQuerySchema = z.object({
+  invitation_token: z.string().min(1, "Invitation token is required")
+}).strict();
 var ListInvitationsQuerySchema = z.object({
   organizationId: z.string().optional(),
   userId: z.string().optional(),
@@ -636,4 +649,4 @@ function createAccessModel(organizationModel) {
   };
 }
 
-export { AcceptInvitationSchema, AccessActionSchema, AccessKeyInputSchema, AccessKeyObjectSchema, AccessKeySchema, AccessKeys, AssignMembershipRoleRequestSchema, CreateMembershipSchema, CreateOrgRoleRequestSchema, CreateOrganizationSchema, DEFAULT_ACCESS_ACTION, DIAGNOSTIC_VIEW_ACCESS_KEYS, ExternalIdParamSchema, InvitationIdParamSchema, ListInvitationsQuerySchema, ListMembershipsQuerySchema, ListOrganizationsQuerySchema, ListUsersQuerySchema, MEMBERSHIP_STATUS_COLORS, MembershipIdParamSchema, MembershipParamsSchema, MembershipRoleParamsSchema, MembershipRoleSchema, MembershipStatusSchema, MyOrgPermissionsResponseSchema, NormalizedAccessKeySchema, OrgIdParamSchema, OrgRoleParamsSchema, OrgRolesParamsSchema, OrganizationDomainSchema, OrganizationIdParamSchema, OrganizationNameSchema, PERMISSIONS, PERMISSION_CATALOG, PLATFORM_ADMIN_ACCESS_KEY, PLATFORM_ADMIN_ACCESS_KEY_SHORTHAND, SendInvitationSchema, THEME_PRESETS, ThemePresetEnum, UpdateMembershipSchema, UpdateMyProfileSchema, UpdateOrgRoleRequestSchema, UpdateOrganizationSchema, UpdateUserSchema, UserIdParamSchema, accessKeyToString, asSupabaseOrgId, asSupabaseOrgIdOrNull, asWorkOsOrgId, asWorkOsOrgIdOrNull, brandSupabaseOrgId, brandWorkOsOrgId, checkAccess, createAccessModel, deriveAccessKeyCatalog, findAccessCatalogEntry, isPermissionKey, isSupabaseOrgId, isWorkOsOrgId, listAccessKeys, normalizeAccessKey, rolePermissionForAccessKey, transformMembershipToTableRow, transformSupabaseToInvitation, transformSupabaseToMembership };
+export { AcceptInvitationSchema, AccessActionSchema, AccessKeyInputSchema, AccessKeyObjectSchema, AccessKeySchema, AccessKeys, AssignMembershipRoleRequestSchema, CreateMembershipSchema, CreateOrgRoleRequestSchema, CreateOrganizationSchema, DEFAULT_ACCESS_ACTION, DIAGNOSTIC_VIEW_ACCESS_KEYS, ExternalIdParamSchema, InvitationIdParamSchema, InviteRouterQuerySchema, ListInvitationsQuerySchema, ListMembershipsQuerySchema, ListOrganizationsQuerySchema, ListUsersQuerySchema, MEMBERSHIP_STATUS_COLORS, MembershipIdParamSchema, MembershipParamsSchema, MembershipRoleParamsSchema, MembershipRoleSchema, MembershipStatusSchema, MyOrgPermissionsResponseSchema, NormalizedAccessKeySchema, OrgIdParamSchema, OrgRoleParamsSchema, OrgRolesParamsSchema, OrganizationDomainSchema, OrganizationIdParamSchema, OrganizationNameSchema, PERMISSIONS, PERMISSION_CATALOG, PLATFORM_ADMIN_ACCESS_KEY, PLATFORM_ADMIN_ACCESS_KEY_SHORTHAND, SendInvitationSchema, THEME_PRESETS, ThemePresetEnum, UpdateMembershipSchema, UpdateMyProfileSchema, UpdateOrgRoleRequestSchema, UpdateOrganizationAuthConfigSchema, UpdateOrganizationSchema, UpdateUserSchema, UserIdParamSchema, accessKeyToString, asSupabaseOrgId, asSupabaseOrgIdOrNull, asWorkOsOrgId, asWorkOsOrgIdOrNull, brandSupabaseOrgId, brandWorkOsOrgId, checkAccess, createAccessModel, deriveAccessKeyCatalog, findAccessCatalogEntry, isPermissionKey, isSupabaseOrgId, isWorkOsOrgId, listAccessKeys, normalizeAccessKey, rolePermissionForAccessKey, transformMembershipToTableRow, transformSupabaseToInvitation, transformSupabaseToMembership };