@elevasis/core 0.35.1 → 0.37.0

package/src/reference/_generated/contracts.md

@@ -135,6 +135,18 @@ export type OrganizationModelSidebarSurfaceNode = Extract<OrganizationModelSideb
 export type OrganizationModelSidebarGroupNode = Extract<OrganizationModelSidebarNode, { type: 'group' }>
 ```
 
+### `OrganizationModelTopbarActionNode`
+
+```typescript
+export type OrganizationModelTopbarActionNode = z.infer<typeof TopbarActionNodeSchema>
+```
+
+### `OrganizationModelTopbarSection`
+
+```typescript
+export type OrganizationModelTopbarSection = z.infer<typeof TopbarSectionSchema>
+```
+
 ### `OrganizationModelTechStackEntry`
 
 ```typescript
@@ -845,6 +857,57 @@ export interface ShellRuntime {
 }
 ```
 
+### `ResolvedTopbarAction`
+
+```typescript
+/**
+ * A resolved topbar action — the OM node after gating/filtering, with icon resolved
+ * from the semantic icon registry. Passed to `TopbarActionModule.render`.
+ */
+export interface ResolvedTopbarAction {
+  id: string
+  label: string
+  tooltip?: string
+  icon: TablerIconComponent
+  order: number
+}
+```
+
+### `TopbarActionModule`
+
+```typescript
+/**
+ * A topbar action module — binds a registry key to UI behavior (a render callback).
+ * The key must match `navigation.topbar[id]`. The OM supplies data + visibility;
+ * the module supplies behavior.
+ */
+export interface TopbarActionModule {
+  /** Stable key that matches the `id` of a `navigation.topbar` node. */
+  key: string
+  /** Render the topbar action. Receives the resolved OM node (icon pre-resolved). */
+  render: (ctx: { node: ResolvedTopbarAction }) => ReactNode
+}
+```
+
+### `ResolvedTopbarActionEntry`
+
+```typescript
+/** A joined entry emitted by `getTopbarActions`: resolved OM node + module behavior. */
+export interface ResolvedTopbarActionEntry {
+  node: ResolvedTopbarAction
+  render: TopbarActionModule['render']
+}
+```
+
+### `TopbarActionsProjectionOptions`
+
+```typescript
+export interface TopbarActionsProjectionOptions {
+  isPlatformAdmin?: boolean
+  isDev?: boolean
+}
+```
+
 ### `OrganizationGraphSystemBridge`
 
 ```typescript
@@ -868,6 +931,8 @@ export interface OrganizationGraphContextValue {
 ```typescript
 export interface ElevasisSystemsProviderProps {
   systems?: SystemModule[]
+  /** Registered topbar action modules. OM node presence controls visibility; module supplies behavior. */
+  topbarActions?: TopbarActionModule[]
   organizationModel?: ElevasisOrganizationModel
   timeRange?: TimeRange
   operationsApiUrl?: string
@@ -886,6 +951,8 @@ export interface ElevasisSystemsContextValue {
   shellModel: ResolvedShellModel
   shellRuntime: ShellRuntime
   getSidebarLinks: (options?: ShellSidebarProjectionOptions) => ShellSidebarLinkGroup[]
+  /** Returns the list of topbar actions visible to the current user, in order. */
+  getTopbarActions: (options?: TopbarActionsProjectionOptions) => ResolvedTopbarActionEntry[]
   enabledResolvedSystems: ResolvedSystemModule[]
   resolvedSystems: ResolvedSystemModule[]
   organizationGraph: OrganizationGraphContextValue

package/src/scaffold-registry/index.ts

@@ -50,15 +50,15 @@ function monorepoRoot(): string {
   )
 }
 
-const YAML_FILENAME = '.claude/scaffold-registry.yml'
-const JSON_FILENAME = '.claude/scaffold-registry.compiled.json'
+const YAML_FILENAME = '.claude/registries/scaffold-registry.yml'
+const JSON_FILENAME = '.claude/registries/scaffold-registry.compiled.json'
 
 // ---------------------------------------------------------------------------
 // Load + validate
 // ---------------------------------------------------------------------------
 
 /**
- * Load and Zod-validate the scaffold registry from `.claude/scaffold-registry.yml`.
+ * Load and Zod-validate the scaffold registry from `.claude/registries/scaffold-registry.yml`.
  *
  * Throws if:
  * - The YAML file is missing or unreadable
@@ -123,7 +123,7 @@ export function loadScaffoldRegistry(): ScaffoldRegistry {
 
 /**
  * Load, validate, and write the pre-compiled JSON lookup file.
- * Run this whenever `.claude/scaffold-registry.yml` changes.
+ * Run this whenever `.claude/registries/scaffold-registry.yml` changes.
  *
  * Called by the `pnpm scaffold:compile-registry` script (wired in Step 2 CI).
  */

package/src/supabase/database.types.ts

@@ -3063,6 +3063,17 @@ export type Database = {
       }
       process_due_schedules: { Args: never; Returns: Json }
       recompute_all_memberships: { Args: never; Returns: undefined }
+      repair_membership_role_assignments: {
+        Args: never
+        Returns: {
+          membership_id: string
+          organization_id: string
+          repaired: boolean
+          role_id: string
+          role_slug: string
+          user_id: string
+        }[]
+      }
       sync_all_memberships_with_role: {
         Args: { p_role_id: string }
         Returns: undefined
@@ -3071,6 +3082,10 @@ export type Database = {
         Args: { p_membership_id: string }
         Returns: undefined
       }
+      update_membership_role_assignment: {
+        Args: { p_role_slug: string; p_workos_membership_id: string }
+        Returns: string
+      }
       upsert_user_profile: {
         Args: never
         Returns: {

package/src/test-utils/rls/RLSTestContext.ts

@@ -249,9 +249,9 @@ export class RLSTestContext {
       throw new Error(`Failed to look up system role '${slug}': ${roleErr?.message ?? 'not found'}`)
     }
 
-    const { error: assignErr } = await this.adminClient
-      .from('org_rol_assignments')
-      .insert({ membership_id: membershipId, role_id: roleDef.id })
+    const { error: assignErr } = await this.adminClient
+      .from('org_rol_assignments')
+      .upsert({ membership_id: membershipId, role_id: roleDef.id }, { onConflict: 'membership_id,role_id' })
 
     if (assignErr) {
       throw new Error(`Failed to assign system role '${slug}' to membership: ${assignErr.message}`)