@elevasis/core 0.7.0 → 0.8.0

package/src/auth/multi-tenancy/memberships/server/index.ts

@@ -1,15 +1,15 @@
-/**
- * Memberships server-only exports
- * WARNING: Uses @workos-inc/node SDK - DO NOT import in browser code
- */
-export * from './workos'
-export * from './transforms'
-
-// Re-export browser-safe types for convenience
-export type { OrganizationMembership, MembershipWithDetails } from '../membership'
-export type {
-  SupabaseOrgMembership,
-  SupabaseOrgMembershipInsert,
-  SupabaseOrgMembershipUpdate
-} from '../supabase'
-export type { SupabaseMembershipWithOrganization } from '../../../../supabase'
+/**
+ * Memberships server-only exports
+ * WARNING: Uses @workos-inc/node SDK - DO NOT import in browser code
+ */
+export * from './workos'
+export * from './transforms'
+
+// Re-export browser-safe types for convenience
+export type { OrganizationMembership, MembershipWithDetails } from '../membership'
+export type {
+  SupabaseOrgMembership,
+  SupabaseOrgMembershipInsert,
+  SupabaseOrgMembershipUpdate
+} from '../supabase'
+export type { SupabaseMembershipWithOrganization } from '../../../../supabase'

package/src/auth/multi-tenancy/memberships/server/transforms.ts

@@ -1,32 +1,32 @@
-import type { WorkOSOrganizationMembership } from './workos'
-import type { OrganizationMembership, MembershipStatus } from '../membership'
-
-/**
- * Map WorkOS status to internal status.
- * WorkOS may return 'pending' but our system only uses 'active' | 'inactive'.
- * Pending memberships from WorkOS are treated as inactive until fully provisioned.
- */
-function mapWorkOSStatus(workosStatus: string): MembershipStatus {
-  if (workosStatus === 'active') return 'active'
-  return 'inactive'
-}
-
-/**
- * Transform WorkOS membership to internal format
- */
-export function transformWorkOSMembership(
-  workosData: WorkOSOrganizationMembership
-): OrganizationMembership {
-  return {
-    object: 'organization_membership',
-    id: workosData.id,
-    userId: workosData.userId,
-    organizationId: workosData.organizationId,
-    role: {
-      slug: workosData.role.slug
-    },
-    status: mapWorkOSStatus(workosData.status),
-    createdAt: workosData.createdAt,
-    updatedAt: workosData.updatedAt
-  }
-}
+import type { WorkOSOrganizationMembership } from './workos'
+import type { OrganizationMembership, MembershipStatus } from '../membership'
+
+/**
+ * Map WorkOS status to internal status.
+ * WorkOS may return 'pending' but our system only uses 'active' | 'inactive'.
+ * Pending memberships from WorkOS are treated as inactive until fully provisioned.
+ */
+function mapWorkOSStatus(workosStatus: string): MembershipStatus {
+  if (workosStatus === 'active') return 'active'
+  return 'inactive'
+}
+
+/**
+ * Transform WorkOS membership to internal format
+ */
+export function transformWorkOSMembership(
+  workosData: WorkOSOrganizationMembership
+): OrganizationMembership {
+  return {
+    object: 'organization_membership',
+    id: workosData.id,
+    userId: workosData.userId,
+    organizationId: workosData.organizationId,
+    role: {
+      slug: workosData.role.slug
+    },
+    status: mapWorkOSStatus(workosData.status),
+    createdAt: workosData.createdAt,
+    updatedAt: workosData.updatedAt
+  }
+}

package/src/auth/multi-tenancy/memberships/server/workos.ts

@@ -1,21 +1,21 @@
-/**
- * WorkOS User Management Membership API Types
- * Re-exported from @workos-inc/node SDK v7.69.2 with consistent naming conventions
- */
-
-import type {
-  OrganizationMembership,
-  OrganizationMembershipStatus,
-  CreateOrganizationMembershipOptions,
-  UpdateOrganizationMembershipOptions,
-  ListOrganizationMembershipsOptions,
-  List
-} from '@workos-inc/node'
-
-// Consistent naming convention for the monorepo
-export type WorkOSOrganizationMembership = OrganizationMembership
-export type WorkOSOrganizationMembershipStatus = OrganizationMembershipStatus
-export type WorkOSMembershipListResponse = List<OrganizationMembership>
-export type CreateWorkOSMembershipRequest = CreateOrganizationMembershipOptions
-export type UpdateWorkOSMembershipRequest = UpdateOrganizationMembershipOptions
-export type ListWorkOSMembershipsParams = ListOrganizationMembershipsOptions
+/**
+ * WorkOS User Management Membership API Types
+ * Re-exported from @workos-inc/node SDK v7.69.2 with consistent naming conventions
+ */
+
+import type {
+  OrganizationMembership,
+  OrganizationMembershipStatus,
+  CreateOrganizationMembershipOptions,
+  UpdateOrganizationMembershipOptions,
+  ListOrganizationMembershipsOptions,
+  List
+} from '@workos-inc/node'
+
+// Consistent naming convention for the monorepo
+export type WorkOSOrganizationMembership = OrganizationMembership
+export type WorkOSOrganizationMembershipStatus = OrganizationMembershipStatus
+export type WorkOSMembershipListResponse = List<OrganizationMembership>
+export type CreateWorkOSMembershipRequest = CreateOrganizationMembershipOptions
+export type UpdateWorkOSMembershipRequest = UpdateOrganizationMembershipOptions
+export type ListWorkOSMembershipsParams = ListOrganizationMembershipsOptions

package/src/auth/multi-tenancy/memberships/supabase.ts

@@ -1,46 +1,46 @@
-// Use generated Supabase types from packages/core/src/types/supabase/database.types.ts
-import type { TablesInsert, TablesUpdate } from '../../../supabase/database.types'
-import type { OrganizationMembership } from './membership'
-import type { SupabaseOrgMembership } from '../../../supabase'
-
-// Re-export from centralized location for backward compatibility
-export type { SupabaseOrgMembership } from '../../../supabase'
-
-// Supabase org_memberships table types (auto-generated)
-export type SupabaseOrgMembershipInsert = TablesInsert<'org_memberships'>
-export type SupabaseOrgMembershipUpdate = TablesUpdate<'org_memberships'>
-
-// Available fields from generated types:
-// {
-//   id: string
-//   user_id: string
-//   organization_id: string
-//   workos_membership_id: string
-//   membership_status: string | null (default: 'active')
-//   role_slug: string | null (default: 'member')
-//   created_at: string | null
-//   updated_at: string | null
-// }
-
-/**
- * Map Supabase status to internal status.
- * Database constraint only allows 'active' | 'inactive'.
- */
-function mapSupabaseStatus(status: string | null): 'active' | 'inactive' {
-  if (status === 'active') return 'active'
-  return 'inactive'
-}
-
-// Transform Supabase to internal format
-export function transformSupabaseToMembership(supabaseData: SupabaseOrgMembership): OrganizationMembership {
-  return {
-    object: 'organization_membership',
-    id: supabaseData.workos_membership_id ?? supabaseData.id,
-    userId: supabaseData.user_id,  // Always use Supabase user_id
-    organizationId: supabaseData.organization_id,  // Always use Supabase organization_id
-    role: { slug: supabaseData.role_slug || 'member' },
-    status: mapSupabaseStatus(supabaseData.membership_status),
-    createdAt: supabaseData.created_at || new Date().toISOString(),
-    updatedAt: supabaseData.updated_at || new Date().toISOString()
-  }
-}
+// Use generated Supabase types from packages/core/src/types/supabase/database.types.ts
+import type { TablesInsert, TablesUpdate } from '../../../supabase/database.types'
+import type { OrganizationMembership } from './membership'
+import type { SupabaseOrgMembership } from '../../../supabase'
+
+// Re-export from centralized location for backward compatibility
+export type { SupabaseOrgMembership } from '../../../supabase'
+
+// Supabase org_memberships table types (auto-generated)
+export type SupabaseOrgMembershipInsert = TablesInsert<'org_memberships'>
+export type SupabaseOrgMembershipUpdate = TablesUpdate<'org_memberships'>
+
+// Available fields from generated types:
+// {
+//   id: string
+//   user_id: string
+//   organization_id: string
+//   workos_membership_id: string
+//   membership_status: string | null (default: 'active')
+//   role_slug: string | null (default: 'member')
+//   created_at: string | null
+//   updated_at: string | null
+// }
+
+/**
+ * Map Supabase status to internal status.
+ * Database constraint only allows 'active' | 'inactive'.
+ */
+function mapSupabaseStatus(status: string | null): 'active' | 'inactive' {
+  if (status === 'active') return 'active'
+  return 'inactive'
+}
+
+// Transform Supabase to internal format
+export function transformSupabaseToMembership(supabaseData: SupabaseOrgMembership): OrganizationMembership {
+  return {
+    object: 'organization_membership',
+    id: supabaseData.workos_membership_id ?? supabaseData.id,
+    userId: supabaseData.user_id,  // Always use Supabase user_id
+    organizationId: supabaseData.organization_id,  // Always use Supabase organization_id
+    role: { slug: supabaseData.role_slug || 'member' },
+    status: mapSupabaseStatus(supabaseData.membership_status),
+    createdAt: supabaseData.created_at || new Date().toISOString(),
+    updatedAt: supabaseData.updated_at || new Date().toISOString()
+  }
+}

package/src/auth/multi-tenancy/organizations/api-schemas.ts

@@ -1,128 +1,128 @@
-/**
- * Organizations Domain - Zod Validation Schemas
- *
- * Validation schemas for organization management endpoints.
- * Includes request bodies, query params, and path params.
- *
- * Security:
- * - All schemas use .strict() to prevent mass assignment attacks
- * - UUID/WorkOS ID validation prevents invalid references
- * - String length limits prevent DoS
- * - Domain and metadata size limits
- */
-
-import { z } from 'zod'
-import { UuidSchema } from '../../../platform/utils/validation'
-
-// ============================================================================
-// Shared Schemas
-// ============================================================================
-
-/**
- * Organization name validation
- * - Alphanumeric, spaces, hyphens, underscores only
- * - 2-100 characters
- *
- * Security: Prevents injection, DoS via long names
- */
-export const OrganizationNameSchema = z.string()
-  .min(2, 'Organization name must be at least 2 characters')
-  .max(100, 'Organization name must be at most 100 characters')
-  .trim()
-  .regex(/^[a-zA-Z0-9\s\-_]+$/, 'Organization name must contain only letters, numbers, spaces, hyphens, and underscores')
-
-/**
- * Organization ID validation
- * Supports both UUID and WorkOS org_ prefixed IDs
- */
-export const OrganizationIdSchema = z.union([
-  UuidSchema,
-  z.string().regex(/^org_[a-zA-Z0-9]+$/, 'Invalid WorkOS organization ID')
-])
-
-/**
- * Organization domain data schema
- */
-export const OrganizationDomainSchema = z.object({
-  domain: z.string().min(3).max(255),
-  state: z.enum(['verified', 'pending', 'failed']).optional()
-})
-
-// ============================================================================
-// Path Parameters
-// ============================================================================
-
-/**
- * Validate organization ID in URL path
- * Used by: GET/PUT/DELETE /organizations/:id
- */
-export const OrganizationIdParamSchema = z
-  .object({
-    id: OrganizationIdSchema
-  })
-  .strict()
-
-// ============================================================================
-// Request Bodies
-// ============================================================================
-
-/**
- * Create new organization
- * POST /organizations
- *
- * Security:
- * - Name format validated (alphanumeric + spaces + hyphens + underscores)
- * - Domain array size limited (max 10)
- * - Metadata size limited (10KB)
- * - Strict mode prevents unknown field injection
- */
-export const CreateOrganizationSchema = z
-  .object({
-    name: OrganizationNameSchema,
-    domainData: z.array(OrganizationDomainSchema).max(10).optional(),
-    metadata: z.record(z.string(), z.unknown())
-      .refine(
-        val => JSON.stringify(val).length <= 10240,
-        'Metadata must be under 10KB'
-      )
-      .optional()
-  })
-  .strict()
-
-/**
- * Update organization
- * PUT /organizations/:id
- *
- * Security:
- * - All fields optional (partial update)
- * - Same validation as create
- */
-export const UpdateOrganizationSchema = CreateOrganizationSchema.partial().strict()
-
-// ============================================================================
-// Query Parameters
-// ============================================================================
-
-/**
- * List organizations with filters
- * GET /organizations
- *
- * Security:
- * - Limit bounded (prevents DoS)
- * - WorkOS pagination cursors
- */
-export const ListOrganizationsQuerySchema = z.object({
-  limit: z.coerce.number().int().min(1).max(100).default(20),
-  before: z.string().optional(), // WorkOS pagination cursor
-  after: z.string().optional()   // WorkOS pagination cursor
-})
-
-// ============================================================================
-// TypeScript Type Exports
-// ============================================================================
-
-// Export inferred types for use in route handlers
-export type CreateOrganizationInput = z.infer<typeof CreateOrganizationSchema>
-export type UpdateOrganizationInput = z.infer<typeof UpdateOrganizationSchema>
-export type ListOrganizationsQuery = z.infer<typeof ListOrganizationsQuerySchema>
-export type OrganizationIdParam = z.infer<typeof OrganizationIdParamSchema>
+/**
+ * Organizations Domain - Zod Validation Schemas
+ *
+ * Validation schemas for organization management endpoints.
+ * Includes request bodies, query params, and path params.
+ *
+ * Security:
+ * - All schemas use .strict() to prevent mass assignment attacks
+ * - UUID/WorkOS ID validation prevents invalid references
+ * - String length limits prevent DoS
+ * - Domain and metadata size limits
+ */
+
+import { z } from 'zod'
+import { UuidSchema } from '../../../platform/utils/validation'
+
+// ============================================================================
+// Shared Schemas
+// ============================================================================
+
+/**
+ * Organization name validation
+ * - Alphanumeric, spaces, hyphens, underscores only
+ * - 2-100 characters
+ *
+ * Security: Prevents injection, DoS via long names
+ */
+export const OrganizationNameSchema = z.string()
+  .min(2, 'Organization name must be at least 2 characters')
+  .max(100, 'Organization name must be at most 100 characters')
+  .trim()
+  .regex(/^[a-zA-Z0-9\s\-_]+$/, 'Organization name must contain only letters, numbers, spaces, hyphens, and underscores')
+
+/**
+ * Organization ID validation
+ * Supports both UUID and WorkOS org_ prefixed IDs
+ */
+export const OrganizationIdSchema = z.union([
+  UuidSchema,
+  z.string().regex(/^org_[a-zA-Z0-9]+$/, 'Invalid WorkOS organization ID')
+])
+
+/**
+ * Organization domain data schema
+ */
+export const OrganizationDomainSchema = z.object({
+  domain: z.string().min(3).max(255),
+  state: z.enum(['verified', 'pending', 'failed']).optional()
+})
+
+// ============================================================================
+// Path Parameters
+// ============================================================================
+
+/**
+ * Validate organization ID in URL path
+ * Used by: GET/PUT/DELETE /organizations/:id
+ */
+export const OrganizationIdParamSchema = z
+  .object({
+    id: OrganizationIdSchema
+  })
+  .strict()
+
+// ============================================================================
+// Request Bodies
+// ============================================================================
+
+/**
+ * Create new organization
+ * POST /organizations
+ *
+ * Security:
+ * - Name format validated (alphanumeric + spaces + hyphens + underscores)
+ * - Domain array size limited (max 10)
+ * - Metadata size limited (10KB)
+ * - Strict mode prevents unknown field injection
+ */
+export const CreateOrganizationSchema = z
+  .object({
+    name: OrganizationNameSchema,
+    domainData: z.array(OrganizationDomainSchema).max(10).optional(),
+    metadata: z.record(z.string(), z.unknown())
+      .refine(
+        val => JSON.stringify(val).length <= 10240,
+        'Metadata must be under 10KB'
+      )
+      .optional()
+  })
+  .strict()
+
+/**
+ * Update organization
+ * PUT /organizations/:id
+ *
+ * Security:
+ * - All fields optional (partial update)
+ * - Same validation as create
+ */
+export const UpdateOrganizationSchema = CreateOrganizationSchema.partial().strict()
+
+// ============================================================================
+// Query Parameters
+// ============================================================================
+
+/**
+ * List organizations with filters
+ * GET /organizations
+ *
+ * Security:
+ * - Limit bounded (prevents DoS)
+ * - WorkOS pagination cursors
+ */
+export const ListOrganizationsQuerySchema = z.object({
+  limit: z.coerce.number().int().min(1).max(100).default(20),
+  before: z.string().optional(), // WorkOS pagination cursor
+  after: z.string().optional()   // WorkOS pagination cursor
+})
+
+// ============================================================================
+// TypeScript Type Exports
+// ============================================================================
+
+// Export inferred types for use in route handlers
+export type CreateOrganizationInput = z.infer<typeof CreateOrganizationSchema>
+export type UpdateOrganizationInput = z.infer<typeof UpdateOrganizationSchema>
+export type ListOrganizationsQuery = z.infer<typeof ListOrganizationsQuerySchema>
+export type OrganizationIdParam = z.infer<typeof OrganizationIdParamSchema>

package/src/auth/multi-tenancy/organizations/index.ts

@@ -1,23 +1,23 @@
-/**
- * Organization types - browser-safe exports only
- * For WorkOS types and transforms, use @repo/core/server
- */
-
-// Core organization types (browser-safe)
-export type { Organization, OrganizationSummary } from './organization'
-
-// Validation schemas
-export {
-  CreateOrganizationSchema,
-  UpdateOrganizationSchema,
-  ListOrganizationsQuerySchema,
-  OrganizationIdParamSchema,
-  OrganizationNameSchema,
-  OrganizationDomainSchema,
-  type CreateOrganizationInput,
-  type UpdateOrganizationInput,
-  type ListOrganizationsQuery,
-  type OrganizationIdParam
-} from './api-schemas'
-
-// Note: WorkOS types and transforms available via @repo/core/server
+/**
+ * Organization types - browser-safe exports only
+ * For WorkOS types and transforms, use @repo/core/server
+ */
+
+// Core organization types (browser-safe)
+export type { Organization, OrganizationSummary } from './organization'
+
+// Validation schemas
+export {
+  CreateOrganizationSchema,
+  UpdateOrganizationSchema,
+  ListOrganizationsQuerySchema,
+  OrganizationIdParamSchema,
+  OrganizationNameSchema,
+  OrganizationDomainSchema,
+  type CreateOrganizationInput,
+  type UpdateOrganizationInput,
+  type ListOrganizationsQuery,
+  type OrganizationIdParam
+} from './api-schemas'
+
+// Note: WorkOS types and transforms available via @repo/core/server

package/src/auth/multi-tenancy/organizations/organization.ts

@@ -1,25 +1,25 @@
-/**
- * Organization representation using WorkOS data only
- */
-export interface Organization {
-  // WorkOS Organization Data
-  workosId: string
-  name: string
-  domains: string[]
-  createdAt: string
-  updatedAt: string
-  stripeCustomerId?: string
-  externalId: string | null
-  workosMetadata: Record<string, string>
-
-  // Calculated/Derived Fields
-  primaryDomain?: string
-  verifiedDomains: string[]
-  pendingDomains: string[]
-}
-
-export interface OrganizationSummary {
-  totalOrganizations: number
-  verifiedOrganizations: number
-  pendingOrganizations: number
+/**
+ * Organization representation using WorkOS data only
+ */
+export interface Organization {
+  // WorkOS Organization Data
+  workosId: string
+  name: string
+  domains: string[]
+  createdAt: string
+  updatedAt: string
+  stripeCustomerId?: string
+  externalId: string | null
+  workosMetadata: Record<string, string>
+
+  // Calculated/Derived Fields
+  primaryDomain?: string
+  verifiedDomains: string[]
+  pendingDomains: string[]
+}
+
+export interface OrganizationSummary {
+  totalOrganizations: number
+  verifiedOrganizations: number
+  pendingOrganizations: number
 }

package/src/auth/multi-tenancy/organizations/server/index.ts

@@ -1,10 +1,10 @@
-/**
- * Organizations server-only exports
- * WARNING: Uses @workos-inc/node SDK - DO NOT import in browser code
- */
-export * from './workos'
-export * from './transforms'
-
-// Re-export browser-safe types for convenience
-export type { Organization, OrganizationSummary } from '../organization'
-export type { SupabaseOrganization, SupabaseOrganizationInsert, SupabaseOrganizationUpdate } from '../../../../supabase'
+/**
+ * Organizations server-only exports
+ * WARNING: Uses @workos-inc/node SDK - DO NOT import in browser code
+ */
+export * from './workos'
+export * from './transforms'
+
+// Re-export browser-safe types for convenience
+export type { Organization, OrganizationSummary } from '../organization'
+export type { SupabaseOrganization, SupabaseOrganizationInsert, SupabaseOrganizationUpdate } from '../../../../supabase'