@elevasis/core 0.7.1 → 0.8.0

package/src/auth/multi-tenancy/invitations/supabase.ts

@@ -1,50 +1,50 @@
-/**
- * Supabase Invitation Types
- * Generated from database schema with type aliases for consistent naming
- */
-
-import type { Database } from '../../../supabase/database.types'
-
-// Type aliases for org_invitations table
-export type SupabaseOrgInvitation = Database['public']['Tables']['org_invitations']['Row']
-export type SupabaseOrgInvitationInsert = Database['public']['Tables']['org_invitations']['Insert']
-export type SupabaseOrgInvitationUpdate = Database['public']['Tables']['org_invitations']['Update']
-
-// Extended type with computed fields for UI
-export interface AdminOrgInvitation extends SupabaseOrgInvitation {
-  organizations?: {
-    id: string
-    name: string
-    status?: string
-  }
-  users?: {
-    id: string
-    email: string
-    first_name?: string | null
-    last_name?: string | null
-    profile_picture_url?: string | null
-  }
-}
-
-// Invitation states from database constraint
-export type InvitationState = 'pending' | 'accepted' | 'revoked' | 'expired'
-
-// Helper function to transform Supabase data to internal format
-export function transformSupabaseToInvitation(supabaseInvitation: SupabaseOrgInvitation) {
-  return {
-    id: supabaseInvitation.id,
-    workosInvitationId: supabaseInvitation.workos_invitation_id,
-    email: supabaseInvitation.email,
-    organizationId: supabaseInvitation.organization_id,
-    inviterUserId: supabaseInvitation.inviter_user_id,
-    invitationState: supabaseInvitation.invitation_state as InvitationState | null,
-    roleSlug: supabaseInvitation.role_slug,
-    invitationToken: supabaseInvitation.invitation_token,
-    acceptInvitationUrl: supabaseInvitation.accept_invitation_url,
-    acceptedAt: supabaseInvitation.accepted_at,
-    revokedAt: supabaseInvitation.revoked_at,
-    expiresAt: supabaseInvitation.expires_at,
-    createdAt: supabaseInvitation.created_at,
-    updatedAt: supabaseInvitation.updated_at
-  }
-}
+/**
+ * Supabase Invitation Types
+ * Generated from database schema with type aliases for consistent naming
+ */
+
+import type { Database } from '../../../supabase/database.types'
+
+// Type aliases for org_invitations table
+export type SupabaseOrgInvitation = Database['public']['Tables']['org_invitations']['Row']
+export type SupabaseOrgInvitationInsert = Database['public']['Tables']['org_invitations']['Insert']
+export type SupabaseOrgInvitationUpdate = Database['public']['Tables']['org_invitations']['Update']
+
+// Extended type with computed fields for UI
+export interface AdminOrgInvitation extends SupabaseOrgInvitation {
+  organizations?: {
+    id: string
+    name: string
+    status?: string
+  }
+  users?: {
+    id: string
+    email: string
+    first_name?: string | null
+    last_name?: string | null
+    profile_picture_url?: string | null
+  }
+}
+
+// Invitation states from database constraint
+export type InvitationState = 'pending' | 'accepted' | 'revoked' | 'expired'
+
+// Helper function to transform Supabase data to internal format
+export function transformSupabaseToInvitation(supabaseInvitation: SupabaseOrgInvitation) {
+  return {
+    id: supabaseInvitation.id,
+    workosInvitationId: supabaseInvitation.workos_invitation_id,
+    email: supabaseInvitation.email,
+    organizationId: supabaseInvitation.organization_id,
+    inviterUserId: supabaseInvitation.inviter_user_id,
+    invitationState: supabaseInvitation.invitation_state as InvitationState | null,
+    roleSlug: supabaseInvitation.role_slug,
+    invitationToken: supabaseInvitation.invitation_token,
+    acceptInvitationUrl: supabaseInvitation.accept_invitation_url,
+    acceptedAt: supabaseInvitation.accepted_at,
+    revokedAt: supabaseInvitation.revoked_at,
+    expiresAt: supabaseInvitation.expires_at,
+    createdAt: supabaseInvitation.created_at,
+    updatedAt: supabaseInvitation.updated_at
+  }
+}

package/src/auth/multi-tenancy/memberships/api-schemas.ts

@@ -1,126 +1,126 @@
-/**
- * Memberships Domain - Zod Validation Schemas
- *
- * Validation schemas for membership management endpoints.
- * Includes request bodies, query params, and path params.
- *
- * Security:
- * - All schemas use .strict() to prevent mass assignment attacks
- * - UUID validation prevents invalid references
- * - Role enum validation prevents privilege escalation
- * - organizationId never accepted in body (from JWT when needed)
- */
-
-import { z } from 'zod'
-
-// ============================================================================
-// Shared Schemas
-// ============================================================================
-
-/**
- * Membership role validation
- * Restricts to valid role slugs only
- *
- * Security: Prevents privilege escalation by limiting role values
- */
-export const MembershipRoleSchema = z.enum(['admin', 'member'])
-
-/**
- * Membership status validation
- * Note: Database constraint only allows 'active' | 'inactive'
- */
-export const MembershipStatusSchema = z.enum(['active', 'inactive'])
-
-// ============================================================================
-// Path Parameters
-// ============================================================================
-
-/**
- * Validate membership ID in URL path
- * Used by: GET/PUT/DELETE /memberships/:id
- */
-export const MembershipIdParamSchema = z
-  .object({
-    id: z.string().min(1) // WorkOS membership IDs can be various formats
-  })
-  .strict()
-
-// ============================================================================
-// Request Bodies
-// ============================================================================
-
-/**
- * Create new membership
- * POST /memberships
- *
- * Security:
- * - userId must be valid (string format for WorkOS)
- * - organizationId must be valid (string format for WorkOS)
- * - roleSlug enum prevents privilege escalation
- * - Strict mode prevents injection
- */
-export const CreateMembershipSchema = z
-  .object({
-    userId: z.string().min(1),
-    organizationId: z.string().min(1),
-    roleSlug: MembershipRoleSchema.default('member')
-  })
-  .strict()
-
-/**
- * Update membership role
- * PUT /memberships/:id
- *
- * Security:
- * - Only roleSlug can be updated
- * - Enum validation prevents privilege escalation
- */
-export const UpdateMembershipSchema = z
-  .object({
-    roleSlug: MembershipRoleSchema
-  })
-  .strict()
-
-// ============================================================================
-// Query Parameters
-// ============================================================================
-
-/**
- * List memberships with filters
- * GET /memberships
- *
- * Filters:
- * - userId: Filter by user
- * - organizationId: Filter by organization
- *
- * Security:
- * - Requires at least one filter parameter
- * - String IDs validated for WorkOS format
- */
-export const ListMembershipsQuerySchema = z
-  .object({
-    userId: z.string().optional(),
-    organizationId: z.string().optional(),
-    limit: z.coerce.number().int().min(1).max(100).optional(),
-    before: z.string().optional(), // WorkOS pagination cursor
-    after: z.string().optional()   // WorkOS pagination cursor
-  })
-  .strict()
-  .refine(
-    (data) => data.userId || data.organizationId,
-    {
-      message: 'Either userId or organizationId must be provided'
-    }
-  )
-
-// ============================================================================
-// TypeScript Type Exports
-// ============================================================================
-
-// Export inferred types for use in route handlers
-export type CreateMembershipInput = z.infer<typeof CreateMembershipSchema>
-export type UpdateMembershipInput = z.infer<typeof UpdateMembershipSchema>
-export type ListMembershipsQuery = z.infer<typeof ListMembershipsQuerySchema>
-export type MembershipIdParam = z.infer<typeof MembershipIdParamSchema>
-export type MembershipRole = z.infer<typeof MembershipRoleSchema>
-export type MembershipStatus = z.infer<typeof MembershipStatusSchema>
+/**
+ * Memberships Domain - Zod Validation Schemas
+ *
+ * Validation schemas for membership management endpoints.
+ * Includes request bodies, query params, and path params.
+ *
+ * Security:
+ * - All schemas use .strict() to prevent mass assignment attacks
+ * - UUID validation prevents invalid references
+ * - Role enum validation prevents privilege escalation
+ * - organizationId never accepted in body (from JWT when needed)
+ */
+
+import { z } from 'zod'
+
+// ============================================================================
+// Shared Schemas
+// ============================================================================
+
+/**
+ * Membership role validation
+ * Restricts to valid role slugs only
+ *
+ * Security: Prevents privilege escalation by limiting role values
+ */
+export const MembershipRoleSchema = z.enum(['admin', 'member'])
+
+/**
+ * Membership status validation
+ * Note: Database constraint only allows 'active' | 'inactive'
+ */
+export const MembershipStatusSchema = z.enum(['active', 'inactive'])
+
+// ============================================================================
+// Path Parameters
+// ============================================================================
+
+/**
+ * Validate membership ID in URL path
+ * Used by: GET/PUT/DELETE /memberships/:id
+ */
+export const MembershipIdParamSchema = z
+  .object({
+    id: z.string().min(1) // WorkOS membership IDs can be various formats
+  })
+  .strict()
+
+// ============================================================================
+// Request Bodies
+// ============================================================================
+
+/**
+ * Create new membership
+ * POST /memberships
+ *
+ * Security:
+ * - userId must be valid (string format for WorkOS)
+ * - organizationId must be valid (string format for WorkOS)
+ * - roleSlug enum prevents privilege escalation
+ * - Strict mode prevents injection
+ */
+export const CreateMembershipSchema = z
+  .object({
+    userId: z.string().min(1),
+    organizationId: z.string().min(1),
+    roleSlug: MembershipRoleSchema.default('member')
+  })
+  .strict()
+
+/**
+ * Update membership role
+ * PUT /memberships/:id
+ *
+ * Security:
+ * - Only roleSlug can be updated
+ * - Enum validation prevents privilege escalation
+ */
+export const UpdateMembershipSchema = z
+  .object({
+    roleSlug: MembershipRoleSchema
+  })
+  .strict()
+
+// ============================================================================
+// Query Parameters
+// ============================================================================
+
+/**
+ * List memberships with filters
+ * GET /memberships
+ *
+ * Filters:
+ * - userId: Filter by user
+ * - organizationId: Filter by organization
+ *
+ * Security:
+ * - Requires at least one filter parameter
+ * - String IDs validated for WorkOS format
+ */
+export const ListMembershipsQuerySchema = z
+  .object({
+    userId: z.string().optional(),
+    organizationId: z.string().optional(),
+    limit: z.coerce.number().int().min(1).max(100).optional(),
+    before: z.string().optional(), // WorkOS pagination cursor
+    after: z.string().optional()   // WorkOS pagination cursor
+  })
+  .strict()
+  .refine(
+    (data) => data.userId || data.organizationId,
+    {
+      message: 'Either userId or organizationId must be provided'
+    }
+  )
+
+// ============================================================================
+// TypeScript Type Exports
+// ============================================================================
+
+// Export inferred types for use in route handlers
+export type CreateMembershipInput = z.infer<typeof CreateMembershipSchema>
+export type UpdateMembershipInput = z.infer<typeof UpdateMembershipSchema>
+export type ListMembershipsQuery = z.infer<typeof ListMembershipsQuerySchema>
+export type MembershipIdParam = z.infer<typeof MembershipIdParamSchema>
+export type MembershipRole = z.infer<typeof MembershipRoleSchema>
+export type MembershipStatus = z.infer<typeof MembershipStatusSchema>

package/src/auth/multi-tenancy/memberships/index.ts

@@ -1,22 +1,22 @@
-/**
- * Membership types - browser-safe exports only
- * For WorkOS types and transforms, use @repo/core/server
- */
-export * from './membership'
-export * from './supabase'
-
-// Validation schemas
-export {
-  CreateMembershipSchema,
-  UpdateMembershipSchema,
-  ListMembershipsQuerySchema,
-  MembershipIdParamSchema,
-  MembershipRoleSchema,
-  MembershipStatusSchema,
-  type CreateMembershipInput,
-  type UpdateMembershipInput,
-  type ListMembershipsQuery,
-  type MembershipIdParam,
-  type MembershipRole,
-  type MembershipStatus
+/**
+ * Membership types - browser-safe exports only
+ * For WorkOS types and transforms, use @repo/core/server
+ */
+export * from './membership'
+export * from './supabase'
+
+// Validation schemas
+export {
+  CreateMembershipSchema,
+  UpdateMembershipSchema,
+  ListMembershipsQuerySchema,
+  MembershipIdParamSchema,
+  MembershipRoleSchema,
+  MembershipStatusSchema,
+  type CreateMembershipInput,
+  type UpdateMembershipInput,
+  type ListMembershipsQuery,
+  type MembershipIdParam,
+  type MembershipRole,
+  type MembershipStatus
 } from './api-schemas'

package/src/auth/multi-tenancy/memberships/membership.ts

@@ -1,138 +1,138 @@
-import type { MembershipFeatureConfig } from '../types'
-import { type MembershipStatus } from './api-schemas.js'
-
-export type { MembershipStatus }
-
-/**
- * Organization Membership types based on WorkOS API
- */
-
-export interface OrganizationMembership {
-  object: 'organization_membership'
-  id: string
-  userId: string
-  organizationId: string
-  role: {
-    slug: string
-  }
-  status: 'active' | 'inactive'
-  createdAt: string
-  updatedAt: string
-}
-
-/**
- * Request interfaces for membership operations
- */
-export interface CreateMembershipRequest {
-  userId: string
-  organizationId: string
-  roleSlug?: string
-}
-
-export interface UpdateMembershipRequest {
-  roleSlug: string
-}
-
-export interface ListMembershipsParams {
-  userId?: string
-  organizationId?: string
-  statuses?: MembershipStatus[]
-  limit?: number
-  before?: string
-  after?: string
-  order?: 'asc' | 'desc'
-}
-
-/**
- * Response interfaces
- */
-export interface ListMembershipsResponse {
-  data: OrganizationMembership[]
-  listMetadata?: {
-    before?: string | null
-    after?: string | null
-  }
-}
-
-/**
- * Extended membership with user and organization details for UI
- */
-export interface MembershipWithDetails extends OrganizationMembership {
-  user?: {
-    id: string
-    email: string
-    firstName?: string
-    lastName?: string
-    profilePictureUrl?: string
-  }
-  organization?: {
-    id: string
-    name: string
-    workos_org_id: string
-    primaryDomain?: string
-    is_test?: boolean
-    status?: string
-    metadata?: Record<string, unknown>
-    config?: Record<string, unknown>
-  }
-  config?: MembershipFeatureConfig
-}
-
-/**
- * UI-specific membership table row data
- */
-export interface MembershipTableRow {
-  id: string
-  userId: string
-  organizationId: string
-  userEmail: string
-  userFullName: string
-  organizationName: string
-  role: string
-  status: MembershipStatus
-  statusBadge: 'active' | 'inactive'
-  joinedAt: Date
-  updatedAt: Date
-  canEdit: boolean
-  canRemove: boolean
-}
-
-/**
- * Transform membership to table row format
- */
-export function transformMembershipToTableRow(membership: MembershipWithDetails): MembershipTableRow {
-  return {
-    id: membership.id,
-    userId: membership.userId,
-    organizationId: membership.organizationId,
-    userEmail: membership.user?.email || 'Unknown',
-    userFullName:
-      membership.user?.firstName && membership.user?.lastName
-        ? `${membership.user.firstName} ${membership.user.lastName}`
-        : membership.user?.email || 'Unknown User',
-    organizationName: membership.organization?.name || 'Unknown Organization',
-    role: membership.role.slug,
-    status: membership.status,
-    statusBadge: membership.status,
-    joinedAt: new Date(membership.createdAt),
-    updatedAt: new Date(membership.updatedAt),
-    canEdit: membership.status === 'active',
-    canRemove: true
-  }
-}
-
-/**
- * Membership status color mapping for UI
- */
-export const MEMBERSHIP_STATUS_COLORS = {
-  active: 'green',
-  inactive: 'gray'
-} as const
-
-/**
- * Membership role options (can be extended)
- */
-export const DEFAULT_MEMBERSHIP_ROLES = [
-  { value: 'admin', label: 'Admin' },
-  { value: 'member', label: 'Member' }
-] as const
+import type { MembershipFeatureConfig } from '../types'
+import { type MembershipStatus } from './api-schemas.js'
+
+export type { MembershipStatus }
+
+/**
+ * Organization Membership types based on WorkOS API
+ */
+
+export interface OrganizationMembership {
+  object: 'organization_membership'
+  id: string
+  userId: string
+  organizationId: string
+  role: {
+    slug: string
+  }
+  status: 'active' | 'inactive'
+  createdAt: string
+  updatedAt: string
+}
+
+/**
+ * Request interfaces for membership operations
+ */
+export interface CreateMembershipRequest {
+  userId: string
+  organizationId: string
+  roleSlug?: string
+}
+
+export interface UpdateMembershipRequest {
+  roleSlug: string
+}
+
+export interface ListMembershipsParams {
+  userId?: string
+  organizationId?: string
+  statuses?: MembershipStatus[]
+  limit?: number
+  before?: string
+  after?: string
+  order?: 'asc' | 'desc'
+}
+
+/**
+ * Response interfaces
+ */
+export interface ListMembershipsResponse {
+  data: OrganizationMembership[]
+  listMetadata?: {
+    before?: string | null
+    after?: string | null
+  }
+}
+
+/**
+ * Extended membership with user and organization details for UI
+ */
+export interface MembershipWithDetails extends OrganizationMembership {
+  user?: {
+    id: string
+    email: string
+    firstName?: string
+    lastName?: string
+    profilePictureUrl?: string
+  }
+  organization?: {
+    id: string
+    name: string
+    workos_org_id: string
+    primaryDomain?: string
+    is_test?: boolean
+    status?: string
+    metadata?: Record<string, unknown>
+    config?: Record<string, unknown>
+  }
+  config?: MembershipFeatureConfig
+}
+
+/**
+ * UI-specific membership table row data
+ */
+export interface MembershipTableRow {
+  id: string
+  userId: string
+  organizationId: string
+  userEmail: string
+  userFullName: string
+  organizationName: string
+  role: string
+  status: MembershipStatus
+  statusBadge: 'active' | 'inactive'
+  joinedAt: Date
+  updatedAt: Date
+  canEdit: boolean
+  canRemove: boolean
+}
+
+/**
+ * Transform membership to table row format
+ */
+export function transformMembershipToTableRow(membership: MembershipWithDetails): MembershipTableRow {
+  return {
+    id: membership.id,
+    userId: membership.userId,
+    organizationId: membership.organizationId,
+    userEmail: membership.user?.email || 'Unknown',
+    userFullName:
+      membership.user?.firstName && membership.user?.lastName
+        ? `${membership.user.firstName} ${membership.user.lastName}`
+        : membership.user?.email || 'Unknown User',
+    organizationName: membership.organization?.name || 'Unknown Organization',
+    role: membership.role.slug,
+    status: membership.status,
+    statusBadge: membership.status,
+    joinedAt: new Date(membership.createdAt),
+    updatedAt: new Date(membership.updatedAt),
+    canEdit: membership.status === 'active',
+    canRemove: true
+  }
+}
+
+/**
+ * Membership status color mapping for UI
+ */
+export const MEMBERSHIP_STATUS_COLORS = {
+  active: 'green',
+  inactive: 'gray'
+} as const
+
+/**
+ * Membership role options (can be extended)
+ */
+export const DEFAULT_MEMBERSHIP_ROLES = [
+  { value: 'admin', label: 'Admin' },
+  { value: 'member', label: 'Member' }
+] as const