@elevasis/ui 2.21.0 → 2.23.0

package/dist/test-utils/index.d.ts

@@ -113,5 +113,49 @@ declare function mockFeatureAccess({ allowed, restrictedBy }?: MockFeatureAccess
     };
 };
 
-export { TestProviders, createMockUseAuth, createTestQueryClient, createTestWrapper, handlers, mockAuthLoading, mockAuthenticatedUser, mockFeatureAccess, mockUnauthenticatedUser, mockUseAuth, mockWorkOSUser, renderWithProviders as render, renderHookWithProviders, renderWithProviders, server };
-export type { CustomRenderHookOptions, CustomRenderOptions, MockFeatureAccessOptions, TestProvidersProps };
+type OrgOsUiRouteContractMode = 'development' | 'production';
+interface OrgOsRouteContractFeature {
+    id: string;
+    path?: string | null;
+    enabled?: boolean;
+    devOnly?: boolean;
+}
+interface OrgOsRouteContractOrganizationModel {
+    features: readonly OrgOsRouteContractFeature[];
+}
+interface OrgOsUiRouteContractTarget {
+    name: string;
+    routeTreePath: string;
+    featureIds: readonly string[];
+    orgModelSource: string;
+    shellSource: string;
+}
+interface OrgOsUiRouteContractOptions {
+    target: OrgOsUiRouteContractTarget;
+    organizationModel: OrgOsRouteContractOrganizationModel;
+    routeTreeSource?: string;
+    routePaths?: Iterable<string>;
+    mode?: OrgOsUiRouteContractMode;
+}
+type OrgOsUiRouteContractIssueKind = 'missing-feature' | 'missing-route';
+interface OrgOsUiRouteContractIssue {
+    target: OrgOsUiRouteContractTarget;
+    kind: OrgOsUiRouteContractIssueKind;
+    featureId: string;
+    path?: string;
+    ownerFeatureId?: string;
+}
+interface OrgOsUiRouteContractResult {
+    issues: OrgOsUiRouteContractIssue[];
+    checkedPathCount: number;
+}
+declare function normalizeOrgOsRoutePath(path: string): string;
+declare function extractOrgOsRouteTreeFullPaths(routeTreeSource: string): Set<string>;
+declare function ownsOrgOsFeature(ownerFeatureId: string, featureId: string): boolean;
+declare function collectOrgOsUiRouteContractIssues(options: OrgOsUiRouteContractOptions): OrgOsUiRouteContractResult;
+declare function formatOrgOsUiRouteContractIssue(issue: OrgOsUiRouteContractIssue): string;
+declare function formatOrgOsUiRouteContractFailure(issues: readonly OrgOsUiRouteContractIssue[]): string;
+declare function assertOrgOsUiRouteContract(options: OrgOsUiRouteContractOptions): OrgOsUiRouteContractResult;
+
+export { TestProviders, assertOrgOsUiRouteContract, collectOrgOsUiRouteContractIssues, createMockUseAuth, createTestQueryClient, createTestWrapper, extractOrgOsRouteTreeFullPaths, formatOrgOsUiRouteContractFailure, formatOrgOsUiRouteContractIssue, handlers, mockAuthLoading, mockAuthenticatedUser, mockFeatureAccess, mockUnauthenticatedUser, mockUseAuth, mockWorkOSUser, normalizeOrgOsRoutePath, ownsOrgOsFeature, renderWithProviders as render, renderHookWithProviders, renderWithProviders, server };
+export type { CustomRenderHookOptions, CustomRenderOptions, MockFeatureAccessOptions, OrgOsRouteContractFeature, OrgOsRouteContractOrganizationModel, OrgOsUiRouteContractIssue, OrgOsUiRouteContractIssueKind, OrgOsUiRouteContractMode, OrgOsUiRouteContractOptions, OrgOsUiRouteContractResult, OrgOsUiRouteContractTarget, TestProvidersProps };

package/dist/test-utils/index.js

@@ -18,9 +18,14 @@ import { jsx } from 'react/jsx-runtime';
 var test_utils_exports = {};
 __export(test_utils_exports, {
   TestProviders: () => TestProviders,
+  assertOrgOsUiRouteContract: () => assertOrgOsUiRouteContract,
+  collectOrgOsUiRouteContractIssues: () => collectOrgOsUiRouteContractIssues,
   createMockUseAuth: () => createMockUseAuth,
   createTestQueryClient: () => createTestQueryClient,
   createTestWrapper: () => createTestWrapper,
+  extractOrgOsRouteTreeFullPaths: () => extractOrgOsRouteTreeFullPaths,
+  formatOrgOsUiRouteContractFailure: () => formatOrgOsUiRouteContractFailure,
+  formatOrgOsUiRouteContractIssue: () => formatOrgOsUiRouteContractIssue,
   handlers: () => handlers,
   mockAuthLoading: () => mockAuthLoading,
   mockAuthenticatedUser: () => mockAuthenticatedUser,
@@ -28,6 +33,8 @@ __export(test_utils_exports, {
   mockUnauthenticatedUser: () => mockUnauthenticatedUser,
   mockUseAuth: () => mockUseAuth,
   mockWorkOSUser: () => mockWorkOSUser,
+  normalizeOrgOsRoutePath: () => normalizeOrgOsRoutePath,
+  ownsOrgOsFeature: () => ownsOrgOsFeature,
   render: () => renderWithProviders,
   renderHookWithProviders: () => renderHookWithProviders,
   renderWithProviders: () => renderWithProviders,
@@ -133,4 +140,98 @@ function mockFeatureAccess({ allowed = true, restrictedBy } = {}) {
   };
 }
 
-export { TestProviders, createTestQueryClient, createTestWrapper, mockFeatureAccess, renderWithProviders as render, renderHookWithProviders, renderWithProviders };
+// src/test-utils/orgOsUiRouteContract.ts
+function normalizeOrgOsRoutePath(path) {
+  const trimmed = path.trim();
+  if (!trimmed || trimmed === "/") return "/";
+  return trimmed.replace(/\/+$/, "") || "/";
+}
+function extractOrgOsRouteTreeFullPaths(routeTreeSource) {
+  const paths = [...routeTreeSource.matchAll(/fullPath:\s*'([^']+)'/g)].map((match) => match[1]).filter((path) => Boolean(path)).map(normalizeOrgOsRoutePath);
+  return new Set(paths);
+}
+function ownsOrgOsFeature(ownerFeatureId, featureId) {
+  return featureId === ownerFeatureId || featureId.startsWith(`${ownerFeatureId}.`);
+}
+function collectOrgOsUiRouteContractIssues(options) {
+  const { target, organizationModel, mode = "production" } = options;
+  const routePaths = options.routePaths ?? (options.routeTreeSource ? extractOrgOsRouteTreeFullPaths(options.routeTreeSource) : void 0);
+  if (!routePaths) {
+    throw new Error("Org OS UI route contract requires either routeTreeSource or routePaths.");
+  }
+  const normalizedRoutePaths = new Set([...routePaths].map(normalizeOrgOsRoutePath));
+  const modelFeatureIds = new Set(organizationModel.features.map((feature) => feature.id));
+  const issues = [];
+  let checkedPathCount = 0;
+  for (const featureId of target.featureIds) {
+    if (!modelFeatureIds.has(featureId)) {
+      issues.push({
+        target,
+        kind: "missing-feature",
+        featureId
+      });
+    }
+  }
+  for (const feature of organizationModel.features) {
+    if (!feature.path || feature.enabled === false) continue;
+    if (feature.devOnly && mode === "production") continue;
+    const ownerFeatureId = target.featureIds.find((candidate) => ownsOrgOsFeature(candidate, feature.id));
+    if (!ownerFeatureId) continue;
+    checkedPathCount += 1;
+    const path = normalizeOrgOsRoutePath(feature.path);
+    if (!normalizedRoutePaths.has(path)) {
+      issues.push({
+        target,
+        kind: "missing-route",
+        featureId: feature.id,
+        ownerFeatureId,
+        path
+      });
+    }
+  }
+  return { issues, checkedPathCount };
+}
+function formatOrgOsUiRouteContractIssue(issue) {
+  if (issue.kind === "missing-feature") {
+    return [
+      `[missing-feature] Registered FeatureModule "${issue.featureId}" is not present in ${issue.target.orgModelSource}.`,
+      "Fix:",
+      `- If the feature should ship in ${issue.target.name}, add it to the organization model.`,
+      `- If it should not ship, remove that FeatureModule from ${issue.target.shellSource}.`
+    ].join("\n");
+  }
+  return [
+    `[missing-route] Feature "${issue.featureId}" points to "${issue.path}", but ${issue.target.routeTreePath} does not contain that path.`,
+    `Owner FeatureModule: ${issue.ownerFeatureId}`,
+    "Fix one source of truth:",
+    `- Add or rename the TanStack route file under ${issue.target.name}/src/routes so routeTree.gen.ts contains "${issue.path}".`,
+    `- Or update ${issue.target.orgModelSource} so OrganizationModel.features[].path matches the route that actually exists.`,
+    `- Or disable/remove the feature for ${issue.target.name} if this app intentionally does not ship it.`
+  ].join("\n");
+}
+function formatOrgOsUiRouteContractFailure(issues) {
+  const lines = [
+    `Org OS UI route contract failed with ${issues.length} issue(s).`,
+    "",
+    "This check is derived from app-level contracts, not a route allowlist:",
+    "- OrganizationModel.features[].path is the expected path source.",
+    "- routeTree.gen.ts fullPath entries are the actual generated routes.",
+    "- FeatureModule.featureId values define which Org OS branches this shell propagates.",
+    "",
+    "Do not add route-specific exceptions. Fix the route file, the Org model path, or the app feature registration.",
+    ""
+  ];
+  for (const issue of issues) {
+    lines.push(`Target: ${issue.target.name}`, formatOrgOsUiRouteContractIssue(issue), "");
+  }
+  return lines.join("\n");
+}
+function assertOrgOsUiRouteContract(options) {
+  const result = collectOrgOsUiRouteContractIssues(options);
+  if (result.issues.length > 0) {
+    throw new Error(formatOrgOsUiRouteContractFailure(result.issues));
+  }
+  return result;
+}
+
+export { TestProviders, assertOrgOsUiRouteContract, collectOrgOsUiRouteContractIssues, createTestQueryClient, createTestWrapper, extractOrgOsRouteTreeFullPaths, formatOrgOsUiRouteContractFailure, formatOrgOsUiRouteContractIssue, mockFeatureAccess, normalizeOrgOsRoutePath, ownsOrgOsFeature, renderWithProviders as render, renderHookWithProviders, renderWithProviders };

package/dist/theme/index.js

@@ -1,4 +1,4 @@
-export { useAvailablePresets } from '../chunk-TIIPYB2Z.js';
-export { PresetsProvider, TOKEN_VAR_MAP, componentThemes, createCssVariablesResolver, generateShades, getPreset, mantineThemeOverride, PRESETS as presets, usePresetsContext } from '../chunk-Q5HC6ENG.js';
+export { useAvailablePresets } from '../chunk-QZJM3RYI.js';
+export { PresetsProvider, TOKEN_VAR_MAP, componentThemes, createCssVariablesResolver, generateShades, getPreset, mantineThemeOverride, PRESETS as presets, usePresetsContext } from '../chunk-XOTJNW4Q.js';
 import '../chunk-WLOQ4IBG.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/types/index.d.ts

@@ -999,7 +999,6 @@ type Database = {
             acq_deals: {
                 Row: {
                     activity_log: Json;
-                    cached_stage: string | null;
                     closed_lost_at: string | null;
                     closed_lost_reason: string | null;
                     contact_email: string;
@@ -1014,6 +1013,7 @@ type Database = {
                     organization_id: string;
                     payment_link_sent_at: string | null;
                     payment_received_at: string | null;
+                    pipeline_key: string;
                     proposal_data: Json | null;
                     proposal_generated_at: string | null;
                     proposal_pdf_url: string | null;
@@ -1021,10 +1021,11 @@ type Database = {
                     proposal_reviewed_by: string | null;
                     proposal_sent_at: string | null;
                     proposal_signed_at: string | null;
-                    proposal_status: string | null;
                     signature_envelope_id: string | null;
                     source_list_id: string | null;
                     source_type: string | null;
+                    stage_key: string | null;
+                    state_key: string | null;
                     stripe_payment_id: string | null;
                     stripe_payment_link: string | null;
                     stripe_payment_link_id: string | null;
@@ -1033,7 +1034,6 @@ type Database = {
                 };
                 Insert: {
                     activity_log?: Json;
-                    cached_stage?: string | null;
                     closed_lost_at?: string | null;
                     closed_lost_reason?: string | null;
                     contact_email: string;
@@ -1048,6 +1048,7 @@ type Database = {
                     organization_id: string;
                     payment_link_sent_at?: string | null;
                     payment_received_at?: string | null;
+                    pipeline_key?: string;
                     proposal_data?: Json | null;
                     proposal_generated_at?: string | null;
                     proposal_pdf_url?: string | null;
@@ -1055,10 +1056,11 @@ type Database = {
                     proposal_reviewed_by?: string | null;
                     proposal_sent_at?: string | null;
                     proposal_signed_at?: string | null;
-                    proposal_status?: string | null;
                     signature_envelope_id?: string | null;
                     source_list_id?: string | null;
                     source_type?: string | null;
+                    stage_key?: string | null;
+                    state_key?: string | null;
                     stripe_payment_id?: string | null;
                     stripe_payment_link?: string | null;
                     stripe_payment_link_id?: string | null;
@@ -1067,7 +1069,6 @@ type Database = {
                 };
                 Update: {
                     activity_log?: Json;
-                    cached_stage?: string | null;
                     closed_lost_at?: string | null;
                     closed_lost_reason?: string | null;
                     contact_email?: string;
@@ -1082,6 +1083,7 @@ type Database = {
                     organization_id?: string;
                     payment_link_sent_at?: string | null;
                     payment_received_at?: string | null;
+                    pipeline_key?: string;
                     proposal_data?: Json | null;
                     proposal_generated_at?: string | null;
                     proposal_pdf_url?: string | null;
@@ -1089,10 +1091,11 @@ type Database = {
                     proposal_reviewed_by?: string | null;
                     proposal_sent_at?: string | null;
                     proposal_signed_at?: string | null;
-                    proposal_status?: string | null;
                     signature_envelope_id?: string | null;
                     source_list_id?: string | null;
                     source_type?: string | null;
+                    stage_key?: string | null;
+                    state_key?: string | null;
                     stripe_payment_id?: string | null;
                     stripe_payment_link?: string | null;
                     stripe_payment_link_id?: string | null;
@@ -2261,6 +2264,7 @@ type Database = {
                 Row: {
                     config: Json;
                     created_at: string | null;
+                    effective_permissions: string[];
                     id: string;
                     membership_status: string | null;
                     organization_id: string;
@@ -2272,6 +2276,7 @@ type Database = {
                 Insert: {
                     config?: Json;
                     created_at?: string | null;
+                    effective_permissions?: string[];
                     id?: string;
                     membership_status?: string | null;
                     organization_id: string;
@@ -2283,6 +2288,7 @@ type Database = {
                 Update: {
                     config?: Json;
                     created_at?: string | null;
+                    effective_permissions?: string[];
                     id?: string;
                     membership_status?: string | null;
                     organization_id?: string;
@@ -2308,6 +2314,147 @@ type Database = {
                     }
                 ];
             };
+            org_rol_assignments: {
+                Row: {
+                    granted_at: string;
+                    granted_by: string | null;
+                    membership_id: string;
+                    role_id: string;
+                };
+                Insert: {
+                    granted_at?: string;
+                    granted_by?: string | null;
+                    membership_id: string;
+                    role_id: string;
+                };
+                Update: {
+                    granted_at?: string;
+                    granted_by?: string | null;
+                    membership_id?: string;
+                    role_id?: string;
+                };
+                Relationships: [
+                    {
+                        foreignKeyName: "org_rol_assignments_granted_by_fkey";
+                        columns: ["granted_by"];
+                        isOneToOne: false;
+                        referencedRelation: "users";
+                        referencedColumns: ["id"];
+                    },
+                    {
+                        foreignKeyName: "org_rol_assignments_membership_id_fkey";
+                        columns: ["membership_id"];
+                        isOneToOne: false;
+                        referencedRelation: "org_memberships";
+                        referencedColumns: ["id"];
+                    },
+                    {
+                        foreignKeyName: "org_rol_assignments_role_id_fkey";
+                        columns: ["role_id"];
+                        isOneToOne: false;
+                        referencedRelation: "org_rol_definitions";
+                        referencedColumns: ["id"];
+                    }
+                ];
+            };
+            org_rol_definitions: {
+                Row: {
+                    created_at: string;
+                    description: string | null;
+                    id: string;
+                    is_system: boolean;
+                    name: string;
+                    organization_id: string | null;
+                    slug: string;
+                    updated_at: string;
+                };
+                Insert: {
+                    created_at?: string;
+                    description?: string | null;
+                    id?: string;
+                    is_system?: boolean;
+                    name: string;
+                    organization_id?: string | null;
+                    slug: string;
+                    updated_at?: string;
+                };
+                Update: {
+                    created_at?: string;
+                    description?: string | null;
+                    id?: string;
+                    is_system?: boolean;
+                    name?: string;
+                    organization_id?: string | null;
+                    slug?: string;
+                    updated_at?: string;
+                };
+                Relationships: [
+                    {
+                        foreignKeyName: "org_rol_definitions_organization_id_fkey";
+                        columns: ["organization_id"];
+                        isOneToOne: false;
+                        referencedRelation: "organizations";
+                        referencedColumns: ["id"];
+                    }
+                ];
+            };
+            org_rol_grants: {
+                Row: {
+                    granted_at: string;
+                    permission_key: string;
+                    role_id: string;
+                };
+                Insert: {
+                    granted_at?: string;
+                    permission_key: string;
+                    role_id: string;
+                };
+                Update: {
+                    granted_at?: string;
+                    permission_key?: string;
+                    role_id?: string;
+                };
+                Relationships: [
+                    {
+                        foreignKeyName: "org_rol_grants_permission_key_fkey";
+                        columns: ["permission_key"];
+                        isOneToOne: false;
+                        referencedRelation: "org_rol_permissions";
+                        referencedColumns: ["key"];
+                    },
+                    {
+                        foreignKeyName: "org_rol_grants_role_id_fkey";
+                        columns: ["role_id"];
+                        isOneToOne: false;
+                        referencedRelation: "org_rol_definitions";
+                        referencedColumns: ["id"];
+                    }
+                ];
+            };
+            org_rol_permissions: {
+                Row: {
+                    created_at: string;
+                    description: string;
+                    is_org_grantable: boolean;
+                    key: string;
+                    updated_at: string;
+                };
+                Insert: {
+                    created_at?: string;
+                    description: string;
+                    is_org_grantable?: boolean;
+                    key: string;
+                    updated_at?: string;
+                };
+                Update: {
+                    created_at?: string;
+                    description?: string;
+                    is_org_grantable?: boolean;
+                    key?: string;
+                    updated_at?: string;
+                };
+                Relationships: [];
+            };
             organizations: {
                 Row: {
                     config: Json;
@@ -3065,7 +3212,8 @@ type Database = {
                     created_at: string;
                     description: string | null;
                     id: string;
-                    key: string;
+                    key_hash: string;
+                    key_prefix: string | null;
                     last_triggered_at: string | null;
                     name: string;
                     organization_id: string;
@@ -3078,7 +3226,8 @@ type Database = {
                     created_at?: string;
                     description?: string | null;
                     id?: string;
-                    key: string;
+                    key_hash: string;
+                    key_prefix?: string | null;
                     last_triggered_at?: string | null;
                     name: string;
                     organization_id: string;
@@ -3091,7 +3240,8 @@ type Database = {
                     created_at?: string;
                     description?: string | null;
                     id?: string;
-                    key?: string;
+                    key_hash?: string;
+                    key_prefix?: string | null;
                     last_triggered_at?: string | null;
                     name?: string;
                     organization_id?: string;
@@ -3137,6 +3287,13 @@ type Database = {
                 Args: never;
                 Returns: string;
             };
+            can_assign_role_in_org: {
+                Args: {
+                    p_role_id: string;
+                    p_target_membership_id: string;
+                };
+                Returns: boolean;
+            };
             current_user_is_platform_admin: {
                 Args: never;
                 Returns: boolean;
@@ -3166,6 +3323,10 @@ type Database = {
                     user_id: string;
                 }[];
             };
+            get_platform_credential_kek: {
+                Args: never;
+                Returns: string;
+            };
             get_storage_org_id: {
                 Args: {
                     file_path: string;
@@ -3176,9 +3337,10 @@ type Database = {
                 Args: never;
                 Returns: string;
             };
-            is_org_admin: {
+            has_org_permission: {
                 Args: {
                     org_id: string;
+                    perm_key: string;
                 };
                 Returns: boolean;
             };
@@ -3208,6 +3370,22 @@ type Database = {
                 Args: never;
                 Returns: Json;
             };
+            recompute_all_memberships: {
+                Args: never;
+                Returns: undefined;
+            };
+            sync_all_memberships_with_role: {
+                Args: {
+                    p_role_id: string;
+                };
+                Returns: undefined;
+            };
+            sync_one_membership: {
+                Args: {
+                    p_membership_id: string;
+                };
+                Returns: undefined;
+            };
             upsert_user_profile: {
                 Args: never;
                 Returns: {
@@ -4658,7 +4836,7 @@ interface NotificationCountUpdatedEvent {
  */
 type NotificationSSEEvent = NotificationCountUpdatedEvent;
 
-type ActivityType = 'workflow_execution' | 'agent_run' | 'hitl_action' | 'webhook_received' | 'webhook_executed' | 'webhook_failed' | 'credential_change' | 'api_key_change' | 'deployment_change' | 'membership_change';
+type ActivityType = 'workflow_execution' | 'agent_run' | 'hitl_action' | 'webhook_received' | 'webhook_executed' | 'webhook_failed' | 'credential_change' | 'credential_read' | 'api_key_change' | 'deployment_change' | 'membership_change';
 type ActivityStatus = 'success' | 'failure' | 'pending' | 'approved' | 'rejected' | 'completed';
 interface Activity {
     id: string;
@@ -4927,8 +5105,15 @@ interface WebhookEndpoint {
      * Unique opaque key used in the inbound URL.
      * Format: `wh_` + 32 crypto-random hex chars (128 bits of entropy).
      * This key IS the credential — it must be kept secret.
+     * Set ONLY on the return value of `create()` — undefined on list/get/getEndpointByKey responses.
      */
-    key: string;
+    key?: string;
+    /**
+     * First 8 characters of the plaintext key for display and grep hints.
+     * Safe to show in list views — not sufficient to reconstruct the full key.
+     * Null on legacy rows that predate the key_hash migration.
+     */
+    keyPrefix: string | null;
     /** User-facing label (e.g., "Zapier → Lead Intake") */
     name: string;
     /** Optional description for the endpoint */
@@ -4980,7 +5165,8 @@ type UpdateWebhookEndpointRequest = z.infer<typeof UpdateWebhookEndpointRequestS
 declare const WebhookEndpointResponseSchema: z.ZodObject<{
     id: z.ZodString;
     organizationId: z.ZodString;
-    key: z.ZodString;
+    key: z.ZodOptional<z.ZodString>;
+    keyPrefix: z.ZodNullable<z.ZodString>;
     name: z.ZodString;
     description: z.ZodNullable<z.ZodString>;
     resourceId: z.ZodNullable<z.ZodString>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/ui",
-  "version": "2.21.0",
+  "version": "2.23.0",
   "description": "UI components and platform-aware hooks for building custom frontends on the Elevasis platform",
   "type": "module",
   "license": "MIT",
@@ -225,9 +225,9 @@
     "@testing-library/jest-dom": "^6.9.1",
     "msw": "^2.11.0",
     "vitest": "^3.2.4",
-    "@repo/core": "0.11.0",
-    "@repo/eslint-config": "0.0.0",
-    "@repo/typescript-config": "0.0.0"
+    "@repo/core": "0.13.0",
+    "@repo/typescript-config": "0.0.0",
+    "@repo/eslint-config": "0.0.0"
   },
   "dependencies": {
     "@dagrejs/dagre": "^1.1.4",