@elevasis/ui 2.79.0 → 2.80.0

package/dist/hooks/access/index.d.ts

@@ -1,5 +1,51 @@
 import { z } from 'zod';
 
+/**
+ * Branded organization identifiers.
+ *
+ * Every organization carries TWO distinct ID values that are both plain
+ * strings at runtime but mean different things:
+ *
+ * - WorkOS organization id (`org_...`) -- the auth/JWT identity. Used for API
+ *   requests, SSE headers, and org-scoped query keys.
+ * - Supabase organization id (UUID) -- the database key. Used for
+ *   `.eq('organization_id', ...)` queries and RLS scoping.
+ *
+ * They are not interchangeable, yet both are `string` -- so a swap compiles
+ * cleanly and fails silently (zero rows on the Supabase side, cross-pollinated
+ * cache keys on the API side). These brands make the two non-assignable to one
+ * another, turning that silent footgun into a compile error at the sink.
+ *
+ * Mint a brand only through the `as*` factories below: they are the single
+ * validate-and-tag boundary (compile-time brand + runtime format check). The
+ * type predicates double as the cast, so no raw `as` cast is needed anywhere.
+ *
+ * Lives on the published `@repo/core` / `@repo/core/auth` surface so the UI,
+ * the API, and the dogfooding `@repo/elevasis-*` packages can all use it.
+ */
+/**
+ * The brands are keyed on a string literal, NOT on a `declare const ...: unique symbol`.
+ *
+ * A `unique symbol` is nominal per declaration site. `@repo/ui`'s rollup-dts pipeline
+ * inlines `@repo/core` types into every published subpath bundle (that inlining is what
+ * `/sdk release-ui` Step 4a enforces), so a symbol-keyed brand is re-declared once per
+ * bundle and TypeScript treats each copy as a different type. In the monorepo every
+ * import resolves to this one file and it all works; for an external consumer, a value
+ * from `@elevasis/ui/organization` passed into a component from
+ * `@elevasis/ui/features/settings` fails with TS2719 "Two different types with this name
+ * exist, but they are unrelated." Measured 2026-08-27 against `@elevasis/ui@2.76.0`,
+ * where seven separate `supabaseOrgIdBrand` symbols shipped across six ui subpaths and
+ * `@elevasis/core/auth`.
+ *
+ * A literal-keyed brand is structural, so every inlined copy is the same type. It still
+ * refuses a bare `string` and still keeps the two ids mutually non-assignable, which is
+ * the entire job. Do not "restore" the symbol form.
+ */
+/** A Supabase organization id (UUID) -- the database key for RLS-scoped rows. */
+type SupabaseOrgId = string & {
+    readonly __orgIdBrand: 'supabase';
+};
+
 declare const AccessKeyInputSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
     systemPath: z.ZodString;
     action: z.ZodDefault<z.ZodEnum<{
@@ -101,5 +147,18 @@ interface UseAccessResult extends AccessAnswer {
  */
 declare function useAccess(key: AccessKeyInput): UseAccessResult;
 
-export { AccessKeys, useAccess };
+/**
+ * Query keys for the effective-permissions fetch behind `useAccess`.
+ *
+ * Note the org id here is the SUPABASE org id, not the WorkOS one every other hook
+ * domain keys on -- `useAccess` reads it from `OrganizationContextValue`, and the
+ * `/memberships/my-permissions/:id` route it calls expects that form. Keying on the
+ * WorkOS id would produce a key that looks right and caches the wrong tenant's answer.
+ */
+declare const accessKeys: {
+    all: readonly ["access-permissions"];
+    permissions: (organizationId: SupabaseOrgId | null) => readonly ["access-permissions", SupabaseOrgId | null];
+};
+
+export { AccessKeys, accessKeys, useAccess };
 export type { AccessKeyInput, UseAccessResult };

package/dist/hooks/access/index.js

@@ -1,25 +1,25 @@
-export { AccessKeys, useAccess } from '../../chunk-4VGPEDQF.js';
+export { AccessKeys, accessKeys, useAccess } from '../../chunk-7A25EJ4A.js';
 import '../../chunk-4WLAVUPS.js';
 import '../../chunk-RXZ3XDBM.js';
-import '../../chunk-JZQNUQE4.js';
+import '../../chunk-KGUBFIMQ.js';
 import '../../chunk-L7BZZ4SI.js';
-import '../../chunk-KXNRTJAE.js';
+import '../../chunk-3HMRK3RC.js';
 import '../../chunk-62GVNH5U.js';
 import '../../chunk-P45GQ3ZW.js';
-import '../../chunk-2GIJBHZT.js';
+import '../../chunk-IIMC4TRH.js';
 import '../../chunk-3KMDHCAR.js';
 import '../../chunk-2IFYDILW.js';
-import '../../chunk-NCPNKI3V.js';
-import '../../chunk-UD657ICS.js';
+import '../../chunk-2HXDI4RY.js';
+import '../../chunk-YJ437RDY.js';
 import '../../chunk-DD3CCMCZ.js';
 import '../../chunk-RNP5R5I3.js';
 import '../../chunk-RT4KRGZT.js';
-import '../../chunk-5ZK7K7YP.js';
-import '../../chunk-Y6I3IC45.js';
-import '../../chunk-5F3QGBEI.js';
+import '../../chunk-CIGWHY7C.js';
+import '../../chunk-6XBZPKMI.js';
+import '../../chunk-7ZUXA2NW.js';
 import '../../chunk-BI5VDO2K.js';
 import '../../chunk-MQZE7SUI.js';
-import '../../chunk-TVTSASST.js';
+import '../../chunk-34B3ACOZ.js';
 import '../../chunk-BRJ3QZ4E.js';
 import '../../chunk-Q7DJKLEN.js';
 import '../../chunk-I2KLQ2HA.js';

package/dist/hooks/delivery/index.js

@@ -1,9 +1,9 @@
-export { milestoneKeys, noteKeys, projectKeys, taskKeys, useCreateMilestone, useCreateNote, useCreateProject, useCreateTask, useDeleteMilestone, useDeleteProject, useDeleteTask, useMilestones, useProject, useProjectMilestones, useProjectNotes, useProjectTasks, useProjects, useTasks, useUpdateMilestone, useUpdateProject, useUpdateTask } from '../../chunk-GFSOQH3N.js';
-import '../../chunk-KXNRTJAE.js';
-import '../../chunk-5ZK7K7YP.js';
-import '../../chunk-Y6I3IC45.js';
-import '../../chunk-5F3QGBEI.js';
+export { milestoneKeys, noteKeys, projectKeys, taskKeys, useCreateMilestone, useCreateNote, useCreateProject, useCreateTask, useDeleteMilestone, useDeleteProject, useDeleteTask, useMilestones, useProject, useProjectMilestones, useProjectNotes, useProjectTasks, useProjects, useTasks, useUpdateMilestone, useUpdateProject, useUpdateTask } from '../../chunk-MJIDC25O.js';
+import '../../chunk-3HMRK3RC.js';
+import '../../chunk-CIGWHY7C.js';
+import '../../chunk-6XBZPKMI.js';
+import '../../chunk-7ZUXA2NW.js';
 import '../../chunk-BI5VDO2K.js';
 import '../../chunk-MQZE7SUI.js';
-import '../../chunk-TVTSASST.js';
+import '../../chunk-34B3ACOZ.js';
 import '../../chunk-I2KLQ2HA.js';