@elevasis/ui 2.79.0 → 2.81.0

package/dist/layout/index.js

@@ -1,30 +1,30 @@
-export { AppPageLayout, AppShellContainer, AppShellContentContainer, AppShellRightSideContainer, AppShellRightSideOuterContainer, AppTopbarAdjusterWrapper, CollapsibleSidebarGroup, CyberParticles, LinksGroup, Sidebar, SidebarContext, SidebarProvider, SubshellNavList, Topbar, TopbarActions, TopbarContainer, Vignette, subsidebarWidth, useSidebar, useSidebarCollapse } from '../chunk-R42OYAQ2.js';
-export { SubshellLoader } from '../chunk-4ZHX5KOT.js';
-export { AppShellCenteredContainer, AppShellError, AppShellLoader } from '../chunk-6AJUWYKS.js';
-export { SubshellPageLayout } from '../chunk-ODXLZZFR.js';
+export { AppPageLayout, AppShellContainer, AppShellContentContainer, AppShellRightSideContainer, AppShellRightSideOuterContainer, AppTopbarAdjusterWrapper, CollapsibleSidebarGroup, CyberParticles, LinksGroup, Sidebar, SidebarContext, SidebarProvider, SubshellNavList, Topbar, TopbarActions, TopbarContainer, Vignette, subsidebarWidth, useSidebar, useSidebarCollapse } from '../chunk-KU7KN5VN.js';
+export { SubshellLoader } from '../chunk-JLKZUO2I.js';
+export { AppShellCenteredContainer, AppShellError, AppShellLoader } from '../chunk-LGJASP5H.js';
+export { SubshellPageLayout } from '../chunk-SOBKRB4N.js';
 export { PageContainer } from '../chunk-BZZCNLT6.js';
-export { SubshellContainer, SubshellContentContainer, SubshellNavItem, SubshellRightSideContainer, SubshellSidebar, SubshellSidebarLoader, SubshellSidebarSection, sidebarBottomSectionCollapsedHeight, sidebarBottomSectionHeight, sidebarCollapsedWidth, sidebarGroupChevronSize, sidebarHoverDelay, sidebarIconInnerSize, sidebarIconSize, sidebarIconStroke, sidebarItemGap, sidebarItemHeight, sidebarItemPadding, sidebarSectionPadding, sidebarSubLinkIndent, sidebarSubLinkPaddingX, sidebarSubLinkPaddingY, sidebarToggleIconSize, sidebarTransitionDuration, sidebarWidth, subshellNavItemIconSize, topbarHeight } from '../chunk-4VGPEDQF.js';
+export { SubshellContainer, SubshellContentContainer, SubshellNavItem, SubshellRightSideContainer, SubshellSidebar, SubshellSidebarLoader, SubshellSidebarSection, sidebarBottomSectionCollapsedHeight, sidebarBottomSectionHeight, sidebarCollapsedWidth, sidebarGroupChevronSize, sidebarHoverDelay, sidebarIconInnerSize, sidebarIconSize, sidebarIconStroke, sidebarItemGap, sidebarItemHeight, sidebarItemPadding, sidebarSectionPadding, sidebarSubLinkIndent, sidebarSubLinkPaddingX, sidebarSubLinkPaddingY, sidebarToggleIconSize, sidebarTransitionDuration, sidebarWidth, subshellNavItemIconSize, topbarHeight } from '../chunk-PSGSFPWA.js';
 import '../chunk-4WLAVUPS.js';
 export { AmbientBloomGrid, AppBackground, CyberBackground, FilmGrain, FloatingMotes, FloatingOrbs, PerspectiveGrid, RadiantGlow, WaveBackground } from '../chunk-RXZ3XDBM.js';
-import '../chunk-JZQNUQE4.js';
+import '../chunk-7RS2NUC6.js';
 import '../chunk-L7BZZ4SI.js';
-import '../chunk-KXNRTJAE.js';
+import '../chunk-PNCJJE4Z.js';
 import '../chunk-62GVNH5U.js';
 import '../chunk-P45GQ3ZW.js';
-import '../chunk-2GIJBHZT.js';
+import '../chunk-IIMC4TRH.js';
 import '../chunk-3KMDHCAR.js';
 import '../chunk-2IFYDILW.js';
-import '../chunk-NCPNKI3V.js';
-import '../chunk-UD657ICS.js';
+import '../chunk-2HXDI4RY.js';
+import '../chunk-YJ437RDY.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-RNP5R5I3.js';
 import '../chunk-RT4KRGZT.js';
-import '../chunk-5ZK7K7YP.js';
-import '../chunk-Y6I3IC45.js';
-import '../chunk-5F3QGBEI.js';
+import '../chunk-DEZW7QDI.js';
+import '../chunk-6XBZPKMI.js';
+import '../chunk-7ZUXA2NW.js';
 import '../chunk-BI5VDO2K.js';
 import '../chunk-MQZE7SUI.js';
-import '../chunk-TVTSASST.js';
+import '../chunk-34B3ACOZ.js';
 import '../chunk-BRJ3QZ4E.js';
 import '../chunk-Q7DJKLEN.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/organization/index.d.ts

@@ -131,6 +131,18 @@ interface MembershipWithDetails extends OrganizationMembership {
         workos_org_id: string;
         primaryDomain?: string;
         is_test?: boolean;
+        /**
+         * The organization's lifecycle status (`active | suspended | archived |
+         * deleting | delete_failed` -- a DB CHECK constraint, not a TS enum).
+         * `GET /memberships/my-memberships` annotates every row with this field
+         * rather than filtering non-`active` organizations out of the response,
+         * so a member whose organization was archived or is being deleted still
+         * sees it (and can be told why) instead of the row silently vanishing.
+         * Consumers that auto-select a membership (e.g. `OrganizationProvider`)
+         * must check this before entering an organization on the caller's
+         * behalf. Optional for backward compatibility with callers and fixtures
+         * that predate this field; treat a missing value as serviceable.
+         */
         status?: string;
         metadata?: Record<string, unknown>;
         config?: Record<string, unknown>;
@@ -192,7 +204,11 @@ type ApiRequestFn = <T>(endpoint: string, options?: RequestInit) => Promise<T>;
  *
  * Behaviors:
  * - Fetches all memberships for the authenticated user via GET /memberships/my-memberships
- * - Selects the active org by priority: WorkOS org ID > saved preference > first membership
+ * - Selects the active org by priority: WorkOS org ID > saved preference > first membership,
+ *   skipping any candidate whose `organization.status` is not serviceable (see
+ *   {@link isOrganizationServiceable}) and falling through to the next priority
+ * - Sets a real `error` (rather than silently no-op'ing) when the fetch comes back with
+ *   zero memberships, e.g. the user's only organization was just deleted
  * - Persists explicit multi-org switches to PATCH /users/me { lastVisitedOrg }
  * - Clears all state when the user signs out (user becomes null)
  */

package/dist/organization/index.js

@@ -1,9 +1,9 @@
-export { OrganizationProvider, OrganizationSwitcher, OrganizationSwitcherConnected, createOrganizationsSlice, createUseOrgInitialization, createUseOrganizations } from '../chunk-UD657ICS.js';
+export { OrganizationProvider, OrganizationSwitcher, OrganizationSwitcherConnected, createOrganizationsSlice, createUseOrgInitialization, createUseOrganizations } from '../chunk-YJ437RDY.js';
 export { OrganizationContext, useOrganization } from '../chunk-DD3CCMCZ.js';
 import '../chunk-RNP5R5I3.js';
 import '../chunk-RT4KRGZT.js';
 import '../chunk-BI5VDO2K.js';
 import '../chunk-MQZE7SUI.js';
-import '../chunk-TVTSASST.js';
+import '../chunk-34B3ACOZ.js';
 import '../chunk-BRJ3QZ4E.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/profile/index.d.ts

@@ -5,7 +5,7 @@ import { QueryKey } from '@tanstack/react-query';
 /**
  * Concrete row shapes for the published Supabase tables.
  *
- * GENERATED by `scripts/gen-published-rows.mjs` — do not hand-edit; re-run the script instead.
+ * @generated by packages/core/scripts/gen-published-rows.mjs — DO NOT EDIT. Re-run `pnpm gen:published-rows`.
  *
  * These were `Tables<'users'>` / `TablesInsert<...>` aliases in `./index.ts`. Each one indexes
  * into the generated `Database` type, and a published `.d.ts` that references `Database` makes

package/dist/profile/index.js

@@ -2,6 +2,6 @@ import '../chunk-RNP5R5I3.js';
 export { ProfileProvider, USER_PROFILE_QUERY_KEY, UserProfileService, useProfile, useUserProfile } from '../chunk-RT4KRGZT.js';
 import '../chunk-BI5VDO2K.js';
 import '../chunk-MQZE7SUI.js';
-import '../chunk-TVTSASST.js';
+import '../chunk-34B3ACOZ.js';
 import '../chunk-BRJ3QZ4E.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/provider/ElevasisServiceContext.js

@@ -1,4 +1,4 @@
 export { ElevasisServiceContext, ElevasisServiceProvider, useElevasisServices } from '../chunk-BI5VDO2K.js';
 import '../chunk-MQZE7SUI.js';
-import '../chunk-TVTSASST.js';
+import '../chunk-34B3ACOZ.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/provider/index.d.ts

@@ -2872,13 +2872,6 @@ type Database = {
                         referencedRelation: "users";
                         referencedColumns: ["id"];
                     },
-                    {
-                        foreignKeyName: "prj_notes_milestone_id_fkey";
-                        columns: ["milestone_id"];
-                        isOneToOne: false;
-                        referencedRelation: "prj_milestones";
-                        referencedColumns: ["id"];
-                    },
                     {
                         foreignKeyName: "prj_notes_organization_id_fkey";
                         columns: ["organization_id"];
@@ -2892,13 +2885,6 @@ type Database = {
                         isOneToOne: false;
                         referencedRelation: "prj_projects";
                         referencedColumns: ["id"];
-                    },
-                    {
-                        foreignKeyName: "prj_notes_task_id_fkey";
-                        columns: ["task_id"];
-                        isOneToOne: false;
-                        referencedRelation: "prj_tasks";
-                        referencedColumns: ["id"];
                     }
                 ];
             };

package/dist/provider/index.js

@@ -1,25 +1,25 @@
-export { AppearanceProvider, CrmActionsProvider, ElevasisCoreProvider, ElevasisSystemsProvider, ElevasisUIProvider, ListActionsProvider, NotificationProvider, SystemShell, createTestSystemsProvider, selectDeclaredSystems, useAppearance, useCrmActions, useElevasisSystems, useListActions, useNotificationAdapter, useOptionalElevasisSystems, useResolvedOrganizationModel } from '../chunk-4VGPEDQF.js';
+export { AppearanceProvider, CrmActionsProvider, ElevasisCoreProvider, ElevasisSystemsProvider, ElevasisUIProvider, ListActionsProvider, NotificationProvider, SystemShell, createTestSystemsProvider, selectDeclaredSystems, useAppearance, useCrmActions, useElevasisSystems, useListActions, useNotificationAdapter, useOptionalElevasisSystems, useResolvedOrganizationModel } from '../chunk-PSGSFPWA.js';
 import '../chunk-4WLAVUPS.js';
 import '../chunk-RXZ3XDBM.js';
-import '../chunk-JZQNUQE4.js';
+import '../chunk-7RS2NUC6.js';
 import '../chunk-L7BZZ4SI.js';
-import '../chunk-KXNRTJAE.js';
+import '../chunk-PNCJJE4Z.js';
 import '../chunk-62GVNH5U.js';
 import '../chunk-P45GQ3ZW.js';
-import '../chunk-2GIJBHZT.js';
+import '../chunk-IIMC4TRH.js';
 import '../chunk-3KMDHCAR.js';
 import '../chunk-2IFYDILW.js';
-import '../chunk-NCPNKI3V.js';
-import '../chunk-UD657ICS.js';
+import '../chunk-2HXDI4RY.js';
+import '../chunk-YJ437RDY.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-RNP5R5I3.js';
 import '../chunk-RT4KRGZT.js';
-import '../chunk-5ZK7K7YP.js';
-import '../chunk-Y6I3IC45.js';
-import '../chunk-5F3QGBEI.js';
+import '../chunk-DEZW7QDI.js';
+import '../chunk-6XBZPKMI.js';
+import '../chunk-7ZUXA2NW.js';
 export { ElevasisServiceProvider, useElevasisServices } from '../chunk-BI5VDO2K.js';
 import '../chunk-MQZE7SUI.js';
-import '../chunk-TVTSASST.js';
+import '../chunk-34B3ACOZ.js';
 import '../chunk-BRJ3QZ4E.js';
 import '../chunk-Q7DJKLEN.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/provider/published.d.ts

@@ -2871,13 +2871,6 @@ type Database = {
                         referencedRelation: "users";
                         referencedColumns: ["id"];
                     },
-                    {
-                        foreignKeyName: "prj_notes_milestone_id_fkey";
-                        columns: ["milestone_id"];
-                        isOneToOne: false;
-                        referencedRelation: "prj_milestones";
-                        referencedColumns: ["id"];
-                    },
                     {
                         foreignKeyName: "prj_notes_organization_id_fkey";
                         columns: ["organization_id"];
@@ -2891,13 +2884,6 @@ type Database = {
                         isOneToOne: false;
                         referencedRelation: "prj_projects";
                         referencedColumns: ["id"];
-                    },
-                    {
-                        foreignKeyName: "prj_notes_task_id_fkey";
-                        columns: ["task_id"];
-                        isOneToOne: false;
-                        referencedRelation: "prj_tasks";
-                        referencedColumns: ["id"];
                     }
                 ];
             };

package/dist/provider/published.js

@@ -1,25 +1,25 @@
-export { AppearanceProvider, ElevasisCoreProvider, ElevasisSystemsProvider, NotificationProvider, SystemShell, selectDeclaredSystems, useAppearance, useElevasisSystems, useNotificationAdapter, useOptionalElevasisSystems, useResolvedOrganizationModel } from '../chunk-4VGPEDQF.js';
+export { AppearanceProvider, ElevasisCoreProvider, ElevasisSystemsProvider, NotificationProvider, SystemShell, selectDeclaredSystems, useAppearance, useElevasisSystems, useNotificationAdapter, useOptionalElevasisSystems, useResolvedOrganizationModel } from '../chunk-PSGSFPWA.js';
 import '../chunk-4WLAVUPS.js';
 import '../chunk-RXZ3XDBM.js';
-import '../chunk-JZQNUQE4.js';
+import '../chunk-7RS2NUC6.js';
 import '../chunk-L7BZZ4SI.js';
-import '../chunk-KXNRTJAE.js';
+import '../chunk-PNCJJE4Z.js';
 import '../chunk-62GVNH5U.js';
 import '../chunk-P45GQ3ZW.js';
-import '../chunk-2GIJBHZT.js';
+import '../chunk-IIMC4TRH.js';
 import '../chunk-3KMDHCAR.js';
 import '../chunk-2IFYDILW.js';
-import '../chunk-NCPNKI3V.js';
-import '../chunk-UD657ICS.js';
+import '../chunk-2HXDI4RY.js';
+import '../chunk-YJ437RDY.js';
 import '../chunk-DD3CCMCZ.js';
 import '../chunk-RNP5R5I3.js';
 import '../chunk-RT4KRGZT.js';
-import '../chunk-5ZK7K7YP.js';
-import '../chunk-Y6I3IC45.js';
-import '../chunk-5F3QGBEI.js';
+import '../chunk-DEZW7QDI.js';
+import '../chunk-6XBZPKMI.js';
+import '../chunk-7ZUXA2NW.js';
 export { ElevasisServiceProvider, useElevasisServices } from '../chunk-BI5VDO2K.js';
 import '../chunk-MQZE7SUI.js';
-import '../chunk-TVTSASST.js';
+import '../chunk-34B3ACOZ.js';
 import '../chunk-BRJ3QZ4E.js';
 import '../chunk-Q7DJKLEN.js';
 import '../chunk-I2KLQ2HA.js';

package/dist/sse/index.d.ts

@@ -57,7 +57,13 @@ declare class SSEConnectionManager implements SSEConnectionManagerLike {
      * If a connection already exists for this endpoint, reuses it.
      * Otherwise, creates a new connection.
      *
-     * @param key - Unique identifier for the connection (e.g., 'notifications', 'resource-executive-agent')
+     * The key must encode everything that varies the request — the organization above all. Only the
+     * first subscriber's `options` open the connection; a later subscriber on the same key inherits
+     * that request wholesale, headers included. A mismatch is reported to the console but not
+     * repaired, because repairing it here would move the other subscribers onto a stream they did
+     * not ask for.
+     *
+     * @param key - Unique identifier for the connection (e.g., `notifications:${organizationId}`)
      * @param subscriberId - Unique identifier for this subscriber (usually component instance)
      * @param options - SSE connection options
      * @returns Unsubscribe function to call when component unmounts

package/dist/sse/index.js

@@ -1,6 +1,14 @@
 import '../chunk-I2KLQ2HA.js';
 import { fetchEventSource } from '@microsoft/fetch-event-source';
 
+var FatalSSEResponseError = class extends Error {
+  status;
+  constructor(status) {
+    super(`Fatal response: ${status}`);
+    this.name = "FatalSSEResponseError";
+    this.status = status;
+  }
+};
 async function fetchEventSourceWithTokenRefresh(options) {
   const {
     url,
@@ -59,6 +67,9 @@ async function fetchEventSourceWithTokenRefresh(options) {
             controller.abort();
             return;
           }
+          if (response.status === 403) {
+            throw new FatalSSEResponseError(response.status);
+          }
           throw new Error(`Unexpected response: ${response.status}`);
         },
         onmessage(event) {
@@ -69,6 +80,9 @@ async function fetchEventSourceWithTokenRefresh(options) {
             throw error;
           }
           onerror?.(error);
+          if (error instanceof FatalSSEResponseError) {
+            throw error;
+          }
         },
         onclose() {
           onclose?.();
@@ -95,6 +109,13 @@ async function fetchEventSourceWithTokenRefresh(options) {
 }
 
 // src/sse/SSEConnectionManager.ts
+function differingHeaderNames(a, b) {
+  const normalize = (headers) => new Map(Object.entries(headers).map(([name, value]) => [name.toLowerCase(), value]));
+  const left = normalize(a);
+  const right = normalize(b);
+  const names = /* @__PURE__ */ new Set([...left.keys(), ...right.keys()]);
+  return Array.from(names).filter((name) => left.get(name) !== right.get(name));
+}
 var SSEConnectionManager = class {
   connections = /* @__PURE__ */ new Map();
   closeGracePeriodMs;
@@ -107,7 +128,13 @@ var SSEConnectionManager = class {
    * If a connection already exists for this endpoint, reuses it.
    * Otherwise, creates a new connection.
    *
-   * @param key - Unique identifier for the connection (e.g., 'notifications', 'resource-executive-agent')
+   * The key must encode everything that varies the request — the organization above all. Only the
+   * first subscriber's `options` open the connection; a later subscriber on the same key inherits
+   * that request wholesale, headers included. A mismatch is reported to the console but not
+   * repaired, because repairing it here would move the other subscribers onto a stream they did
+   * not ask for.
+   *
+   * @param key - Unique identifier for the connection (e.g., `notifications:${organizationId}`)
    * @param subscriberId - Unique identifier for this subscriber (usually component instance)
    * @param options - SSE connection options
    * @returns Unsubscribe function to call when component unmounts
@@ -115,6 +142,12 @@ var SSEConnectionManager = class {
   subscribe(key, subscriberId, options) {
     const existing = this.connections.get(key);
     if (existing) {
+      const mismatched = differingHeaderNames(existing.headers, options.headers ?? {});
+      if (mismatched.length > 0) {
+        console.error(
+          `[SSEConnectionManager] Subscriber "${subscriberId}" joined key "${key}" with different ${mismatched.join(", ")}. The live connection keeps the headers it was opened with. Include the differing value in the connection key.`
+        );
+      }
       if (existing.closeTimeout) {
         clearTimeout(existing.closeTimeout);
         existing.closeTimeout = void 0;
@@ -130,7 +163,8 @@ var SSEConnectionManager = class {
       const connection = {
         controller,
         subscribers,
-        url: options.url
+        url: options.url,
+        headers: options.headers ?? {}
       };
       this.connections.set(key, connection);
       fetchEventSourceWithTokenRefresh({

package/dist/test-utils/index.d.ts

@@ -194,13 +194,15 @@ interface OrgOsUiRouteContractOptions {
      */
     publiclyReachableRoutePaths?: Iterable<string>;
 }
-type OrgOsUiRouteContractIssueKind = 'missing-system' | 'missing-route' | 'unguarded-route';
+type OrgOsUiRouteContractIssueKind = 'missing-system' | 'missing-route' | 'unguarded-route' | 'no-coverage';
 interface OrgOsUiRouteContractIssue {
     target: OrgOsUiRouteContractTarget;
     kind: OrgOsUiRouteContractIssueKind;
     systemId: string;
     path?: string;
     ownerSystemId?: string;
+    /** `no-coverage` only: Systems that declare a UI path but no owner claimed. */
+    unownedSystemIds?: readonly string[];
 }
 interface OrgOsUiRouteContractResult {
     issues: OrgOsUiRouteContractIssue[];

package/dist/test-utils/index.js

@@ -2,15 +2,15 @@ import { server, handlers } from '../chunk-7XKCG5CT.js';
 export { handlers, server } from '../chunk-7XKCG5CT.js';
 import { mockWorkOSUser, mockUseAuth, mockUnauthenticatedUser, mockAuthenticatedUser, mockAuthLoading, createMockUseAuth } from '../chunk-N7U24M2J.js';
 export { createMockUseAuth, mockAuthLoading, mockAuthenticatedUser, mockUnauthenticatedUser, mockUseAuth, mockWorkOSUser } from '../chunk-N7U24M2J.js';
-import '../chunk-SVZR4GYA.js';
-import { ApiClientProvider } from '../chunk-JZQNUQE4.js';
+import '../chunk-G6VHIXWD.js';
+import { ApiClientProvider } from '../chunk-7RS2NUC6.js';
 import '../chunk-DD3CCMCZ.js';
-import '../chunk-5ZK7K7YP.js';
-import '../chunk-Y6I3IC45.js';
-import '../chunk-5F3QGBEI.js';
+import '../chunk-DEZW7QDI.js';
+import '../chunk-6XBZPKMI.js';
+import '../chunk-7ZUXA2NW.js';
 import { ElevasisServiceProvider } from '../chunk-BI5VDO2K.js';
 import '../chunk-MQZE7SUI.js';
-import '../chunk-TVTSASST.js';
+import '../chunk-34B3ACOZ.js';
 import { __export, __reExport } from '../chunk-I2KLQ2HA.js';
 import { MantineProvider } from '@mantine/core';
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
@@ -186,8 +186,8 @@ function getOrgOsRouteContractSystems(organizationModel) {
     for (const [key, system] of Object.entries(entries)) {
       const id = prefix ? `${prefix}.${key}` : system.id || key;
       result.push({ ...system, id });
-      if (system.systems) visit(system.systems, id);
-      if (system.subsystems) visit(system.subsystems, id);
+      const nested = system.systems ?? system.subsystems;
+      if (nested) visit(nested, id);
     }
   };
   visit(systems);
@@ -207,6 +207,7 @@ function collectOrgOsUiRouteContractIssues(options) {
   const systems = getOrgOsRouteContractSystems(organizationModel);
   const modelSystemIds = new Set(systems.map((system) => system.id));
   const issues = [];
+  const unownedRoutableSystemIds = [];
   let checkedPathCount = 0;
   for (const systemId of target.systemIds) {
     if (!modelSystemIds.has(systemId)) {
@@ -222,7 +223,10 @@ function collectOrgOsUiRouteContractIssues(options) {
     if (!path || system.enabled === false) continue;
     if (system.lifecycle === "archived" || system.lifecycle === "deprecated") continue;
     const ownerSystemId = target.systemIds.find((candidate) => ownsOrgOsSystem(candidate, system.id));
-    if (!ownerSystemId) continue;
+    if (!ownerSystemId) {
+      unownedRoutableSystemIds.push(system.id);
+      continue;
+    }
     checkedPathCount += 1;
     const normalizedPath = normalizeOrgOsRoutePath(path);
     if (!normalizedRoutePaths.has(normalizedPath)) {
@@ -245,9 +249,28 @@ function collectOrgOsUiRouteContractIssues(options) {
       });
     }
   }
+  if (checkedPathCount === 0 && unownedRoutableSystemIds.length > 0) {
+    issues.push({
+      target,
+      kind: "no-coverage",
+      systemId: "(none)",
+      unownedSystemIds: unownedRoutableSystemIds
+    });
+  }
   return { issues, checkedPathCount };
 }
 function formatOrgOsUiRouteContractIssue(issue) {
+  if (issue.kind === "no-coverage") {
+    const unowned = issue.unownedSystemIds ?? [];
+    return [
+      `[no-coverage] The contract checked 0 paths for ${issue.target.name}, but its Organization Model declares ${unowned.length} routable System(s): ${unowned.join(", ")}.`,
+      `No id in this target's derived systemIds owns any of them, so every path was skipped and the run reported a pass that asserted nothing.`,
+      `Derived systemIds: ${issue.target.systemIds.length === 0 ? "(empty)" : issue.target.systemIds.join(", ")}`,
+      "Fix one of:",
+      `- Point the target's shellSource at the file that actually declares the SYSTEM_MANIFESTS array. ${issue.target.shellSource} is what was read; a shell that imports the array from elsewhere yields no ids.`,
+      `- Or, if ${issue.target.name} genuinely mounts no System from its Organization Model, remove the target rather than leaving a check that cannot fail.`
+    ].join("\n");
+  }
   if (issue.kind === "missing-system") {
     return [
       `[missing-system] Registered SystemModule "${issue.systemId}" is not present in ${issue.target.orgModelSource}.`,

package/dist/types/index.d.ts

@@ -3540,13 +3540,6 @@ type Database = {
                         referencedRelation: "users";
                         referencedColumns: ["id"];
                     },
-                    {
-                        foreignKeyName: "prj_notes_milestone_id_fkey";
-                        columns: ["milestone_id"];
-                        isOneToOne: false;
-                        referencedRelation: "prj_milestones";
-                        referencedColumns: ["id"];
-                    },
                     {
                         foreignKeyName: "prj_notes_organization_id_fkey";
                         columns: ["organization_id"];
@@ -3560,13 +3553,6 @@ type Database = {
                         isOneToOne: false;
                         referencedRelation: "prj_projects";
                         referencedColumns: ["id"];
-                    },
-                    {
-                        foreignKeyName: "prj_notes_task_id_fkey";
-                        columns: ["task_id"];
-                        isOneToOne: false;
-                        referencedRelation: "prj_tasks";
-                        referencedColumns: ["id"];
                     }
                 ];
             };
@@ -4484,7 +4470,7 @@ type Database = {
 /**
  * Concrete row shapes for the published Supabase tables.
  *
- * GENERATED by `scripts/gen-published-rows.mjs` — do not hand-edit; re-run the script instead.
+ * @generated by packages/core/scripts/gen-published-rows.mjs — DO NOT EDIT. Re-run `pnpm gen:published-rows`.
  *
  * These were `Tables<'users'>` / `TablesInsert<...>` aliases in `./index.ts`. Each one indexes
  * into the generated `Database` type, and a published `.d.ts` that references `Database` makes
@@ -5182,6 +5168,18 @@ interface MembershipWithDetails extends OrganizationMembership {
         workos_org_id: string;
         primaryDomain?: string;
         is_test?: boolean;
+        /**
+         * The organization's lifecycle status (`active | suspended | archived |
+         * deleting | delete_failed` -- a DB CHECK constraint, not a TS enum).
+         * `GET /memberships/my-memberships` annotates every row with this field
+         * rather than filtering non-`active` organizations out of the response,
+         * so a member whose organization was archived or is being deleted still
+         * sees it (and can be told why) instead of the row silently vanishing.
+         * Consumers that auto-select a membership (e.g. `OrganizationProvider`)
+         * must check this before entering an organization on the caller's
+         * behalf. Optional for backward compatibility with callers and fixtures
+         * that predate this field; treat a missing value as serviceable.
+         */
         status?: string;
         metadata?: Record<string, unknown>;
         config?: Record<string, unknown>;

package/dist/utils/index.d.ts

@@ -305,6 +305,15 @@ interface SystemInterfaceReadinessIssue {
     message: string;
 }
 
+/**
+ * Type-safe error codes
+ * Adding a member obliges a producer in `apps/api` and a display title in the frontend.
+ * Both are enforced: `apps/api/src/platform/errors/__tests__/error-code-producers.test.ts`
+ * keys a producer map by this union, and `getErrorTitle` in `packages/ui/src/utils/error-utils.ts`
+ * looks up a `Record<APIErrorCode, string>` -- an unhandled member fails to compile in both.
+ */
+type APIErrorCode = 'VALIDATION_ERROR' | 'AUTHENTICATION_FAILED' | 'FORBIDDEN' | 'NOT_FOUND' | 'CONFLICT' | 'RATE_LIMIT_EXCEEDED' | 'INTERNAL_SERVER_ERROR' | 'SERVICE_UNAVAILABLE';
+
 /**
  * Time range selector for dashboard metrics
  */
@@ -407,12 +416,6 @@ type NodeColorType = 'violet' | 'blue' | 'orange' | 'teal' | 'gray' | 'yellow';
  */
 declare function getResourceColor(type: ResourceDefinitionType): NodeColorType;
 
-/**
- * Type-safe error codes
- * MUST match API_ERROR_CODES in apps/api/src/errors/error-codes.ts
- */
-type APIErrorCode = 'VALIDATION_ERROR' | 'AUTHENTICATION_FAILED' | 'FORBIDDEN' | 'NOT_FOUND' | 'CONFLICT' | 'RATE_LIMIT_EXCEEDED' | 'INTERNAL_SERVER_ERROR' | 'SERVICE_UNAVAILABLE';
-
 /**
  * Time range utility functions
  * Converts TimeRange enum to ISO 8601 date strings and labels
@@ -509,6 +512,21 @@ declare function getErrorTitle(code?: APIErrorCode): string;
  */
 declare function formatErrorMessage(message: string, requestId?: string, fields?: Record<string, string[]>, retryAfter?: number): string;
 
+/**
+ * Serializes a flat filter object into a `URLSearchParams`-encoded query string.
+ *
+ * Skips `undefined` only -- `0`, `false`, and `''` are legitimate, explicitly-provided
+ * filter values and must survive. A field's absence is expressed by omitting it or
+ * passing `undefined`, never by a falsy value, so skip-undefined is the only semantic
+ * that cannot silently drop a caller's real input. Do not change this to a falsy skip:
+ * several `@repo/ui` hooks pass `limit`/`offset`/`priorityMin` as `0`, and a truthy check
+ * would make "explicitly zero" indistinguishable from "not provided".
+ *
+ * Extracted from two byte-identical local copies in
+ * `hooks/acquisition/useCompanies.ts` and `hooks/acquisition/useContacts.ts`.
+ */
+declare function buildQueryString(params: Record<string, string | number | boolean | undefined>): string;
+
 /**
  * Resource Icon Resolver
  *
@@ -601,5 +619,5 @@ declare function restoreConsole(): void;
 
 declare function setupBrowserMocks(): void;
 
-export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, REFETCH_INTERVAL_DASHBOARD, REFETCH_INTERVAL_REALTIME, REFETCH_INTERVAL_RUNNING, REFETCH_INTERVAL_RUNNING_FAST, ResourceStatusColors, SSE_CLOSE_GRACE_PERIOD, SSE_TOKEN_REFRESH_DELAY, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, debounce, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, getSystemReadinessServerErrorDetails, getTimeRangeDates, getTimeRangeLabel, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail };
+export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, REFETCH_INTERVAL_DASHBOARD, REFETCH_INTERVAL_REALTIME, REFETCH_INTERVAL_RUNNING, REFETCH_INTERVAL_RUNNING_FAST, ResourceStatusColors, SSE_CLOSE_GRACE_PERIOD, SSE_TOKEN_REFRESH_DELAY, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, buildQueryString, debounce, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, getSystemReadinessServerErrorDetails, getTimeRangeDates, getTimeRangeLabel, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail };
 export type { SystemReadinessErrorDetails, TablerIcon };

package/dist/utils/index.js

@@ -1,5 +1,5 @@
-export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, getSystemReadinessServerErrorDetails, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail } from '../chunk-5ZK7K7YP.js';
-export { REFETCH_INTERVAL_DASHBOARD, REFETCH_INTERVAL_REALTIME, REFETCH_INTERVAL_RUNNING, REFETCH_INTERVAL_RUNNING_FAST, SSE_CLOSE_GRACE_PERIOD, SSE_TOKEN_REFRESH_DELAY, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, debounce, getTimeRangeDates, getTimeRangeLabel } from '../chunk-Y6I3IC45.js';
-export { ResourceStatusColors } from '../chunk-5F3QGBEI.js';
-import '../chunk-TVTSASST.js';
+export { APIClientError, API_URL, DEBOUNCE_FILTER, DEBOUNCE_SLIDER, GC_TIME_LONG, GC_TIME_MEDIUM, GC_TIME_SHORT, LIMIT_ACTIVITY_FEED, OAUTH_FLOW_TIMEOUT, PAGE_SIZE_DEFAULT, STALE_TIME_ADMIN, STALE_TIME_DEFAULT, STALE_TIME_MONITORING, buildQueryString, formatChartAxisDate, formatDate, formatDateTime, formatErrorMessage, formatRelativeTime, formatTimeAgo, getErrorInfo, getErrorTitle, getResourceColor, getResourceIcon, getSystemReadinessServerErrorDetails, isAPIClientError, restoreConsole, setupBrowserMocks, suppressKnownWarnings, validateEmail } from '../chunk-DEZW7QDI.js';
+export { REFETCH_INTERVAL_DASHBOARD, REFETCH_INTERVAL_REALTIME, REFETCH_INTERVAL_RUNNING, REFETCH_INTERVAL_RUNNING_FAST, SSE_CLOSE_GRACE_PERIOD, SSE_TOKEN_REFRESH_DELAY, WS_MAX_RETRIES_BEFORE_ERROR, WS_RECONNECT_BASE_DELAY, WS_RECONNECT_MAX_DELAY, debounce, getTimeRangeDates, getTimeRangeLabel } from '../chunk-6XBZPKMI.js';
+export { ResourceStatusColors } from '../chunk-7ZUXA2NW.js';
+import '../chunk-34B3ACOZ.js';
 import '../chunk-I2KLQ2HA.js';