@headless-lms/core 0.2.0 → 0.3.0

package/dist/organizations/access-scopes.js

@@ -0,0 +1,89 @@
+import { ForbiddenError } from "../shared/errors.js";
+import { capability, isStaffRole } from "./roles.js";
+//#region src/organizations/access-scopes.ts
+const ACCESS_SCOPES = [
+	"courses:read",
+	"courses:write",
+	"courses:delete",
+	"downloads:read",
+	"downloads:write",
+	"downloads:delete",
+	"bundles:read",
+	"bundles:write",
+	"bundles:delete",
+	"media:read",
+	"students:read",
+	"students:invite",
+	"access:read",
+	"access:write",
+	"analytics:read",
+	"automations:read",
+	"automations:write",
+	"automations:delete",
+	"comments:read",
+	"comments:moderate",
+	"communities:read",
+	"communities:write",
+	"communities:delete",
+	"community_members:read",
+	"community_members:write",
+	"community_moderation:read",
+	"community_moderation:write"
+];
+const SCOPE_PERMISSION = {
+	"courses:read": null,
+	"courses:write": "create_course",
+	"courses:delete": "create_course",
+	"downloads:read": null,
+	"downloads:write": "create_course",
+	"downloads:delete": "create_course",
+	"bundles:read": null,
+	"bundles:write": "create_course",
+	"bundles:delete": "create_course",
+	"media:read": null,
+	"students:read": "view_student_progress",
+	"students:invite": "manage_users",
+	"access:read": "view_student_progress",
+	"access:write": "manage_users",
+	"analytics:read": "view_student_progress",
+	"automations:read": null,
+	"automations:write": "manage_org_settings",
+	"automations:delete": "manage_org_settings",
+	"comments:read": null,
+	"comments:moderate": "edit_assigned_course",
+	"communities:read": null,
+	"communities:write": "create_course",
+	"communities:delete": "create_course",
+	"community_members:read": null,
+	"community_members:write": "moderate",
+	"community_moderation:read": null,
+	"community_moderation:write": "moderate"
+};
+function isAccessScope(value) {
+	return ACCESS_SCOPES.includes(value);
+}
+function isDeleteScope(scope) {
+	return scope.endsWith(":delete");
+}
+function roleHoldsScope(role, scope) {
+	if (!isStaffRole(role)) return false;
+	const permission = SCOPE_PERMISSION[scope];
+	return permission === null || capability(role, permission) === true;
+}
+function scopesForRole(role) {
+	return ACCESS_SCOPES.filter((scope) => roleHoldsScope(role, scope));
+}
+function scopeOptions(role) {
+	return ACCESS_SCOPES.map((scope) => ({
+		scope,
+		allowed: roleHoldsScope(role, scope)
+	}));
+}
+function assertRoleHoldsScopes(role, scopes) {
+	const missing = scopes.filter((scope) => !roleHoldsScope(role, scope));
+	if (missing.length > 0) throw new ForbiddenError(`Your role cannot grant ${missing.join(", ")}`);
+}
+//#endregion
+export { ACCESS_SCOPES, SCOPE_PERMISSION, assertRoleHoldsScopes, isAccessScope, isDeleteScope, roleHoldsScope, scopeOptions, scopesForRole };
+
+//# sourceMappingURL=access-scopes.js.map

package/dist/organizations/access-scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-scopes.js","names":[],"sources":["../../src/organizations/access-scopes.ts"],"sourcesContent":["import { ForbiddenError } from '../shared/errors.js';\nimport { capability, isStaffRole, type Permission, type Role } from './roles.js';\n\nexport const ACCESS_SCOPES = [\n  'courses:read',\n  'courses:write',\n  'courses:delete',\n  'downloads:read',\n  'downloads:write',\n  'downloads:delete',\n  'bundles:read',\n  'bundles:write',\n  'bundles:delete',\n  'media:read',\n  'students:read',\n  'students:invite',\n  'access:read',\n  'access:write',\n  'analytics:read',\n  'automations:read',\n  'automations:write',\n  'automations:delete',\n  'comments:read',\n  'comments:moderate',\n  'communities:read',\n  'communities:write',\n  'communities:delete',\n  'community_members:read',\n  'community_members:write',\n  'community_moderation:read',\n  'community_moderation:write',\n] as const;\n\nexport type AccessScope = (typeof ACCESS_SCOPES)[number];\n\nexport const SCOPE_PERMISSION: Record<AccessScope, Permission | null> = {\n  'courses:read': null,\n  'courses:write': 'create_course',\n  'courses:delete': 'create_course',\n  'downloads:read': null,\n  'downloads:write': 'create_course',\n  'downloads:delete': 'create_course',\n  'bundles:read': null,\n  'bundles:write': 'create_course',\n  'bundles:delete': 'create_course',\n  'media:read': null,\n  'students:read': 'view_student_progress',\n  'students:invite': 'manage_users',\n  'access:read': 'view_student_progress',\n  'access:write': 'manage_users',\n  'analytics:read': 'view_student_progress',\n  'automations:read': null,\n  'automations:write': 'manage_org_settings',\n  'automations:delete': 'manage_org_settings',\n  'comments:read': null,\n  'comments:moderate': 'edit_assigned_course',\n  'communities:read': null,\n  'communities:write': 'create_course',\n  'communities:delete': 'create_course',\n  'community_members:read': null,\n  'community_members:write': 'moderate',\n  'community_moderation:read': null,\n  'community_moderation:write': 'moderate',\n};\n\nexport type ScopeOption = { scope: AccessScope; allowed: boolean };\n\nexport function isAccessScope(value: string): value is AccessScope {\n  return (ACCESS_SCOPES as readonly string[]).includes(value);\n}\n\nexport function isDeleteScope(scope: AccessScope): boolean {\n  return scope.endsWith(':delete');\n}\n\nexport function roleHoldsScope(role: Role, scope: AccessScope): boolean {\n  if (!isStaffRole(role)) {\n    return false;\n  }\n  const permission = SCOPE_PERMISSION[scope];\n  return permission === null || capability(role, permission) === true;\n}\n\nexport function scopesForRole(role: Role): AccessScope[] {\n  return ACCESS_SCOPES.filter((scope) => roleHoldsScope(role, scope));\n}\n\nexport function scopeOptions(role: Role): ScopeOption[] {\n  return ACCESS_SCOPES.map((scope) => ({ scope, allowed: roleHoldsScope(role, scope) }));\n}\n\nexport function assertRoleHoldsScopes(role: Role, scopes: readonly AccessScope[]): void {\n  const missing = scopes.filter((scope) => !roleHoldsScope(role, scope));\n  if (missing.length > 0) {\n    throw new ForbiddenError(`Your role cannot grant ${missing.join(', ')}`);\n  }\n}\n"],"mappings":";;;AAGA,MAAa,gBAAgB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAIA,MAAa,mBAA2D;CACtE,gBAAgB;CAChB,iBAAiB;CACjB,kBAAkB;CAClB,kBAAkB;CAClB,mBAAmB;CACnB,oBAAoB;CACpB,gBAAgB;CAChB,iBAAiB;CACjB,kBAAkB;CAClB,cAAc;CACd,iBAAiB;CACjB,mBAAmB;CACnB,eAAe;CACf,gBAAgB;CAChB,kBAAkB;CAClB,oBAAoB;CACpB,qBAAqB;CACrB,sBAAsB;CACtB,iBAAiB;CACjB,qBAAqB;CACrB,oBAAoB;CACpB,qBAAqB;CACrB,sBAAsB;CACtB,0BAA0B;CAC1B,2BAA2B;CAC3B,6BAA6B;CAC7B,8BAA8B;AAChC;AAIA,SAAgB,cAAc,OAAqC;CACjE,OAAQ,cAAoC,SAAS,KAAK;AAC5D;AAEA,SAAgB,cAAc,OAA6B;CACzD,OAAO,MAAM,SAAS,SAAS;AACjC;AAEA,SAAgB,eAAe,MAAY,OAA6B;CACtE,IAAI,CAAC,YAAY,IAAI,GACnB,OAAO;CAET,MAAM,aAAa,iBAAiB;CACpC,OAAO,eAAe,QAAQ,WAAW,MAAM,UAAU,MAAM;AACjE;AAEA,SAAgB,cAAc,MAA2B;CACvD,OAAO,cAAc,QAAQ,UAAU,eAAe,MAAM,KAAK,CAAC;AACpE;AAEA,SAAgB,aAAa,MAA2B;CACtD,OAAO,cAAc,KAAK,WAAW;EAAE;EAAO,SAAS,eAAe,MAAM,KAAK;CAAE,EAAE;AACvF;AAEA,SAAgB,sBAAsB,MAAY,QAAsC;CACtF,MAAM,UAAU,OAAO,QAAQ,UAAU,CAAC,eAAe,MAAM,KAAK,CAAC;CACrE,IAAI,QAAQ,SAAS,GACnB,MAAM,IAAI,eAAe,0BAA0B,QAAQ,KAAK,IAAI,GAAG;AAE3E"}

package/dist/organizations/events.d.ts

@@ -20,9 +20,9 @@ declare const organizationEvents: {
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     id: import("zod").ZodString;
-    name: import("zod").ZodString;
     createdAt: import("zod").ZodCoercedDate<unknown>;
     updatedAt: import("zod").ZodCoercedDate<unknown>;
+    name: import("zod").ZodString;
     slug: import("zod").ZodString;
     ownerId: import("zod").ZodString;
   }, import("zod/v4/core").$strip>>;
@@ -44,9 +44,9 @@ declare const organizationEvents: {
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     id: import("zod").ZodString;
-    name: import("zod").ZodString;
     createdAt: import("zod").ZodCoercedDate<unknown>;
     updatedAt: import("zod").ZodCoercedDate<unknown>;
+    name: import("zod").ZodString;
     slug: import("zod").ZodString;
     ownerId: import("zod").ZodString;
   }, import("zod/v4/core").$strip>>;
@@ -68,9 +68,9 @@ declare const organizationEvents: {
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     id: import("zod").ZodString;
-    name: import("zod").ZodString;
     createdAt: import("zod").ZodCoercedDate<unknown>;
     updatedAt: import("zod").ZodCoercedDate<unknown>;
+    name: import("zod").ZodString;
     slug: import("zod").ZodString;
     ownerId: import("zod").ZodString;
   }, import("zod/v4/core").$strip>>;
@@ -78,7 +78,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: Date;
     updatedAt: Date;
@@ -86,24 +86,25 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     orgId: import("zod").ZodString;
     id: import("zod").ZodString;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
     status: import("zod").ZodEnum<{
       active: "active";
       invited: "invited";
     }>;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     userId: import("zod").ZodString;
     role: import("zod").ZodEnum<{
       owner: "owner";
       admin: "admin";
       instructor: "instructor";
+      moderator: "moderator";
       student: "student";
     }>;
   }, import("zod/v4/core").$strip>>;
@@ -111,7 +112,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: Date;
     updatedAt: Date;
@@ -119,24 +120,59 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     orgId: import("zod").ZodString;
     id: import("zod").ZodString;
+    status: import("zod").ZodEnum<{
+      active: "active";
+      invited: "invited";
+    }>;
     createdAt: import("zod").ZodCoercedDate<unknown>;
     updatedAt: import("zod").ZodCoercedDate<unknown>;
+    userId: import("zod").ZodString;
+    role: import("zod").ZodEnum<{
+      owner: "owner";
+      admin: "admin";
+      instructor: "instructor";
+      moderator: "moderator";
+      student: "student";
+    }>;
+  }, import("zod/v4/core").$strip>>;
+  orgUserUpdated: RuntimeEventDefinition<VersionedDomainEvent<{
+    id: string;
+    orgId: string;
+    userId: string;
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
+    status: "active" | "invited";
+    createdAt: Date;
+    updatedAt: Date;
+  }, "organization.user.updated", 1>, {
+    id: string;
+    orgId: string;
+    userId: string;
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
+    status: "active" | "invited";
+    createdAt: unknown;
+    updatedAt: unknown;
+  }, import("zod").ZodObject<{
+    orgId: import("zod").ZodString;
+    id: import("zod").ZodString;
     status: import("zod").ZodEnum<{
       active: "active";
       invited: "invited";
     }>;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     userId: import("zod").ZodString;
     role: import("zod").ZodEnum<{
       owner: "owner";
       admin: "admin";
       instructor: "instructor";
+      moderator: "moderator";
       student: "student";
     }>;
   }, import("zod/v4/core").$strip>>;
@@ -144,7 +180,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     email: string;
-    role: "admin" | "instructor" | "student";
+    role: "admin" | "instructor" | "moderator" | "student";
     status: "pending" | "accepted" | "rejected" | "canceled";
     invitedBy: string;
     tokenHash: string | null;
@@ -155,7 +191,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     email: string;
-    role: "admin" | "instructor" | "student";
+    role: "admin" | "instructor" | "moderator" | "student";
     status: "pending" | "accepted" | "rejected" | "canceled";
     invitedBy: string;
     tokenHash: string | null;
@@ -165,19 +201,20 @@ declare const organizationEvents: {
   }, import("zod").ZodObject<{
     orgId: import("zod").ZodString;
     id: import("zod").ZodString;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
     status: import("zod").ZodEnum<{
       pending: "pending";
       accepted: "accepted";
       rejected: "rejected";
       canceled: "canceled";
     }>;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     expiresAt: import("zod").ZodNullable<import("zod").ZodCoercedDate<unknown>>;
     email: import("zod").ZodEmail;
     role: import("zod").ZodEnum<{
       admin: "admin";
       instructor: "instructor";
+      moderator: "moderator";
       student: "student";
     }>;
     invitedBy: import("zod").ZodString;
@@ -186,7 +223,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     email: string;
-    role: "admin" | "instructor" | "student";
+    role: "admin" | "instructor" | "moderator" | "student";
     status: "pending" | "accepted" | "rejected" | "canceled";
     invitedBy: string;
     tokenHash: string | null;
@@ -197,7 +234,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     email: string;
-    role: "admin" | "instructor" | "student";
+    role: "admin" | "instructor" | "moderator" | "student";
     status: "pending" | "accepted" | "rejected" | "canceled";
     invitedBy: string;
     tokenHash: string | null;
@@ -207,19 +244,20 @@ declare const organizationEvents: {
   }, import("zod").ZodObject<{
     orgId: import("zod").ZodString;
     id: import("zod").ZodString;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
     status: import("zod").ZodEnum<{
       pending: "pending";
       accepted: "accepted";
       rejected: "rejected";
       canceled: "canceled";
     }>;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     expiresAt: import("zod").ZodNullable<import("zod").ZodCoercedDate<unknown>>;
     email: import("zod").ZodEmail;
     role: import("zod").ZodEnum<{
       admin: "admin";
       instructor: "instructor";
+      moderator: "moderator";
       student: "student";
     }>;
     invitedBy: import("zod").ZodString;
@@ -228,7 +266,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     email: string;
-    role: "admin" | "instructor" | "student";
+    role: "admin" | "instructor" | "moderator" | "student";
     status: "pending" | "accepted" | "rejected" | "canceled";
     invitedBy: string;
     tokenHash: string | null;
@@ -239,7 +277,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     email: string;
-    role: "admin" | "instructor" | "student";
+    role: "admin" | "instructor" | "moderator" | "student";
     status: "pending" | "accepted" | "rejected" | "canceled";
     invitedBy: string;
     tokenHash: string | null;
@@ -251,7 +289,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: Date;
     updatedAt: Date;
@@ -259,24 +297,25 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     orgId: import("zod").ZodString;
     id: import("zod").ZodString;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
     status: import("zod").ZodEnum<{
       active: "active";
       invited: "invited";
     }>;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     userId: import("zod").ZodString;
     role: import("zod").ZodEnum<{
       owner: "owner";
       admin: "admin";
       instructor: "instructor";
+      moderator: "moderator";
       student: "student";
     }>;
   }, import("zod/v4/core").$strip>>;
@@ -284,7 +323,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: Date;
     updatedAt: Date;
@@ -292,24 +331,25 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     orgId: import("zod").ZodString;
     id: import("zod").ZodString;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
     status: import("zod").ZodEnum<{
       active: "active";
       invited: "invited";
     }>;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     userId: import("zod").ZodString;
     role: import("zod").ZodEnum<{
       owner: "owner";
       admin: "admin";
       instructor: "instructor";
+      moderator: "moderator";
       student: "student";
     }>;
   }, import("zod/v4/core").$strip>>;
@@ -317,7 +357,7 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: Date;
     updatedAt: Date;
@@ -325,24 +365,25 @@ declare const organizationEvents: {
     id: string;
     orgId: string;
     userId: string;
-    role: "owner" | "admin" | "instructor" | "student";
+    role: "owner" | "admin" | "instructor" | "moderator" | "student";
     status: "active" | "invited";
     createdAt: unknown;
     updatedAt: unknown;
   }, import("zod").ZodObject<{
     orgId: import("zod").ZodString;
     id: import("zod").ZodString;
-    createdAt: import("zod").ZodCoercedDate<unknown>;
-    updatedAt: import("zod").ZodCoercedDate<unknown>;
     status: import("zod").ZodEnum<{
       active: "active";
       invited: "invited";
     }>;
+    createdAt: import("zod").ZodCoercedDate<unknown>;
+    updatedAt: import("zod").ZodCoercedDate<unknown>;
     userId: import("zod").ZodString;
     role: import("zod").ZodEnum<{
       owner: "owner";
       admin: "admin";
       instructor: "instructor";
+      moderator: "moderator";
       student: "student";
     }>;
   }, import("zod/v4/core").$strip>>;
@@ -352,6 +393,7 @@ type OrganizationUpdated = EventOf<typeof organizationEvents.organizationUpdated
 type OrganizationDeleted = EventOf<typeof organizationEvents.organizationDeleted>;
 type OrgUserLinked = EventOf<typeof organizationEvents.orgUserLinked>;
 type OrgUserDeleted = EventOf<typeof organizationEvents.orgUserDeleted>;
+type OrgUserUpdated = EventOf<typeof organizationEvents.orgUserUpdated>;
 type InviteCreated = EventOf<typeof organizationEvents.inviteCreated>;
 type InviteAccepted = EventOf<typeof organizationEvents.inviteAccepted>;
 type InviteCanceled = EventOf<typeof organizationEvents.inviteCanceled>;
@@ -360,5 +402,5 @@ type StudentDeleted = EventOf<typeof organizationEvents.studentDeleted>;
 type StudentLinked = EventOf<typeof organizationEvents.studentLinked>;
 type OrganizationEvent = EventOfValues<typeof organizationEvents>;
 //#endregion
-export { InviteAccepted, InviteCanceled, InviteCreated, OrgUserDeleted, OrgUserLinked, OrganizationCreated, OrganizationDeleted, OrganizationEvent, OrganizationUpdated, StudentCreated, StudentDeleted, StudentLinked, organizationEvents };
+export { InviteAccepted, InviteCanceled, InviteCreated, OrgUserDeleted, OrgUserLinked, OrgUserUpdated, OrganizationCreated, OrganizationDeleted, OrganizationEvent, OrganizationUpdated, StudentCreated, StudentDeleted, StudentLinked, organizationEvents };
 //# sourceMappingURL=events.d.ts.map

package/dist/organizations/events.js

@@ -60,6 +60,12 @@ const organizationEvents = {
 		data: orgUserSchema,
 		publicData: publicOrgUser
 	}),
+	orgUserUpdated: defineEvent({
+		type: "organization.user.updated",
+		version: 1,
+		data: orgUserSchema,
+		publicData: publicOrgUser
+	}),
 	inviteCreated: defineEvent({
 		type: "organization.invite.created",
 		version: 1,

package/dist/organizations/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","names":[],"sources":["../../src/organizations/events.ts"],"sourcesContent":["import { inviteSchema, organizationSchema, orgUserSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nconst publicOrganization = organizationSchema\n  .pick({\n    id: true,\n    name: true,\n    slug: true,\n    ownerId: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nconst publicOrgUser = orgUserSchema\n  .pick({\n    id: true,\n    orgId: true,\n    userId: true,\n    role: true,\n    status: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nconst publicInvite = inviteSchema\n  .pick({\n    id: true,\n    orgId: true,\n    email: true,\n    role: true,\n    status: true,\n    invitedBy: true,\n    expiresAt: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nexport const organizationEvents = {\n  organizationCreated: defineEvent({\n    type: 'organization.created',\n    version: 1,\n    data: organizationSchema,\n    publicData: publicOrganization,\n  }),\n  organizationUpdated: defineEvent({\n    type: 'organization.updated',\n    version: 1,\n    data: organizationSchema,\n    publicData: publicOrganization,\n  }),\n  organizationDeleted: defineEvent({\n    type: 'organization.deleted',\n    version: 1,\n    data: organizationSchema,\n    publicData: publicOrganization,\n  }),\n  orgUserLinked: defineEvent({\n    type: 'organization.user.linked',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  orgUserDeleted: defineEvent({\n    type: 'organization.user.deleted',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  inviteCreated: defineEvent({\n    type: 'organization.invite.created',\n    version: 1,\n    data: inviteSchema,\n    publicData: publicInvite,\n  }),\n  inviteAccepted: defineEvent({\n    type: 'organization.invite.accepted',\n    version: 1,\n    data: inviteSchema,\n    publicData: publicInvite,\n  }),\n  inviteCanceled: defineEvent({\n    type: 'organization.invite.canceled',\n    version: 1,\n    data: inviteSchema,\n  }),\n  studentCreated: defineEvent({\n    type: 'organization.student.created',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  studentDeleted: defineEvent({\n    type: 'organization.student.deleted',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  studentLinked: defineEvent({\n    type: 'organization.student.linked',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n};\n\nexport type OrganizationCreated = EventOf<typeof organizationEvents.organizationCreated>;\nexport type OrganizationUpdated = EventOf<typeof organizationEvents.organizationUpdated>;\nexport type OrganizationDeleted = EventOf<typeof organizationEvents.organizationDeleted>;\nexport type OrgUserLinked = EventOf<typeof organizationEvents.orgUserLinked>;\nexport type OrgUserDeleted = EventOf<typeof organizationEvents.orgUserDeleted>;\nexport type InviteCreated = EventOf<typeof organizationEvents.inviteCreated>;\nexport type InviteAccepted = EventOf<typeof organizationEvents.inviteAccepted>;\nexport type InviteCanceled = EventOf<typeof organizationEvents.inviteCanceled>;\nexport type StudentCreated = EventOf<typeof organizationEvents.studentCreated>;\nexport type StudentDeleted = EventOf<typeof organizationEvents.studentDeleted>;\nexport type StudentLinked = EventOf<typeof organizationEvents.studentLinked>;\nexport type OrganizationEvent = EventOfValues<typeof organizationEvents>;\n"],"mappings":";;;AAGA,MAAM,qBAAqB,mBACxB,KAAK;CACJ,IAAI;CACJ,MAAM;CACN,MAAM;CACN,SAAS;CACT,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAM,gBAAgB,cACnB,KAAK;CACJ,IAAI;CACJ,OAAO;CACP,QAAQ;CACR,MAAM;CACN,QAAQ;CACR,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAM,eAAe,aAClB,KAAK;CACJ,IAAI;CACJ,OAAO;CACP,OAAO;CACP,MAAM;CACN,QAAQ;CACR,WAAW;CACX,WAAW;CACX,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAa,qBAAqB;CAChC,qBAAqB,YAAY;EAC/B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,qBAAqB,YAAY;EAC/B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,qBAAqB,YAAY;EAC/B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,eAAe,YAAY;EACzB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,eAAe,YAAY;EACzB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,eAAe,YAAY;EACzB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;AACH"}
+{"version":3,"file":"events.js","names":[],"sources":["../../src/organizations/events.ts"],"sourcesContent":["import { inviteSchema, organizationSchema, orgUserSchema } from '../types/schemas/index.js';\nimport { defineEvent, type EventOf, type EventOfValues } from '../shared/ports.js';\n\nconst publicOrganization = organizationSchema\n  .pick({\n    id: true,\n    name: true,\n    slug: true,\n    ownerId: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nconst publicOrgUser = orgUserSchema\n  .pick({\n    id: true,\n    orgId: true,\n    userId: true,\n    role: true,\n    status: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nconst publicInvite = inviteSchema\n  .pick({\n    id: true,\n    orgId: true,\n    email: true,\n    role: true,\n    status: true,\n    invitedBy: true,\n    expiresAt: true,\n    createdAt: true,\n    updatedAt: true,\n  })\n  .strip();\n\nexport const organizationEvents = {\n  organizationCreated: defineEvent({\n    type: 'organization.created',\n    version: 1,\n    data: organizationSchema,\n    publicData: publicOrganization,\n  }),\n  organizationUpdated: defineEvent({\n    type: 'organization.updated',\n    version: 1,\n    data: organizationSchema,\n    publicData: publicOrganization,\n  }),\n  organizationDeleted: defineEvent({\n    type: 'organization.deleted',\n    version: 1,\n    data: organizationSchema,\n    publicData: publicOrganization,\n  }),\n  orgUserLinked: defineEvent({\n    type: 'organization.user.linked',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  orgUserDeleted: defineEvent({\n    type: 'organization.user.deleted',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  orgUserUpdated: defineEvent({\n    type: 'organization.user.updated',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  inviteCreated: defineEvent({\n    type: 'organization.invite.created',\n    version: 1,\n    data: inviteSchema,\n    publicData: publicInvite,\n  }),\n  inviteAccepted: defineEvent({\n    type: 'organization.invite.accepted',\n    version: 1,\n    data: inviteSchema,\n    publicData: publicInvite,\n  }),\n  inviteCanceled: defineEvent({\n    type: 'organization.invite.canceled',\n    version: 1,\n    data: inviteSchema,\n  }),\n  studentCreated: defineEvent({\n    type: 'organization.student.created',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  studentDeleted: defineEvent({\n    type: 'organization.student.deleted',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n  studentLinked: defineEvent({\n    type: 'organization.student.linked',\n    version: 1,\n    data: orgUserSchema,\n    publicData: publicOrgUser,\n  }),\n};\n\nexport type OrganizationCreated = EventOf<typeof organizationEvents.organizationCreated>;\nexport type OrganizationUpdated = EventOf<typeof organizationEvents.organizationUpdated>;\nexport type OrganizationDeleted = EventOf<typeof organizationEvents.organizationDeleted>;\nexport type OrgUserLinked = EventOf<typeof organizationEvents.orgUserLinked>;\nexport type OrgUserDeleted = EventOf<typeof organizationEvents.orgUserDeleted>;\nexport type OrgUserUpdated = EventOf<typeof organizationEvents.orgUserUpdated>;\nexport type InviteCreated = EventOf<typeof organizationEvents.inviteCreated>;\nexport type InviteAccepted = EventOf<typeof organizationEvents.inviteAccepted>;\nexport type InviteCanceled = EventOf<typeof organizationEvents.inviteCanceled>;\nexport type StudentCreated = EventOf<typeof organizationEvents.studentCreated>;\nexport type StudentDeleted = EventOf<typeof organizationEvents.studentDeleted>;\nexport type StudentLinked = EventOf<typeof organizationEvents.studentLinked>;\nexport type OrganizationEvent = EventOfValues<typeof organizationEvents>;\n"],"mappings":";;;AAGA,MAAM,qBAAqB,mBACxB,KAAK;CACJ,IAAI;CACJ,MAAM;CACN,MAAM;CACN,SAAS;CACT,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAM,gBAAgB,cACnB,KAAK;CACJ,IAAI;CACJ,OAAO;CACP,QAAQ;CACR,MAAM;CACN,QAAQ;CACR,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAM,eAAe,aAClB,KAAK;CACJ,IAAI;CACJ,OAAO;CACP,OAAO;CACP,MAAM;CACN,QAAQ;CACR,WAAW;CACX,WAAW;CACX,WAAW;CACX,WAAW;AACb,CAAC,CAAC,CACD,MAAM;AAET,MAAa,qBAAqB;CAChC,qBAAqB,YAAY;EAC/B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,qBAAqB,YAAY;EAC/B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,qBAAqB,YAAY;EAC/B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,eAAe,YAAY;EACzB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,eAAe,YAAY;EACzB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;CACR,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,gBAAgB,YAAY;EAC1B,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;CACD,eAAe,YAAY;EACzB,MAAM;EACN,SAAS;EACT,MAAM;EACN,YAAY;CACd,CAAC;AACH"}

package/dist/organizations/index.d.ts

@@ -1,11 +1,12 @@
 import { AcceptInviteInput, AddOrgUserInput, CreateInviteInput, CreateOrgUserInput, Invite, InviteRole, NewOrganizationInput, OrgUser, OrgUserStatus, Organization, Role, UpdateOrgUserInput } from "../types/schemas/organizations.js";
 import { InviteId, OrgUserId, OrganizationId } from "../types/organizations.js";
-import { AuthHeaders } from "../identity/ports.js";
-import { InviteAccepted, InviteCanceled, InviteCreated, OrgUserDeleted, OrgUserLinked, OrganizationCreated, OrganizationDeleted, OrganizationEvent, OrganizationUpdated, StudentCreated, StudentDeleted, StudentLinked, organizationEvents } from "./events.js";
 import "./model.js";
-import { Capability, Permission, ROLES, STAFF_ROLES, STUDENT_ROLE, StaffRole, capability, isRole, isStaffRole, normalizeRole, parseRole } from "./roles.js";
-import { Member, MemberStatus, MembersQuery, OrganizationRuleError, Page } from "./members.js";
-import { CreateOrganizationInput, LinkOrgUserInput, ResendStudentInviteInput, UnlinkOrgUserInput, UpdateOrganizationInput, UpdatePersonInput, UpdateStudentInput } from "./types.js";
+import { Capability, Permission, ROLES, STAFF_ROLES, STUDENT_ROLE, StaffRole, TeamRole, canModerate, capability, isRole, isStaffRole, normalizeRole, parseRole } from "./roles.js";
+import { InviteError, Member, MemberRoleChange, MemberStatus, MembersQuery, OrganizationRuleError, Page } from "./members.js";
+import { CreateOrganizationInput, LinkOrgUserInput, ResendStudentInviteInput, UnlinkOrgUserInput, UpdateOrganizationInput } from "./types.js";
+import { AuthHeaders } from "../identity/ports.js";
 import { AuthOrganization, MemberRecord, MemberWriteContext, MembersRepository, NewInviteRow, NewOrganizationRow, OrgAdmin, OrganizationService, OrganizationsRepository } from "./ports.js";
 import { OrganizationServiceImpl } from "./service.js";
-export { type AcceptInviteInput, type AddOrgUserInput, type AuthHeaders, type AuthOrganization, type Capability, type CreateInviteInput, type CreateOrgUserInput, type CreateOrganizationInput, type Invite, type InviteAccepted, type InviteCanceled, type InviteCreated, type InviteId, type InviteRole, type LinkOrgUserInput, type Member, type MemberRecord, type MemberStatus, type MemberWriteContext, type MembersQuery, type MembersRepository, type NewInviteRow, type NewOrganizationInput, type NewOrganizationRow, type OrgAdmin, type OrgUser, type OrgUserDeleted, type OrgUserId, type OrgUserLinked, type OrgUserStatus, type Organization, type OrganizationCreated, type OrganizationDeleted, type OrganizationEvent, type OrganizationId, OrganizationRuleError, type OrganizationService, OrganizationServiceImpl, type OrganizationUpdated, type OrganizationsRepository, type Page, type Permission, ROLES, type ResendStudentInviteInput, type Role, STAFF_ROLES, STUDENT_ROLE, type StaffRole, type StudentCreated, type StudentDeleted, type StudentLinked, type UnlinkOrgUserInput, type UpdateOrgUserInput, type UpdateOrganizationInput, type UpdatePersonInput, type UpdateStudentInput, capability, isRole, isStaffRole, normalizeRole, organizationEvents, parseRole };
+import { InviteAccepted, InviteCanceled, InviteCreated, OrgUserDeleted, OrgUserLinked, OrgUserUpdated, OrganizationCreated, OrganizationDeleted, OrganizationEvent, OrganizationUpdated, StudentCreated, StudentDeleted, StudentLinked, organizationEvents } from "./events.js";
+import { ACCESS_SCOPES, AccessScope, SCOPE_PERMISSION, ScopeOption, assertRoleHoldsScopes, isAccessScope, isDeleteScope, roleHoldsScope, scopeOptions, scopesForRole } from "./access-scopes.js";
+export { ACCESS_SCOPES, type AcceptInviteInput, AccessScope, type AddOrgUserInput, type AuthHeaders, type AuthOrganization, type Capability, type CreateInviteInput, type CreateOrgUserInput, type CreateOrganizationInput, type Invite, type InviteAccepted, type InviteCanceled, type InviteCreated, InviteError, type InviteId, type InviteRole, type LinkOrgUserInput, type Member, type MemberRecord, type MemberRoleChange, type MemberStatus, type MemberWriteContext, type MembersQuery, type MembersRepository, type NewInviteRow, type NewOrganizationInput, type NewOrganizationRow, type OrgAdmin, type OrgUser, type OrgUserDeleted, type OrgUserId, type OrgUserLinked, type OrgUserStatus, type OrgUserUpdated, type Organization, type OrganizationCreated, type OrganizationDeleted, type OrganizationEvent, type OrganizationId, OrganizationRuleError, type OrganizationService, OrganizationServiceImpl, type OrganizationUpdated, type OrganizationsRepository, type Page, type Permission, ROLES, type ResendStudentInviteInput, type Role, SCOPE_PERMISSION, STAFF_ROLES, STUDENT_ROLE, ScopeOption, type StaffRole, type StudentCreated, type StudentDeleted, type StudentLinked, type TeamRole, type UnlinkOrgUserInput, type UpdateOrgUserInput, type UpdateOrganizationInput, assertRoleHoldsScopes, canModerate, capability, isAccessScope, isDeleteScope, isRole, isStaffRole, normalizeRole, organizationEvents, parseRole, roleHoldsScope, scopeOptions, scopesForRole };

package/dist/organizations/index.js

@@ -1,5 +1,6 @@
-import { ROLES, STAFF_ROLES, STUDENT_ROLE, capability, isRole, isStaffRole, normalizeRole, parseRole } from "./roles.js";
-import { OrganizationRuleError } from "./members.js";
+import { ROLES, STAFF_ROLES, STUDENT_ROLE, canModerate, capability, isRole, isStaffRole, normalizeRole, parseRole } from "./roles.js";
+import { InviteError, OrganizationRuleError } from "./members.js";
 import { organizationEvents } from "./events.js";
 import { OrganizationServiceImpl } from "./service.js";
-export { OrganizationRuleError, OrganizationServiceImpl, ROLES, STAFF_ROLES, STUDENT_ROLE, capability, isRole, isStaffRole, normalizeRole, organizationEvents, parseRole };
+import { ACCESS_SCOPES, SCOPE_PERMISSION, assertRoleHoldsScopes, isAccessScope, isDeleteScope, roleHoldsScope, scopeOptions, scopesForRole } from "./access-scopes.js";
+export { ACCESS_SCOPES, InviteError, OrganizationRuleError, OrganizationServiceImpl, ROLES, SCOPE_PERMISSION, STAFF_ROLES, STUDENT_ROLE, assertRoleHoldsScopes, canModerate, capability, isAccessScope, isDeleteScope, isRole, isStaffRole, normalizeRole, organizationEvents, parseRole, roleHoldsScope, scopeOptions, scopesForRole };

package/dist/organizations/members.d.ts

@@ -1,20 +1,23 @@
-import { OrgUserProfile } from "../types/schemas/organizations.js";
+import { OrgUserProfile, Role } from "../types/schemas/organizations.js";
 import "../types/index.js";
-import { StaffRole } from "./roles.js";
+import { TeamRole } from "./roles.js";
 //#region src/organizations/members.d.ts
 type MemberStatus = 'active' | 'invited';
 interface Member extends OrgUserProfile {
-  role: StaffRole;
+  role: TeamRole;
   status: MemberStatus;
   joinedAt: string | null;
   invitedAt: string | null;
 }
+interface MemberRoleChange extends Omit<Member, 'role'> {
+  role: Role;
+}
 interface MembersQuery {
   page: number;
   pageSize: number;
   search?: string | undefined;
   sort?: string | undefined;
-  role?: StaffRole | undefined;
+  role?: TeamRole | undefined;
   status?: MemberStatus | undefined;
 }
 interface Page<T> {
@@ -28,5 +31,5 @@ declare class InviteError extends Error {
   constructor(message: string);
 }
 //#endregion
-export { InviteError, Member, MemberStatus, MembersQuery, OrganizationRuleError, Page };
+export { InviteError, Member, MemberRoleChange, MemberStatus, MembersQuery, OrganizationRuleError, Page };
 //# sourceMappingURL=members.d.ts.map

package/dist/organizations/members.js.map

@@ -1 +1 @@
-{"version":3,"file":"members.js","names":[],"sources":["../../src/organizations/members.ts"],"sourcesContent":["// organizations context — member-management types (invite / change-role / remove).\n// The operational surface over the org's members and pending invites. Roles\n// come from ./roles.ts (the single role model); writes go through Better Auth.\nimport type { StaffRole } from './roles.js';\nimport type { OrgUserProfile } from '../types/index.js';\n\nexport type MemberStatus = 'active' | 'invited';\n\nexport interface Member extends OrgUserProfile {\n  role: StaffRole;\n  status: MemberStatus;\n  joinedAt: string | null;\n  invitedAt: string | null;\n}\n\nexport interface MembersQuery {\n  page: number;\n  pageSize: number;\n  search?: string | undefined;\n  sort?: string | undefined;\n  role?: StaffRole | undefined;\n  status?: MemberStatus | undefined;\n}\n\nexport interface Page<T> {\n  rows: T[];\n  total: number;\n  page: number;\n  pageSize: number;\n}\n\nexport class OrganizationRuleError extends Error {}\nexport class InviteError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InviteError';\n  }\n}\n"],"mappings":";AA+BA,IAAa,wBAAb,cAA2C,MAAM,CAAC;AAClD,IAAa,cAAb,cAAiC,MAAM;CACrC,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF"}
+{"version":3,"file":"members.js","names":[],"sources":["../../src/organizations/members.ts"],"sourcesContent":["// organizations context — member-management types (invite / change-role / remove).\n// The operational surface over the org's members and pending invites. Roles\n// come from ./roles.ts (the single role model); writes go through Better Auth.\nimport type { Role, TeamRole } from './roles.js';\nimport type { OrgUserProfile } from '../types/index.js';\n\nexport type MemberStatus = 'active' | 'invited';\n\nexport interface Member extends OrgUserProfile {\n  role: TeamRole;\n  status: MemberStatus;\n  joinedAt: string | null;\n  invitedAt: string | null;\n}\n\nexport interface MemberRoleChange extends Omit<Member, 'role'> {\n  role: Role;\n}\n\nexport interface MembersQuery {\n  page: number;\n  pageSize: number;\n  search?: string | undefined;\n  sort?: string | undefined;\n  role?: TeamRole | undefined;\n  status?: MemberStatus | undefined;\n}\n\nexport interface Page<T> {\n  rows: T[];\n  total: number;\n  page: number;\n  pageSize: number;\n}\n\nexport class OrganizationRuleError extends Error {}\nexport class InviteError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InviteError';\n  }\n}\n"],"mappings":";AAmCA,IAAa,wBAAb,cAA2C,MAAM,CAAC;AAClD,IAAa,cAAb,cAAiC,MAAM;CACrC,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF"}

package/dist/organizations/ports.d.ts

@@ -1,11 +1,12 @@
 import { AcceptInviteInput, AddOrgUserInput, CreateInviteInput, CreateOrgUserInput, Invite, InviteRole, NewOrganizationInput, OrgUser, Organization, Role, UpdateOrgUserInput } from "../types/schemas/organizations.js";
 import { OutboxAppender, UnitOfWork } from "../shared/ports.js";
-import { AuthHeaders } from "../identity/ports.js";
-import "../identity/index.js";
+import { Actor } from "../shared/actor.js";
 import "./model.js";
 import "./roles.js";
-import { Member, MembersQuery, Page } from "./members.js";
-import { CreateOrganizationInput, ResendStudentInviteInput, UpdateOrganizationInput, UpdateStudentInput } from "./types.js";
+import { Member, MemberRoleChange, MembersQuery, Page } from "./members.js";
+import { CreateOrganizationInput, ResendStudentInviteInput, UpdateOrganizationInput } from "./types.js";
+import { AuthHeaders } from "../identity/ports.js";
+import "../identity/index.js";
 //#region src/organizations/ports.d.ts
 interface OrganizationService {
   createOrganization(input: CreateOrganizationInput): Promise<Organization>;
@@ -16,18 +17,19 @@ interface OrganizationService {
   updateOrgUser(orgId: string, userId: string, patch: UpdateOrgUserInput): Promise<OrgUser>;
   getByExternalId(externalId: string): Promise<Organization | null>;
   getOrgUser(orgId: string, userId: string): Promise<OrgUser | null>;
+  getOrgUserById(orgId: string, id: string): Promise<OrgUser | null>;
   getOrgUsersForUser(userId: string): Promise<OrgUser[]>;
   getById(id: string): Promise<Organization | null>;
-  createInvite(input: CreateInviteInput): Promise<Invite>;
+  createInvite(actor: Actor, input: CreateInviteInput): Promise<Invite>;
   peekInvite(token: string): Promise<Invite | null>;
   acceptInvite(input: AcceptInviteInput): Promise<OrgUser>;
-  deleteOrgUser(orgId: string, id: string): Promise<OrgUser>;
-  resendStudentInvite(input: ResendStudentInviteInput): Promise<void>;
-  updateStudent(input: UpdateStudentInput): Promise<OrgUser>;
+  deleteOrgUser(orgId: string, actor: Actor, id: string): Promise<OrgUser>;
+  resendStudentInvite(actor: Actor, input: ResendStudentInviteInput): Promise<void>;
   getBySlug(slug: string): Promise<Organization | null>;
   listMembers(orgId: string, query: MembersQuery): Promise<Page<Member>>;
-  updateMemberRole(ctx: MemberWriteContext, id: string, role: Role): Promise<Member | null>;
-  removeMember(ctx: MemberWriteContext, id: string): Promise<boolean>;
+  updateMemberRole(ctx: MemberWriteContext, actor: Actor, id: string, role: Role): Promise<MemberRoleChange | null>;
+  removeMember(ctx: MemberWriteContext, actor: Actor, id: string): Promise<boolean>;
+  staffOrgUserIds(orgId: string): Promise<string[]>;
 }
 /** Atomic write scope: tx-bound repo + outbox appender, one transaction. */
 interface OrganizationsWriteScope {
@@ -72,6 +74,8 @@ interface OrganizationsRepository {
   /** Every org this person belongs to, oldest first. */
   findOrgUsersByUser(userId: string): Promise<OrgUser[]>;
   findOrgUserById(orgId: string, id: string): Promise<OrgUser | null>;
+  findOrgUsersByIds(orgId: string, ids: string[]): Promise<OrgUser[]>;
+  findOrgUserIdsByRole(orgId: string, roles: Role[]): Promise<string[]>;
   /** Links a user to the org under a role. Throws ConflictError when they
    *  already hold a row there. */
   createOrgUser(input: CreateOrgUserInput): Promise<OrgUser>;
@@ -79,7 +83,6 @@ interface OrganizationsRepository {
   /** Every org this person is a student in — the scope of `student.linked`. */
   findStudentOrgUsers(userId: string): Promise<OrgUser[]>;
   /** Kills the org's pending invite for an address, if any. */
-  cancelPendingInvite(orgId: string, email: string): Promise<Invite | null>;
   deleteOrgUser(orgId: string, id: string): Promise<OrgUser | null>;
 }
 /** A member row enriched with the ids needed to drive writes. */