@intelligo-dev/auth 1.0.0-beta.1 → 1.0.0-beta.13

package/dist/index.js

@@ -1,30 +1,24 @@
 /**
- * Better-Auth Server Exports
- *
- * Server-side authentication utilities.
- * For client-side auth, use @intelligo-dev/auth/client
+ * Server-side auth. Client components use `@intelligo-dev/auth/client`.
  */
-export { auth } from "./server";
-export { getAuthSession, requireAuth, getWorkspaceContext, getWorkspaceContextById, requireWorkspace, requireRole, requirePlatformAdmin, } from "./helpers";
-export { ensureUserWorkspace } from "./workspace-init";
-export { PLATFORM_ADMIN_ROLE } from "./roles";
-export { impersonateUser, stopImpersonating, } from "./impersonation";
-// Typed Better-Auth organization plugin wrapper
-export { orgApi, } from "./org-api";
-// Team management service (page/registry migration, section C1)
-export { createTeamService, } from "./team/service";
-export { TeamServiceError, isTeamServiceError, } from "./team/errors";
-export { inviteMemberSchema, updateRoleSchema, } from "./team/schemas";
-// Workspace management service (page/registry migration, workspace-settings family)
-export { createWorkspaceService, } from "./workspace/service";
-export { WorkspaceServiceError, isWorkspaceServiceError, } from "./workspace/errors";
-export { createWorkspaceSchema, updateWorkspaceSchema, } from "./workspace/schemas";
-// Profile management service (page/registry migration, profile-settings family)
-export { createProfileService, } from "./profile/service";
-export { ProfileServiceError, isProfileServiceError, } from "./profile/errors";
-export { updateProfileSchema, } from "./profile/schemas";
-// Onboarding service (page/registry migration, `onboarding` family)
-export { createOnboardingService, } from "./onboarding/service";
-export { OnboardingServiceError, isOnboardingServiceError, } from "./onboarding/errors";
-export { setStepSchema } from "./onboarding/schemas";
+export { auth } from "./server.js";
+export { getAuthSession, requireAuth, getWorkspaceContext, getWorkspaceContextById, requireWorkspace, requireRole, requirePlatformAdmin, } from "./helpers.js";
+export { AuthGuardError, isAuthGuardError, } from "./guard-error.js";
+export { ensureUserWorkspace } from "./workspace-init.js";
+export { setWorkspaceCreatedHandler, clearWorkspaceCreatedHandler, } from "./workspace-bootstrap.js";
+export { PLATFORM_ADMIN_ROLE } from "./roles.js";
+export { impersonateUser, stopImpersonating, } from "./impersonation.js";
+export { orgApi, } from "./org-api.js";
+export { createTeamService, } from "./team/service.js";
+export { TeamServiceError, isTeamServiceError, } from "./team/errors.js";
+export { inviteMemberSchema, updateRoleSchema, } from "./team/schemas.js";
+export { createWorkspaceService, } from "./workspace/service.js";
+export { WorkspaceServiceError, isWorkspaceServiceError, } from "./workspace/errors.js";
+export { createWorkspaceSchema, updateWorkspaceSchema, } from "./workspace/schemas.js";
+export { createProfileService, } from "./profile/service.js";
+export { ProfileServiceError, isProfileServiceError, } from "./profile/errors.js";
+export { updateProfileSchema, } from "./profile/schemas.js";
+export { createOnboardingService, } from "./onboarding/service.js";
+export { OnboardingServiceError, isOnboardingServiceError, } from "./onboarding/errors.js";
+export { setStepSchema } from "./onboarding/schemas.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EACL,eAAe,EACf,iBAAiB,GAElB,MAAM,iBAAiB,CAAC;AAKzB,gDAAgD;AAChD,OAAO,EACL,MAAM,GAOP,MAAM,WAAW,CAAC;AAEnB,gEAAgE;AAChE,OAAO,EACL,iBAAiB,GAGlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,GAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,gBAAgB,CAAC;AAExB,oFAAoF;AACpF,OAAO,EACL,sBAAsB,GAIvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAGxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAE7B,gFAAgF;AAChF,OAAO,EACL,oBAAoB,GAIrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,GAEpB,MAAM,mBAAmB,CAAC;AAE3B,oEAAoE;AACpE,OAAO,EACL,uBAAuB,GAGxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GAEzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAqB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,WAAW,EACX,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,cAAc,EACd,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EACL,eAAe,EACf,iBAAiB,GAElB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EACL,MAAM,GAOP,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,iBAAiB,GAGlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,GAGnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,sBAAsB,GAIvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAGxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,oBAAoB,GAIrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,mBAAmB,GAEpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,uBAAuB,GAGxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GAEzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAqB,MAAM,sBAAsB,CAAC"}

package/dist/invitation-links.js

@@ -0,0 +1,13 @@
+/**
+ * The links an invitation email carries. Both land on the invitation page,
+ * which offers accept and decline to the signed-in invitee; declining is a
+ * decision made there, never the effect of following a link.
+ *
+ * Unprefixed on purpose: the consumer's locale middleware resolves the
+ * invitee's locale, so the email does not have to guess one.
+ */
+export function invitationLinks(appUrl, invitationId) {
+    const page = `${appUrl.replace(/\/+$/, "")}/accept-invitation/${encodeURIComponent(invitationId)}`;
+    return { acceptUrl: page, declineUrl: page };
+}
+//# sourceMappingURL=invitation-links.js.map

package/dist/invitation-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitation-links.js","sourceRoot":"","sources":["../src/invitation-links.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,YAAoB;IAEpB,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;IACnG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC"}

package/dist/onboarding/errors.js

@@ -1,13 +1,6 @@
 /**
- * Onboarding service error type.
- *
- * Mirrors `../team/errors.ts` and `../workspace/errors.ts`: the
- * onboarding service (./service.ts) throws this for every failure it
- * recognizes rather than returning an ad-hoc `{ success, error }`
- * envelope — that shaping is a transport concern (a Server Action, a
- * route handler) and belongs one layer up, alongside
- * revalidatePath/Sentry/toast/i18n, none of which this package may
- * depend on.
+ * Thrown for every failure the onboarding service recognizes. Shaping it for a UI
+ * (a `{ success, error }` envelope, i18n, revalidation) is the transport's job.
  */
 export class OnboardingServiceError extends Error {
     constructor(code, message, options) {
@@ -15,13 +8,10 @@ export class OnboardingServiceError extends Error {
         this.name = "OnboardingServiceError";
         this.code = code;
         if (options?.cause !== undefined) {
-            // ES2020 target predates the standard `cause` constructor option;
-            // assign it directly so `instanceof Error` consumers (and Node's
-            // own error inspection) still see it.
+            // The ES2020 target predates the `cause` constructor option.
             this.cause = options.cause;
         }
-        // Restore prototype chain (extending built-ins across some
-        // transpilation targets loses `instanceof`).
+        // Extending built-ins loses `instanceof` on some transpilation targets.
         Object.setPrototypeOf(this, OnboardingServiceError.prototype);
     }
 }

package/dist/onboarding/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/onboarding/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAaH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG/C,YACE,IAAgC,EAChC,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,kEAAkE;YAClE,iEAAiE;YACjE,sCAAsC;YACrC,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QAED,2DAA2D;QAC3D,6CAA6C;QAC7C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,KAAK,YAAY,sBAAsB,CAAC;AACjD,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/onboarding/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG/C,YACE,IAAgC,EAChC,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,6DAA6D;YAC5D,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QAED,wEAAwE;QACxE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,OAAO,KAAK,YAAY,sBAAsB,CAAC;AACjD,CAAC"}

package/dist/onboarding/schemas.js

@@ -1,19 +1,7 @@
 /**
- * Onboarding validation schema.
- *
- * A single generic step-id validator — see the module doc comment on
- * `./service.ts` for why this is a bare, bounded string rather than a
- * product-specific enum. Ignite's original
- * `lib/validations/onboarding.ts` pinned this to
- * `z.enum(["role", "profile", "complete"])`, Career's own 3-step wizard
- * shape. The `users.onboarding_step` column itself is untyped `text`,
- * so that enum was a product-level constraint bolted onto a generic
- * column, not something this shared contract should require. A
- * consumer defines its own step ids (typically the `id` field of a
- * steps-config array it owns) and passes them straight through;
- * Ignite's cut-over copy keeps its own enum-shaped schema at the
- * transport layer if it wants stricter validation than "non-empty,
- * bounded string".
+ * A step id is a non-empty, bounded string, not an enum: step ids are the
+ * consumer's (the `id`s of its own steps config). A consumer wanting
+ * stricter validation keeps its own schema at the transport layer.
  */
 import { z } from "zod";
 export const setStepSchema = z

package/dist/onboarding/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/onboarding/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;KAC7B,GAAG,CAAC,EAAE,EAAE,uCAAuC,CAAC,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/onboarding/schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;KAC7B,GAAG,CAAC,EAAE,EAAE,uCAAuC,CAAC,CAAC"}

package/dist/onboarding/service.js

@@ -1,63 +1,16 @@
 /**
- * Onboarding service — the durable business rules behind a user's
- * first-run onboarding flow, extracted from the product application's
- * onboarding actions (page/registry migration, `onboarding` family,
- * roadmap item 11).
- *
- * Unlike `../team/service.ts` and `../workspace/service.ts`, this
- * service has no Better-Auth organization-plugin calls to make — it
- * reads and writes exactly two columns on `@intelligo-dev/core`'s `users`
- * table (`onboardingCompleted`, `onboardingStep`) directly via Drizzle.
- *
- * No ports: `complete()` and `skip()` only flip those two columns and
- * return the resulting state — they do NOT provision trial credits,
- * record referrals, or perform any other first-workspace bootstrapping.
- * Ignite's original `completeOnboarding()` action did exactly that
- * (`provisionTrialCredits`/`recordReferralSignup`/`grantReferralUpgrade`
- * inline), but that work belongs to the consumer's own
- * `onWorkspaceCreated` binding instead — see `../workspace-init.ts`'s
- * `onWorkspaceCreated` port and the `app-shell` registry item's
- * `lib/workspace-bootstrap.ts`, which already runs once per new
- * workspace. Duplicating it here would either double-provision (it
- * would fire again on every onboarding completion, not just the first
- * workspace) or force this package to depend on `@intelligo-dev/billing`,
- * which the allowlist in
- * `tests/architecture/dependency-direction.test.ts` forbids.
- *
- * ---------------------------------------------------------------------
- * Why `setStep` takes a bare `string`, not an enum
- * ---------------------------------------------------------------------
- * See the doc comment on `./schemas.ts`'s `setStepSchema`. Short
- * version: the `onboarding_step` column is untyped `text`, and a
- * framework-owned service can't know a consumer's step ids in advance
- * — a different product may have two steps, or six. This module
- * accepts any non-empty string up to 64 characters and persists it
- * verbatim.
- *
- * ---------------------------------------------------------------------
- * Why `skip()` has the same durable effect as `complete()`
- * ---------------------------------------------------------------------
- * The `users` table has no separate "skipped" column, so there is
- * nothing else to persist. Ignite's original `skipOnboarding()` action
- * logged an analytics event and then delegated to `completeOnboarding()`
- * unchanged; this service mirrors that shape as two distinct methods
- * (rather than collapsing `skip` into an alias) so a transport can
- * still log/tag the skip differently before or after calling it —
- * that shaping, like everything else transport-level, does not belong
- * in this service.
- *
- * Authorization (`requireAuth`) lives INSIDE each method, not at the
- * transport. Every recognized failure throws `OnboardingServiceError`
- * with a stable `code` — no revalidatePath/Sentry/next-intl/toast here;
- * that shaping is the transport's job (a Server Action, a route
- * handler).
+ * The caller's first-run onboarding state: two columns on `users`
+ * (`onboardingCompleted`, `onboardingStep`). Completing onboarding has no
+ * trial or credit side effects; first-workspace bootstrapping runs once per
+ * workspace through `ensureUserWorkspace`'s `onWorkspaceCreated`. Each method
+ * authorizes itself and throws `OnboardingServiceError`.
  */
 import { eq } from "drizzle-orm";
 import { db } from "@intelligo-dev/core/db";
 import { users } from "@intelligo-dev/core/db/schema";
-import { requireAuth } from "../helpers";
-import { setStepSchema } from "./schemas";
-import { OnboardingServiceError, isOnboardingServiceError } from "./errors";
+import { requireAuth } from "../helpers.js";
+import { setStepSchema } from "./schemas.js";
+import { OnboardingServiceError, isOnboardingServiceError } from "./errors.js";
 function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
 }
@@ -78,9 +31,7 @@ export function createOnboardingService() {
             throw toForbidden(error);
         }
     }
-    /**
-     * Get the caller's current onboarding state.
-     */
+    /** The caller's current onboarding state. */
     async function getState() {
         const { user } = await callRequireAuth();
         const [row] = await db
@@ -100,9 +51,8 @@ export function createOnboardingService() {
         };
     }
     /**
-     * Set the caller's current onboarding step. A product defines its
-     * own step ids (see the module doc comment); this only validates
-     * that `step` is a non-empty, bounded string and persists it
+     * Set the caller's current step. Step ids are the product's; this only
+     * checks for a non-empty string of at most 64 characters and persists it
      * verbatim. Does not touch `onboardingCompleted`.
      */
     async function setStep(step) {
@@ -118,10 +68,7 @@ export function createOnboardingService() {
             .where(eq(users.id, user.id));
         return { completed: false, currentStep: parsed.data };
     }
-    /**
-     * Mark onboarding complete and clear the step. No trial/referral
-     * side effects — see the module doc comment.
-     */
+    /** Mark onboarding complete and clear the step. */
     async function complete() {
         const { user } = await callRequireAuth();
         await db
@@ -135,9 +82,8 @@ export function createOnboardingService() {
         return { completed: true, currentStep: null };
     }
     /**
-     * Skip onboarding. Same durable effect as `complete()` — see the
-     * module doc comment for why this is its own method rather than an
-     * alias.
+     * Skip onboarding. Same durable effect as `complete()` (there is no
+     * "skipped" column); a separate method so a transport can tell them apart.
      */
     async function skip() {
         return complete();

package/dist/onboarding/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/onboarding/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAQ5E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,gDAAgD;AAChD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,wBAAwB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,IAAI,sBAAsB,CAAC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;QAClE,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,KAAK,UAAU,eAAe;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,QAAQ;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC;YACN,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC5B,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAClE,CAAC;QAED,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,mBAAmB;YAClC,WAAW,EAAE,GAAG,CAAC,cAAc;SAChC,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,OAAO,CAAC,IAAY;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,sBAAsB,CAC9B,eAAe,EACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1D,cAAc,EAChB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CACxB,CAAC;QACJ,CAAC;QAED,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,GAAG,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC3D,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,QAAQ;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,GAAG,CAAC;YACH,mBAAmB,EAAE,IAAI;YACzB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,IAAI;QACjB,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/onboarding/service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AAQ5E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,gDAAgD;AAChD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,wBAAwB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,IAAI,sBAAsB,CAAC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;QAClE,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,KAAK,UAAU,eAAe;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,KAAK,UAAU,QAAQ;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC;YACN,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC5B,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,sBAAsB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAClE,CAAC;QAED,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,mBAAmB;YAClC,WAAW,EAAE,GAAG,CAAC,cAAc;SAChC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,OAAO,CAAC,IAAY;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,sBAAsB,CAC9B,eAAe,EACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1D,cAAc,EAChB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CACxB,CAAC;QACJ,CAAC;QAED,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,GAAG,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC3D,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IAED,mDAAmD;IACnD,KAAK,UAAU,QAAQ;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,MAAM,EAAE;aACL,MAAM,CAAC,KAAK,CAAC;aACb,GAAG,CAAC;YACH,mBAAmB,EAAE,IAAI;YACzB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEhC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,IAAI;QACjB,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC"}

package/dist/org-api.js

@@ -1,73 +1,16 @@
 /**
- * Typed wrapper for Better-Auth organization plugin endpoints.
- *
- * The plugin endpoints (`/organization/...`) are added at runtime by
- * Better-Auth's organization plugin and are not present on the inferred
- * `auth.api` type. Without a wrapper, consumers had to reach for
- * `as any as Record<...>` casts or `@ts-expect-error` comments — both
- * lose all type information.
- *
- * This module declares the explicit input/output shapes for every
- * organization endpoint the team service calls and exposes them under
- * the plugin's HTTP path names (`/organization/invite-member`, etc.),
- * which is the vocabulary the rest of this package's `team/` module
- * uses.
- *
- * (Ported from the product application’s Better-Auth type wrapper as part of the
- * team-settings backend extraction — packages/auth owns the org-api
- * contract now; ignite's copy is retired at cutover.)
- *
- * IMPORTANT — found while wiring the real-DB integration test for this
- * extraction: ignite's original module built `orgApi` as
- * `auth.api as unknown as OrgApi`, i.e. a bare type-cast that assumes
- * `auth.api` is keyed by these HTTP path strings. It is not. Better-Auth's
- * organization plugin (`better-auth@1.6.30`,
- * `plugins/organization/organization.mjs`) exposes each endpoint on
- * `auth.api` under its own camelCase *server* id, which does not always
- * match the path or the *client* SDK name documented alongside it:
- *
- *   path                                  | auth.api key (server) | authClient.organization.* (client)
- *   /organization/invite-member           | createInvitation       | inviteMember
- *   /organization/get-invitation          | getInvitation          | getInvitation
- *   /organization/accept-invitation       | acceptInvitation       | acceptInvitation
- *   /organization/reject-invitation       | rejectInvitation       | rejectInvitation
- *   /organization/cancel-invitation       | cancelInvitation       | cancelInvitation
- *   /organization/remove-member           | removeMember           | removeMember
- *   /organization/update-member-role      | updateMemberRole       | updateMemberRole
- *   /organization/leave                   | leaveOrganization      | leave
- *   /organization/list                    | listOrganizations      | list
- *   /organization/set-active              | setActiveOrganization  | setActive
- *   /organization/list-user-invitations   | listUserInvitations    | listUserInvitations
- *
- * A bare `auth.api as unknown as OrgApi` cast type-checks (TypeScript
- * cannot see through the cast) but throws `TypeError: ... is not a
- * function` at runtime for every call whose row above differs in the
- * first two columns — i.e. invite-member, leave, list, and set-active
- * unconditionally, since their server ids aren't just a casing change
- * of the path. This was invisible in ignite's test suite because
- * `actions/__tests__/team.test.ts` mocks `@/types/better-auth` (the
- * whole `orgApi` object) rather than exercising the cast against a
- * real `auth.api`, and only surfaced once this extraction's
- * `service.integration.test.ts` called the real thing. It is a live
- * bug in ignite's shipped team-management actions today, not a
- * hypothetical — worth a fix there independent of this migration.
- *
- * `orgApi` below is therefore a real object, not a cast: each path key
- * forwards to the correctly-named `auth.api` method. The `OrgApi`
- * type and every call site elsewhere in this package (`team/service.ts`
- * and its tests) are unaffected — they only ever see the path-keyed
- * shape.
+ * Typed access to Better-Auth's organization-plugin endpoints, which the
+ * inferred `auth.api` type does not include. Keys are the plugin's HTTP
+ * paths; each forwards to the plugin's server id, which is not always the
+ * path in camelCase (`/organization/invite-member` is `createInvitation`,
+ * `/organization/list` is `listOrganizations`), so a blanket cast of
+ * `auth.api` would type-check and then throw "is not a function".
  */
-import { auth } from "./server";
+import { auth } from "./server.js";
 /**
- * `auth.api`'s organization-plugin methods are typed loosely by
- * Better-Auth (broad `Record<string, unknown>`-ish body/query types
- * driven by its own zod schemas) — each is cast to its specific
- * `OrgApi` member signature at the point of use below, which is the
- * same trust boundary the rest of this codebase already accepts for
- * these calls (see the module doc comment above for why a *blanket*
- * cast is not safe: it hides the wrong key entirely, whereas casting
- * per-member here only relaxes the parameter/return types).
+ * Better-Auth types these methods loosely; each is cast to its `OrgApi`
+ * member signature below, which relaxes only parameter and return types,
+ * never which method a key names.
  */
 const api = auth.api;
 export const orgApi = {

package/dist/org-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"org-api.js","sourceRoot":"","sources":["../src/org-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAoGhC;;;;;;;;;GASG;AACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAGhB,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAW;IAC5B,6BAA6B,EAC3B,GAAG,CAAC,gBAAyD;IAC/D,8BAA8B,EAC5B,GAAG,CAAC,aAAuD;IAC7D,iCAAiC,EAC/B,GAAG,CAAC,gBAA6D;IACnE,iCAAiC,EAC/B,GAAG,CAAC,gBAA6D;IACnE,iCAAiC,EAC/B,GAAG,CAAC,gBAA6D;IACnE,6BAA6B,EAC3B,GAAG,CAAC,YAAqD;IAC3D,kCAAkC,EAChC,GAAG,CAAC,gBAA8D;IACpE,qBAAqB,EAAE,GAAG,CAAC,iBAAkD;IAC7E,oBAAoB,EAAE,GAAG,CAAC,iBAAiD;IAC3E,0BAA0B,EACxB,GAAG,CAAC,qBAA2D;IACjE,qCAAqC,EACnC,GAAG,CAAC,mBAAoE;CAC3E,CAAC"}
+{"version":3,"file":"org-api.js","sourceRoot":"","sources":["../src/org-api.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAoGhC;;;;GAIG;AACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAGhB,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAW;IAC5B,6BAA6B,EAC3B,GAAG,CAAC,gBAAyD;IAC/D,8BAA8B,EAC5B,GAAG,CAAC,aAAuD;IAC7D,iCAAiC,EAC/B,GAAG,CAAC,gBAA6D;IACnE,iCAAiC,EAC/B,GAAG,CAAC,gBAA6D;IACnE,iCAAiC,EAC/B,GAAG,CAAC,gBAA6D;IACnE,6BAA6B,EAC3B,GAAG,CAAC,YAAqD;IAC3D,kCAAkC,EAChC,GAAG,CAAC,gBAA8D;IACpE,qBAAqB,EAAE,GAAG,CAAC,iBAAkD;IAC7E,oBAAoB,EAAE,GAAG,CAAC,iBAAiD;IAC3E,0BAA0B,EACxB,GAAG,CAAC,qBAA2D;IACjE,qCAAqC,EACnC,GAAG,CAAC,mBAAoE;CAC3E,CAAC"}

package/dist/profile/errors.js

@@ -1,13 +1,6 @@
 /**
- * Profile service error type.
- *
- * The profile service (./service.ts) throws this for every failure it
- * recognizes rather than returning an ad-hoc `{ success, error }`
- * envelope — that shaping is a transport concern (a Server Action, a
- * route handler) and belongs one layer up, alongside
- * revalidatePath/Sentry/toast/i18n, none of which this package may
- * depend on. Mirrors `TeamServiceError`/`WorkspaceServiceError`
- * (../team/errors.ts, ../workspace/errors.ts).
+ * Thrown for every failure the profile service recognizes. Shaping it for a UI
+ * (a `{ success, error }` envelope, i18n, revalidation) is the transport's job.
  */
 export class ProfileServiceError extends Error {
     constructor(code, message, options) {
@@ -16,13 +9,10 @@ export class ProfileServiceError extends Error {
         this.code = code;
         this.meta = options?.meta;
         if (options?.cause !== undefined) {
-            // ES2020 target predates the standard `cause` constructor option;
-            // assign it directly so `instanceof Error` consumers (and Node's
-            // own error inspection) still see it.
+            // The ES2020 target predates the `cause` constructor option.
             this.cause = options.cause;
         }
-        // Restore prototype chain (extending built-ins across some
-        // transpilation targets loses `instanceof`).
+        // Extending built-ins loses `instanceof` on some transpilation targets.
         Object.setPrototypeOf(this, ProfileServiceError.prototype);
     }
 }

package/dist/profile/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/profile/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiBH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAI5C,YACE,IAA6B,EAC7B,OAAe,EACf,OAA6D;QAE7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;QAC1B,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,kEAAkE;YAClE,iEAAiE;YACjE,sCAAsC;YACrC,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QAED,2DAA2D;QAC3D,6CAA6C;QAC7C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,KAAK,YAAY,mBAAmB,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/profile/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAI5C,YACE,IAA6B,EAC7B,OAAe,EACf,OAA6D;QAE7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;QAC1B,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,6DAA6D;YAC5D,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QAED,wEAAwE;QACxE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,KAAK,YAAY,mBAAmB,CAAC;AAC9C,CAAC"}

package/dist/profile/schemas.js

@@ -1,13 +1,4 @@
-/**
- * Profile Validation Schemas
- *
- * Zod schemas for user profile updates, shared by the profile service
- * and its transports.
- *
- * (Ported from the product application's `lib/validations/profile.ts` —
- * same semantics: optional name, optional-and-nullable image URL.
- * Ignite's copy is retired at cutover.)
- */
+/** Profile update input, shared by the profile service and its transports. */
 import { z } from "zod";
 export const updateProfileSchema = z.object({
     name: z

package/dist/profile/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/profile/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;SAC5C,GAAG,CAAC,GAAG,EAAE,qCAAqC,CAAC;SAC/C,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/profile/schemas.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;SAC5C,GAAG,CAAC,GAAG,EAAE,qCAAqC,CAAC;SAC/C,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC"}

package/dist/profile/service.js

@@ -1,56 +1,18 @@
 /**
- * Profile management service — the durable business rules behind
- * reading the caller's own profile, updating it, and deleting the
- * account, extracted from the product application's profile actions
- * (page/registry migration, `profile-settings` family, roadmap item 9).
- *
- * Mirrors `createTeamService(ports)` / `createWorkspaceService(ports)`
- * (../team/service.ts, ../workspace/service.ts) one directory over: a
- * factory over optional ports, so this package's allowlisted dependency
- * (`@intelligo-dev/core` only — see
- * tests/architecture/dependency-direction.test.ts) never grows to
- * include an email-sending concern of its own. A consumer binds the
- * account-deletion confirmation email in at its composition root:
- *
- *   const profileService = createProfileService({
- *     onAccountDeleted: ({ email, name }) =>
- *       sendEmail({ to: email, subject: ..., html: ... }), // @intelligo-dev/core/email
- *   });
- *
- * Authorization (`requireAuth`) lives INSIDE each method, not at the
- * transport. Every recognized failure throws `ProfileServiceError` with
- * a stable `code` — no revalidatePath/Sentry/next-intl/toast here; that
- * shaping is the transport's job (a Server Action, a route handler).
- *
- * ---------------------------------------------------------------------
- * Why the confirmation email is a port, not a direct import
- * ---------------------------------------------------------------------
- * The product application's original `deleteAccount()`
- * calls `sendEmail` from
- * `@intelligo-dev/core/email` directly, inline, with a hardcoded English
- * HTML template. `@intelligo-dev/auth` already imports `@intelligo-dev/core/email`
- * elsewhere (`server.ts`'s Better-Auth hooks — verification, password
- * reset, welcome, invitation emails), so nothing in the allowlist
- * (auth → core only) would technically block importing `sendEmail`
- * here too. The port exists anyway, for the same reason
- * `TeamServicePorts.sendInvitationEmail` and
- * `WorkspaceServicePorts.checkWorkspaceLimit` are ports rather than
- * direct calls: this service should not own *content* — copy, subject
- * lines, template shape — for a side effect a consumer may want to
- * localize, skip, or replace with a different provider. `onAccountDeleted`
- * is fire-and-forget by design (matching ignite's `.catch(console.error)`
- * pattern): a failed confirmation email must never block the deletion
- * that already succeeded.
+ * The caller's own profile: read, update, delete the account. Each method
+ * authorizes itself and throws `ProfileServiceError`. The confirmation email
+ * is the `onAccountDeleted` port so its copy and provider stay the
+ * consumer's; it is fire-and-forget, since the deletion has already succeeded.
  */
-import { headers } from "next/headers";
+import { getRequestHeaders } from "@intelligo-dev/core/request-context";
 import { eq } from "drizzle-orm";
 import { createLogger } from "@intelligo-dev/core/logger";
 import { db } from "@intelligo-dev/core/db";
 import { users, sessions } from "@intelligo-dev/core/db/schema";
-import { auth } from "../server";
-import { requireAuth } from "../helpers";
-import { updateProfileSchema } from "./schemas";
-import { ProfileServiceError, isProfileServiceError } from "./errors";
+import { auth } from "../server.js";
+import { requireAuth } from "../helpers.js";
+import { updateProfileSchema } from "./schemas.js";
+import { ProfileServiceError, isProfileServiceError } from "./errors.js";
 const log = createLogger("ProfileService");
 function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
@@ -80,9 +42,7 @@ export function createProfileService(ports = {}) {
             throw toForbidden(error);
         }
     }
-    /**
-     * Get the caller's own profile.
-     */
+    /** The caller's own profile. */
     async function getProfile() {
         const { user } = await callRequireAuth();
         return {
@@ -97,13 +57,12 @@ export function createProfileService(ports = {}) {
      * Update the caller's own name/image via the Better-Auth user API.
      * Only the fields present in `input` are sent — omitting a field
      * leaves it unchanged; `image: null` is dropped rather than forwarded
-     * (Better-Auth's `updateUser` does not accept `null`), matching
-     * ignite's original action.
+     * (Better-Auth's `updateUser` does not accept `null`).
      */
     async function updateProfile(input) {
         await callRequireAuth();
         const validated = parseInput(updateProfileSchema, input);
-        const hdrs = await headers();
+        const hdrs = await getRequestHeaders();
         const updateData = {};
         if (validated.name !== undefined)
             updateData.name = validated.name;

package/dist/profile/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/profile/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAA2B,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAEtE,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAyB3C,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,gDAAgD;AAChD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,qBAAqB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,IAAI,mBAAmB,CAAC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;QAC/D,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAI,MAAkB,EAAE,KAAc;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1D,eAAe,EACjB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA6B,EAAE;IAClE,KAAK,UAAU,eAAe;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,UAAU;QACvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;YACzB,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,UAAU,aAAa,CAAC,KAAyB;QACpD,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,UAAU,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;QAE7B,MAAM,UAAU,GAAsC,EAAE,CAAC;QACzD,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACnE,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9D,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,aAAa;QAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,EAAE;iBACL,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAEhC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC3B,KAAK;iBACF,gBAAgB,CAAC;gBAChB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;aACtB,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACxC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC;aACzB,CAAC,CACH,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,aAAa;QACb,aAAa;KACd,CAAC;AACJ,CAAC"}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/profile/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAA2B,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAEtE,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAyB3C,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,gDAAgD;AAChD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,qBAAqB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,IAAI,mBAAmB,CAAC,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;QAC/D,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAI,MAAkB,EAAE,KAAc;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,mBAAmB,CAC3B,eAAe,EACf,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1D,eAAe,EACjB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA6B,EAAE;IAClE,KAAK,UAAU,eAAe;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,KAAK,UAAU,UAAU;QACvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;YACzB,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,aAAa,CAAC,KAAyB;QACpD,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,UAAU,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAEvC,MAAM,UAAU,GAAsC,EAAE,CAAC;QACzD,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;YAAE,UAAU,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACnE,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9D,UAAU,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,aAAa;QAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,EAAE;iBACL,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAEhC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,mBAAmB,CAC3B,gBAAgB,EAChB,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC3B,KAAK;iBACF,gBAAgB,CAAC;gBAChB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;aACtB,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBACxC,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC;aACzB,CAAC,CACH,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,aAAa;QACb,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/roles.js

@@ -1,9 +1,6 @@
 /**
- * The platform role.
- *
- * Deliberately a separate module from helpers.ts and server.ts: both
- * need the constant, and server.ts (the Better-Auth instance) cannot
- * import helpers.ts, which imports server.ts.
+ * Its own module because server.ts and helpers.ts both need it, and
+ * server.ts cannot import helpers.ts, which imports server.ts.
  */
 /**
  * Grants the operational console and, through Better-Auth's admin
@@ -14,4 +11,30 @@
  * on it is gated on nothing.
  */
 export const PLATFORM_ADMIN_ROLE = "platform-admin";
+/**
+ * Where a user stands as a platform admin: `hasRole` reads `users.role`
+ * (comma-separated), `allowlisted` reads PLATFORM_ADMIN_EMAILS, the
+ * bootstrap that `requirePlatformAdmin` promotes into the column.
+ *
+ * The allowlist names an address, so it counts only once the address
+ * is verified: otherwise whoever registers an allowlisted address
+ * first — before the real admin, or on a deployment that sends no
+ * verification mail — would become an admin.
+ */
+export function platformAdminStanding(user) {
+    const allowlist = (process.env.PLATFORM_ADMIN_EMAILS ?? "")
+        .split(",")
+        .map((e) => e.trim().toLowerCase())
+        .filter(Boolean);
+    const email = user.email?.toLowerCase();
+    const roles = (user.role ?? "")
+        .split(",")
+        .map((r) => r.trim())
+        .filter(Boolean);
+    return {
+        allowlisted: !!email && user.emailVerified === true && allowlist.includes(email),
+        hasRole: roles.includes(PLATFORM_ADMIN_ROLE),
+        roles,
+    };
+}
 //# sourceMappingURL=roles.js.map

package/dist/roles.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.js","sourceRoot":"","sources":["../src/roles.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../src/roles.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAIrC;IACC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;SACxD,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,OAAO;QACL,WAAW,EACT,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC5C,KAAK;KACN,CAAC;AACJ,CAAC"}