@meetreeve/module-team 0.1.0 → 0.3.0

package/README.md

@@ -17,7 +17,7 @@ the same MAJOR.MINOR.PATCH.
 | `listMembers(orgId)` | `GET /api/org/members` |
 | `updateMemberRole(orgId, memberId, role)` | `PUT /api/org/members/{id}/role` |
 | `removeMember(orgId, memberId)` | `DELETE /api/org/members/{id}` |
-| `inviteMember(orgId, email, role)` | `POST /api/org/invite` |
+| `inviteMember(orgId, email, role, spaces?)` | `POST /api/org/invite` (`spaces` sent whenever passed, `[]` included) |
 | `listInvitations(orgId)` | `GET /api/org/invitations` |
 | `revokeInvitation(orgId, invitationId)` | `DELETE /api/org/invitations/{id}` |
 | `resendInvitation(orgId, invitationId)` | `POST /api/org/invitations/{id}/resend` |
@@ -53,9 +53,25 @@ const client = createTeamClient({ fetch: (path, init) => productFetch(path, init
 />;
 ```
 
+Spaces (0.2.0, DEV-15988; 0.3.0, DEV-16808): pass
+`loadSpaceOptions={() => Promise<SpaceOption[]>}` and the invite dialog lists
+every space, the default one included (nobody joins a space automatically).
+With 2+ spaces at least one must be checked; with one there is no picker, the
+dialog says "They'll get access to <Space>" and sends `spaces: []`. The invite
+is held until the options load. `can_manage: false` spaces are shown
+disabled. A server refusal (e.g. 422 `spaces_required`) shows inside the
+dialog. `renderInvitationActions={(inv, { reload }) => ...}` is the
+pending-invite twin of `renderMemberActions`; call `reload` after a change
+the row shows (an invitation's `spaces` are listed on its row).
+
 `inviteRoles` scopes both the invite dialog and the per-member role picker.
-Owners get no role picker and no remove control. The backend still enforces
-every rule.
+Owners get no role picker and no remove control. The role picker also offers
+only the changes the backend accepts from the signed-in user, whose role is
+read from the roster row matching `currentUserEmail`: an owner may move a
+member to any offered role, an admin only to roles below admin and only on
+rows ranked below admin, and anyone else gets plain role labels. Without a
+matching `currentUserEmail` every role is a plain label. A refused change
+shows the backend's `detail`. The backend still enforces every rule.
 
 The panel has no runtime dependencies beyond `react`/`react-dom`. It is
 styled with Tailwind utility classes over shadcn tokens (`bg-card`,

package/dist/client/index.d.mts

@@ -31,6 +31,38 @@ interface Invitation {
     /** ISO-8601. */
     expires_at: string;
     accepted_at: string | null;
+    /**
+     * Spaces the invitee joins on accept (DEV-15988 / reeve-services DEV-15559).
+     * The backend always sends it; optional so a backend that predates it
+     * still type-checks as "no pre-set spaces".
+     */
+    spaces?: InvitationSpace[];
+}
+/** A space role. */
+type SpaceRole = "member" | "admin";
+/** One pre-set space on an invitation (`GET /api/org/invitations` item). */
+interface InvitationSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+}
+/** One space an invite (or a pending invitation) should land the invitee in. */
+interface InviteSpace {
+    space_id: string;
+    role: SpaceRole;
+}
+/**
+ * One of the org's spaces, as the invite dialog's Spaces picker lists it
+ * (reeve-frontend maps `GET /api/org/rbac/spaces` onto this). Every space is
+ * offered, the default one included: nobody joins a space automatically
+ * (DEV-16808). `can_manage: false` rows are shown disabled.
+ */
+interface SpaceOption {
+    id: string;
+    name: string;
+    kind?: string;
+    is_default: boolean;
+    can_manage: boolean;
 }
 /** `POST /api/org/invite`. */
 interface InviteMemberResponse {
@@ -50,7 +82,12 @@ interface TeamClient {
     listMembers(orgId: string): Promise<TeamMember[]>;
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<void>;
     removeMember(orgId: string, memberId: string): Promise<void>;
-    inviteMember(orgId: string, email: string, role: string): Promise<InviteMemberResponse>;
+    /**
+     * `spaces` goes in the body whenever it is passed, `[]` included (a
+     * one-space org sends `[]`, DEV-16808); omitted keeps the pre-DEV-15988
+     * request.
+     */
+    inviteMember(orgId: string, email: string, role: string, spaces?: InviteSpace[]): Promise<InviteMemberResponse>;
     listInvitations(orgId: string): Promise<Invitation[]>;
     revokeInvitation(orgId: string, invitationId: string): Promise<void>;
     resendInvitation(orgId: string, invitationId: string): Promise<void>;
@@ -68,7 +105,7 @@ interface TeamClient {
  *   GET    /api/org/members                      -> TeamMember[]
  *   PUT    /api/org/members/{id}/role   {role}   -> 2xx
  *   DELETE /api/org/members/{id}                 -> 2xx
- *   POST   /api/org/invite        {email, role}  -> InviteMemberResponse
+ *   POST   /api/org/invite        {email, role, spaces?}  -> InviteMemberResponse
  *   GET    /api/org/invitations                  -> Invitation[]
  *   DELETE /api/org/invitations/{id}             -> 2xx
  *   POST   /api/org/invitations/{id}/resend      -> 2xx (resets the 7-day expiry)
@@ -101,4 +138,4 @@ type TeamClientOptions = {
 };
 declare function createTeamClient({ fetch }: TeamClientOptions): TeamClient;
 
-export { type AssignableRole, type Invitation, type InviteMemberResponse, ORG_HEADER, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };
+export { type AssignableRole, type Invitation, type InvitationSpace, type InviteMemberResponse, type InviteSpace, ORG_HEADER, type SpaceOption, type SpaceRole, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };

package/dist/client/index.d.ts

@@ -31,6 +31,38 @@ interface Invitation {
     /** ISO-8601. */
     expires_at: string;
     accepted_at: string | null;
+    /**
+     * Spaces the invitee joins on accept (DEV-15988 / reeve-services DEV-15559).
+     * The backend always sends it; optional so a backend that predates it
+     * still type-checks as "no pre-set spaces".
+     */
+    spaces?: InvitationSpace[];
+}
+/** A space role. */
+type SpaceRole = "member" | "admin";
+/** One pre-set space on an invitation (`GET /api/org/invitations` item). */
+interface InvitationSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+}
+/** One space an invite (or a pending invitation) should land the invitee in. */
+interface InviteSpace {
+    space_id: string;
+    role: SpaceRole;
+}
+/**
+ * One of the org's spaces, as the invite dialog's Spaces picker lists it
+ * (reeve-frontend maps `GET /api/org/rbac/spaces` onto this). Every space is
+ * offered, the default one included: nobody joins a space automatically
+ * (DEV-16808). `can_manage: false` rows are shown disabled.
+ */
+interface SpaceOption {
+    id: string;
+    name: string;
+    kind?: string;
+    is_default: boolean;
+    can_manage: boolean;
 }
 /** `POST /api/org/invite`. */
 interface InviteMemberResponse {
@@ -50,7 +82,12 @@ interface TeamClient {
     listMembers(orgId: string): Promise<TeamMember[]>;
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<void>;
     removeMember(orgId: string, memberId: string): Promise<void>;
-    inviteMember(orgId: string, email: string, role: string): Promise<InviteMemberResponse>;
+    /**
+     * `spaces` goes in the body whenever it is passed, `[]` included (a
+     * one-space org sends `[]`, DEV-16808); omitted keeps the pre-DEV-15988
+     * request.
+     */
+    inviteMember(orgId: string, email: string, role: string, spaces?: InviteSpace[]): Promise<InviteMemberResponse>;
     listInvitations(orgId: string): Promise<Invitation[]>;
     revokeInvitation(orgId: string, invitationId: string): Promise<void>;
     resendInvitation(orgId: string, invitationId: string): Promise<void>;
@@ -68,7 +105,7 @@ interface TeamClient {
  *   GET    /api/org/members                      -> TeamMember[]
  *   PUT    /api/org/members/{id}/role   {role}   -> 2xx
  *   DELETE /api/org/members/{id}                 -> 2xx
- *   POST   /api/org/invite        {email, role}  -> InviteMemberResponse
+ *   POST   /api/org/invite        {email, role, spaces?}  -> InviteMemberResponse
  *   GET    /api/org/invitations                  -> Invitation[]
  *   DELETE /api/org/invitations/{id}             -> 2xx
  *   POST   /api/org/invitations/{id}/resend      -> 2xx (resets the 7-day expiry)
@@ -101,4 +138,4 @@ type TeamClientOptions = {
 };
 declare function createTeamClient({ fetch }: TeamClientOptions): TeamClient;
 
-export { type AssignableRole, type Invitation, type InviteMemberResponse, ORG_HEADER, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };
+export { type AssignableRole, type Invitation, type InvitationSpace, type InviteMemberResponse, type InviteSpace, ORG_HEADER, type SpaceOption, type SpaceRole, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };

package/dist/client/index.js

@@ -71,12 +71,14 @@ function createTeamClient({ fetch }) {
     removeMember: (orgId, memberId) => send(orgId, "DELETE", `/api/org/members/${segment(memberId, "memberId")}`).then(
       () => void 0
     ),
-    inviteMember: (orgId, email, role) => {
+    inviteMember: (orgId, email, role, spaces) => {
       if (typeof email !== "string" || email.trim() === "") {
         throw new Error("email must be a non-empty string");
       }
       segment(role, "role");
-      return send(orgId, "POST", "/api/org/invite", { email: email.trim(), role }).then(
+      const body = { email: email.trim(), role };
+      if (spaces) body.spaces = spaces;
+      return send(orgId, "POST", "/api/org/invite", body).then(
         (d) => d
       );
     },

package/dist/client/index.mjs

@@ -46,12 +46,14 @@ function createTeamClient({ fetch }) {
     removeMember: (orgId, memberId) => send(orgId, "DELETE", `/api/org/members/${segment(memberId, "memberId")}`).then(
       () => void 0
     ),
-    inviteMember: (orgId, email, role) => {
+    inviteMember: (orgId, email, role, spaces) => {
       if (typeof email !== "string" || email.trim() === "") {
         throw new Error("email must be a non-empty string");
       }
       segment(role, "role");
-      return send(orgId, "POST", "/api/org/invite", { email: email.trim(), role }).then(
+      const body = { email: email.trim(), role };
+      if (spaces) body.spaces = spaces;
+      return send(orgId, "POST", "/api/org/invite", body).then(
         (d) => d
       );
     },

package/dist/config/index.d.mts

@@ -34,6 +34,38 @@ interface Invitation {
     /** ISO-8601. */
     expires_at: string;
     accepted_at: string | null;
+    /**
+     * Spaces the invitee joins on accept (DEV-15988 / reeve-services DEV-15559).
+     * The backend always sends it; optional so a backend that predates it
+     * still type-checks as "no pre-set spaces".
+     */
+    spaces?: InvitationSpace[];
+}
+/** A space role. */
+type SpaceRole = "member" | "admin";
+/** One pre-set space on an invitation (`GET /api/org/invitations` item). */
+interface InvitationSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+}
+/** One space an invite (or a pending invitation) should land the invitee in. */
+interface InviteSpace {
+    space_id: string;
+    role: SpaceRole;
+}
+/**
+ * One of the org's spaces, as the invite dialog's Spaces picker lists it
+ * (reeve-frontend maps `GET /api/org/rbac/spaces` onto this). Every space is
+ * offered, the default one included: nobody joins a space automatically
+ * (DEV-16808). `can_manage: false` rows are shown disabled.
+ */
+interface SpaceOption {
+    id: string;
+    name: string;
+    kind?: string;
+    is_default: boolean;
+    can_manage: boolean;
 }
 /** `POST /api/org/invite`. */
 interface InviteMemberResponse {
@@ -53,7 +85,12 @@ interface TeamClient {
     listMembers(orgId: string): Promise<TeamMember[]>;
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<void>;
     removeMember(orgId: string, memberId: string): Promise<void>;
-    inviteMember(orgId: string, email: string, role: string): Promise<InviteMemberResponse>;
+    /**
+     * `spaces` goes in the body whenever it is passed, `[]` included (a
+     * one-space org sends `[]`, DEV-16808); omitted keeps the pre-DEV-15988
+     * request.
+     */
+    inviteMember(orgId: string, email: string, role: string, spaces?: InviteSpace[]): Promise<InviteMemberResponse>;
     listInvitations(orgId: string): Promise<Invitation[]>;
     revokeInvitation(orgId: string, invitationId: string): Promise<void>;
     resendInvitation(orgId: string, invitationId: string): Promise<void>;
@@ -63,6 +100,11 @@ type TeamNotice = {
     kind: "success" | "error";
     message: string;
 };
+/** What `renderInvitationActions` gets besides the invitation. */
+interface InvitationActionHelpers {
+    /** Refetch members and invitations, as Resend does after it lands. */
+    reload: () => Promise<void>;
+}
 interface TeamMembersPanelProps {
     /**
      * Data access. `createTeamClient({ fetch })` from `@meetreeve/module-team/client`.
@@ -80,7 +122,11 @@ interface TeamMembersPanelProps {
      * `["admin", "member"]`.
      */
     inviteRoles?: AssignableRole[];
-    /** The signed-in user's email: marks their row "you". */
+    /**
+     * The signed-in user's email: marks their row "you", and that row's role
+     * decides which role changes the picker offers (DEV-18190). Without it, or
+     * when no member matches, every role shows as a plain label.
+     */
     currentUserEmail?: string | null;
     /**
      * Host-owned per-member controls (Studio's Budget / Capabilities dialogs).
@@ -88,6 +134,19 @@ interface TeamMembersPanelProps {
      * decides per member what to show.
      */
     renderMemberActions?: (member: TeamMember) => ReactNode;
+    /**
+     * Host-owned per-invitation controls, rendered next to Resend / Revoke on
+     * every pending invitation. Call `reload` after a change the row shows.
+     */
+    renderInvitationActions?: (invitation: Invitation, helpers: InvitationActionHelpers) => ReactNode;
+    /**
+     * The org's spaces for the invite dialog's Spaces picker. When omitted the
+     * dialog has no picker and invites go out exactly as before. Called each
+     * time the dialog opens; until it answers, the invite is held, since an org
+     * with several spaces refuses an invite that names none (422
+     * `spaces_required`).
+     */
+    loadSpaceOptions?: () => Promise<SpaceOption[]>;
     /** Called with every success/error notice the panel shows inline. */
     onNotice?: (notice: TeamNotice) => void;
 }
@@ -97,4 +156,4 @@ interface TeamMembersPanelProps {
  */
 declare function TeamMembersPanel(props: TeamMembersPanelProps): react.JSX.Element;
 
-export { type AssignableRole, type Invitation, type InviteMemberResponse, type TeamClient, type TeamMember, TeamMembersPanel, type TeamMembersPanelProps, type TeamNotice, type TeamRole };
+export { type AssignableRole, type Invitation, type InvitationActionHelpers, type InvitationSpace, type InviteMemberResponse, type InviteSpace, type SpaceOption, type SpaceRole, type TeamClient, type TeamMember, TeamMembersPanel, type TeamMembersPanelProps, type TeamNotice, type TeamRole };

package/dist/config/index.d.ts

@@ -34,6 +34,38 @@ interface Invitation {
     /** ISO-8601. */
     expires_at: string;
     accepted_at: string | null;
+    /**
+     * Spaces the invitee joins on accept (DEV-15988 / reeve-services DEV-15559).
+     * The backend always sends it; optional so a backend that predates it
+     * still type-checks as "no pre-set spaces".
+     */
+    spaces?: InvitationSpace[];
+}
+/** A space role. */
+type SpaceRole = "member" | "admin";
+/** One pre-set space on an invitation (`GET /api/org/invitations` item). */
+interface InvitationSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+}
+/** One space an invite (or a pending invitation) should land the invitee in. */
+interface InviteSpace {
+    space_id: string;
+    role: SpaceRole;
+}
+/**
+ * One of the org's spaces, as the invite dialog's Spaces picker lists it
+ * (reeve-frontend maps `GET /api/org/rbac/spaces` onto this). Every space is
+ * offered, the default one included: nobody joins a space automatically
+ * (DEV-16808). `can_manage: false` rows are shown disabled.
+ */
+interface SpaceOption {
+    id: string;
+    name: string;
+    kind?: string;
+    is_default: boolean;
+    can_manage: boolean;
 }
 /** `POST /api/org/invite`. */
 interface InviteMemberResponse {
@@ -53,7 +85,12 @@ interface TeamClient {
     listMembers(orgId: string): Promise<TeamMember[]>;
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<void>;
     removeMember(orgId: string, memberId: string): Promise<void>;
-    inviteMember(orgId: string, email: string, role: string): Promise<InviteMemberResponse>;
+    /**
+     * `spaces` goes in the body whenever it is passed, `[]` included (a
+     * one-space org sends `[]`, DEV-16808); omitted keeps the pre-DEV-15988
+     * request.
+     */
+    inviteMember(orgId: string, email: string, role: string, spaces?: InviteSpace[]): Promise<InviteMemberResponse>;
     listInvitations(orgId: string): Promise<Invitation[]>;
     revokeInvitation(orgId: string, invitationId: string): Promise<void>;
     resendInvitation(orgId: string, invitationId: string): Promise<void>;
@@ -63,6 +100,11 @@ type TeamNotice = {
     kind: "success" | "error";
     message: string;
 };
+/** What `renderInvitationActions` gets besides the invitation. */
+interface InvitationActionHelpers {
+    /** Refetch members and invitations, as Resend does after it lands. */
+    reload: () => Promise<void>;
+}
 interface TeamMembersPanelProps {
     /**
      * Data access. `createTeamClient({ fetch })` from `@meetreeve/module-team/client`.
@@ -80,7 +122,11 @@ interface TeamMembersPanelProps {
      * `["admin", "member"]`.
      */
     inviteRoles?: AssignableRole[];
-    /** The signed-in user's email: marks their row "you". */
+    /**
+     * The signed-in user's email: marks their row "you", and that row's role
+     * decides which role changes the picker offers (DEV-18190). Without it, or
+     * when no member matches, every role shows as a plain label.
+     */
     currentUserEmail?: string | null;
     /**
      * Host-owned per-member controls (Studio's Budget / Capabilities dialogs).
@@ -88,6 +134,19 @@ interface TeamMembersPanelProps {
      * decides per member what to show.
      */
     renderMemberActions?: (member: TeamMember) => ReactNode;
+    /**
+     * Host-owned per-invitation controls, rendered next to Resend / Revoke on
+     * every pending invitation. Call `reload` after a change the row shows.
+     */
+    renderInvitationActions?: (invitation: Invitation, helpers: InvitationActionHelpers) => ReactNode;
+    /**
+     * The org's spaces for the invite dialog's Spaces picker. When omitted the
+     * dialog has no picker and invites go out exactly as before. Called each
+     * time the dialog opens; until it answers, the invite is held, since an org
+     * with several spaces refuses an invite that names none (422
+     * `spaces_required`).
+     */
+    loadSpaceOptions?: () => Promise<SpaceOption[]>;
     /** Called with every success/error notice the panel shows inline. */
     onNotice?: (notice: TeamNotice) => void;
 }
@@ -97,4 +156,4 @@ interface TeamMembersPanelProps {
  */
 declare function TeamMembersPanel(props: TeamMembersPanelProps): react.JSX.Element;
 
-export { type AssignableRole, type Invitation, type InviteMemberResponse, type TeamClient, type TeamMember, TeamMembersPanel, type TeamMembersPanelProps, type TeamNotice, type TeamRole };
+export { type AssignableRole, type Invitation, type InvitationActionHelpers, type InvitationSpace, type InviteMemberResponse, type InviteSpace, type SpaceOption, type SpaceRole, type TeamClient, type TeamMember, TeamMembersPanel, type TeamMembersPanelProps, type TeamNotice, type TeamRole };

package/dist/config/index.js

@@ -88,6 +88,30 @@ function Modal({
   );
 }
 
+// src/config/role-rules.ts
+var MEMBER_ROLE_RANK = {
+  viewer: 5,
+  member: 10,
+  billing_manager: 15,
+  admin: 20,
+  owner: 30
+};
+function memberRoleRank(role) {
+  return Object.prototype.hasOwnProperty.call(MEMBER_ROLE_RANK, role) ? MEMBER_ROLE_RANK[role] : -1;
+}
+function canChangeMemberRole(callerRole, targetRole, requestedRole) {
+  if (callerRole !== "owner" && callerRole !== "admin") return false;
+  if (memberRoleRank(requestedRole) < 0) return false;
+  if (requestedRole === "owner" && callerRole !== "owner") return false;
+  const caller = memberRoleRank(callerRole);
+  const target = memberRoleRank(targetRole);
+  const requested = memberRoleRank(requestedRole);
+  return callerRole === "owner" ? caller >= target && caller >= requested : caller > target && caller > requested;
+}
+function grantableRoles(callerRole, targetRole, offered) {
+  return offered.filter((role) => role !== targetRole && canChangeMemberRole(callerRole, targetRole, role));
+}
+
 // src/config/team-members-panel.tsx
 var import_jsx_runtime2 = require("react/jsx-runtime");
 var DEFAULT_INVITE_ROLES = ["admin", "member", "viewer"];
@@ -138,11 +162,18 @@ function formatAgo(iso) {
 }
 function errorInfo(err, fallback) {
   const e = typeof err === "object" && err !== null ? err : {};
-  const detail = typeof e.body?.detail === "string" ? e.body.detail : "";
+  const raw = e.body?.detail;
+  const nested = typeof raw === "object" && raw !== null ? raw.message : void 0;
+  const detail = typeof raw === "string" ? raw : typeof nested === "string" ? nested : "";
   const message = typeof e.message === "string" ? e.message : "";
   const status = typeof e.status === "number" ? e.status : Number(/^(?:API error )?(\d{3})\b/.exec(message)?.[1]) || null;
   return { status, message: detail || message || fallback };
 }
+function serverDetail(err) {
+  const body = typeof err === "object" && err !== null ? err.body : null;
+  const detail = typeof body === "object" && body !== null ? body.detail : null;
+  return typeof detail === "string" && detail.trim() !== "" ? detail : null;
+}
 function plural(n, one, many) {
   return `${n} ${n === 1 ? one : many}`;
 }
@@ -166,6 +197,8 @@ function TeamMembersPanelBody({
   inviteRoles = DEFAULT_INVITE_ROLES,
   currentUserEmail,
   renderMemberActions,
+  renderInvitationActions,
+  loadSpaceOptions,
   onNotice
 }) {
   const ids = (0, import_react2.useId)();
@@ -179,6 +212,9 @@ function TeamMembersPanelBody({
   const [inviteRole, setInviteRole] = (0, import_react2.useState)(defaultInviteRole);
   const [inviteSubmitting, setInviteSubmitting] = (0, import_react2.useState)(false);
   const [memberToRemove, setMemberToRemove] = (0, import_react2.useState)(null);
+  const [spaceOptions, setSpaceOptions] = (0, import_react2.useState)({ status: "loading" });
+  const [inviteSpaceIds, setInviteSpaceIds] = (0, import_react2.useState)([]);
+  const [inviteError, setInviteError] = (0, import_react2.useState)(null);
   const mounted = (0, import_react2.useRef)(true);
   const generation = (0, import_react2.useRef)(0);
   const notify = (0, import_react2.useCallback)(
@@ -214,6 +250,22 @@ function TeamMembersPanelBody({
       mounted.current = false;
     };
   }, [load]);
+  (0, import_react2.useEffect)(() => {
+    if (!inviteOpen || !loadSpaceOptions) return;
+    let live = true;
+    setSpaceOptions({ status: "loading" });
+    loadSpaceOptions().then(
+      (options) => {
+        if (live && mounted.current) setSpaceOptions({ status: "ready", options });
+      },
+      () => {
+        if (live && mounted.current) setSpaceOptions({ status: "error" });
+      }
+    );
+    return () => {
+      live = false;
+    };
+  }, [inviteOpen, loadSpaceOptions]);
   const setBusyFor = (key, value) => {
     if (mounted.current) setBusy((b) => ({ ...b, [key]: value }));
   };
@@ -221,24 +273,38 @@ function TeamMembersPanelBody({
     if (!mounted.current) return;
     setState((s) => s.status === "ready" ? fn(s) : s);
   };
+  const closeInvite = () => {
+    setInviteSpaceIds([]);
+    setInviteError(null);
+    setInviteOpen(false);
+  };
+  const offered = spaceOptions.status === "ready" ? spaceOptions.options : null;
+  const pickRequired = offered !== null && offered.length > 1;
+  const pickedSpaces = (offered ?? []).filter((o) => o.can_manage && inviteSpaceIds.includes(o.id)).map((o) => ({ space_id: o.id, role: "member" }));
+  const inviteSpacesChanged = offered !== null && pickRequired && inviteSpaceIds.some((id) => !offered.some((o) => o.id === id && o.can_manage));
+  const inviteSpacesBlocked = loadSpaceOptions !== void 0 && (offered === null || inviteSpacesChanged || pickRequired && pickedSpaces.length === 0);
   const handleInvite = async () => {
     const email = inviteEmail.trim();
-    if (!email || inviteSubmitting) return;
+    if (!email || inviteSubmitting || inviteSpacesBlocked) return;
     setInviteSubmitting(true);
+    setInviteError(null);
     try {
-      await client.inviteMember(orgId, email, inviteRole);
+      if (loadSpaceOptions) {
+        await client.inviteMember(orgId, email, inviteRole, pickRequired ? pickedSpaces : []);
+      } else {
+        await client.inviteMember(orgId, email, inviteRole);
+      }
       if (!mounted.current) return;
       notify({ kind: "success", message: `Invitation sent to ${email}` });
       setInviteEmail("");
       setInviteRole(defaultInviteRole);
-      setInviteOpen(false);
+      closeInvite();
       await load();
     } catch (err) {
       const { status, message } = errorInfo(err, "Failed to send invitation");
-      notify({
-        kind: "error",
-        message: status === 409 ? "A pending invitation already exists for this email" : message
-      });
+      const shown = status === 409 ? "A pending invitation already exists for this email" : message;
+      if (mounted.current) setInviteError(shown);
+      notify({ kind: "error", message: shown });
     } finally {
       if (mounted.current) setInviteSubmitting(false);
     }
@@ -280,8 +346,8 @@ function TeamMembersPanelBody({
         ...s,
         members: s.members.map((m) => m.id === member.id ? { ...m, role } : m)
       }));
-    } catch {
-      notify({ kind: "error", message: "Failed to update role" });
+    } catch (err) {
+      notify({ kind: "error", message: serverDetail(err) ?? "Failed to update role" });
     } finally {
       setBusyFor(key, false);
     }
@@ -308,6 +374,7 @@ function TeamMembersPanelBody({
   };
   const ready = state.status === "ready" ? state : null;
   const me = currentUserEmail?.toLowerCase() ?? null;
+  const callerRole = me !== null && ready?.members.find((m) => m.email?.toLowerCase() === me)?.role || null;
   const inviteTitleId = `${ids}-invite-title`;
   const inviteDescId = `${ids}-invite-desc`;
   const removeTitleId = `${ids}-remove-title`;
@@ -378,7 +445,8 @@ function TeamMembersPanelBody({
               const isMe = me !== null && member.email?.toLowerCase() === me;
               const isOwner = member.role === "owner";
               const rowBusy = Boolean(busy[`member:${member.id}`]);
-              const pickerRoles = roleOptions.includes(member.role) ? roleOptions : [member.role, ...roleOptions];
+              const grantable = grantableRoles(callerRole, member.role, roleOptions);
+              const pickerRoles = roleOptions.includes(member.role) ? roleOptions.filter((r) => r === member.role || grantable.includes(r)) : [member.role, ...grantable];
               return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(
                 "li",
                 {
@@ -408,7 +476,7 @@ function TeamMembersPanelBody({
                     ] }),
                     /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("div", { className: "flex shrink-0 flex-wrap items-center gap-2", children: [
                       isOwner ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("span", { className: roleBadgeClass(member.role), children: roleLabel(member.role) }) : /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(import_jsx_runtime2.Fragment, { children: [
-                        /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
+                        grantable.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("span", { className: roleBadgeClass(member.role), children: roleLabel(member.role) }) : /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
                           "select",
                           {
                             "aria-label": `Role for ${name}`,
@@ -469,7 +537,11 @@ function TeamMembersPanelBody({
                       inv.invited_by_email ?? "a team member",
                       " \xB7 expires ",
                       formatDate(inv.expires_at)
-                    ] })
+                    ] }),
+                    inv.spaces && inv.spaces.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("p", { className: "truncate text-xs text-muted-foreground", children: [
+                      "Spaces: ",
+                      inv.spaces.map((sp) => sp.name).join(", ")
+                    ] }) : null
                   ] }),
                   /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("div", { className: "flex shrink-0 items-center gap-2", children: [
                     /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("span", { className: roleBadgeClass(inv.role), children: roleLabel(inv.role) }),
@@ -494,7 +566,8 @@ function TeamMembersPanelBody({
                         onClick: () => void handleRevoke(inv),
                         children: "Revoke"
                       }
-                    )
+                    ),
+                    renderInvitationActions?.(inv, { reload: load })
                   ] })
                 ]
               },
@@ -508,7 +581,7 @@ function TeamMembersPanelBody({
       Modal,
       {
         open: inviteOpen,
-        onClose: () => setInviteOpen(false),
+        onClose: closeInvite,
         titleId: inviteTitleId,
         descriptionId: inviteDescId,
         dismissible: !inviteSubmitting,
@@ -555,6 +628,19 @@ function TeamMembersPanelBody({
                 ),
                 /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "text-xs text-muted-foreground", children: INVITE_ROLE_OPTIONS[inviteRole]?.description })
               ] }),
+              inviteError ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { role: "alert", className: "text-sm text-destructive", children: inviteError }) : null,
+              loadSpaceOptions ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
+                InviteSpacesPicker,
+                {
+                  state: spaceOptions,
+                  selected: inviteSpaceIds,
+                  selectionChanged: inviteSpacesChanged,
+                  disabled: inviteSubmitting,
+                  onToggle: (id, checked) => setInviteSpaceIds(
+                    (prev) => checked ? [...prev.filter((x) => x !== id), id] : prev.filter((x) => x !== id)
+                  )
+                }
+              ) : null,
               /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("div", { className: "flex justify-end gap-2", children: [
                 /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
                   "button",
@@ -562,7 +648,7 @@ function TeamMembersPanelBody({
                     type: "button",
                     className: BUTTON_OUTLINE,
                     disabled: inviteSubmitting,
-                    onClick: () => setInviteOpen(false),
+                    onClick: closeInvite,
                     children: "Cancel"
                   }
                 ),
@@ -571,7 +657,7 @@ function TeamMembersPanelBody({
                   {
                     type: "submit",
                     className: BUTTON_PRIMARY,
-                    disabled: !inviteEmail.trim() || inviteSubmitting,
+                    disabled: !inviteEmail.trim() || inviteSubmitting || inviteSpacesBlocked,
                     children: inviteSubmitting ? "Sending\u2026" : "Send Invitation"
                   }
                 )
@@ -627,6 +713,57 @@ function TeamMembersPanelBody({
     )
   ] });
 }
+function InviteSpacesPicker({
+  state,
+  selected,
+  selectionChanged,
+  disabled,
+  onToggle
+}) {
+  const ids = (0, import_react2.useId)();
+  if (state.status === "loading") {
+    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "text-sm text-muted-foreground", children: "Loading spaces\u2026" });
+  }
+  if (state.status === "error") {
+    return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "text-sm text-destructive", children: selected.length > 0 ? "Couldn\u2019t load spaces, so the checked ones can\u2019t be sent. Cancel and reopen to retry." : "Couldn\u2019t load spaces, so the invite can\u2019t be sent yet. Cancel and reopen to retry." });
+  }
+  const { options } = state;
+  if (options.length === 1) {
+    return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("p", { className: "text-sm text-muted-foreground", children: [
+      "They\u2019ll get access to ",
+      options[0].name,
+      "."
+    ] });
+  }
+  if (options.length === 0) return null;
+  const picked = options.some((o) => o.can_manage && selected.includes(o.id));
+  const manageable = options.some((o) => o.can_manage);
+  return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)("fieldset", { className: "space-y-2", disabled, "aria-labelledby": `${ids}-legend`, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("legend", { id: `${ids}-legend`, className: "text-sm font-medium", children: "Spaces" }),
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "text-xs text-muted-foreground", children: "The spaces they\u2019ll join." }),
+    selectionChanged ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "text-sm text-destructive", children: "A checked space changed or is no longer manageable. Cancel and reopen to review the assignment before sending." }) : !manageable ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "text-sm text-destructive", children: "You can\u2019t add people to any of these spaces. Ask an org owner or admin to send this invite." }) : !picked ? /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("p", { className: "text-sm text-muted-foreground", children: "Pick at least one space." }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("ul", { className: "max-h-48 divide-y divide-border overflow-y-auto rounded-md border border-border", children: options.map((o) => /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("li", { children: /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(
+      "label",
+      {
+        className: `flex items-center gap-3 px-3 py-2 text-sm ${o.can_manage ? "cursor-pointer" : "cursor-not-allowed text-muted-foreground"}`,
+        children: [
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(
+            "input",
+            {
+              type: "checkbox",
+              className: "accent-foreground",
+              checked: o.can_manage && selected.includes(o.id),
+              disabled: !o.can_manage,
+              onChange: (e) => onToggle(o.id, e.target.checked)
+            }
+          ),
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("span", { children: o.name }),
+          o.can_manage ? null : /* @__PURE__ */ (0, import_jsx_runtime2.jsx)("span", { className: "ml-auto text-xs", children: "You can't manage this space" })
+        ]
+      }
+    ) }, o.id)) })
+  ] });
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   TeamMembersPanel

package/dist/config/index.mjs

@@ -63,6 +63,30 @@ function Modal({
   );
 }
 
+// src/config/role-rules.ts
+var MEMBER_ROLE_RANK = {
+  viewer: 5,
+  member: 10,
+  billing_manager: 15,
+  admin: 20,
+  owner: 30
+};
+function memberRoleRank(role) {
+  return Object.prototype.hasOwnProperty.call(MEMBER_ROLE_RANK, role) ? MEMBER_ROLE_RANK[role] : -1;
+}
+function canChangeMemberRole(callerRole, targetRole, requestedRole) {
+  if (callerRole !== "owner" && callerRole !== "admin") return false;
+  if (memberRoleRank(requestedRole) < 0) return false;
+  if (requestedRole === "owner" && callerRole !== "owner") return false;
+  const caller = memberRoleRank(callerRole);
+  const target = memberRoleRank(targetRole);
+  const requested = memberRoleRank(requestedRole);
+  return callerRole === "owner" ? caller >= target && caller >= requested : caller > target && caller > requested;
+}
+function grantableRoles(callerRole, targetRole, offered) {
+  return offered.filter((role) => role !== targetRole && canChangeMemberRole(callerRole, targetRole, role));
+}
+
 // src/config/team-members-panel.tsx
 import { Fragment, jsx as jsx2, jsxs } from "react/jsx-runtime";
 var DEFAULT_INVITE_ROLES = ["admin", "member", "viewer"];
@@ -113,11 +137,18 @@ function formatAgo(iso) {
 }
 function errorInfo(err, fallback) {
   const e = typeof err === "object" && err !== null ? err : {};
-  const detail = typeof e.body?.detail === "string" ? e.body.detail : "";
+  const raw = e.body?.detail;
+  const nested = typeof raw === "object" && raw !== null ? raw.message : void 0;
+  const detail = typeof raw === "string" ? raw : typeof nested === "string" ? nested : "";
   const message = typeof e.message === "string" ? e.message : "";
   const status = typeof e.status === "number" ? e.status : Number(/^(?:API error )?(\d{3})\b/.exec(message)?.[1]) || null;
   return { status, message: detail || message || fallback };
 }
+function serverDetail(err) {
+  const body = typeof err === "object" && err !== null ? err.body : null;
+  const detail = typeof body === "object" && body !== null ? body.detail : null;
+  return typeof detail === "string" && detail.trim() !== "" ? detail : null;
+}
 function plural(n, one, many) {
   return `${n} ${n === 1 ? one : many}`;
 }
@@ -141,6 +172,8 @@ function TeamMembersPanelBody({
   inviteRoles = DEFAULT_INVITE_ROLES,
   currentUserEmail,
   renderMemberActions,
+  renderInvitationActions,
+  loadSpaceOptions,
   onNotice
 }) {
   const ids = useId();
@@ -154,6 +187,9 @@ function TeamMembersPanelBody({
   const [inviteRole, setInviteRole] = useState(defaultInviteRole);
   const [inviteSubmitting, setInviteSubmitting] = useState(false);
   const [memberToRemove, setMemberToRemove] = useState(null);
+  const [spaceOptions, setSpaceOptions] = useState({ status: "loading" });
+  const [inviteSpaceIds, setInviteSpaceIds] = useState([]);
+  const [inviteError, setInviteError] = useState(null);
   const mounted = useRef2(true);
   const generation = useRef2(0);
   const notify = useCallback(
@@ -189,6 +225,22 @@ function TeamMembersPanelBody({
       mounted.current = false;
     };
   }, [load]);
+  useEffect2(() => {
+    if (!inviteOpen || !loadSpaceOptions) return;
+    let live = true;
+    setSpaceOptions({ status: "loading" });
+    loadSpaceOptions().then(
+      (options) => {
+        if (live && mounted.current) setSpaceOptions({ status: "ready", options });
+      },
+      () => {
+        if (live && mounted.current) setSpaceOptions({ status: "error" });
+      }
+    );
+    return () => {
+      live = false;
+    };
+  }, [inviteOpen, loadSpaceOptions]);
   const setBusyFor = (key, value) => {
     if (mounted.current) setBusy((b) => ({ ...b, [key]: value }));
   };
@@ -196,24 +248,38 @@ function TeamMembersPanelBody({
     if (!mounted.current) return;
     setState((s) => s.status === "ready" ? fn(s) : s);
   };
+  const closeInvite = () => {
+    setInviteSpaceIds([]);
+    setInviteError(null);
+    setInviteOpen(false);
+  };
+  const offered = spaceOptions.status === "ready" ? spaceOptions.options : null;
+  const pickRequired = offered !== null && offered.length > 1;
+  const pickedSpaces = (offered ?? []).filter((o) => o.can_manage && inviteSpaceIds.includes(o.id)).map((o) => ({ space_id: o.id, role: "member" }));
+  const inviteSpacesChanged = offered !== null && pickRequired && inviteSpaceIds.some((id) => !offered.some((o) => o.id === id && o.can_manage));
+  const inviteSpacesBlocked = loadSpaceOptions !== void 0 && (offered === null || inviteSpacesChanged || pickRequired && pickedSpaces.length === 0);
   const handleInvite = async () => {
     const email = inviteEmail.trim();
-    if (!email || inviteSubmitting) return;
+    if (!email || inviteSubmitting || inviteSpacesBlocked) return;
     setInviteSubmitting(true);
+    setInviteError(null);
     try {
-      await client.inviteMember(orgId, email, inviteRole);
+      if (loadSpaceOptions) {
+        await client.inviteMember(orgId, email, inviteRole, pickRequired ? pickedSpaces : []);
+      } else {
+        await client.inviteMember(orgId, email, inviteRole);
+      }
       if (!mounted.current) return;
       notify({ kind: "success", message: `Invitation sent to ${email}` });
       setInviteEmail("");
       setInviteRole(defaultInviteRole);
-      setInviteOpen(false);
+      closeInvite();
       await load();
     } catch (err) {
       const { status, message } = errorInfo(err, "Failed to send invitation");
-      notify({
-        kind: "error",
-        message: status === 409 ? "A pending invitation already exists for this email" : message
-      });
+      const shown = status === 409 ? "A pending invitation already exists for this email" : message;
+      if (mounted.current) setInviteError(shown);
+      notify({ kind: "error", message: shown });
     } finally {
       if (mounted.current) setInviteSubmitting(false);
     }
@@ -255,8 +321,8 @@ function TeamMembersPanelBody({
         ...s,
         members: s.members.map((m) => m.id === member.id ? { ...m, role } : m)
       }));
-    } catch {
-      notify({ kind: "error", message: "Failed to update role" });
+    } catch (err) {
+      notify({ kind: "error", message: serverDetail(err) ?? "Failed to update role" });
     } finally {
       setBusyFor(key, false);
     }
@@ -283,6 +349,7 @@ function TeamMembersPanelBody({
   };
   const ready = state.status === "ready" ? state : null;
   const me = currentUserEmail?.toLowerCase() ?? null;
+  const callerRole = me !== null && ready?.members.find((m) => m.email?.toLowerCase() === me)?.role || null;
   const inviteTitleId = `${ids}-invite-title`;
   const inviteDescId = `${ids}-invite-desc`;
   const removeTitleId = `${ids}-remove-title`;
@@ -353,7 +420,8 @@ function TeamMembersPanelBody({
               const isMe = me !== null && member.email?.toLowerCase() === me;
               const isOwner = member.role === "owner";
               const rowBusy = Boolean(busy[`member:${member.id}`]);
-              const pickerRoles = roleOptions.includes(member.role) ? roleOptions : [member.role, ...roleOptions];
+              const grantable = grantableRoles(callerRole, member.role, roleOptions);
+              const pickerRoles = roleOptions.includes(member.role) ? roleOptions.filter((r) => r === member.role || grantable.includes(r)) : [member.role, ...grantable];
               return /* @__PURE__ */ jsxs(
                 "li",
                 {
@@ -383,7 +451,7 @@ function TeamMembersPanelBody({
                     ] }),
                     /* @__PURE__ */ jsxs("div", { className: "flex shrink-0 flex-wrap items-center gap-2", children: [
                       isOwner ? /* @__PURE__ */ jsx2("span", { className: roleBadgeClass(member.role), children: roleLabel(member.role) }) : /* @__PURE__ */ jsxs(Fragment, { children: [
-                        /* @__PURE__ */ jsx2(
+                        grantable.length === 0 ? /* @__PURE__ */ jsx2("span", { className: roleBadgeClass(member.role), children: roleLabel(member.role) }) : /* @__PURE__ */ jsx2(
                           "select",
                           {
                             "aria-label": `Role for ${name}`,
@@ -444,7 +512,11 @@ function TeamMembersPanelBody({
                       inv.invited_by_email ?? "a team member",
                       " \xB7 expires ",
                       formatDate(inv.expires_at)
-                    ] })
+                    ] }),
+                    inv.spaces && inv.spaces.length > 0 ? /* @__PURE__ */ jsxs("p", { className: "truncate text-xs text-muted-foreground", children: [
+                      "Spaces: ",
+                      inv.spaces.map((sp) => sp.name).join(", ")
+                    ] }) : null
                   ] }),
                   /* @__PURE__ */ jsxs("div", { className: "flex shrink-0 items-center gap-2", children: [
                     /* @__PURE__ */ jsx2("span", { className: roleBadgeClass(inv.role), children: roleLabel(inv.role) }),
@@ -469,7 +541,8 @@ function TeamMembersPanelBody({
                         onClick: () => void handleRevoke(inv),
                         children: "Revoke"
                       }
-                    )
+                    ),
+                    renderInvitationActions?.(inv, { reload: load })
                   ] })
                 ]
               },
@@ -483,7 +556,7 @@ function TeamMembersPanelBody({
       Modal,
       {
         open: inviteOpen,
-        onClose: () => setInviteOpen(false),
+        onClose: closeInvite,
         titleId: inviteTitleId,
         descriptionId: inviteDescId,
         dismissible: !inviteSubmitting,
@@ -530,6 +603,19 @@ function TeamMembersPanelBody({
                 ),
                 /* @__PURE__ */ jsx2("p", { className: "text-xs text-muted-foreground", children: INVITE_ROLE_OPTIONS[inviteRole]?.description })
               ] }),
+              inviteError ? /* @__PURE__ */ jsx2("p", { role: "alert", className: "text-sm text-destructive", children: inviteError }) : null,
+              loadSpaceOptions ? /* @__PURE__ */ jsx2(
+                InviteSpacesPicker,
+                {
+                  state: spaceOptions,
+                  selected: inviteSpaceIds,
+                  selectionChanged: inviteSpacesChanged,
+                  disabled: inviteSubmitting,
+                  onToggle: (id, checked) => setInviteSpaceIds(
+                    (prev) => checked ? [...prev.filter((x) => x !== id), id] : prev.filter((x) => x !== id)
+                  )
+                }
+              ) : null,
               /* @__PURE__ */ jsxs("div", { className: "flex justify-end gap-2", children: [
                 /* @__PURE__ */ jsx2(
                   "button",
@@ -537,7 +623,7 @@ function TeamMembersPanelBody({
                     type: "button",
                     className: BUTTON_OUTLINE,
                     disabled: inviteSubmitting,
-                    onClick: () => setInviteOpen(false),
+                    onClick: closeInvite,
                     children: "Cancel"
                   }
                 ),
@@ -546,7 +632,7 @@ function TeamMembersPanelBody({
                   {
                     type: "submit",
                     className: BUTTON_PRIMARY,
-                    disabled: !inviteEmail.trim() || inviteSubmitting,
+                    disabled: !inviteEmail.trim() || inviteSubmitting || inviteSpacesBlocked,
                     children: inviteSubmitting ? "Sending\u2026" : "Send Invitation"
                   }
                 )
@@ -602,6 +688,57 @@ function TeamMembersPanelBody({
     )
   ] });
 }
+function InviteSpacesPicker({
+  state,
+  selected,
+  selectionChanged,
+  disabled,
+  onToggle
+}) {
+  const ids = useId();
+  if (state.status === "loading") {
+    return /* @__PURE__ */ jsx2("p", { className: "text-sm text-muted-foreground", children: "Loading spaces\u2026" });
+  }
+  if (state.status === "error") {
+    return /* @__PURE__ */ jsx2("p", { className: "text-sm text-destructive", children: selected.length > 0 ? "Couldn\u2019t load spaces, so the checked ones can\u2019t be sent. Cancel and reopen to retry." : "Couldn\u2019t load spaces, so the invite can\u2019t be sent yet. Cancel and reopen to retry." });
+  }
+  const { options } = state;
+  if (options.length === 1) {
+    return /* @__PURE__ */ jsxs("p", { className: "text-sm text-muted-foreground", children: [
+      "They\u2019ll get access to ",
+      options[0].name,
+      "."
+    ] });
+  }
+  if (options.length === 0) return null;
+  const picked = options.some((o) => o.can_manage && selected.includes(o.id));
+  const manageable = options.some((o) => o.can_manage);
+  return /* @__PURE__ */ jsxs("fieldset", { className: "space-y-2", disabled, "aria-labelledby": `${ids}-legend`, children: [
+    /* @__PURE__ */ jsx2("legend", { id: `${ids}-legend`, className: "text-sm font-medium", children: "Spaces" }),
+    /* @__PURE__ */ jsx2("p", { className: "text-xs text-muted-foreground", children: "The spaces they\u2019ll join." }),
+    selectionChanged ? /* @__PURE__ */ jsx2("p", { className: "text-sm text-destructive", children: "A checked space changed or is no longer manageable. Cancel and reopen to review the assignment before sending." }) : !manageable ? /* @__PURE__ */ jsx2("p", { className: "text-sm text-destructive", children: "You can\u2019t add people to any of these spaces. Ask an org owner or admin to send this invite." }) : !picked ? /* @__PURE__ */ jsx2("p", { className: "text-sm text-muted-foreground", children: "Pick at least one space." }) : null,
+    /* @__PURE__ */ jsx2("ul", { className: "max-h-48 divide-y divide-border overflow-y-auto rounded-md border border-border", children: options.map((o) => /* @__PURE__ */ jsx2("li", { children: /* @__PURE__ */ jsxs(
+      "label",
+      {
+        className: `flex items-center gap-3 px-3 py-2 text-sm ${o.can_manage ? "cursor-pointer" : "cursor-not-allowed text-muted-foreground"}`,
+        children: [
+          /* @__PURE__ */ jsx2(
+            "input",
+            {
+              type: "checkbox",
+              className: "accent-foreground",
+              checked: o.can_manage && selected.includes(o.id),
+              disabled: !o.can_manage,
+              onChange: (e) => onToggle(o.id, e.target.checked)
+            }
+          ),
+          /* @__PURE__ */ jsx2("span", { children: o.name }),
+          o.can_manage ? null : /* @__PURE__ */ jsx2("span", { className: "ml-auto text-xs", children: "You can't manage this space" })
+        ]
+      }
+    ) }, o.id)) })
+  ] });
+}
 export {
   TeamMembersPanel
 };

package/dist/index.d.mts

@@ -31,6 +31,38 @@ interface Invitation {
     /** ISO-8601. */
     expires_at: string;
     accepted_at: string | null;
+    /**
+     * Spaces the invitee joins on accept (DEV-15988 / reeve-services DEV-15559).
+     * The backend always sends it; optional so a backend that predates it
+     * still type-checks as "no pre-set spaces".
+     */
+    spaces?: InvitationSpace[];
+}
+/** A space role. */
+type SpaceRole = "member" | "admin";
+/** One pre-set space on an invitation (`GET /api/org/invitations` item). */
+interface InvitationSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+}
+/** One space an invite (or a pending invitation) should land the invitee in. */
+interface InviteSpace {
+    space_id: string;
+    role: SpaceRole;
+}
+/**
+ * One of the org's spaces, as the invite dialog's Spaces picker lists it
+ * (reeve-frontend maps `GET /api/org/rbac/spaces` onto this). Every space is
+ * offered, the default one included: nobody joins a space automatically
+ * (DEV-16808). `can_manage: false` rows are shown disabled.
+ */
+interface SpaceOption {
+    id: string;
+    name: string;
+    kind?: string;
+    is_default: boolean;
+    can_manage: boolean;
 }
 /** `POST /api/org/invite`. */
 interface InviteMemberResponse {
@@ -50,7 +82,12 @@ interface TeamClient {
     listMembers(orgId: string): Promise<TeamMember[]>;
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<void>;
     removeMember(orgId: string, memberId: string): Promise<void>;
-    inviteMember(orgId: string, email: string, role: string): Promise<InviteMemberResponse>;
+    /**
+     * `spaces` goes in the body whenever it is passed, `[]` included (a
+     * one-space org sends `[]`, DEV-16808); omitted keeps the pre-DEV-15988
+     * request.
+     */
+    inviteMember(orgId: string, email: string, role: string, spaces?: InviteSpace[]): Promise<InviteMemberResponse>;
     listInvitations(orgId: string): Promise<Invitation[]>;
     revokeInvitation(orgId: string, invitationId: string): Promise<void>;
     resendInvitation(orgId: string, invitationId: string): Promise<void>;
@@ -68,7 +105,7 @@ interface TeamClient {
  *   GET    /api/org/members                      -> TeamMember[]
  *   PUT    /api/org/members/{id}/role   {role}   -> 2xx
  *   DELETE /api/org/members/{id}                 -> 2xx
- *   POST   /api/org/invite        {email, role}  -> InviteMemberResponse
+ *   POST   /api/org/invite        {email, role, spaces?}  -> InviteMemberResponse
  *   GET    /api/org/invitations                  -> Invitation[]
  *   DELETE /api/org/invitations/{id}             -> 2xx
  *   POST   /api/org/invitations/{id}/resend      -> 2xx (resets the 7-day expiry)
@@ -101,4 +138,4 @@ type TeamClientOptions = {
 };
 declare function createTeamClient({ fetch }: TeamClientOptions): TeamClient;
 
-export { type AssignableRole, type Invitation, type InviteMemberResponse, ORG_HEADER, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };
+export { type AssignableRole, type Invitation, type InvitationSpace, type InviteMemberResponse, type InviteSpace, ORG_HEADER, type SpaceOption, type SpaceRole, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };

package/dist/index.d.ts

@@ -31,6 +31,38 @@ interface Invitation {
     /** ISO-8601. */
     expires_at: string;
     accepted_at: string | null;
+    /**
+     * Spaces the invitee joins on accept (DEV-15988 / reeve-services DEV-15559).
+     * The backend always sends it; optional so a backend that predates it
+     * still type-checks as "no pre-set spaces".
+     */
+    spaces?: InvitationSpace[];
+}
+/** A space role. */
+type SpaceRole = "member" | "admin";
+/** One pre-set space on an invitation (`GET /api/org/invitations` item). */
+interface InvitationSpace {
+    id: string;
+    name: string;
+    role: SpaceRole;
+}
+/** One space an invite (or a pending invitation) should land the invitee in. */
+interface InviteSpace {
+    space_id: string;
+    role: SpaceRole;
+}
+/**
+ * One of the org's spaces, as the invite dialog's Spaces picker lists it
+ * (reeve-frontend maps `GET /api/org/rbac/spaces` onto this). Every space is
+ * offered, the default one included: nobody joins a space automatically
+ * (DEV-16808). `can_manage: false` rows are shown disabled.
+ */
+interface SpaceOption {
+    id: string;
+    name: string;
+    kind?: string;
+    is_default: boolean;
+    can_manage: boolean;
 }
 /** `POST /api/org/invite`. */
 interface InviteMemberResponse {
@@ -50,7 +82,12 @@ interface TeamClient {
     listMembers(orgId: string): Promise<TeamMember[]>;
     updateMemberRole(orgId: string, memberId: string, role: string): Promise<void>;
     removeMember(orgId: string, memberId: string): Promise<void>;
-    inviteMember(orgId: string, email: string, role: string): Promise<InviteMemberResponse>;
+    /**
+     * `spaces` goes in the body whenever it is passed, `[]` included (a
+     * one-space org sends `[]`, DEV-16808); omitted keeps the pre-DEV-15988
+     * request.
+     */
+    inviteMember(orgId: string, email: string, role: string, spaces?: InviteSpace[]): Promise<InviteMemberResponse>;
     listInvitations(orgId: string): Promise<Invitation[]>;
     revokeInvitation(orgId: string, invitationId: string): Promise<void>;
     resendInvitation(orgId: string, invitationId: string): Promise<void>;
@@ -68,7 +105,7 @@ interface TeamClient {
  *   GET    /api/org/members                      -> TeamMember[]
  *   PUT    /api/org/members/{id}/role   {role}   -> 2xx
  *   DELETE /api/org/members/{id}                 -> 2xx
- *   POST   /api/org/invite        {email, role}  -> InviteMemberResponse
+ *   POST   /api/org/invite        {email, role, spaces?}  -> InviteMemberResponse
  *   GET    /api/org/invitations                  -> Invitation[]
  *   DELETE /api/org/invitations/{id}             -> 2xx
  *   POST   /api/org/invitations/{id}/resend      -> 2xx (resets the 7-day expiry)
@@ -101,4 +138,4 @@ type TeamClientOptions = {
 };
 declare function createTeamClient({ fetch }: TeamClientOptions): TeamClient;
 
-export { type AssignableRole, type Invitation, type InviteMemberResponse, ORG_HEADER, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };
+export { type AssignableRole, type Invitation, type InvitationSpace, type InviteMemberResponse, type InviteSpace, ORG_HEADER, type SpaceOption, type SpaceRole, type TeamClient, type TeamClientOptions, type TeamFetch, type TeamMember, type TeamRequestInit, type TeamRole, createTeamClient };

package/dist/index.js

@@ -73,12 +73,14 @@ function createTeamClient({ fetch }) {
     removeMember: (orgId, memberId) => send(orgId, "DELETE", `/api/org/members/${segment(memberId, "memberId")}`).then(
       () => void 0
     ),
-    inviteMember: (orgId, email, role) => {
+    inviteMember: (orgId, email, role, spaces) => {
       if (typeof email !== "string" || email.trim() === "") {
         throw new Error("email must be a non-empty string");
       }
       segment(role, "role");
-      return send(orgId, "POST", "/api/org/invite", { email: email.trim(), role }).then(
+      const body = { email: email.trim(), role };
+      if (spaces) body.spaces = spaces;
+      return send(orgId, "POST", "/api/org/invite", body).then(
         (d) => d
       );
     },

package/dist/index.mjs

@@ -46,12 +46,14 @@ function createTeamClient({ fetch }) {
     removeMember: (orgId, memberId) => send(orgId, "DELETE", `/api/org/members/${segment(memberId, "memberId")}`).then(
       () => void 0
     ),
-    inviteMember: (orgId, email, role) => {
+    inviteMember: (orgId, email, role, spaces) => {
       if (typeof email !== "string" || email.trim() === "") {
         throw new Error("email must be a non-empty string");
       }
       segment(role, "role");
-      return send(orgId, "POST", "/api/org/invite", { email: email.trim(), role }).then(
+      const body = { email: email.trim(), role };
+      if (spaces) body.spaces = spaces;
+      return send(orgId, "POST", "/api/org/invite", body).then(
         (d) => d
       );
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meetreeve/module-team",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "Reeve.Team module (DEV-9998, C2 of epic DEV-9983): the CONFIG surface for an org's people - members table, role picker, remove member, invite dialog, pending invitations (revoke/resend) and seat count - plus a server-safe typed client over /api/org/*. Talks to the host through an injected fetch. Versioned in lockstep with the Python reeve-module-team package (both ship the same MAJOR.MINOR.PATCH).",
   "license": "UNLICENSED",
   "main": "./dist/index.js",