@meridianjs/meridian 1.31.0 → 2.1.0

package/dist/api/auth/register/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/api/auth/register/route.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAYvC,eAAO,MAAM,IAAI,GAAU,KAAK,GAAG,EAAE,KAAK,QAAQ,kBAiDjD,CAAA"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../src/api/auth/register/route.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAavC,eAAO,MAAM,IAAI,GAAU,KAAK,GAAG,EAAE,KAAK,QAAQ,kBAiEjD,CAAA"}

package/dist/api/auth/register/route.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { consumeOtp } from "./_otp-store.js";
 import { validateEmailDomain } from "./_domain-check.js";
+import { applyPendingInvites } from "../_apply-pending-invites.js";
 const registerSchema = z.object({
     email: z.string().email(),
     password: z.string().min(8, "Password must be at least 8 characters"),
@@ -51,6 +52,21 @@ export const POST = async (req, res) => {
     }
     const authService = req.scope.resolve("authModuleService");
     const response = await authService.register(result.data);
+    // Auto-apply any pending invitations for this email
+    if (response.user?.id) {
+        const applied = await applyPendingInvites(req.scope, response.user.id, result.data.email);
+        if (applied) {
+            // Re-sign the JWT with a fresh DB read so the token reflects the upgraded role/permissions
+            try {
+                const freshAuth = await authService.issueToken(response.user.id);
+                response.token = freshAuth.token;
+                response.user = freshAuth.user;
+            }
+            catch {
+                // Non-fatal — user still registered, they can log in to get the updated token
+            }
+        }
+    }
     res.status(201).json(response);
 };
 //# sourceMappingURL=route.js.map

package/dist/api/auth/register/route.js.map

@@ -1 +1 @@
-{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../src/api/auth/register/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAExD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAQ,EAAE,GAAa,EAAE,EAAE;IACpD,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;IACjE,MAAM,CAAC,EAAE,SAAS,CAAC,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3E,MAAM,YAAY,GAAG,SAAS,KAAK,CAAC,CAAA;IAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACjD,MAAM,SAAS,GAAG,MAAM,EAAE,aAAa,EAAE,YAAY,CAAA;QACrD,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,OAAO,EAAE,sEAAsE,EAAE;aAC3F,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAA;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAA;YACzD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;gBACvE,OAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAA;YAC7E,OAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC7G,OAAM;IACR,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAI,CAAC,CAAA;QAClF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAA;YACpF,OAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;IACjE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAChC,CAAC,CAAA"}
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../src/api/auth/register/route.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AAElE,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wCAAwC,CAAC;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAQ,EAAE,GAAa,EAAE,EAAE;IACpD,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;IACjE,MAAM,CAAC,EAAE,SAAS,CAAC,GAAG,MAAM,WAAW,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IAC3E,MAAM,YAAY,GAAG,SAAS,KAAK,CAAC,CAAA;IAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACjD,MAAM,SAAS,GAAG,MAAM,EAAE,aAAa,EAAE,YAAY,CAAA;QACrD,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,EAAE,OAAO,EAAE,sEAAsE,EAAE;aAC3F,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAA;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,cAAc,CAAC,CAAA;YACzD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;gBACvE,OAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAA;YAC7E,OAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QAC7G,OAAM;IACR,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAI,CAAC,CAAA;QAClF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAA;YACpF,OAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;IACjE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAExD,oDAAoD;IACpD,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzF,IAAI,OAAO,EAAE,CAAC;YACZ,2FAA2F;YAC3F,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChE,QAAQ,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAA;gBAChC,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAA;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,8EAA8E;YAChF,CAAC;QACH,CAAC;IACH,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAChC,CAAC,CAAA"}

package/dist/api/utils/assign-default-role.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Assigns the system "User" app-role to a user if no custom role is specified.
+ * Non-fatal — silently catches errors (e.g. app-role module not loaded).
+ */
+export declare function assignDefaultUserRole(req: any, userId: string, appRoleId?: string): Promise<void>;
+//# sourceMappingURL=assign-default-role.d.ts.map

package/dist/api/utils/assign-default-role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-default-role.d.ts","sourceRoot":"","sources":["../../../src/api/utils/assign-default-role.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAevG"}

package/dist/api/utils/assign-default-role.js

@@ -0,0 +1,23 @@
+/**
+ * Assigns the system "User" app-role to a user if no custom role is specified.
+ * Non-fatal — silently catches errors (e.g. app-role module not loaded).
+ */
+export async function assignDefaultUserRole(req, userId, appRoleId) {
+    try {
+        const userService = req.scope.resolve("userModuleService");
+        if (appRoleId) {
+            await userService.updateUser(userId, { app_role_id: appRoleId });
+        }
+        else {
+            const appRoleService = req.scope.resolve("appRoleModuleService");
+            const [userRoles] = await appRoleService.listAndCountAppRoles({ name: "User", is_system: true }, { limit: 1 });
+            if (userRoles.length > 0) {
+                await userService.updateUser(userId, { app_role_id: userRoles[0].id });
+            }
+        }
+    }
+    catch {
+        // Non-fatal — app-role module may not be loaded
+    }
+}
+//# sourceMappingURL=assign-default-role.js.map

package/dist/api/utils/assign-default-role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-default-role.js","sourceRoot":"","sources":["../../../src/api/utils/assign-default-role.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAQ,EAAE,MAAc,EAAE,SAAkB;IACtF,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;QACjE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAA;QAClE,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAQ,CAAA;YACvE,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC9G,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC"}

package/dist/api/utils/project-access.d.ts

@@ -9,4 +9,13 @@ export declare function hasProjectAccess(req: any, project: {
     id: string;
     workspace_id: string;
 }): Promise<boolean>;
+/**
+ * Resolves project and checks if caller is a project manager, workspace admin, or global admin.
+ * Returns null (and sends 404) if project doesn't exist.
+ * Returns { project, isAuthorized } otherwise.
+ */
+export declare function resolveProjectAndAccess(req: any, res: import("express").Response): Promise<{
+    project: any;
+    isAuthorized: boolean;
+} | null>;
 //# sourceMappingURL=project-access.d.ts.map

package/dist/api/utils/project-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-access.d.ts","sourceRoot":"","sources":["../../../src/api/utils/project-access.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBhH"}
+{"version":3,"file":"project-access.d.ts","sourceRoot":"","sources":["../../../src/api/utils/project-access.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBhH;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,OAAO,SAAS,EAAE,QAAQ,GAC9B,OAAO,CAAC;IAAE,OAAO,EAAE,GAAG,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAsBzD"}

package/dist/api/utils/project-access.js

@@ -22,4 +22,31 @@ export async function hasProjectAccess(req, project) {
     const accessibleProjectIds = await projectMemberService.getAccessibleProjectIds(userId, userTeamIds);
     return accessibleProjectIds.includes(project.id);
 }
+/**
+ * Resolves project and checks if caller is a project manager, workspace admin, or global admin.
+ * Returns null (and sends 404) if project doesn't exist.
+ * Returns { project, isAuthorized } otherwise.
+ */
+export async function resolveProjectAndAccess(req, res) {
+    const projectService = req.scope.resolve("projectModuleService");
+    const project = await projectService.retrieveProject(req.params.id).catch(() => null);
+    if (!project) {
+        res.status(404).json({ error: { message: "Project not found" } });
+        return null;
+    }
+    const roles = req.user?.roles ?? [];
+    const isGlobalAdmin = roles.includes("super-admin") || roles.includes("admin");
+    if (isGlobalAdmin)
+        return { project, isAuthorized: true };
+    const workspaceMemberService = req.scope.resolve("workspaceMemberModuleService");
+    const wsMembership = await workspaceMemberService.getMembership(project.workspace_id, req.user?.id);
+    if (wsMembership?.role === "admin")
+        return { project, isAuthorized: true };
+    const projectMemberService = req.scope.resolve("projectMemberModuleService");
+    const members = await projectMemberService.listProjectMembers(project.id);
+    const myMembership = members.find((m) => m.user_id === req.user?.id);
+    if (myMembership?.role === "manager")
+        return { project, isAuthorized: true };
+    return { project, isAuthorized: false };
+}
 //# sourceMappingURL=project-access.js.map

package/dist/api/utils/project-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-access.js","sourceRoot":"","sources":["../../../src/api/utils/project-access.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAQ,EAAE,OAA6C;IAC5F,MAAM,KAAK,GAAa,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAEzE,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,CAAQ,CAAA;IACvF,MAAM,iBAAiB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAQ,CAAA;IAC7E,MAAM,oBAAoB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAQ,CAAA;IACnF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;IAE3B,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAC3F,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IAE5C,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;IAClE,MAAM,oBAAoB,GAAG,MAAM,oBAAoB,CAAC,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpG,OAAO,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAClD,CAAC"}
+{"version":3,"file":"project-access.js","sourceRoot":"","sources":["../../../src/api/utils/project-access.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAQ,EAAE,OAA6C;IAC5F,MAAM,KAAK,GAAa,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAEzE,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,CAAQ,CAAA;IACvF,MAAM,iBAAiB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAQ,CAAA;IAC7E,MAAM,oBAAoB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAQ,CAAA;IACnF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;IAE3B,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAC3F,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IAE5C,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;IAClE,MAAM,oBAAoB,GAAG,MAAM,oBAAoB,CAAC,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpG,OAAO,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAQ,EACR,GAA+B;IAE/B,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAQ,CAAA;IACvE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACrF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;QACjE,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,KAAK,GAAa,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IAEzD,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,CAAQ,CAAA;IACvF,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACnG,IAAI,YAAY,EAAE,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IAE1E,MAAM,oBAAoB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,4BAA4B,CAAQ,CAAA;IACnF,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACzE,IAAI,YAAY,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IAE5E,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;AACzC,CAAC"}

package/dist/api/utils/workspace-access.d.ts

@@ -0,0 +1,17 @@
+import type { Response } from "express";
+/**
+ * Shared workspace access check. Verifies the workspace exists and the caller
+ * has access (public workspace for admins, or membership for private/members).
+ */
+export declare function assertWorkspaceAccess(req: any, res: Response): Promise<boolean>;
+/**
+ * Stricter workspace access check — requires workspace admin role (not just member).
+ */
+export declare function assertWorkspaceAdmin(req: any, res: Response): Promise<boolean>;
+export declare function isSuperAdminOrgScope(req: any): boolean;
+/**
+ * Returns workspace IDs the caller can access (public + private where member).
+ * If wsIdHints are provided, only those workspaces are checked; otherwise all are fetched.
+ */
+export declare function getAccessibleWorkspaceIds(req: any, wsIdHints?: string[]): Promise<string[]>;
+//# sourceMappingURL=workspace-access.d.ts.map

package/dist/api/utils/workspace-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-access.d.ts","sourceRoot":"","sources":["../../../src/api/utils/workspace-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAEvC;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBrF;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBpF;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAGtD;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAqBjG"}

package/dist/api/utils/workspace-access.js

@@ -0,0 +1,72 @@
+/**
+ * Shared workspace access check. Verifies the workspace exists and the caller
+ * has access (public workspace for admins, or membership for private/members).
+ */
+export async function assertWorkspaceAccess(req, res) {
+    const workspaceService = req.scope.resolve("workspaceModuleService");
+    const workspaceMemberService = req.scope.resolve("workspaceMemberModuleService");
+    const workspace = await workspaceService.retrieveWorkspace(req.params.id).catch(() => null);
+    if (!workspace) {
+        res.status(404).json({ error: { message: "Workspace not found" } });
+        return false;
+    }
+    const roles = req.user?.roles ?? [];
+    const isPrivileged = roles.includes("super-admin") || roles.includes("admin");
+    if (workspace.is_private || !isPrivileged) {
+        const membership = await workspaceMemberService.getMembership(req.params.id, req.user?.id);
+        if (!membership) {
+            res.status(403).json({ error: { message: "Forbidden — not a member of this workspace" } });
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * Stricter workspace access check — requires workspace admin role (not just member).
+ */
+export async function assertWorkspaceAdmin(req, res) {
+    const workspaceService = req.scope.resolve("workspaceModuleService");
+    const workspaceMemberService = req.scope.resolve("workspaceMemberModuleService");
+    const workspace = await workspaceService.retrieveWorkspace(req.params.id).catch(() => null);
+    if (!workspace) {
+        res.status(404).json({ error: { message: "Workspace not found" } });
+        return false;
+    }
+    const roles = req.user?.roles ?? [];
+    const isGlobalAdmin = roles.includes("super-admin") || roles.includes("admin");
+    if (isGlobalAdmin)
+        return true;
+    const membership = await workspaceMemberService.getMembership(req.params.id, req.user?.id);
+    if (!membership || membership.role !== "admin") {
+        res.status(403).json({ error: { message: "Workspace admin access required" } });
+        return false;
+    }
+    return true;
+}
+export function isSuperAdminOrgScope(req) {
+    const roles = req.user?.roles ?? [];
+    return roles.includes("super-admin") && req.query.org_scope === "true";
+}
+/**
+ * Returns workspace IDs the caller can access (public + private where member).
+ * If wsIdHints are provided, only those workspaces are checked; otherwise all are fetched.
+ */
+export async function getAccessibleWorkspaceIds(req, wsIdHints) {
+    const workspaceService = req.scope.resolve("workspaceModuleService");
+    const workspaceMemberService = req.scope.resolve("workspaceMemberModuleService");
+    const userId = req.user?.id;
+    let workspaces;
+    if (wsIdHints && wsIdHints.length > 0) {
+        const [ws] = await workspaceService.listAndCountWorkspaces({ id: wsIdHints.length === 1 ? wsIdHints[0] : wsIdHints }, { limit: wsIdHints.length });
+        workspaces = ws;
+    }
+    else {
+        const [all] = await workspaceService.listAndCountWorkspaces({}, { limit: 1000 });
+        workspaces = all;
+    }
+    const memberWsIds = new Set(await workspaceMemberService.getWorkspaceIdsForUser(userId));
+    return workspaces
+        .filter((ws) => !ws.is_private || memberWsIds.has(ws.id))
+        .map((ws) => ws.id);
+}
+//# sourceMappingURL=workspace-access.js.map

package/dist/api/utils/workspace-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-access.js","sourceRoot":"","sources":["../../../src/api/utils/workspace-access.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAQ,EAAE,GAAa;IACjE,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAQ,CAAA;IAC3E,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,CAAQ,CAAA;IAEvF,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC3F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAA;QACnE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,KAAK,GAAa,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAE7E,IAAI,SAAS,CAAC,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QAC1F,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE,EAAE,CAAC,CAAA;YAC1F,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAQ,EAAE,GAAa;IAChE,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAQ,CAAA;IAC3E,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,CAAQ,CAAA;IAEvF,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC3F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAA;QACnE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,KAAK,GAAa,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7C,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,aAAa;QAAE,OAAO,IAAI,CAAA;IAE9B,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC1F,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,EAAE,CAAC,CAAA;QAC/E,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAQ;IAC3C,MAAM,KAAK,GAAa,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAA;IAC7C,OAAO,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAA;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAQ,EAAE,SAAoB;IAC5E,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAQ,CAAA;IAC3E,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,8BAA8B,CAAQ,CAAA;IACvF,MAAM,MAAM,GAAW,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;IAEnC,IAAI,UAAiB,CAAA;IACrB,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,gBAAgB,CAAC,sBAAsB,CACxD,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,EACzD,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAC5B,CAAA;QACD,UAAU,GAAG,EAAE,CAAA;IACjB,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAChF,UAAU,GAAG,GAAG,CAAA;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,MAAM,sBAAsB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAA;IAChG,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SAC7D,GAAG,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;AAC5B,CAAC"}

package/dist/subscribers/project-access-request-resolved.d.ts

@@ -0,0 +1,12 @@
+import type { SubscriberArgs, SubscriberConfig } from "@meridianjs/types";
+interface ProjectAccessRequestResolvedData {
+    project_id: string;
+    project_name: string;
+    workspace_id: string;
+    user_id: string;
+    action: "approve" | "deny";
+}
+export default function handler({ event, container }: SubscriberArgs<ProjectAccessRequestResolvedData>): Promise<void>;
+export declare const config: SubscriberConfig;
+export {};
+//# sourceMappingURL=project-access-request-resolved.d.ts.map

package/dist/subscribers/project-access-request-resolved.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-access-request-resolved.d.ts","sourceRoot":"","sources":["../../src/subscribers/project-access-request-resolved.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAIzE,UAAU,gCAAgC;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,SAAS,GAAG,MAAM,CAAA;CAC3B;AAED,wBAA8B,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,cAAc,CAAC,gCAAgC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAsD3H;AAED,eAAO,MAAM,MAAM,EAAE,gBAA+D,CAAA"}

package/dist/subscribers/project-access-request-resolved.js

@@ -0,0 +1,55 @@
+import { sseManager } from "@meridianjs/framework";
+import { buildEmail, buildProjectUrl, resolveTemplate } from "./_email-helper.js";
+export default async function handler({ event, container }) {
+    const data = event.data;
+    // SSE: update the admin's access-requests badge and the requester's notification bell
+    sseManager.broadcast(data.workspace_id, "project.access_request_resolved", {
+        project_id: data.project_id,
+        action: data.action,
+    });
+    sseManager.broadcast(data.workspace_id, "notification.created", {});
+    try {
+        const emailService = container.resolve("emailService");
+        const userService = container.resolve("userModuleService");
+        const config = container.resolve("config");
+        const appUrl = config?.appUrl ?? process.env.APP_URL ?? "http://localhost:9001";
+        const user = await userService.retrieveUser(data.user_id).catch(() => null);
+        if (!user?.email)
+            return;
+        const approved = data.action === "approve";
+        const projectUrl = await buildProjectUrl(container, appUrl, data.project_id, data.workspace_id);
+        const tpl = resolveTemplate(container, "project.access_request_resolved", {
+            project: { name: data.project_name },
+            user,
+            approved,
+        });
+        await emailService.send({
+            to: user.email,
+            subject: tpl?.subject ?? (approved
+                ? `You've been granted access to "${data.project_name}"`
+                : `Your request to join "${data.project_name}" was not approved`),
+            text: tpl?.text ?? (approved
+                ? `Your request to join the project "${data.project_name}" has been approved. View it here: ${projectUrl}`
+                : `Your request to join the project "${data.project_name}" was reviewed and not approved at this time.`),
+            html: tpl?.html ?? buildEmail(approved ? {
+                preheader: `Your access to ${data.project_name} has been approved`,
+                heading: `Access granted to "${data.project_name}"`,
+                body: `Your request to join the project <strong>${data.project_name}</strong> has been approved. You can now view and collaborate on the project.`,
+                ctaText: "View Project",
+                ctaUrl: projectUrl,
+            } : {
+                preheader: `Your access request for ${data.project_name}`,
+                heading: `Access request for "${data.project_name}"`,
+                body: `Your request to join the project <strong>${data.project_name}</strong> was reviewed and not approved at this time. Please reach out to a project manager if you think this is a mistake.`,
+                ctaText: "Open Meridian",
+                ctaUrl: appUrl,
+            }),
+        });
+    }
+    catch (err) {
+        const logger = container.resolve("logger");
+        logger.error(`[email] project.access_request_resolved: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export const config = { event: "project.access_request_resolved" };
+//# sourceMappingURL=project-access-request-resolved.js.map

package/dist/subscribers/project-access-request-resolved.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-access-request-resolved.js","sourceRoot":"","sources":["../../src/subscribers/project-access-request-resolved.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAUjF,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAoD;IAC1G,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IAEvB,sFAAsF;IACtF,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,iCAAiC,EAAE;QACzE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAA;IACF,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAA;IAEnE,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAQ,CAAA;QAC7D,MAAM,WAAW,GAAI,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;QAClE,MAAM,MAAM,GAAS,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACvD,MAAM,MAAM,GAAW,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAEvF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3E,IAAI,CAAC,IAAI,EAAE,KAAK;YAAE,OAAM;QAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAA;QAC1C,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAA;QAE/F,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,iCAAiC,EAAE;YACxE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;YACpC,IAAI;YACJ,QAAQ;SACT,CAAC,CAAA;QAEF,MAAM,YAAY,CAAC,IAAI,CAAC;YACtB,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC,QAAQ;gBAChC,CAAC,CAAC,kCAAkC,IAAI,CAAC,YAAY,GAAG;gBACxD,CAAC,CAAC,yBAAyB,IAAI,CAAC,YAAY,oBAAoB,CAAC;YACnE,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ;gBAC1B,CAAC,CAAC,qCAAqC,IAAI,CAAC,YAAY,sCAAsC,UAAU,EAAE;gBAC1G,CAAC,CAAC,qCAAqC,IAAI,CAAC,YAAY,+CAA+C,CAAC;YAC1G,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvC,SAAS,EAAE,kBAAkB,IAAI,CAAC,YAAY,oBAAoB;gBAClE,OAAO,EAAE,sBAAsB,IAAI,CAAC,YAAY,GAAG;gBACnD,IAAI,EAAE,4CAA4C,IAAI,CAAC,YAAY,+EAA+E;gBAClJ,OAAO,EAAE,cAAc;gBACvB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC,CAAC;gBACF,SAAS,EAAE,2BAA2B,IAAI,CAAC,YAAY,EAAE;gBACzD,OAAO,EAAE,uBAAuB,IAAI,CAAC,YAAY,GAAG;gBACpD,IAAI,EAAE,4CAA4C,IAAI,CAAC,YAAY,6HAA6H;gBAChM,OAAO,EAAE,eAAe;gBACxB,MAAM,EAAE,MAAM;aACf,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC9G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAA"}

package/dist/subscribers/project-access-requested.d.ts

@@ -0,0 +1,11 @@
+import type { SubscriberArgs, SubscriberConfig } from "@meridianjs/types";
+interface ProjectAccessRequestedData {
+    project_id: string;
+    workspace_id: string;
+    user_id: string;
+    request_id: string;
+}
+export default function handler({ event }: SubscriberArgs<ProjectAccessRequestedData>): Promise<void>;
+export declare const config: SubscriberConfig;
+export {};
+//# sourceMappingURL=project-access-requested.d.ts.map

package/dist/subscribers/project-access-requested.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-access-requested.d.ts","sourceRoot":"","sources":["../../src/subscribers/project-access-requested.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAGzE,UAAU,0BAA0B;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,wBAA8B,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,CAAC,0BAA0B,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAS1G;AAED,eAAO,MAAM,MAAM,EAAE,gBAAwD,CAAA"}

package/dist/subscribers/project-access-requested.js

@@ -0,0 +1,12 @@
+import { sseManager } from "@meridianjs/framework";
+export default async function handler({ event }) {
+    const data = event.data;
+    // SSE: update the project access-requests badge for managers/admins
+    sseManager.broadcast(data.workspace_id, "project.access_requested", {
+        project_id: data.project_id,
+        request_id: data.request_id,
+    });
+    sseManager.broadcast(data.workspace_id, "notification.created", {});
+}
+export const config = { event: "project.access_requested" };
+//# sourceMappingURL=project-access-requested.js.map

package/dist/subscribers/project-access-requested.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-access-requested.js","sourceRoot":"","sources":["../../src/subscribers/project-access-requested.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AASlD,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,KAAK,EAA8C;IACzF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IAEvB,oEAAoE;IACpE,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,0BAA0B,EAAE;QAClE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAA;IACF,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAA"}

package/dist/subscribers/workspace-access-request-resolved.d.ts

@@ -0,0 +1,12 @@
+import type { SubscriberArgs, SubscriberConfig } from "@meridianjs/types";
+interface WorkspaceAccessRequestResolvedData {
+    workspace_id: string;
+    workspace_name: string;
+    workspace_slug: string;
+    user_id: string;
+    action: "approve" | "deny";
+}
+export default function handler({ event, container }: SubscriberArgs<WorkspaceAccessRequestResolvedData>): Promise<void>;
+export declare const config: SubscriberConfig;
+export {};
+//# sourceMappingURL=workspace-access-request-resolved.d.ts.map

package/dist/subscribers/workspace-access-request-resolved.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-access-request-resolved.d.ts","sourceRoot":"","sources":["../../src/subscribers/workspace-access-request-resolved.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAIzE,UAAU,kCAAkC;IAC1C,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,SAAS,GAAG,MAAM,CAAA;CAC3B;AAED,wBAA8B,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,cAAc,CAAC,kCAAkC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CA4D7H;AAED,eAAO,MAAM,MAAM,EAAE,gBAAiE,CAAA"}

package/dist/subscribers/workspace-access-request-resolved.js

@@ -0,0 +1,60 @@
+import { sseManager } from "@meridianjs/framework";
+import { buildEmail, resolveTemplate } from "./_email-helper.js";
+export default async function handler({ event, container }) {
+    const data = event.data;
+    // SSE: update the admin's access-requests badge and the requester's notification bell
+    sseManager.broadcast(data.workspace_id, "workspace.access_request_resolved", {
+        action: data.action,
+    });
+    sseManager.broadcast(data.workspace_id, "notification.created", {});
+    // SSE: notify the requester directly (they may be on /awaiting-access with no workspace SSE)
+    sseManager.broadcast(`user:${data.user_id}`, "workspace.access_request_resolved", {
+        action: data.action,
+        workspace_id: data.workspace_id,
+        workspace_slug: data.workspace_slug,
+    });
+    try {
+        const emailService = container.resolve("emailService");
+        const userService = container.resolve("userModuleService");
+        const config = container.resolve("config");
+        const appUrl = config?.appUrl ?? process.env.APP_URL ?? "http://localhost:9001";
+        const user = await userService.retrieveUser(data.user_id).catch(() => null);
+        if (!user?.email)
+            return;
+        const approved = data.action === "approve";
+        const workspaceUrl = `${appUrl}/${data.workspace_slug}/projects`;
+        const tpl = resolveTemplate(container, "workspace.access_request_resolved", {
+            workspace: { name: data.workspace_name },
+            user,
+            approved,
+        });
+        await emailService.send({
+            to: user.email,
+            subject: tpl?.subject ?? (approved
+                ? `You've been granted access to "${data.workspace_name}"`
+                : `Your request to join "${data.workspace_name}" was not approved`),
+            text: tpl?.text ?? (approved
+                ? `Your request to join "${data.workspace_name}" has been approved. You can now access the workspace here: ${workspaceUrl}`
+                : `Your request to join "${data.workspace_name}" was reviewed and not approved at this time.`),
+            html: tpl?.html ?? buildEmail(approved ? {
+                preheader: `Your access to ${data.workspace_name} has been approved`,
+                heading: `You're in — welcome to "${data.workspace_name}"`,
+                body: `Your request to join <strong>${data.workspace_name}</strong> has been approved. You can now access the workspace and collaborate with your team.`,
+                ctaText: "Open Workspace",
+                ctaUrl: workspaceUrl,
+            } : {
+                preheader: `Your access request for ${data.workspace_name}`,
+                heading: `Access request for "${data.workspace_name}"`,
+                body: `Your request to join <strong>${data.workspace_name}</strong> was reviewed and not approved at this time. Please reach out to a workspace admin if you think this is a mistake.`,
+                ctaText: "Open Meridian",
+                ctaUrl: appUrl,
+            }),
+        });
+    }
+    catch (err) {
+        const logger = container.resolve("logger");
+        logger.error(`[email] workspace.access_request_resolved: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export const config = { event: "workspace.access_request_resolved" };
+//# sourceMappingURL=workspace-access-request-resolved.js.map

package/dist/subscribers/workspace-access-request-resolved.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-access-request-resolved.js","sourceRoot":"","sources":["../../src/subscribers/workspace-access-request-resolved.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAUhE,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAsD;IAC5G,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IAEvB,sFAAsF;IACtF,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,mCAAmC,EAAE;QAC3E,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAA;IACF,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAA;IAEnE,6FAA6F;IAC7F,UAAU,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,EAAE,mCAAmC,EAAE;QAChF,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAQ,CAAA;QAC7D,MAAM,WAAW,GAAI,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;QAClE,MAAM,MAAM,GAAS,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACvD,MAAM,MAAM,GAAW,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAEvF,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC3E,IAAI,CAAC,IAAI,EAAE,KAAK;YAAE,OAAM;QAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAA;QAC1C,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,cAAc,WAAW,CAAA;QAEhE,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,mCAAmC,EAAE;YAC1E,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE;YACxC,IAAI;YACJ,QAAQ;SACT,CAAC,CAAA;QAEF,MAAM,YAAY,CAAC,IAAI,CAAC;YACtB,EAAE,EAAE,IAAI,CAAC,KAAK;YACd,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC,QAAQ;gBAChC,CAAC,CAAC,kCAAkC,IAAI,CAAC,cAAc,GAAG;gBAC1D,CAAC,CAAC,yBAAyB,IAAI,CAAC,cAAc,oBAAoB,CAAC;YACrE,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ;gBAC1B,CAAC,CAAC,yBAAyB,IAAI,CAAC,cAAc,+DAA+D,YAAY,EAAE;gBAC3H,CAAC,CAAC,yBAAyB,IAAI,CAAC,cAAc,+CAA+C,CAAC;YAChG,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvC,SAAS,EAAE,kBAAkB,IAAI,CAAC,cAAc,oBAAoB;gBACpE,OAAO,EAAE,2BAA2B,IAAI,CAAC,cAAc,GAAG;gBAC1D,IAAI,EAAE,gCAAgC,IAAI,CAAC,cAAc,+FAA+F;gBACxJ,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC,CAAC;gBACF,SAAS,EAAE,2BAA2B,IAAI,CAAC,cAAc,EAAE;gBAC3D,OAAO,EAAE,uBAAuB,IAAI,CAAC,cAAc,GAAG;gBACtD,IAAI,EAAE,gCAAgC,IAAI,CAAC,cAAc,6HAA6H;gBACtL,OAAO,EAAE,eAAe;gBACxB,MAAM,EAAE,MAAM;aACf,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAChH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAA"}

package/dist/subscribers/workspace-access-requested.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-access-requested.d.ts","sourceRoot":"","sources":["../../src/subscribers/workspace-access-requested.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAIzE,UAAU,4BAA4B;IACpC,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,wBAA8B,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,cAAc,CAAC,4BAA4B,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CvH;AAED,eAAO,MAAM,MAAM,EAAE,gBAA0D,CAAA"}
+{"version":3,"file":"workspace-access-requested.d.ts","sourceRoot":"","sources":["../../src/subscribers/workspace-access-requested.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAIzE,UAAU,4BAA4B;IACpC,iBAAiB,EAAE,MAAM,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,wBAA8B,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,cAAc,CAAC,4BAA4B,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CA+CvH;AAED,eAAO,MAAM,MAAM,EAAE,gBAA0D,CAAA"}

package/dist/subscribers/workspace-access-requested.js

@@ -6,6 +6,7 @@ export default async function handler({ event, container }) {
     sseManager.broadcast(data.workspace_id, "workspace.access_requested", {
         access_request_id: data.access_request_id,
     });
+    sseManager.broadcast(data.workspace_id, "notification.created", {});
     // Email all workspace admins
     if (data.admin_user_ids.length === 0)
         return;

package/dist/subscribers/workspace-access-requested.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-access-requested.js","sourceRoot":"","sources":["../../src/subscribers/workspace-access-requested.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAW/D,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAgD;IACtG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IAEvB,qDAAqD;IACrD,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,4BAA4B,EAAE;QACpE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAA;IAEF,6BAA6B;IAC7B,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAE5C,IAAI,CAAC;QACH,MAAM,YAAY,GAAK,SAAS,CAAC,OAAO,CAAC,cAAc,CAAQ,CAAA;QAC/D,MAAM,YAAY,GAAK,SAAS,CAAC,OAAO,CAAC,wBAAwB,CAAQ,CAAA;QACzE,MAAM,OAAO,GAAU,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;QAEpE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACzE,IAAI,CAAC,SAAS;YAAE,OAAM;QAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,SAAS,CAAC,IAAI,+BAA+B,CAAA;QAE9E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAEpE,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,4BAA4B,EAAE;YACnE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;YACnC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE;SACtE,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAU,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,OAAM;YACxB,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC,cAAc,yBAAyB,SAAS,CAAC,IAAI,GAAG,CAAA;YAChG,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,GAAG,IAAI,CAAC,cAAc,6BAA6B,SAAS,CAAC,IAAI,oCAAoC,WAAW,EAAE,CAAA;YAC5I,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,SAAS,CACjC,WAAW,IAAI,CAAC,cAAc,kDAAkD,SAAS,CAAC,IAAI,sBAAsB;gBACpH,YAAY,WAAW,oKAAoK;gBAC3L,sBAAsB,WAAW,KAAK,WAAW,MAAM,CACxD,CAAA;YACD,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACnE,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACzG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAA"}
+{"version":3,"file":"workspace-access-requested.js","sourceRoot":"","sources":["../../src/subscribers/workspace-access-requested.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAW/D,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAgD;IACtG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IAEvB,qDAAqD;IACrD,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,4BAA4B,EAAE;QACpE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC,CAAA;IACF,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAA;IAEnE,6BAA6B;IAC7B,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAE5C,IAAI,CAAC;QACH,MAAM,YAAY,GAAK,SAAS,CAAC,OAAO,CAAC,cAAc,CAAQ,CAAA;QAC/D,MAAM,YAAY,GAAK,SAAS,CAAC,OAAO,CAAC,wBAAwB,CAAQ,CAAA;QACzE,MAAM,OAAO,GAAU,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAQ,CAAA;QAEpE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACzE,IAAI,CAAC,SAAS;YAAE,OAAM;QAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;QAC7D,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,SAAS,CAAC,IAAI,+BAA+B,CAAA;QAE9E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAEpE,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,4BAA4B,EAAE;YACnE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;YACnC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,eAAe,EAAE;SACtE,CAAC,CAAA;QAEF,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAU,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,OAAM;YACxB,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC,cAAc,yBAAyB,SAAS,CAAC,IAAI,GAAG,CAAA;YAChG,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,GAAG,IAAI,CAAC,cAAc,6BAA6B,SAAS,CAAC,IAAI,oCAAoC,WAAW,EAAE,CAAA;YAC5I,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,SAAS,CACjC,WAAW,IAAI,CAAC,cAAc,kDAAkD,SAAS,CAAC,IAAI,sBAAsB;gBACpH,YAAY,WAAW,oKAAoK;gBAC3L,sBAAsB,WAAW,KAAK,WAAW,MAAM,CACxD,CAAA;YACD,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACnE,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAQ,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACzG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAqB,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meridianjs/meridian",
-  "version": "1.31.0",
+  "version": "2.1.0",
   "description": "Default API routes, workflows, links, and subscribers for Meridian applications",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -20,24 +20,24 @@
     "prepublishOnly": "cd ../.. && npm run check:routes && cd packages/meridian && npm run build"
   },
   "dependencies": {
-    "@meridianjs/framework": "^1.31.0",
-    "@meridianjs/framework-utils": "^1.31.0",
-    "@meridianjs/workflow-engine": "^1.31.0",
-    "@meridianjs/types": "^1.31.0",
-    "@meridianjs/user": "^1.1.0",
-    "@meridianjs/workspace": "^1.2.0",
-    "@meridianjs/auth": "^1.31.0",
-    "@meridianjs/project": "^1.4.0",
-    "@meridianjs/issue": "^1.8.0",
-    "@meridianjs/sprint": "^1.0.0",
-    "@meridianjs/activity": "^1.0.0",
-    "@meridianjs/notification": "^1.1.0",
-    "@meridianjs/invitation": "^1.2.0",
-    "@meridianjs/workspace-member": "^1.2.0",
-    "@meridianjs/team-member": "^1.1.0",
-    "@meridianjs/project-member": "^1.2.0",
-    "@meridianjs/app-role": "^1.0.0",
-    "@meridianjs/org-calendar": "^1.0.0",
+    "@meridianjs/framework": "^2.1.0",
+    "@meridianjs/framework-utils": "^2.1.0",
+    "@meridianjs/workflow-engine": "^2.1.0",
+    "@meridianjs/types": "^2.1.0",
+    "@meridianjs/user": "^2.0.0",
+    "@meridianjs/workspace": "^1.2.1",
+    "@meridianjs/auth": "^2.1.0",
+    "@meridianjs/project": "^2.0.0",
+    "@meridianjs/issue": "^2.0.0",
+    "@meridianjs/sprint": "^1.0.1",
+    "@meridianjs/activity": "^1.0.1",
+    "@meridianjs/notification": "^2.0.0",
+    "@meridianjs/invitation": "^2.0.0",
+    "@meridianjs/workspace-member": "^2.0.0",
+    "@meridianjs/team-member": "^2.0.0",
+    "@meridianjs/project-member": "^2.0.0",
+    "@meridianjs/app-role": "^2.0.0",
+    "@meridianjs/org-calendar": "^1.0.1",
     "multer": "^1.4.5-lts.1",
     "zod": "^3.24.0"
   },