@multitenantkit/domain 0.1.1

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './organization-memberships/index';
+export * from './organizations/index';
+export * from './shared/index';
+export * from './users/index';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,kCAAkC,CAAC;AACjD,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// Domain exports - Clean Architecture Core
+export * from './organization-memberships/index';
+export * from './organizations/index';
+export * from './shared/index';
+export * from './users/index';
+// Note: More domain slices will be added here as we expand
+// export * from './billing/index';
+// export * from './workflows/index';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAE3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAE9B,2DAA2D;AAC3D,mCAAmC;AACnC,qCAAqC"}

package/dist/organization-memberships/index.d.ts

@@ -0,0 +1,3 @@
+export type { OrganizationMembershipRepository } from '../../../contracts/domain-contracts/src/organization-memberships/ports/OrganizationMembershipRepository';
+export * from './use-cases';
+//# sourceMappingURL=index.d.ts.map

package/dist/organization-memberships/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/organization-memberships/index.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,gCAAgC,EAAE,MAAM,yGAAyG,CAAC;AAChK,cAAc,aAAa,CAAC"}

package/dist/organization-memberships/index.js

@@ -0,0 +1,3 @@
+// Use Cases (re-exported from use-cases/index.ts)
+export * from './use-cases';
+//# sourceMappingURL=index.js.map

package/dist/organization-memberships/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/organization-memberships/index.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAIlD,cAAc,aAAa,CAAC"}

package/dist/organization-memberships/use-cases/accept-organization-invitation/AcceptOrganizationInvitation.d.ts

@@ -0,0 +1,26 @@
+import type { Adapters } from '@multitenantkit/domain-contracts';
+import type { AcceptOrganizationInvitationInput, AcceptOrganizationInvitationOutput, IAcceptOrganizationInvitation } from '@multitenantkit/domain-contracts/organization-memberships';
+import type { OperationContext, ToolkitOptions } from '@multitenantkit/domain-contracts/shared';
+import { type DomainError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * AcceptOrganizationInvitation use case
+ * Handles business logic for accepting a pending organization invitation
+ *
+ * Business Rules:
+ * - User must be registered (have a userId)
+ * - Invitation must exist and be pending (invitedAt set, joinedAt null)
+ * - Username in invitation must match user's username
+ * - Membership must not be already accepted, left, or deleted
+ *
+ * Generic support for custom fields:
+ * @template TUserCustomFields - Custom fields for UserRepository
+ * @template TOrganizationCustomFields - Custom fields for OrganizationRepository
+ * @template TOrganizationMembershipCustomFields - Custom fields for OrganizationMembershipRepository
+ */
+export declare class AcceptOrganizationInvitation<TOrganizationCustomFields = {}, TUserCustomFields = {}, TOrganizationMembershipCustomFields = {}> extends BaseUseCase<AcceptOrganizationInvitationInput, AcceptOrganizationInvitationOutput, DomainError, TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields> implements IAcceptOrganizationInvitation {
+    constructor(adapters: Adapters<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>, toolkitOptions?: ToolkitOptions<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>);
+    protected executeBusinessLogic(input: AcceptOrganizationInvitationInput, context: OperationContext): Promise<Result<AcceptOrganizationInvitationOutput, DomainError>>;
+}
+//# sourceMappingURL=AcceptOrganizationInvitation.d.ts.map

package/dist/organization-memberships/use-cases/accept-organization-invitation/AcceptOrganizationInvitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AcceptOrganizationInvitation.d.ts","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/accept-organization-invitation/AcceptOrganizationInvitation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EACR,iCAAiC,EACjC,kCAAkC,EAClC,6BAA6B,EAChC,MAAM,2DAA2D,CAAC;AAMnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EACH,KAAK,WAAW,EAGnB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,4BAA4B,CAEjC,yBAAyB,GAAG,EAAE,EAE9B,iBAAiB,GAAG,EAAE,EAEtB,mCAAmC,GAAG,EAAE,CAE5C,SAAQ,WAAW,CACf,iCAAiC,EACjC,kCAAkC,EAClC,WAAW,EACX,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CAEvC,YAAW,6BAA6B;gBAGpC,QAAQ,EAAE,QAAQ,CACd,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC,EACD,cAAc,CAAC,EAAE,cAAc,CAC3B,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC;cAYW,oBAAoB,CAChC,KAAK,EAAE,iCAAiC,EACxC,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE,WAAW,CAAC,CAAC;CAwGtE"}

package/dist/organization-memberships/use-cases/accept-organization-invitation/AcceptOrganizationInvitation.js

@@ -0,0 +1,85 @@
+import { AcceptOrganizationInvitationInputSchema, AcceptOrganizationInvitationOutputSchema } from '@multitenantkit/domain-contracts/organization-memberships';
+import { NotFoundError, ValidationError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * AcceptOrganizationInvitation use case
+ * Handles business logic for accepting a pending organization invitation
+ *
+ * Business Rules:
+ * - User must be registered (have a userId)
+ * - Invitation must exist and be pending (invitedAt set, joinedAt null)
+ * - Username in invitation must match user's username
+ * - Membership must not be already accepted, left, or deleted
+ *
+ * Generic support for custom fields:
+ * @template TUserCustomFields - Custom fields for UserRepository
+ * @template TOrganizationCustomFields - Custom fields for OrganizationRepository
+ * @template TOrganizationMembershipCustomFields - Custom fields for OrganizationMembershipRepository
+ */
+export class AcceptOrganizationInvitation extends BaseUseCase {
+    constructor(adapters, toolkitOptions) {
+        super('organizationMembership-acceptOrganizationInvitation', adapters, toolkitOptions, AcceptOrganizationInvitationInputSchema, AcceptOrganizationInvitationOutputSchema, 'Failed to accept organization invitation');
+    }
+    async executeBusinessLogic(input, context) {
+        // 1. Get the user accepting the invitation
+        const getUserResult = await this.getUserFromExternalId(input.principalExternalId);
+        if (getUserResult.isFailure) {
+            return Result.fail(getUserResult.getError());
+        }
+        const user = getUserResult.getValue();
+        // 2. Verify username matches (security check)
+        if (user.username !== input.username) {
+            return Result.fail(new ValidationError('Username mismatch: You can only accept invitations sent to your username', 'username'));
+        }
+        // 3. Find pending invitation by username and organizationId
+        const pendingInvitation = await this.adapters.persistence.organizationMembershipRepository.findByUsernameAndOrganizationId(input.username, input.organizationId);
+        if (!pendingInvitation) {
+            return Result.fail(new NotFoundError('OrganizationInvitation', `${input.username}:${input.organizationId}`));
+        }
+        // 4. Validate invitation is pending (not already accepted, left, or deleted)
+        if (!pendingInvitation.invitedAt) {
+            return Result.fail(new ValidationError('No pending invitation found for this organization', 'organizationId'));
+        }
+        // Check leftAt and deletedAt BEFORE joinedAt, as these are terminal states
+        if (pendingInvitation.leftAt) {
+            return Result.fail(new ValidationError('Cannot accept invitation: membership was previously left', 'organizationId'));
+        }
+        if (pendingInvitation.deletedAt) {
+            return Result.fail(new ValidationError('Cannot accept invitation: invitation has been revoked', 'organizationId'));
+        }
+        if (pendingInvitation.joinedAt) {
+            return Result.fail(new ValidationError('Invitation has already been accepted', 'organizationId'));
+        }
+        // 5. Update membership: set userId and joinedAt
+        const now = this.adapters.system.clock.now();
+        const acceptedMembership = {
+            ...pendingInvitation,
+            userId: user.id,
+            joinedAt: now,
+            updatedAt: now
+        };
+        // 6. Persist using Unit of Work with audit context
+        const auditContext = {
+            ...context,
+            organizationId: input.organizationId,
+            auditAction: 'ACCEPT_ORGANIZATION_INVITATION'
+        };
+        try {
+            await this.adapters.persistence.uow.transaction(async (repos) => {
+                await repos.organizationMemberships.update(acceptedMembership, auditContext);
+            });
+        }
+        catch (error) {
+            return Result.fail(new ValidationError('Failed to accept organization invitation', undefined, {
+                originalError: error
+            }));
+        }
+        // 7. Return success with updated membership
+        const output = AcceptOrganizationInvitationOutputSchema.parse({
+            ...acceptedMembership
+        });
+        return Result.ok(output);
+    }
+}
+//# sourceMappingURL=AcceptOrganizationInvitation.js.map

package/dist/organization-memberships/use-cases/accept-organization-invitation/AcceptOrganizationInvitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AcceptOrganizationInvitation.js","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/accept-organization-invitation/AcceptOrganizationInvitation.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,uCAAuC,EACvC,wCAAwC,EAE3C,MAAM,2DAA2D,CAAC;AAEnE,OAAO,EAEH,aAAa,EACb,eAAe,EAClB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,4BAQT,SAAQ,WAOP;IAGD,YACI,QAIC,EACD,cAIC;QAED,KAAK,CACD,qDAAqD,EACrD,QAAQ,EACR,cAAc,EACd,uCAAuC,EACvC,wCAAgH,EAChH,0CAA0C,CAC7C,CAAC;IACN,CAAC;IAES,KAAK,CAAC,oBAAoB,CAChC,KAAwC,EACxC,OAAyB;QAEzB,2CAA2C;QAC3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;QAEtC,8CAA8C;QAC9C,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CACf,0EAA0E,EAC1E,UAAU,CACb,CACJ,CAAC;QACN,CAAC;QAED,4DAA4D;QAC5D,MAAM,iBAAiB,GACnB,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,+BAA+B,CAC5F,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,cAAc,CACvB,CAAC;QAEN,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,aAAa,CACb,wBAAwB,EACxB,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,cAAc,EAAE,CAC9C,CACJ,CAAC;QACN,CAAC;QAED,6EAA6E;QAC7E,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CACf,mDAAmD,EACnD,gBAAgB,CACnB,CACJ,CAAC;QACN,CAAC;QAED,2EAA2E;QAC3E,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CACf,0DAA0D,EAC1D,gBAAgB,CACnB,CACJ,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CACf,uDAAuD,EACvD,gBAAgB,CACnB,CACJ,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CAAC,sCAAsC,EAAE,gBAAgB,CAAC,CAChF,CAAC;QACN,CAAC;QAED,gDAAgD;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAA2B;YAC/C,GAAG,iBAAiB;YACpB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG;SACS,CAAC;QAE5B,mDAAmD;QACnD,MAAM,YAAY,GAAqB;YACnC,GAAG,OAAO;YACV,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,gCAAgC;SAChD,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC5D,MAAM,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,kBAAyB,EAAE,YAAY,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CAAC,0CAA0C,EAAE,SAAS,EAAE;gBACvE,aAAa,EAAE,KAAK;aACvB,CAAC,CACL,CAAC;QACN,CAAC;QAED,4CAA4C;QAC5C,MAAM,MAAM,GAAG,wCAAwC,CAAC,KAAK,CAAC;YAC1D,GAAG,kBAAkB;SACxB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;CACJ"}

package/dist/organization-memberships/use-cases/add-organization-member/AddOrganizationMember.d.ts

@@ -0,0 +1,19 @@
+import type { Adapters } from '@multitenantkit/domain-contracts';
+import type { AddOrganizationMemberInput, AddOrganizationMemberOutput, IAddOrganizationMember } from '@multitenantkit/domain-contracts/organization-memberships';
+import type { OperationContext, ToolkitOptions } from '@multitenantkit/domain-contracts/shared';
+import { type DomainError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * AddOrganizationMember use case
+ * Handles business logic for adding a user to a organization
+ *
+ * Generic support for custom fields:
+ * @template TOrganizationCustomFields - Custom fields for OrganizationRepository (for consistency)
+ */
+export declare class AddOrganizationMember<TOrganizationCustomFields = {}, TUserCustomFields = {}, TOrganizationMembershipCustomFields = {}> extends BaseUseCase<AddOrganizationMemberInput, AddOrganizationMemberOutput, DomainError, TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields> implements IAddOrganizationMember {
+    constructor(adapters: Adapters<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>, toolkitOptions?: ToolkitOptions<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>);
+    protected authorize(input: AddOrganizationMemberInput, _context: OperationContext): Promise<Result<void, DomainError>>;
+    protected executeBusinessLogic(input: AddOrganizationMemberInput, context: OperationContext): Promise<Result<AddOrganizationMemberOutput, DomainError>>;
+}
+//# sourceMappingURL=AddOrganizationMember.d.ts.map

package/dist/organization-memberships/use-cases/add-organization-member/AddOrganizationMember.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AddOrganizationMember.d.ts","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/add-organization-member/AddOrganizationMember.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EACR,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACzB,MAAM,2DAA2D,CAAC;AAMnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAEH,KAAK,WAAW,EAInB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;;;;GAMG;AACH,qBAAa,qBAAqB,CAE1B,yBAAyB,GAAG,EAAE,EAE9B,iBAAiB,GAAG,EAAE,EAEtB,mCAAmC,GAAG,EAAE,CAE5C,SAAQ,WAAW,CACf,0BAA0B,EAC1B,2BAA2B,EAC3B,WAAW,EACX,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CAEvC,YAAW,sBAAsB;gBAG7B,QAAQ,EAAE,QAAQ,CACd,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC,EACD,cAAc,CAAC,EAAE,cAAc,CAC3B,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC;cAYW,SAAS,CACrB,KAAK,EAAE,0BAA0B,EACjC,QAAQ,EAAE,gBAAgB,GAC3B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;cAqDrB,oBAAoB,CAChC,KAAK,EAAE,0BAA0B,EACjC,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,MAAM,CAAC,2BAA2B,EAAE,WAAW,CAAC,CAAC;CAsG/D"}

package/dist/organization-memberships/use-cases/add-organization-member/AddOrganizationMember.js

@@ -0,0 +1,126 @@
+import { AddOrganizationMemberInputSchema, AddOrganizationMemberOutputSchema } from '@multitenantkit/domain-contracts/organization-memberships';
+import { ConflictError, NotFoundError, UnauthorizedError, ValidationError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * AddOrganizationMember use case
+ * Handles business logic for adding a user to a organization
+ *
+ * Generic support for custom fields:
+ * @template TOrganizationCustomFields - Custom fields for OrganizationRepository (for consistency)
+ */
+export class AddOrganizationMember extends BaseUseCase {
+    constructor(adapters, toolkitOptions) {
+        super('organizationMembership-addOrganizationMember', adapters, toolkitOptions, AddOrganizationMemberInputSchema, AddOrganizationMemberOutputSchema, 'Failed to add organization member');
+    }
+    async authorize(input, _context) {
+        // Ensure organization exists for permission checks
+        const organization = await this.adapters.persistence.organizationRepository.findById(input.organizationId);
+        if (!organization) {
+            return Result.fail(new NotFoundError('Organization', input.organizationId));
+        }
+        // Check if organization is archived (cannot add members to archived organization)
+        if (organization.archivedAt) {
+            return Result.fail(new ValidationError('Cannot add members to an archived organization', 'organizationId'));
+        }
+        const getUserResult = await this.getUserFromExternalId(input.principalExternalId);
+        if (getUserResult.isFailure) {
+            return Result.fail(getUserResult.getError());
+        }
+        const existingUser = getUserResult.getValue();
+        // Owner can always add members
+        const isOwner = organization.ownerUserId === existingUser.id;
+        // Admin can add members (but not other admins/owners)
+        const actorMembership = await this.adapters.persistence.organizationMembershipRepository.findByUserIdAndOrganizationId(existingUser.id, input.organizationId);
+        const isAdmin = !!actorMembership &&
+            actorMembership.roleCode === 'admin' &&
+            !!actorMembership.joinedAt &&
+            !actorMembership.leftAt &&
+            !actorMembership.deletedAt;
+        const canAddRole = input.roleCode === 'member' || isOwner;
+        if (!isOwner && !(isAdmin && canAddRole)) {
+            return Result.fail(new UnauthorizedError('Only organization owners and admins can add members'));
+        }
+        return Result.ok(undefined);
+    }
+    async executeBusinessLogic(input, context) {
+        // 1. Validate target user exists
+        const targetUser = await this.adapters.persistence.userRepository.findByUsername(input.username);
+        const now = this.adapters.system.clock.now();
+        let existingMembership = null;
+        // If user doesn't exist, just create the membership without user id
+        if (targetUser) {
+            // 2. Check if user already has a membership
+            const existingMembershipDB = await this.adapters.persistence.organizationMembershipRepository.findByUserIdAndOrganizationId(targetUser.id, input.organizationId);
+            existingMembership = existingMembershipDB;
+            if (existingMembership && !existingMembership.leftAt && !existingMembership.deletedAt) {
+                return Result.fail(new ConflictError('OrganizationMembership', `${targetUser.id}:${input.organizationId}`, {
+                    reason: 'User is already a member of this organization'
+                }));
+            }
+        }
+        let membership;
+        if (existingMembership && !!existingMembership.leftAt && !existingMembership.deletedAt) {
+            // 4a. Reactivate existing membership that was left
+            const reactivatedMembership = {
+                ...existingMembership,
+                invitedAt: now,
+                joinedAt: undefined,
+                leftAt: undefined,
+                deletedAt: undefined,
+                updatedAt: now
+            };
+            // Then update the role if it's different from current role
+            membership =
+                reactivatedMembership.roleCode !== input.roleCode
+                    ? { ...reactivatedMembership, roleCode: input.roleCode, updatedAt: now }
+                    : reactivatedMembership;
+        }
+        else {
+            // 4b. Create new membership
+            const membershipId = this.adapters.system.uuid.generate();
+            membership = {
+                id: membershipId,
+                userId: targetUser?.id,
+                username: input.username,
+                organizationId: input.organizationId,
+                roleCode: input.roleCode,
+                invitedAt: now,
+                joinedAt: undefined,
+                leftAt: undefined,
+                deletedAt: undefined,
+                createdAt: now,
+                updatedAt: now
+            };
+        }
+        // 5. Persist the entity (save or update) using Unit of Work (transaction) with audit context
+        const auditContext = {
+            ...context,
+            organizationId: input.organizationId,
+            auditAction: 'ADD_ORGANIZATION_MEMBER'
+        };
+        try {
+            await this.adapters.persistence.uow.transaction(async (repos) => {
+                if (existingMembership &&
+                    !!existingMembership.leftAt &&
+                    !existingMembership.deletedAt) {
+                    await repos.organizationMemberships.update(membership, auditContext);
+                }
+                else {
+                    await repos.organizationMemberships.insert(membership, auditContext);
+                }
+            });
+        }
+        catch (error) {
+            return Result.fail(new ValidationError('Failed to save organization membership', undefined, {
+                originalError: error
+            }));
+        }
+        // 6. KEY PATTERN: Spread + Parse to guarantee contract
+        const output = AddOrganizationMemberOutputSchema.parse({
+            ...membership
+        });
+        return Result.ok(output);
+    }
+}
+//# sourceMappingURL=AddOrganizationMember.js.map

package/dist/organization-memberships/use-cases/add-organization-member/AddOrganizationMember.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AddOrganizationMember.js","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/add-organization-member/AddOrganizationMember.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,gCAAgC,EAChC,iCAAiC,EAEpC,MAAM,2DAA2D,CAAC;AAEnE,OAAO,EACH,aAAa,EAEb,aAAa,EACb,iBAAiB,EACjB,eAAe,EAClB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,OAAO,qBAQT,SAAQ,WAOP;IAGD,YACI,QAIC,EACD,cAIC;QAED,KAAK,CACD,8CAA8C,EAC9C,QAAQ,EACR,cAAc,EACd,gCAAgC,EAChC,iCAAkG,EAClG,mCAAmC,CACtC,CAAC;IACN,CAAC;IAES,KAAK,CAAC,SAAS,CACrB,KAAiC,EACjC,QAA0B;QAE1B,mDAAmD;QACnD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAChF,KAAK,CAAC,cAAc,CACvB,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,kFAAkF;QAClF,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CACf,gDAAgD,EAChD,gBAAgB,CACnB,CACJ,CAAC;QACN,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAElF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;QAE9C,+BAA+B;QAC/B,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,KAAK,YAAY,CAAC,EAAE,CAAC;QAE7D,sDAAsD;QACtD,MAAM,eAAe,GACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,6BAA6B,CAC1F,YAAY,CAAC,EAAE,EACf,KAAK,CAAC,cAAc,CACvB,CAAC;QACN,MAAM,OAAO,GACT,CAAC,CAAC,eAAe;YACjB,eAAe,CAAC,QAAQ,KAAK,OAAO;YACpC,CAAC,CAAC,eAAe,CAAC,QAAQ;YAC1B,CAAC,eAAe,CAAC,MAAM;YACvB,CAAC,eAAe,CAAC,SAAS,CAAC;QAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC;QAE1D,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,iBAAiB,CAAC,qDAAqD,CAAC,CAC/E,CAAC;QACN,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAES,KAAK,CAAC,oBAAoB,CAChC,KAAiC,EACjC,OAAyB;QAEzB,iCAAiC;QACjC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,cAAc,CAC5E,KAAK,CAAC,QAAQ,CACjB,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAE7C,IAAI,kBAAkB,GAAkC,IAAI,CAAC;QAC7D,oEAAoE;QACpE,IAAI,UAAU,EAAE,CAAC;YACb,4CAA4C;YAC5C,MAAM,oBAAoB,GACtB,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,6BAA6B,CAC1F,UAAU,CAAC,EAAE,EACb,KAAK,CAAC,cAAc,CACvB,CAAC;YACN,kBAAkB,GAAG,oBAAoB,CAAC;YAE1C,IAAI,kBAAkB,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC;gBACpF,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,aAAa,CACb,wBAAwB,EACxB,GAAG,UAAU,CAAC,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAC1C;oBACI,MAAM,EAAE,+CAA+C;iBAC1D,CACJ,CACJ,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,UAAkC,CAAC;QAEvC,IAAI,kBAAkB,IAAI,CAAC,CAAC,kBAAkB,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC;YACrF,mDAAmD;YACnD,MAAM,qBAAqB,GAA2B;gBAClD,GAAG,kBAAkB;gBACrB,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,GAAG;aACS,CAAC;YAE5B,2DAA2D;YAC3D,UAAU;gBACN,qBAAqB,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;oBAC7C,CAAC,CAAC,EAAE,GAAG,qBAAqB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE;oBACxE,CAAC,CAAC,qBAAqB,CAAC;QACpC,CAAC;aAAM,CAAC;YACJ,4BAA4B;YAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1D,UAAU,GAAG;gBACT,EAAE,EAAE,YAAY;gBAChB,MAAM,EAAE,UAAU,EAAE,EAAE;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,SAAS;gBACpB,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACS,CAAC;QAChC,CAAC;QAED,6FAA6F;QAC7F,MAAM,YAAY,GAAqB;YACnC,GAAG,OAAO;YACV,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,yBAAyB;SACzC,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC5D,IACI,kBAAkB;oBAClB,CAAC,CAAC,kBAAkB,CAAC,MAAM;oBAC3B,CAAC,kBAAkB,CAAC,SAAS,EAC/B,CAAC;oBACC,MAAM,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,UAAiB,EAAE,YAAY,CAAC,CAAC;gBAChF,CAAC;qBAAM,CAAC;oBACJ,MAAM,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,UAAiB,EAAE,YAAY,CAAC,CAAC;gBAChF,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CAAC,wCAAwC,EAAE,SAAS,EAAE;gBACrE,aAAa,EAAE,KAAK;aACvB,CAAC,CACL,CAAC;QACN,CAAC;QAED,uDAAuD;QACvD,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC;YACnD,GAAG,UAAU;SAChB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;CACJ"}

package/dist/organization-memberships/use-cases/index.d.ts

@@ -0,0 +1,6 @@
+export { AcceptOrganizationInvitation } from './accept-organization-invitation/AcceptOrganizationInvitation';
+export { AddOrganizationMember } from './add-organization-member/AddOrganizationMember';
+export { LeaveOrganization } from './leave-organization/LeaveOrganization';
+export { RemoveOrganizationMember } from './remove-organization-member/RemoveOrganizationMember';
+export { UpdateOrganizationMemberRole } from './update-organization-member-role/UpdateOrganizationMemberRole';
+//# sourceMappingURL=index.d.ts.map

package/dist/organization-memberships/use-cases/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/organization-memberships/use-cases/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,4BAA4B,EAAE,MAAM,gEAAgE,CAAC"}

package/dist/organization-memberships/use-cases/index.js

@@ -0,0 +1,8 @@
+// Use Cases
+export { AcceptOrganizationInvitation } from './accept-organization-invitation/AcceptOrganizationInvitation';
+export { AddOrganizationMember } from './add-organization-member/AddOrganizationMember';
+export { LeaveOrganization } from './leave-organization/LeaveOrganization';
+export { RemoveOrganizationMember } from './remove-organization-member/RemoveOrganizationMember';
+export { UpdateOrganizationMemberRole } from './update-organization-member-role/UpdateOrganizationMemberRole';
+// DTOs
+//# sourceMappingURL=index.js.map

package/dist/organization-memberships/use-cases/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/organization-memberships/use-cases/index.ts"],"names":[],"mappings":"AAAA,YAAY;AAEZ,OAAO,EAAE,4BAA4B,EAAE,MAAM,+DAA+D,CAAC;AAC7G,OAAO,EAAE,qBAAqB,EAAE,MAAM,iDAAiD,CAAC;AACxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uDAAuD,CAAC;AACjG,OAAO,EAAE,4BAA4B,EAAE,MAAM,gEAAgE,CAAC;AAE9G,OAAO"}

package/dist/organization-memberships/use-cases/leave-organization/LeaveOrganization.d.ts

@@ -0,0 +1,15 @@
+import type { Adapters } from '@multitenantkit/domain-contracts';
+import type { ILeaveOrganization, LeaveOrganizationInput, LeaveOrganizationOutput } from '@multitenantkit/domain-contracts/organization-memberships';
+import type { OperationContext, ToolkitOptions } from '@multitenantkit/domain-contracts/shared';
+import { type DomainError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * LeaveOrganization use case
+ * Handles business logic for a user leaving a organization
+ */
+export declare class LeaveOrganization<TUserCustomFields = {}, TOrganizationCustomFields = {}, TOrganizationMembershipCustomFields = {}> extends BaseUseCase<LeaveOrganizationInput, LeaveOrganizationOutput, DomainError, TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields> implements ILeaveOrganization {
+    constructor(adapters: Adapters<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>, toolkitOptions?: ToolkitOptions<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>);
+    protected executeBusinessLogic(input: LeaveOrganizationInput, context: OperationContext): Promise<Result<LeaveOrganizationOutput, DomainError>>;
+}
+//# sourceMappingURL=LeaveOrganization.d.ts.map

package/dist/organization-memberships/use-cases/leave-organization/LeaveOrganization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LeaveOrganization.d.ts","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/leave-organization/LeaveOrganization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EACR,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EAC1B,MAAM,2DAA2D,CAAC;AAMnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EACH,KAAK,WAAW,EAGnB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;GAGG;AACH,qBAAa,iBAAiB,CAEtB,iBAAiB,GAAG,EAAE,EAEtB,yBAAyB,GAAG,EAAE,EAE9B,mCAAmC,GAAG,EAAE,CAE5C,SAAQ,WAAW,CACf,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CAEvC,YAAW,kBAAkB;gBAGzB,QAAQ,EAAE,QAAQ,CACd,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC,EACD,cAAc,CAAC,EAAE,cAAc,CAC3B,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC;cAYW,oBAAoB,CAChC,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;CA0E3D"}

package/dist/organization-memberships/use-cases/leave-organization/LeaveOrganization.js

@@ -0,0 +1,64 @@
+import { LeaveOrganizationInputSchema, LeaveOrganizationOutputSchema } from '@multitenantkit/domain-contracts/organization-memberships';
+import { NotFoundError, ValidationError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * LeaveOrganization use case
+ * Handles business logic for a user leaving a organization
+ */
+export class LeaveOrganization extends BaseUseCase {
+    constructor(adapters, toolkitOptions) {
+        super('organizationMembership-leaveOrganization', adapters, toolkitOptions, LeaveOrganizationInputSchema, LeaveOrganizationOutputSchema, 'Failed to leave organization');
+    }
+    async executeBusinessLogic(input, context) {
+        // 1. Validate organization exists
+        const organization = await this.adapters.persistence.organizationRepository.findById(input.organizationId);
+        if (!organization) {
+            return Result.fail(new NotFoundError('Organization', input.organizationId));
+        }
+        const getUserResult = await this.getUserFromExternalId(input.principalExternalId);
+        if (getUserResult.isFailure) {
+            return Result.fail(getUserResult.getError());
+        }
+        const existingUser = getUserResult.getValue();
+        // 2. Validate user membership exists
+        const membership = await this.adapters.persistence.organizationMembershipRepository.findByUserIdAndOrganizationId(existingUser.id, input.organizationId);
+        if (!membership || membership.leftAt) {
+            return Result.fail(new NotFoundError('OrganizationMembership', `${existingUser.id}:${input.organizationId}`));
+        }
+        // 3. Prevent owner from leaving (must transfer ownership first)
+        if (organization.ownerUserId === existingUser.id) {
+            return Result.fail(new ValidationError('Organization owner cannot leave. Transfer ownership first.'));
+        }
+        // 4. Leave the organization (immutably)
+        const now = this.adapters.system.clock.now();
+        const leftMembership = {
+            ...membership,
+            leftAt: now,
+            deletedAt: undefined,
+            updatedAt: now
+        };
+        // 5. Persist the updated entity with audit context
+        const auditContext = {
+            ...context,
+            organizationId: input.organizationId,
+            auditAction: 'LEAVE_ORGANIZATION'
+        };
+        try {
+            await this.adapters.persistence.uow.transaction(async (repos) => {
+                await repos.organizationMemberships.update(leftMembership, auditContext);
+            });
+        }
+        catch (error) {
+            return Result.fail(new ValidationError('Failed to leave organization', undefined, {
+                originalError: error
+            }));
+        }
+        // 6. KEY PATTERN: Spread + Parse to guarantee contract
+        const output = LeaveOrganizationOutputSchema.parse({
+            ...leftMembership
+        });
+        return Result.ok(output);
+    }
+}
+//# sourceMappingURL=LeaveOrganization.js.map

package/dist/organization-memberships/use-cases/leave-organization/LeaveOrganization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LeaveOrganization.js","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/leave-organization/LeaveOrganization.ts"],"names":[],"mappings":"AAMA,OAAO,EACH,4BAA4B,EAC5B,6BAA6B,EAEhC,MAAM,2DAA2D,CAAC;AAEnE,OAAO,EAEH,aAAa,EACb,eAAe,EAClB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;GAGG;AACH,MAAM,OAAO,iBAQT,SAAQ,WAOP;IAGD,YACI,QAIC,EACD,cAIC;QAED,KAAK,CACD,0CAA0C,EAC1C,QAAQ,EACR,cAAc,EACd,4BAA4B,EAC5B,6BAA0F,EAC1F,8BAA8B,CACjC,CAAC;IACN,CAAC;IAES,KAAK,CAAC,oBAAoB,CAChC,KAA6B,EAC7B,OAAyB;QAEzB,kCAAkC;QAClC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAChF,KAAK,CAAC,cAAc,CACvB,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAElF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;QAE9C,qCAAqC;QACrC,MAAM,UAAU,GACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,6BAA6B,CAC1F,YAAY,CAAC,EAAE,EACf,KAAK,CAAC,cAAc,CACvB,CAAC;QACN,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,aAAa,CACb,wBAAwB,EACxB,GAAG,YAAY,CAAC,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,CAC/C,CACJ,CAAC;QACN,CAAC;QAED,gEAAgE;QAChE,IAAI,YAAY,CAAC,WAAW,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CAAC,4DAA4D,CAAC,CACpF,CAAC;QACN,CAAC;QAED,wCAAwC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7C,MAAM,cAAc,GAA2B;YAC3C,GAAG,UAAU;YACb,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,GAAG;SACS,CAAC;QAE5B,mDAAmD;QACnD,MAAM,YAAY,GAAqB;YACnC,GAAG,OAAO;YACV,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,oBAAoB;SACpC,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC5D,MAAM,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,cAAqB,EAAE,YAAY,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CAAC,8BAA8B,EAAE,SAAS,EAAE;gBAC3D,aAAa,EAAE,KAAK;aACvB,CAAC,CACL,CAAC;QACN,CAAC;QAED,uDAAuD;QACvD,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC;YAC/C,GAAG,cAAc;SACpB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;CACJ"}

package/dist/organization-memberships/use-cases/remove-organization-member/RemoveOrganizationMember.d.ts

@@ -0,0 +1,16 @@
+import type { Adapters } from '@multitenantkit/domain-contracts';
+import type { IRemoveOrganizationMember, RemoveOrganizationMemberInput, RemoveOrganizationMemberOutput } from '@multitenantkit/domain-contracts/organization-memberships';
+import type { OperationContext, ToolkitOptions } from '@multitenantkit/domain-contracts/shared';
+import { type DomainError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * RemoveOrganizationMember use case
+ * Handles business logic for removing a user from a organization
+ */
+export declare class RemoveOrganizationMember<TOrganizationCustomFields = {}, TUserCustomFields = {}, TOrganizationMembershipCustomFields = {}> extends BaseUseCase<RemoveOrganizationMemberInput, RemoveOrganizationMemberOutput, DomainError, TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields> implements IRemoveOrganizationMember {
+    constructor(adapters: Adapters<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>, toolkitOptions?: ToolkitOptions<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>);
+    protected authorize(input: RemoveOrganizationMemberInput, _context: OperationContext): Promise<Result<void, DomainError>>;
+    protected executeBusinessLogic(input: RemoveOrganizationMemberInput, context: OperationContext): Promise<Result<RemoveOrganizationMemberOutput, DomainError>>;
+}
+//# sourceMappingURL=RemoveOrganizationMember.d.ts.map

package/dist/organization-memberships/use-cases/remove-organization-member/RemoveOrganizationMember.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveOrganizationMember.d.ts","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/remove-organization-member/RemoveOrganizationMember.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EACR,yBAAyB,EAEzB,6BAA6B,EAC7B,8BAA8B,EACjC,MAAM,2DAA2D,CAAC;AAKnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EACH,KAAK,WAAW,EAInB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;GAGG;AACH,qBAAa,wBAAwB,CAE7B,yBAAyB,GAAG,EAAE,EAE9B,iBAAiB,GAAG,EAAE,EAEtB,mCAAmC,GAAG,EAAE,CAE5C,SAAQ,WAAW,CACf,6BAA6B,EAC7B,8BAA8B,EAC9B,WAAW,EACX,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CAEvC,YAAW,yBAAyB;gBAGhC,QAAQ,EAAE,QAAQ,CACd,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC,EACD,cAAc,CAAC,EAAE,cAAc,CAC3B,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC;cAYW,SAAS,CACrB,KAAK,EAAE,6BAA6B,EACpC,QAAQ,EAAE,gBAAgB,GAC3B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;cA0ErB,oBAAoB,CAChC,KAAK,EAAE,6BAA6B,EACpC,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,MAAM,CAAC,8BAA8B,EAAE,WAAW,CAAC,CAAC;CA8ClE"}

package/dist/organization-memberships/use-cases/remove-organization-member/RemoveOrganizationMember.js

@@ -0,0 +1,87 @@
+import { RemoveOrganizationMemberInputSchema, RemoveOrganizationMemberOutputSchema } from '@multitenantkit/domain-contracts/organization-memberships';
+import { NotFoundError, UnauthorizedError, ValidationError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * RemoveOrganizationMember use case
+ * Handles business logic for removing a user from a organization
+ */
+export class RemoveOrganizationMember extends BaseUseCase {
+    constructor(adapters, toolkitOptions) {
+        super('organizationMembership-removeOrganizationMember', adapters, toolkitOptions, RemoveOrganizationMemberInputSchema, RemoveOrganizationMemberOutputSchema, 'Failed to remove organization member');
+    }
+    async authorize(input, _context) {
+        // Organization must exist
+        const organization = await this.adapters.persistence.organizationRepository.findById(input.organizationId);
+        if (!organization) {
+            return Result.fail(new NotFoundError('Organization', input.organizationId));
+        }
+        const getUserResult = await this.getUserFromExternalId(input.principalExternalId);
+        if (getUserResult.isFailure) {
+            return Result.fail(getUserResult.getError());
+        }
+        const existingUser = getUserResult.getValue();
+        // Target membership must exist and be active (not left)
+        let targetMembership;
+        if (!input.removeByUsername) {
+            targetMembership =
+                await this.adapters.persistence.organizationMembershipRepository.findByUserIdAndOrganizationId(input.targetUser, input.organizationId);
+        }
+        else {
+            targetMembership =
+                await this.adapters.persistence.organizationMembershipRepository.findByUsernameAndOrganizationId(input.targetUser, input.organizationId);
+        }
+        if (!targetMembership || targetMembership.leftAt || targetMembership.deletedAt) {
+            return Result.fail(new NotFoundError('OrganizationMembership', `${input.targetUser}:${input.organizationId}`));
+        }
+        // Owner cannot be removed
+        if (organization.ownerUserId === targetMembership.userId) {
+            return Result.fail(new ValidationError('Organization owner cannot be removed. Transfer ownership first.'));
+        }
+        // Actor permissions: owner can remove anyone; admin can remove only members
+        const actorMembership = await this.adapters.persistence.organizationMembershipRepository.findByUserIdAndOrganizationId(existingUser.id, input.organizationId);
+        const isOwner = organization.ownerUserId === existingUser.id;
+        const isAdmin = !!actorMembership &&
+            actorMembership.roleCode === 'admin' &&
+            !!actorMembership.joinedAt &&
+            !actorMembership.leftAt &&
+            !actorMembership.deletedAt;
+        const targetIsMember = targetMembership.roleCode === 'member';
+        if (!(isOwner || (isAdmin && targetIsMember))) {
+            return Result.fail(new UnauthorizedError('Insufficient permissions to remove this member'));
+        }
+        return Result.ok(undefined);
+    }
+    async executeBusinessLogic(input, context) {
+        // Re-fetch target membership to get its ID for deletion
+        let targetMembership;
+        if (!input.removeByUsername) {
+            targetMembership =
+                await this.adapters.persistence.organizationMembershipRepository.findByUserIdAndOrganizationId(input.targetUser, input.organizationId);
+        }
+        else {
+            targetMembership =
+                await this.adapters.persistence.organizationMembershipRepository.findByUsernameAndOrganizationId(input.targetUser, input.organizationId);
+        }
+        if (!targetMembership) {
+            return Result.fail(new NotFoundError('OrganizationMembership', `${input.targetUser}:${input.organizationId}`));
+        }
+        const auditContext = {
+            ...context,
+            organizationId: input.organizationId,
+            auditAction: 'REMOVE_ORGANIZATION_MEMBER'
+        };
+        try {
+            await this.adapters.persistence.uow.transaction(async (repos) => {
+                await repos.organizationMemberships.delete(targetMembership.id, auditContext);
+            });
+        }
+        catch (error) {
+            return Result.fail(new ValidationError('Failed to remove organization member', undefined, {
+                originalError: error
+            }));
+        }
+        return Result.ok(undefined);
+    }
+}
+//# sourceMappingURL=RemoveOrganizationMember.js.map

package/dist/organization-memberships/use-cases/remove-organization-member/RemoveOrganizationMember.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveOrganizationMember.js","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/remove-organization-member/RemoveOrganizationMember.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,mCAAmC,EACnC,oCAAoC,EACvC,MAAM,2DAA2D,CAAC;AAEnE,OAAO,EAEH,aAAa,EACb,iBAAiB,EACjB,eAAe,EAClB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;GAGG;AACH,MAAM,OAAO,wBAQT,SAAQ,WAOP;IAGD,YACI,QAIC,EACD,cAIC;QAED,KAAK,CACD,iDAAiD,EACjD,QAAQ,EACR,cAAc,EACd,mCAAmC,EACnC,oCAAoC,EACpC,sCAAsC,CACzC,CAAC;IACN,CAAC;IAES,KAAK,CAAC,SAAS,CACrB,KAAoC,EACpC,QAA0B;QAE1B,0BAA0B;QAC1B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,sBAAsB,CAAC,QAAQ,CAChF,KAAK,CAAC,cAAc,CACvB,CAAC;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAElF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;QAE9C,wDAAwD;QACxD,IAAI,gBAA+C,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC1B,gBAAgB;gBACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,6BAA6B,CAC1F,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,cAAc,CACvB,CAAC;QACV,CAAC;aAAM,CAAC;YACJ,gBAAgB;gBACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,+BAA+B,CAC5F,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,cAAc,CACvB,CAAC;QACV,CAAC;QACD,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YAC7E,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,aAAa,CACb,wBAAwB,EACxB,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,cAAc,EAAE,CAChD,CACJ,CAAC;QACN,CAAC;QAED,0BAA0B;QAC1B,IAAI,YAAY,CAAC,WAAW,KAAK,gBAAgB,CAAC,MAAM,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CACf,iEAAiE,CACpE,CACJ,CAAC;QACN,CAAC;QAED,4EAA4E;QAC5E,MAAM,eAAe,GACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,6BAA6B,CAC1F,YAAY,CAAC,EAAE,EACf,KAAK,CAAC,cAAc,CACvB,CAAC;QACN,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,KAAK,YAAY,CAAC,EAAE,CAAC;QAC7D,MAAM,OAAO,GACT,CAAC,CAAC,eAAe;YACjB,eAAe,CAAC,QAAQ,KAAK,OAAO;YACpC,CAAC,CAAC,eAAe,CAAC,QAAQ;YAC1B,CAAC,eAAe,CAAC,MAAM;YACvB,CAAC,eAAe,CAAC,SAAS,CAAC;QAC/B,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE9D,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,iBAAiB,CAAC,gDAAgD,CAAC,CAC1E,CAAC;QACN,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAES,KAAK,CAAC,oBAAoB,CAChC,KAAoC,EACpC,OAAyB;QAEzB,wDAAwD;QACxD,IAAI,gBAA+C,CAAC;QAEpD,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC1B,gBAAgB;gBACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,6BAA6B,CAC1F,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,cAAc,CACvB,CAAC;QACV,CAAC;aAAM,CAAC;YACJ,gBAAgB;gBACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,gCAAgC,CAAC,+BAA+B,CAC5F,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,cAAc,CACvB,CAAC;QACV,CAAC;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,aAAa,CACb,wBAAwB,EACxB,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,cAAc,EAAE,CAChD,CACJ,CAAC;QACN,CAAC;QAED,MAAM,YAAY,GAAqB;YACnC,GAAG,OAAO;YACV,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,4BAA4B;SAC5C,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC5D,MAAM,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,IAAI,CACd,IAAI,eAAe,CAAC,sCAAsC,EAAE,SAAS,EAAE;gBACnE,aAAa,EAAE,KAAK;aACvB,CAAC,CACL,CAAC;QACN,CAAC;QAED,OAAO,MAAM,CAAC,EAAE,CAAC,SAA2C,CAAC,CAAC;IAClE,CAAC;CACJ"}

package/dist/organization-memberships/use-cases/update-organization-member-role/UpdateOrganizationMemberRole.d.ts

@@ -0,0 +1,16 @@
+import type { Adapters } from '@multitenantkit/domain-contracts';
+import type { IUpdateOrganizationMemberRole, UpdateOrganizationMemberRoleInput, UpdateOrganizationMemberRoleOutput } from '@multitenantkit/domain-contracts/organization-memberships';
+import type { OperationContext, ToolkitOptions } from '@multitenantkit/domain-contracts/shared';
+import { type DomainError } from '@multitenantkit/domain-contracts/shared/errors/index';
+import { Result } from '../../../shared/result/Result';
+import { BaseUseCase } from '../../../shared/use-case';
+/**
+ * UpdateOrganizationMemberRole use case
+ * Handles business logic for updating a organization member's role
+ */
+export declare class UpdateOrganizationMemberRole<TOrganizationCustomFields = {}, TUserCustomFields = {}, TOrganizationMembershipCustomFields = {}> extends BaseUseCase<UpdateOrganizationMemberRoleInput, UpdateOrganizationMemberRoleOutput, DomainError, TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields> implements IUpdateOrganizationMemberRole {
+    constructor(adapters: Adapters<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>, toolkitOptions?: ToolkitOptions<TUserCustomFields, TOrganizationCustomFields, TOrganizationMembershipCustomFields>);
+    protected authorize(input: UpdateOrganizationMemberRoleInput, _context: OperationContext): Promise<Result<void, DomainError>>;
+    protected executeBusinessLogic(input: UpdateOrganizationMemberRoleInput, context: OperationContext): Promise<Result<UpdateOrganizationMemberRoleOutput, DomainError>>;
+}
+//# sourceMappingURL=UpdateOrganizationMemberRole.d.ts.map

package/dist/organization-memberships/use-cases/update-organization-member-role/UpdateOrganizationMemberRole.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateOrganizationMemberRole.d.ts","sourceRoot":"","sources":["../../../../src/organization-memberships/use-cases/update-organization-member-role/UpdateOrganizationMemberRole.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EACR,6BAA6B,EAC7B,iCAAiC,EACjC,kCAAkC,EACrC,MAAM,2DAA2D,CAAC;AAMnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EACH,KAAK,WAAW,EAInB,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;GAGG;AACH,qBAAa,4BAA4B,CAEjC,yBAAyB,GAAG,EAAE,EAE9B,iBAAiB,GAAG,EAAE,EAEtB,mCAAmC,GAAG,EAAE,CAE5C,SAAQ,WAAW,CACf,iCAAiC,EACjC,kCAAkC,EAClC,WAAW,EACX,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CAEvC,YAAW,6BAA6B;gBAGpC,QAAQ,EAAE,QAAQ,CACd,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC,EACD,cAAc,CAAC,EAAE,cAAc,CAC3B,iBAAiB,EACjB,yBAAyB,EACzB,mCAAmC,CACtC;cAYW,SAAS,CACrB,KAAK,EAAE,iCAAiC,EACxC,QAAQ,EAAE,gBAAgB,GAC3B,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;cAuErB,oBAAoB,CAChC,KAAK,EAAE,iCAAiC,EACxC,OAAO,EAAE,gBAAgB,GAC1B,OAAO,CAAC,MAAM,CAAC,kCAAkC,EAAE,WAAW,CAAC,CAAC;CA6CtE"}