@nuxt-customer-portal/clients 0.3.2 → 0.4.0

package/app/components/ClientsPrivateInvitation.vue

@@ -0,0 +1,110 @@
+<script setup lang="ts">
+import { z } from 'zod'
+
+const open = defineModel<boolean>('open', { default: false })
+const emit = defineEmits<{ success: [] }>()
+const { t, locale } = useI18n()
+const toast = useToast()
+const state = reactive({ clientId: '', name: '', email: '' })
+const existing = ref(false)
+const busy = ref(false)
+const error = ref('')
+const requestId = ref('')
+const api = useClients()
+const clients = ref<{ id: string; name: string; email: string | null }[]>([])
+const schema = computed(() =>
+  z.object({
+    clientId: existing.value ? z.string().min(1, t('features.clients.choosePrivateClient')) : z.string(),
+    name: existing.value ? z.string() : z.string().trim().min(2, t('features.clients.validation.name')).max(160),
+    email: z.string().trim().email(t('features.clients.validation.email'))
+  })
+)
+watch(open, async (value) => {
+  if (!value) {
+    return
+  }
+  Object.assign(state, { clientId: '', name: '', email: '' })
+  existing.value = false
+  requestId.value = crypto.randomUUID()
+  error.value = ''
+  try {
+    clients.value = await api.invitablePrivateClients()
+  } catch {
+    error.value = t('features.clients.inviteFailed')
+  }
+})
+watch(
+  () => state.clientId,
+  (id) => {
+    state.email = clients.value.find((client) => client.id === id)?.email ?? ''
+  }
+)
+async function submit() {
+  busy.value = true
+  error.value = ''
+  try {
+    const result = await api.invitePrivateClient({
+      requestId: requestId.value,
+      preferredLocale: locale.value === 'nl' ? 'nl' : 'en',
+      email: state.email,
+      ...(existing.value ? { clientId: state.clientId } : { name: state.name })
+    })
+    open.value = false
+    emit('success')
+    await refreshNuxtData('admin-pending-invitations')
+    toast.add({
+      title: t(
+        result.deliveryFailed ? 'features.clients.invitationDeliveryFailed' : 'features.clients.invitationCreated'
+      ),
+      color: result.deliveryFailed ? 'warning' : 'success'
+    })
+  } catch (cause) {
+    error.value = (cause as { data?: { message?: string } }).data?.message || t('features.clients.inviteFailed')
+  } finally {
+    busy.value = false
+  }
+}
+</script>
+
+<template>
+  <UModal
+    v-if="open"
+    v-model:open="open"
+    :title="t('features.clients.invitePrivateClient')"
+    :description="t('features.clients.privateInviteDescription')"
+    :dismissible="!busy"
+  >
+    <template #body>
+      <UForm :schema="schema" :state="state" novalidate class="space-y-4" @submit="submit">
+        <USwitch
+          v-if="clients.length"
+          v-model="existing"
+          :label="t('features.clients.useExistingPrivateClient')"
+          :disabled="busy"
+        />
+        <UFormField v-if="existing" name="clientId" :label="t('features.clients.choosePrivateClient')">
+          <USelectMenu
+            v-model="state.clientId"
+            :items="clients.map((client) => ({ label: client.name, value: client.id }))"
+            value-key="value"
+            class="w-full"
+            :disabled="busy"
+          />
+        </UFormField>
+        <UFormField v-else name="name" :label="t('features.clients.fullName')">
+          <UInput v-model="state.name" autocomplete="name" class="w-full" :disabled="busy" />
+        </UFormField>
+        <UFormField name="email" :label="t('features.clients.invoiceEmail')">
+          <UInput v-model="state.email" autocomplete="email" class="w-full" :disabled="busy" />
+        </UFormField>
+        <UAlert v-if="error" color="error" :title="error" />
+        <div class="flex justify-end gap-2">
+          <UButton color="neutral" variant="ghost" :disabled="busy" @click="open = false">{{
+            t('features.clients.cancel')
+          }}</UButton>
+          <UButton type="submit" icon="i-lucide-mail-plus" :loading="busy">{{ t('features.clients.invite') }}</UButton>
+        </div>
+      </UForm>
+    </template>
+  </UModal>
+</template>

package/app/composables/useClients.ts

@@ -1,6 +1,27 @@
 import type { GenericClientDto, ClientListResponse } from '@nuxt-customer-portal/clients/shared/types/client'
 
 export const useClients = () => ({
+  invitablePrivateClients: () =>
+    $fetch<{ id: string; name: string; email: string | null }[]>('/api/admin/private-client-invitations'),
+  invitePrivateClient: (input: {
+    requestId: string
+    email: string
+    clientId?: string
+    name?: string
+    preferredLocale?: 'en' | 'nl'
+  }) =>
+    $fetch<{ invitationId: string; deliveryFailed: boolean }>('/api/admin/private-client-invitations', {
+      method: 'POST',
+      body: input
+    }),
+  personalAddress: () => $fetch<{ address: string; archived: boolean } | null>('/api/personal-client/address'),
+  updatePersonalAddress: (address: string) =>
+    $fetch<{ address: string; archived: boolean }>('/api/personal-client/address', {
+      method: 'PATCH',
+      body: { address }
+    }),
+  onboard: (input: { firstName: string; lastName: string; preferredLocale: 'nl' | 'en'; timezone: string | null }) =>
+    $fetch<GenericClientDto>('/api/personal-client', { method: 'POST', body: input }),
   list: (query: Record<string, string | number | undefined>) => $fetch<ClientListResponse>('/api/clients', { query }),
   get: (id: string) => $fetch<GenericClientDto>(`/api/clients/${id}`),
   create: (input: Record<string, unknown>) => $fetch<GenericClientDto>('/api/clients', { method: 'POST', body: input }),

package/app/middleware/personal-onboarding.global.ts

@@ -0,0 +1,14 @@
+export default defineNuxtRouteMiddleware(async (to) => {
+  if (
+    to.meta.public ||
+    to.path === '/personal-onboarding' ||
+    !useClientConfiguration().value.personalSelfRegistration
+  ) {
+    return
+  }
+  const request = useRequestFetch()
+  const status = await request<{ onboardingRequired: boolean }>('/api/personal-client')
+  if (status.onboardingRequired) {
+    return navigateTo('/personal-onboarding')
+  }
+})

package/app/pages/clients/[id].vue

@@ -41,7 +41,13 @@ const handleDeleted = async () => {
         :title="t('features.clients.notFound')"
         variant="outline"
       />
-      <ClientsClientDetail v-else-if="client" :client="client" :refresh="refresh" @deleted="handleDeleted" />
+      <ClientsClientDetail
+        v-else-if="client"
+        :client="client"
+        :refresh="refresh"
+        :start-editing="route.query.edit === 'true'"
+        @deleted="handleDeleted"
+      />
     </div>
   </div>
 </template>

package/app/pages/clients/index.vue

@@ -1,4 +1,5 @@
 <script setup lang="ts">
+import { clientsIcon } from '@nuxt-customer-portal/clients/shared/feature'
 import type { ClientListResponse, GenericClientDto } from '@nuxt-customer-portal/clients/shared/types/client'
 
 const { t } = useI18n()
@@ -7,7 +8,11 @@ const router = useRouter()
 const toast = useToast()
 const api = useClients()
 const runtimeConfig = useRuntimeConfig()
+const clientConfiguration = useClientConfiguration()
 const defaultModules = (runtimeConfig.public.clients as { defaultModules?: string[] } | undefined)?.defaultModules ?? []
+const clientType = ref(
+  ['organization', 'person'].includes(String(route.query.clientType)) ? String(route.query.clientType) : 'all'
+)
 const search = ref(String(route.query.search ?? ''))
 const status = ref(route.query.status === 'archived' ? 'archived' : route.query.status === 'all' ? 'all' : 'active')
 const sortBy = ref(
@@ -35,6 +40,7 @@ const sortOptions = computed(() => [
 ])
 
 const routeQuery = () => ({
+  ...(clientType.value !== 'all' ? { clientType: clientType.value } : {}),
   ...(search.value.trim() ? { search: search.value.trim() } : {}),
   ...(status.value !== 'active' ? { status: status.value } : {}),
   ...(sortBy.value !== 'name' ? { sortBy: sortBy.value } : {}),
@@ -60,12 +66,19 @@ const clientDetailTo = (client: GenericClientDto) => ({
   query: { returnTo: listReturnPath.value }
 })
 
+let loadVersion = 0
 const load = async () => {
+  const version = ++loadVersion
   pending.value = true
   try {
-    result.value = await api.list({ ...requestQuery(), page: page.value, pageSize: 20 })
+    const response = await api.list({ ...requestQuery(), page: page.value, pageSize: 20 })
+    if (version === loadVersion) {
+      result.value = response
+    }
   } finally {
-    pending.value = false
+    if (version === loadVersion) {
+      pending.value = false
+    }
   }
 }
 
@@ -94,14 +107,55 @@ const syncAndLoad = async (resetPage = false) => {
   await load()
 }
 
+let hydratingRoute = false
 let searchTimer: ReturnType<typeof setTimeout> | undefined
+watch(
+  () => route.query,
+  async (query) => {
+    const next = {
+      search: String(query.search ?? ''),
+      status: query.status === 'archived' ? 'archived' : query.status === 'all' ? 'all' : 'active',
+      clientType: ['organization', 'person'].includes(String(query.clientType)) ? String(query.clientType) : 'all',
+      sortBy: ['name', 'createdAt', 'status'].includes(String(query.sortBy)) ? String(query.sortBy) : 'name',
+      sortDir: query.sortDir === 'desc' ? ('desc' as const) : ('asc' as const),
+      page: Math.max(1, Number(query.page) || 1)
+    }
+    if (
+      next.search === search.value &&
+      next.status === status.value &&
+      next.clientType === clientType.value &&
+      next.sortBy === sortBy.value &&
+      next.sortDir === sortDir.value &&
+      next.page === page.value
+    ) {
+      return
+    }
+    clearTimeout(searchTimer)
+    hydratingRoute = true
+    search.value = next.search
+    status.value = next.status
+    clientType.value = next.clientType
+    sortBy.value = next.sortBy
+    sortDir.value = next.sortDir
+    page.value = next.page
+    await nextTick()
+    hydratingRoute = false
+    await load()
+  }
+)
 watch(search, () => {
+  if (hydratingRoute) {
+    return
+  }
   clearTimeout(searchTimer)
   searchTimer = setTimeout(() => {
     void syncAndLoad(true)
   }, 300)
 })
-watch([status, sortBy, sortDir], () => {
+watch([status, sortBy, sortDir, clientType], () => {
+  if (hydratingRoute) {
+    return
+  }
   void syncAndLoad(true)
 })
 watch(pending, (value) => {
@@ -152,7 +206,7 @@ onMounted(() => {
       <div class="mx-auto flex max-w-[1440px] flex-col gap-4 p-4 sm:p-6 lg:p-8">
         <header class="flex items-center justify-between gap-3 border-b border-default pb-4 sm:items-end">
           <div class="flex min-w-0 gap-3">
-            <UIcon name="i-lucide-building-2" class="mt-1 size-6 shrink-0 text-primary" />
+            <UIcon :name="clientsIcon(clientConfiguration.allowedTypes)" class="mt-1 size-6 shrink-0 text-primary" />
             <div class="min-w-0">
               <h1 class="text-2xl font-semibold">{{ t('features.clients.title') }}</h1>
               <p class="hidden text-sm text-muted sm:block">{{ t('features.clients.description') }}</p>
@@ -191,12 +245,26 @@ onMounted(() => {
         <PortalListToolbar
           v-model:search="search"
           :search-placeholder="t('features.clients.search')"
-          :filters="[{ key: 'status', placeholder: t('features.clients.status'), items: statusOptions }]"
-          :filter-values="{ status }"
+          :filters="[
+            { key: 'status', placeholder: t('features.clients.status'), items: statusOptions },
+            ...((clientConfiguration.allowedTypes?.length ?? 1) > 1
+              ? [
+                  {
+                    key: 'clientType',
+                    placeholder: t('features.clients.clientType'),
+                    items: ['all', 'organization', 'person'].map((value) => ({
+                      value,
+                      label: t(value === 'all' ? 'features.clients.allTypes' : `features.clients.types.${value}`)
+                    }))
+                  }
+                ]
+              : [])
+          ]"
+          :filter-values="{ status, clientType }"
           :sort-options="sortOptions"
           :sort-by="sortBy"
           :sort-dir="sortDir"
-          @filter="(_key, value) => (status = value || 'all')"
+          @filter="(key, value) => (key === 'clientType' ? (clientType = value || 'all') : (status = value || 'all'))"
           @sort="sortBy = $event"
           @toggle-direction="sortDir = sortDir === 'asc' ? 'desc' : 'asc'"
         />
@@ -228,12 +296,27 @@ onMounted(() => {
                 <UAvatar :src="client.avatarLogo || client.logo || undefined" :alt="client.name" />
                 <div class="min-w-0 flex-1">
                   <div class="flex flex-wrap items-center gap-2">
+                    <UTooltip :text="t(`features.clients.types.${client.clientType}`)">
+                      <span
+                        tabindex="0"
+                        role="img"
+                        :aria-label="t(`features.clients.types.${client.clientType}`)"
+                        class="inline-flex shrink-0 rounded text-muted focus-visible:outline-2 focus-visible:outline-primary"
+                      >
+                        <UIcon
+                          :name="client.clientType === 'person' ? 'i-lucide-user-round' : 'i-lucide-building-2'"
+                          class="size-4"
+                        />
+                      </span>
+                    </UTooltip>
                     <p class="truncate font-semibold">{{ client.name }}</p>
                     <UBadge :color="client.archivedAt ? 'neutral' : 'success'" variant="subtle">{{
                       t(client.archivedAt ? 'features.clients.archived' : 'features.clients.active')
                     }}</UBadge>
                   </div>
-                  <p class="mt-1 truncate text-sm text-muted">{{ client.officialName }} · {{ client.slug }}</p>
+                  <p v-if="client.clientType === 'organization'" class="mt-1 truncate text-sm text-muted">
+                    {{ client.slug }}
+                  </p>
                 </div>
               </NuxtLink>
               <NuxtLink

package/app/pages/personal-onboarding.vue

@@ -0,0 +1,79 @@
+<script setup lang="ts">
+import { z } from 'zod'
+import { isValidTimezone } from '@nuxt-customer-portal/core/shared/timezone'
+import { authClient } from '@nuxt-customer-portal/core/app/utils/auth-client'
+
+const { t, locale } = useI18n()
+const config = useClientConfiguration()
+if (!config.value.personalSelfRegistration) {
+  throw createError({ statusCode: 404 })
+}
+const { data: session } = await authClient.getSession()
+const state = reactive({
+  firstName: session?.user.firstName ?? '',
+  lastName: session?.user.lastName ?? '',
+  preferredLocale: (locale.value === 'nl' ? 'nl' : 'en') as 'nl' | 'en',
+  timezone: null as string | null
+})
+onMounted(() => {
+  state.timezone = Intl.DateTimeFormat().resolvedOptions().timeZone
+})
+const schema = computed(() =>
+  z.object({
+    firstName: z.string().trim().min(1, t('features.clients.validation.name')).max(80),
+    lastName: z.string().trim().min(1, t('features.clients.validation.name')).max(80),
+    preferredLocale: z.enum(['nl', 'en']),
+    timezone: z
+      .string()
+      .nullable()
+      .refine((value) => value === null || isValidTimezone(value), t('timezones.invalid'))
+  })
+)
+const busy = ref(false)
+const error = ref('')
+const api = useClients()
+const userStore = useUserStore()
+const submit = async () => {
+  busy.value = true
+  error.value = ''
+  try {
+    const client = await api.onboard(state)
+    await userStore.refreshOrganizations()
+    await userStore.setActiveOrganizationId(client.id)
+    await navigateTo('/dashboard')
+  } catch {
+    error.value = t('features.clients.onboardingFailed')
+  } finally {
+    busy.value = false
+  }
+}
+</script>
+
+<template>
+  <div class="mx-auto max-w-xl p-6">
+    <h1 class="mb-4 text-2xl font-semibold">{{ t('features.clients.personalAccount') }}</h1>
+    <UForm :schema="schema" :state="state" novalidate class="space-y-4" @submit="submit">
+      <UFormField name="firstName" :label="t('features.clients.firstName')"
+        ><UInput v-model="state.firstName" autocomplete="given-name" class="w-full"
+      /></UFormField>
+      <UFormField name="lastName" :label="t('features.clients.lastName')"
+        ><UInput v-model="state.lastName" autocomplete="family-name" class="w-full"
+      /></UFormField>
+      <UFormField name="preferredLocale" :label="t('features.clients.locale')"
+        ><USelect
+          v-model="state.preferredLocale"
+          class="w-full"
+          :items="[
+            { label: 'Nederlands', value: 'nl' },
+            { label: 'English', value: 'en' }
+          ]"
+          value-key="value"
+      /></UFormField>
+      <UFormField name="timezone" :label="t('timezones.label')" :description="t('timezones.savedPreference')"
+        ><PortalTimezoneSelect v-model="state.timezone"
+      /></UFormField>
+      <UAlert v-if="error" color="error" :title="error" />
+      <UButton type="submit" :loading="busy">{{ t('features.clients.openPersonalAccount') }}</UButton>
+    </UForm>
+  </div>
+</template>

package/app/plugins/clients-feature.ts

@@ -1,3 +1,11 @@
-import { clientsFeature } from '@nuxt-customer-portal/clients/shared/feature'
+import { createClientsFeature } from '@nuxt-customer-portal/clients/shared/feature'
 
-export default defineNuxtPlugin(() => usePortalFeatures().registerFeature(clientsFeature))
+export default defineNuxtPlugin(() => {
+  const config = useClientConfiguration()
+  const features = usePortalFeatures()
+  watch(
+    () => config.value.allowedTypes,
+    (types) => features.registerFeature(createClientsFeature(types ?? ['organization'])),
+    { immediate: true }
+  )
+})

package/i18n/locales/en.json

@@ -2,7 +2,7 @@
   "features": {
     "clients": {
       "title": "Clients",
-      "description": "Manage client companies, members, profiles, and module access.",
+      "description": "Manage clients, profiles, members, and module access.",
       "backToClients": "Back to clients",
       "openClient": "Open {name}",
       "loading": "Loading client",
@@ -65,10 +65,36 @@
       "resultCount": "{count} Client | {count} Clients",
       "validation": {
         "name": "Enter at least two characters.",
+        "firstName": "First name is required.",
+        "lastName": "Last name is required.",
         "slug": "Use lowercase letters, numbers, and single hyphens only.",
         "officialName": "Enter the official company name.",
         "email": "Enter a valid email address."
-      }
+      },
+      "clientType": "Client type",
+      "types": {
+        "organization": "Organization",
+        "person": "Private person"
+      },
+      "fullName": "Full name",
+      "personalAccount": "Personal account",
+      "openPersonalAccount": "Open personal account",
+      "onboardingFailed": "Could not open your personal account. Verify your email or contact your coach if you already have an account.",
+      "editPersonalProfile": "Edit personal profile",
+      "allTypes": "All client types",
+      "firstName": "First name",
+      "lastName": "Last name",
+      "personalAddress": "Personal address",
+      "personalAddressDescription": "The address on your private client profile, used for billing.",
+      "addressTooLong": "Use at most 1,000 characters",
+      "addressSaved": "Address saved",
+      "addressLoadFailed": "Could not load your personal address",
+      "invitePrivateClient": "Invite private client",
+      "choosePrivateClient": "Choose a private client",
+      "useExistingPrivateClient": "Invite an existing private client",
+      "privateInviteDescription": "Invite someone to their private client account. They will create or sign in to their own login to accept.",
+      "invitationCreated": "Invitation created",
+      "invitationDeliveryFailed": "Invitation saved, but the email could not be sent. Revoke it from Pending invitations, then invite the existing private client again."
     }
   }
 }

package/i18n/locales/nl.json

@@ -2,7 +2,7 @@
   "features": {
     "clients": {
       "title": "Klanten",
-      "description": "Beheer klantbedrijven, leden, profielen en moduletoegang.",
+      "description": "Beheer klanten, profielen, leden en moduletoegang.",
       "backToClients": "Terug naar klanten",
       "openClient": "Open {name}",
       "loading": "Klant laden",
@@ -65,10 +65,36 @@
       "resultCount": "{count} klant | {count} klanten",
       "validation": {
         "name": "Voer minimaal twee tekens in.",
+        "firstName": "Voornaam is verplicht.",
+        "lastName": "Achternaam is verplicht.",
         "slug": "Gebruik alleen kleine letters, cijfers en enkele koppeltekens.",
         "officialName": "Voer de officiële bedrijfsnaam in.",
         "email": "Voer een geldig e-mailadres in."
-      }
+      },
+      "clientType": "Type klant",
+      "types": {
+        "organization": "Organisatie",
+        "person": "Privépersoon"
+      },
+      "fullName": "Volledige naam",
+      "personalAccount": "Persoonlijk account",
+      "openPersonalAccount": "Persoonlijk account openen",
+      "onboardingFailed": "Je persoonlijke account kon niet worden geopend. Verifieer je e-mail of neem contact op met je coach als je al een account hebt.",
+      "editPersonalProfile": "Persoonlijk profiel bewerken",
+      "allTypes": "Alle klanttypen",
+      "firstName": "Voornaam",
+      "lastName": "Achternaam",
+      "personalAddress": "Persoonlijk adres",
+      "personalAddressDescription": "Het adres op je particuliere klantprofiel, gebruikt voor facturatie.",
+      "addressTooLong": "Gebruik maximaal 1.000 tekens",
+      "addressSaved": "Adres opgeslagen",
+      "addressLoadFailed": "Je persoonlijke adres kon niet worden geladen",
+      "invitePrivateClient": "Particuliere klant uitnodigen",
+      "choosePrivateClient": "Kies een particuliere klant",
+      "useExistingPrivateClient": "Een bestaande particuliere klant uitnodigen",
+      "privateInviteDescription": "Nodig iemand uit voor hun particuliere klantaccount. De ontvanger maakt een login aan of logt in om te accepteren.",
+      "invitationCreated": "Uitnodiging aangemaakt",
+      "invitationDeliveryFailed": "Uitnodiging opgeslagen, maar de e-mail kon niet worden verstuurd. Trek deze in via Openstaande uitnodigingen en nodig daarna de bestaande privécliënt opnieuw uit."
     }
   }
 }

package/migrations/0001_person_clients.sql

@@ -0,0 +1,37 @@
+ALTER TABLE clients.client_profile ADD COLUMN client_type text NOT NULL DEFAULT 'organization'
+ CHECK (client_type IN ('organization', 'person'));
+ALTER TABLE clients.client_profile ADD COLUMN timezone text;
+ALTER TABLE clients.client_profile ADD CONSTRAINT person_no_company_fields
+ CHECK (client_type <> 'person' OR (registration_number IS NULL AND vat_number IS NULL));
+-- Unique constraints serialize competing invitations and onboarding requests.
+CREATE TABLE clients.personal_membership (
+ organization_id text PRIMARY KEY REFERENCES clients.client_profile(organization_id) ON DELETE CASCADE,
+ user_id text NOT NULL UNIQUE REFERENCES "user"(id) ON DELETE CASCADE,
+ member_id text NOT NULL UNIQUE REFERENCES member(id) ON DELETE CASCADE
+);
+CREATE FUNCTION clients.enforce_personal_membership() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+ IF TG_OP = 'UPDATE' AND (OLD.user_id <> NEW.user_id OR OLD.organization_id <> NEW.organization_id)
+ AND EXISTS (SELECT 1 FROM clients.personal_membership WHERE member_id = OLD.id) THEN
+  RAISE EXCEPTION 'Personal membership cannot be reassigned' USING ERRCODE = '23514';
+ END IF;
+ IF EXISTS (SELECT 1 FROM clients.client_profile WHERE organization_id = NEW.organization_id AND client_type = 'person') THEN
+  IF NEW.role <> 'owner' THEN RAISE EXCEPTION 'A personal client has one owner' USING ERRCODE = '23514'; END IF;
+  IF TG_OP = 'UPDATE' AND (OLD.user_id <> NEW.user_id OR OLD.organization_id <> NEW.organization_id) THEN
+   RAISE EXCEPTION 'Personal membership cannot be reassigned' USING ERRCODE = '23514';
+  END IF;
+  IF TG_OP = 'INSERT' OR NOT EXISTS (SELECT 1 FROM clients.personal_membership WHERE member_id = NEW.id) THEN
+   INSERT INTO clients.personal_membership VALUES (NEW.organization_id, NEW.user_id, NEW.id);
+  END IF;
+ END IF;
+ RETURN NEW;
+END $$;
+CREATE TRIGGER enforce_personal_membership AFTER INSERT OR UPDATE ON member
+ FOR EACH ROW EXECUTE FUNCTION clients.enforce_personal_membership();
+CREATE FUNCTION clients.immutable_client_type() RETURNS trigger LANGUAGE plpgsql AS $$
+BEGIN
+ IF OLD.client_type <> NEW.client_type THEN RAISE EXCEPTION 'Client type cannot be changed' USING ERRCODE = '23514'; END IF;
+ RETURN NEW;
+END $$;
+CREATE TRIGGER immutable_client_type BEFORE UPDATE ON clients.client_profile
+ FOR EACH ROW EXECUTE FUNCTION clients.immutable_client_type();

package/migrations/0002_person_names.sql

@@ -0,0 +1,18 @@
+ALTER TABLE clients.client_profile ADD COLUMN first_name text;
+ALTER TABLE clients.client_profile ADD COLUMN last_name text;
+UPDATE clients.client_profile AS profile
+SET
+  first_name = COALESCE(account.first_name, split_part(client.name, ' ', 1)),
+  last_name = COALESCE(
+    account.last_name,
+    NULLIF(trim(regexp_replace(client.name, '^\S+\s*', '')), ''),
+    client.name
+  )
+FROM organization AS client
+LEFT JOIN member AS membership ON membership.organization_id = client.id
+LEFT JOIN "user" AS account ON account.id = membership.user_id
+WHERE profile.organization_id = client.id AND profile.client_type = 'person';
+ALTER TABLE clients.client_profile ADD CONSTRAINT person_name_parts_check CHECK (
+  client_type <> 'person'
+  OR (first_name IS NOT NULL AND length(trim(first_name)) > 0 AND last_name IS NOT NULL AND length(trim(last_name)) > 0)
+);

package/nuxt.config.ts

@@ -12,6 +12,12 @@ export default defineNuxtConfig({
     ]
   },
   runtimeConfig: {
-    public: { clients: { defaultModules: [] as string[] } }
+    public: {
+      clients: {
+        defaultModules: [] as string[],
+        allowedTypes: ['organization'] as string[],
+        personalSelfRegistration: false
+      }
+    }
   }
 })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuxt-customer-portal/clients",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "license": "MIT",
   "homepage": "https://nuxt-customer-portal.com",
   "repository": {
@@ -41,8 +41,8 @@
     "nanoid": "^5.1.6",
     "pg": "^8.22.0",
     "zod": "^4.4.3",
-    "@nuxt-customer-portal/core": "^0.3.2",
-    "@nuxt-customer-portal/ui": "^0.3.2"
+    "@nuxt-customer-portal/core": "^0.4.0",
+    "@nuxt-customer-portal/ui": "^0.4.0"
   },
   "peerDependencies": {
     "nuxt": "^4.5.1",

package/portal.manifest.mjs

@@ -1,6 +1,6 @@
 export default {
   id: 'clients',
-  version: '0.3.2',
+  version: '0.4.0',
   source: '@nuxt-customer-portal/clients',
   dependsOn: ['core', 'ui'],
   schema: './server/db/schema/clients.ts',

package/server/api/admin/private-client-invitations/index.get.ts

@@ -0,0 +1,27 @@
+import { and, eq, isNull, notExists } from 'drizzle-orm'
+import { db, requireSession } from '@nuxt-customer-portal/core/server/portal'
+import { organization, member } from '@nuxt-customer-portal/core/schema'
+import { clientProfile } from '../../../db/schema/clients'
+import { requireAllowedClientType } from '../../../utils/client-configuration'
+
+export default defineEventHandler(async (event) => {
+  const session = await requireSession(event)
+  if (session.user.role !== 'admin') {
+    throw createError({ statusCode: 403 })
+  }
+  await requireAllowedClientType('person')
+  return db
+    .select({ id: clientProfile.organizationId, name: organization.name, email: clientProfile.invoiceEmail })
+    .from(clientProfile)
+    .innerJoin(organization, eq(organization.id, clientProfile.organizationId))
+    .where(
+      and(
+        eq(clientProfile.clientType, 'person'),
+        isNull(clientProfile.archivedAt),
+        notExists(
+          db.select({ id: member.id }).from(member).where(eq(member.organizationId, clientProfile.organizationId))
+        )
+      )
+    )
+    .orderBy(organization.name)
+})