@nuxt-customer-portal/core 0.3.2 → 0.4.0

package/shared/core-feature.ts

@@ -1,5 +1,11 @@
 import type { PortalFeatureDefinition } from './types/feature'
 
+const recipientNamePlaceholder = {
+  key: 'recipient_name',
+  labelKey: 'admin.email.placeholders.recipientName',
+  example: 'Alex'
+}
+
 export const coreFeature: PortalFeatureDefinition = {
   id: 'portal-core',
   navigation: [
@@ -39,16 +45,21 @@ export const coreFeature: PortalFeatureDefinition = {
       defaults: {
         en: {
           subject: 'Verify your {{brand_name}} email address',
-          body: 'Your verification code is: <code>{{otp}}</code>',
-          footer: 'This code will expire soon. If you did not request this, please ignore this email.'
+          body: 'Dear {{recipient_name}},\n\nWelcome to **{{brand_name}}**. To finish verifying your email address, enter the following code:\n\n`{{otp}}`\n\nOnce your email address is verified, you can continue setting up and using your account.',
+          footer:
+            'For your security, this code will expire soon and can only be used once. If you did not create or verify an account, you can safely ignore this email.'
         },
         nl: {
           subject: 'Verifieer uw e-mailadres voor {{brand_name}}',
-          body: 'Uw verificatiecode is: <code>{{otp}}</code>',
-          footer: 'Deze code verloopt binnenkort. Negeer dit bericht als u dit niet heeft aangevraagd.'
+          body: 'Beste {{recipient_name}},\n\nWelkom bij **{{brand_name}}**. Voer de volgende code in om de verificatie van uw e-mailadres af te ronden:\n\n`{{otp}}`\n\nNa de verificatie kunt u doorgaan met het instellen en gebruiken van uw account.',
+          footer:
+            'Voor uw veiligheid verloopt deze code binnenkort en kan deze maar één keer worden gebruikt. Heeft u geen account aangemaakt of geverifieerd? Dan kunt u deze e-mail veilig negeren.'
         }
       },
-      placeholders: [{ key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }]
+      placeholders: [
+        recipientNamePlaceholder,
+        { key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }
+      ]
     },
     {
       id: 'sign-in',
@@ -56,16 +67,21 @@ export const coreFeature: PortalFeatureDefinition = {
       defaults: {
         en: {
           subject: 'Your {{brand_name}} sign-in code',
-          body: 'Your sign-in code is: <code>{{otp}}</code>',
-          footer: 'This code will expire soon. If you did not request this, please ignore this email.'
+          body: 'Dear {{recipient_name}},\n\nWe received a request to sign in to your **{{brand_name}}** account. Use the code below to continue:\n\n`{{otp}}`\n\nReturn to the sign-in screen and enter this code to securely access your account.',
+          footer:
+            'This code will expire soon and can only be used once. If you did not try to sign in, you can ignore this email; no changes will be made to your account.'
         },
         nl: {
           subject: 'Uw inlogcode voor {{brand_name}}',
-          body: 'Uw inlogcode is: <code>{{otp}}</code>',
-          footer: 'Deze code verloopt binnenkort. Negeer dit bericht als u dit niet heeft aangevraagd.'
+          body: 'Beste {{recipient_name}},\n\nWe hebben een verzoek ontvangen om in te loggen op uw **{{brand_name}}**-account. Gebruik de onderstaande code om verder te gaan:\n\n`{{otp}}`\n\nGa terug naar het inlogscherm en voer deze code in om veilig toegang te krijgen tot uw account.',
+          footer:
+            'Deze code verloopt binnenkort en kan maar één keer worden gebruikt. Heeft u niet geprobeerd in te loggen? Dan kunt u deze e-mail negeren; er wordt niets aan uw account gewijzigd.'
         }
       },
-      placeholders: [{ key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }]
+      placeholders: [
+        recipientNamePlaceholder,
+        { key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }
+      ]
     },
     {
       id: 'forget-password',
@@ -73,16 +89,21 @@ export const coreFeature: PortalFeatureDefinition = {
       defaults: {
         en: {
           subject: 'Reset your {{brand_name}} password',
-          body: 'Your password reset code is: <code>{{otp}}</code>',
-          footer: 'This code will expire soon. If you did not request this, please ignore this email.'
+          body: 'Dear {{recipient_name}},\n\nWe received a request to reset the password for your **{{brand_name}}** account. Enter the following code on the password reset screen:\n\n`{{otp}}`\n\nAfter verification, you will be able to choose a new password.',
+          footer:
+            'For your security, this code will expire soon and can only be used once. If you did not request a password reset, ignore this email and your current password will remain unchanged.'
         },
         nl: {
           subject: 'Stel uw wachtwoord voor {{brand_name}} opnieuw in',
-          body: 'Uw code voor het opnieuw instellen van uw wachtwoord is: <code>{{otp}}</code>',
-          footer: 'Deze code verloopt binnenkort. Negeer dit bericht als u dit niet heeft aangevraagd.'
+          body: 'Beste {{recipient_name}},\n\nWe hebben een verzoek ontvangen om het wachtwoord van uw **{{brand_name}}**-account opnieuw in te stellen. Voer de volgende code in op het scherm voor wachtwoordherstel:\n\n`{{otp}}`\n\nNa de verificatie kunt u een nieuw wachtwoord kiezen.',
+          footer:
+            'Voor uw veiligheid verloopt deze code binnenkort en kan deze maar één keer worden gebruikt. Heeft u geen wachtwoordherstel aangevraagd? Negeer dan deze e-mail; uw huidige wachtwoord blijft ongewijzigd.'
         }
       },
-      placeholders: [{ key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }]
+      placeholders: [
+        recipientNamePlaceholder,
+        { key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }
+      ]
     },
     {
       id: 'change-email',
@@ -90,16 +111,21 @@ export const coreFeature: PortalFeatureDefinition = {
       defaults: {
         en: {
           subject: 'Confirm your new {{brand_name}} email address',
-          body: 'Your confirmation code is: <code>{{otp}}</code>',
-          footer: 'This code will expire soon. If you did not request this, please ignore this email.'
+          body: 'Dear {{recipient_name}},\n\nYou are changing the email address connected to your **{{brand_name}}** account. Enter the following code to confirm that this new address belongs to you:\n\n`{{otp}}`\n\nAfter confirmation, future account messages will be sent to this address.',
+          footer:
+            'This code will expire soon and can only be used once. If you did not request this change, ignore this email and review your account security.'
         },
         nl: {
           subject: 'Bevestig uw nieuwe e-mailadres voor {{brand_name}}',
-          body: 'Uw bevestigingscode is: <code>{{otp}}</code>',
-          footer: 'Deze code verloopt binnenkort. Negeer dit bericht als u dit niet heeft aangevraagd.'
+          body: 'Beste {{recipient_name}},\n\nU wijzigt het e-mailadres dat aan uw **{{brand_name}}**-account is gekoppeld. Voer de volgende code in om te bevestigen dat dit nieuwe adres van u is:\n\n`{{otp}}`\n\nNa de bevestiging worden toekomstige accountberichten naar dit adres verzonden.',
+          footer:
+            'Deze code verloopt binnenkort en kan maar één keer worden gebruikt. Heeft u deze wijziging niet aangevraagd? Negeer dan deze e-mail en controleer de beveiliging van uw account.'
         }
       },
-      placeholders: [{ key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }]
+      placeholders: [
+        recipientNamePlaceholder,
+        { key: 'otp', labelKey: 'admin.email.placeholders.otp', example: '123456' }
+      ]
     },
     {
       id: 'invitation',
@@ -107,38 +133,65 @@ export const coreFeature: PortalFeatureDefinition = {
       defaults: {
         en: {
           subject: "You've been invited to join {{organization_name}}",
-          body: '{{inviter_name}} has invited you to join <strong>{{organization_name}}</strong> as {{role}}.<p style="text-align:center"><a href="{{action_url}}" class="button">Accept invitation</a></p>',
-          footer: 'This invitation will expire soon. If you did not expect it, please ignore this email.'
+          body: 'Dear {{recipient_name}},\n\n**{{inviter_name}}** has invited you to join **{{organization_name}}** as **{{role}}**. By accepting, you will gain access to the organization and the features available for your role.\n\n[Review and accept the invitation]({{action_url}})\n\nWe look forward to welcoming you.',
+          footer:
+            'This personal invitation will expire soon. If you were not expecting it, you can safely ignore this email.'
         },
         nl: {
-          subject: 'U bent uitgenodigd voor {{organization_name}}',
-          body: '{{inviter_name}} heeft u uitgenodigd om als {{role}} lid te worden van <strong>{{organization_name}}</strong>.<p style="text-align:center"><a href="{{action_url}}" class="button">Uitnodiging accepteren</a></p>',
-          footer: 'Deze uitnodiging verloopt binnenkort. Negeer dit bericht als u dit niet verwachtte.'
+          subject: 'Je bent uitgenodigd voor {{organization_name}}',
+          body: 'Beste {{recipient_name}},\n\n**{{inviter_name}}** heeft je uitgenodigd om als **{{role}}** lid te worden van **{{organization_name}}**. Na acceptatie krijg je toegang tot de organisatie en de functies die bij je rol horen.\n\n[Uitnodiging bekijken en accepteren]({{action_url}})\n\nWe heten je graag welkom.',
+          footer:
+            'Deze persoonlijke uitnodiging verloopt binnenkort. Verwachtte je deze uitnodiging niet? Dan kun je deze e-mail veilig negeren.'
         }
       },
       placeholders: [
+        recipientNamePlaceholder,
         { key: 'inviter_name', labelKey: 'admin.email.placeholders.inviterName', example: 'Alex Morgan' },
         { key: 'organization_name', labelKey: 'admin.email.placeholders.organizationName', example: 'Example Company' },
         { key: 'role', labelKey: 'admin.email.placeholders.role', example: 'member' },
         { key: 'action_url', labelKey: 'admin.email.placeholders.actionUrl', example: 'https://example.com/signup' }
       ]
     },
+    {
+      id: 'personal-account-invitation',
+      labelKey: 'admin.email.messages.personalAccountInvitation',
+      defaults: {
+        en: {
+          subject: 'Set up your personal portal account',
+          body: 'Dear {{recipient_name}},\n\nA personal portal profile has been created for you. Set up your account to access your purchases, appointments, invoices, and shared files.\n\n[Set up your account]({{action_url}})\n\nUse the same email address that received this message.',
+          footer: 'This account setup link expires soon. If you did not expect this message, you can safely ignore it.'
+        },
+        nl: {
+          subject: 'Stel je persoonlijke portaalaccount in',
+          body: 'Beste {{recipient_name}},\n\nEr is een persoonlijk portaalprofiel voor je aangemaakt. Stel je account in om toegang te krijgen tot je aankopen, afspraken, facturen en gedeelde bestanden.\n\n[Je account instellen]({{action_url}})\n\nGebruik hetzelfde e-mailadres waarop je dit bericht hebt ontvangen.',
+          footer:
+            'Deze link om je account in te stellen verloopt binnenkort. Verwachtte je dit bericht niet? Dan kun je het veilig negeren.'
+        }
+      },
+      placeholders: [
+        recipientNamePlaceholder,
+        { key: 'action_url', labelKey: 'admin.email.placeholders.actionUrl', example: 'https://example.com/signup' }
+      ]
+    },
     {
       id: 'account-deletion',
       labelKey: 'admin.email.messages.accountDeletion',
       defaults: {
         en: {
           subject: 'Confirm account deletion',
-          body: 'Hello {{user_name}}, you requested to delete your account.<p style="text-align:center"><a href="{{action_url}}" class="button">Delete account</a></p>',
-          footer: 'If you did not request this, ignore this email and your account will remain active.'
+          body: 'Dear {{recipient_name}},\n\nWe received a request to permanently delete your account. Because this action cannot be undone, please confirm that you want to continue.\n\n[Confirm account deletion]({{action_url}})\n\nYour account will remain active until you complete this confirmation.',
+          footer:
+            'If you did not request account deletion, do not use the link. You can safely ignore this email and your account will remain active.'
         },
         nl: {
           subject: 'Bevestig het verwijderen van uw account',
-          body: 'Hallo {{user_name}}, u heeft gevraagd uw account te verwijderen.<p style="text-align:center"><a href="{{action_url}}" class="button">Account verwijderen</a></p>',
-          footer: 'Negeer dit bericht als u dit niet heeft aangevraagd; uw account blijft dan actief.'
+          body: 'Beste {{recipient_name}},\n\nWe hebben een verzoek ontvangen om uw account definitief te verwijderen. Omdat dit niet ongedaan kan worden gemaakt, vragen we u te bevestigen dat u wilt doorgaan.\n\n[Verwijderen van account bevestigen]({{action_url}})\n\nUw account blijft actief totdat u deze bevestiging heeft voltooid.',
+          footer:
+            'Heeft u niet gevraagd om uw account te verwijderen? Gebruik de link dan niet. U kunt deze e-mail veilig negeren; uw account blijft actief.'
         }
       },
       placeholders: [
+        recipientNamePlaceholder,
         { key: 'user_name', labelKey: 'admin.email.placeholders.userName', example: 'Alex Morgan' },
         {
           key: 'action_url',

package/shared/countries.ts

@@ -0,0 +1,18 @@
+// ISO 3166-1 alpha-2 codes; display names are supplied by the browser's Intl data.
+export const countryCodes =
+  'AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM ZW'.split(
+    ' '
+  )
+
+export function browserCountry(languages: readonly string[]): string | undefined {
+  for (const language of languages) {
+    try {
+      const region = new Intl.Locale(language).region
+      if (region && countryCodes.includes(region)) {
+        return region
+      }
+    } catch {
+      // Ignore unsupported language tags.
+    }
+  }
+}

package/shared/email-recipient.ts

@@ -0,0 +1,7 @@
+export function emailRecipientName(input: {
+  firstName?: string | null
+  displayName?: string | null
+  email?: string | null
+}) {
+  return input.firstName?.trim() || input.displayName?.trim() || input.email?.trim() || ''
+}

package/shared/languages.ts

@@ -0,0 +1,7 @@
+/** Languages with bundled portal interface translations. */
+export const portalLanguageCodes = ['en', 'nl'] as const
+export type PortalLanguage = (typeof portalLanguageCodes)[number]
+export const portalLanguages = [
+  { value: 'en' as const, label: '🇺🇸 English' },
+  { value: 'nl' as const, label: '🇳🇱 Nederlands' }
+]

package/shared/permissions.ts

@@ -1,5 +1,11 @@
 import { createAccessControl } from 'better-auth/plugins/access'
 import { defaultStatements, adminAc } from 'better-auth/plugins/admin/access'
+import {
+  defaultStatements as organizationDefaultStatements,
+  adminAc as organizationAdminAc,
+  memberAc as organizationMemberAc,
+  ownerAc as organizationOwnerAc
+} from 'better-auth/plugins/organization/access'
 
 // Core portal statements. Feature authorization is owned by each feature policy.
 export const statement = {
@@ -24,3 +30,22 @@ export const admin = ac.newRole({
 
 // Export the access control instance and roles
 export { ac }
+
+export const organizationStatement = {
+  ...organizationDefaultStatements,
+  apiKey: ['create', 'read', 'update', 'delete']
+} as const
+
+export const organizationAc = createAccessControl(organizationStatement)
+export const organizationOwner = organizationAc.newRole({
+  ...organizationOwnerAc.statements,
+  apiKey: ['create', 'read', 'update', 'delete']
+})
+export const organizationAdmin = organizationAc.newRole({
+  ...organizationAdminAc.statements,
+  apiKey: ['create', 'read', 'update', 'delete']
+})
+export const organizationMember = organizationAc.newRole({
+  ...organizationMemberAc.statements,
+  apiKey: []
+})

package/shared/portal-session.ts

@@ -4,6 +4,8 @@ export interface PortalSession {
     name?: string | null
     email?: string
     role?: string | null
+    emailVerified?: boolean
+    timezone?: string | null
   }
   session?: {
     activeOrganizationId?: string | null

package/shared/social-auth.ts

@@ -0,0 +1,5 @@
+export const socialAuthProviderEnabled = (
+  enabled: string | undefined,
+  clientId: string | undefined,
+  clientSecret: string | undefined
+) => enabled === 'true' && Boolean(clientId?.trim()) && Boolean(clientSecret?.trim())

package/shared/timezone.ts

@@ -0,0 +1,21 @@
+/** Named zones retain daylight-saving rules; offsets do not. */
+export const DEFAULT_TIMEZONE = 'Europe/Amsterdam'
+export const isValidTimezone = (value: string): boolean => {
+  if (!value || /^[+-]/.test(value)) {
+    return false
+  }
+  try {
+    new Intl.DateTimeFormat('en', { timeZone: value }).format()
+    return true
+  } catch {
+    return false
+  }
+}
+export const resolveTimezones = (input: {
+  providerTimezone: string
+  clientTimezone?: string | null
+  userTimezone?: string | null
+}) => {
+  const schedulingTimezone = input.clientTimezone || input.providerTimezone
+  return { ...input, schedulingTimezone, displayTimezone: input.userTimezone || schedulingTimezone }
+}

package/shared/types/feature.ts

@@ -7,6 +7,7 @@ export type PortalAudience =
   | 'providerAdmin'
   | 'clientAuthenticated'
   | 'clientAdmin'
+  | 'clientOrganizationAdmin'
 export type PortalOrganizationRole = 'owner' | 'admin' | 'member'
 export type PortalOrganizationType = 'PROVIDER' | 'CLIENT'
 
@@ -58,6 +59,7 @@ export interface PortalModuleContribution {
   to: string
   routePrefixes: string[]
   audiences: PortalAudience[]
+  navigationAudiences?: PortalAudience[]
   order?: number
   menuItems?: readonly PortalModuleMenuItem[]
 }
@@ -117,6 +119,13 @@ export interface PortalEmailDefinition {
   placeholders: readonly PortalEmailPlaceholder[]
 }
 
+export interface PortalApiScopeDefinition {
+  id: string
+  action: string
+  labelKey: string
+  descriptionKey?: string
+}
+
 export interface PortalFeatureDefinition<Action extends string = string> {
   id: string
   navigation?: readonly PortalNavigationItem[]
@@ -126,5 +135,7 @@ export interface PortalFeatureDefinition<Action extends string = string> {
   surfaces?: readonly PortalSurfaceContribution[]
   clientIntegration?: PortalClientIntegration
   emails?: readonly PortalEmailDefinition[]
+  /** API capabilities this module intentionally exposes to organization API keys. */
+  apiScopes?: readonly PortalApiScopeDefinition[]
   policy: PortalFeaturePolicy<Action>
 }

package/shared/types/sections/database.ts

@@ -7,6 +7,9 @@ export interface User {
   id: string
   name: string
   email: string
+  firstName?: string | null
+  lastName?: string | null
+  timezone?: string | null
   emailVerified: boolean
   image?: string
   createdAt: Date