@orthacms/users-admin 0.0.0-reserve.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ortha CMS contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @orthacms/users-admin
+
+Part of [Ortha CMS](https://github.com/ortha-source/ortha-cms).
+
+```sh
+npm install @orthacms/users-admin
+```

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { UsersPlugin } from './lib/presentation/usersPlugin';
+export type { UsersAdminPlugin } from './lib/presentation/usersPlugin';
+export { useMembers } from './lib/application/useMembers';
+export { membersKeys } from './lib/infrastructure/membersKeys';
+export type { Member, MemberList, MemberRole, MemberStatus, MemberWorkspace } from './lib/domain/types/member';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/D,YAAY,EACR,MAAM,EACN,UAAU,EACV,UAAU,EACV,YAAY,EACZ,eAAe,EAClB,MAAM,2BAA2B,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { UsersPlugin } from './lib/presentation/usersPlugin';
+export { useMembers } from './lib/application/useMembers';
+export { membersKeys } from './lib/infrastructure/membersKeys';

package/dist/lib/api/useAddWorkspaceMember/index.d.ts

@@ -0,0 +1,16 @@
+import { type ApiError } from '@ortha-cms/utils-admin';
+/** Identifies the membership to create: which member, which workspace. */
+export type AddWorkspaceMemberInput = {
+    /** The member being added. */
+    userId: string;
+    /** The workspace to add them to. */
+    workspaceId: string;
+};
+/**
+ * Adds a member to a workspace from the Workspaces tab. The endpoint is
+ * idempotent (re-adding is a no-op). Invalidates the member's detail (its
+ * `workspaces` list) and the members list (its Workspaces column) on success.
+ * Errors normalize to {@link ApiError}.
+ */
+export declare function useAddWorkspaceMember(): import("@tanstack/react-query").UseMutationResult<void, ApiError, AddWorkspaceMemberInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useAddWorkspaceMember/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useAddWorkspaceMember/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAG9E,0EAA0E;AAC1E,MAAM,MAAM,uBAAuB,GAAG;IAClC,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAUF;;;;;GAKG;AACH,wBAAgB,qBAAqB,wGAcpC"}

package/dist/lib/api/useInviteMember/index.d.ts

@@ -0,0 +1,17 @@
+import type { Member, MemberRole } from '../../types/member';
+/** The shape the invite form submits. */
+export type InviteMemberInput = {
+    email: string;
+    role: MemberRole;
+    name?: string;
+    /** Workspaces to grant the new member access to (optional). */
+    workspaceIds?: string[];
+};
+/**
+ * Invites a person by email. Errors are normalized to `ApiError` so the dialog
+ * can branch on `HTTP_STATUS.CONFLICT` (email already taken); every page of the
+ * members cache is refreshed on success — the new "Invited" row may land on any
+ * page.
+ */
+export declare function useInviteMember(): import("@tanstack/react-query").UseMutationResult<Member, import("@ortha-cms/utils-admin").ApiError, InviteMemberInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useInviteMember/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useInviteMember/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAI7D,yCAAyC;AACzC,MAAM,MAAM,iBAAiB,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AAWF;;;;;GAKG;AACH,wBAAgB,eAAe,qIAE9B"}

package/dist/lib/api/useMembers/index.d.ts

@@ -0,0 +1,15 @@
+import type { MemberList } from '../../types/member';
+import { type MembersListParams } from '../../utils/membersKeys';
+/**
+ * Page size the server applies when none is requested. Mirrors the server's
+ * `DEFAULT_PAGE_SIZE`; used only as a fallback for the page-count math before
+ * the first response lands.
+ */
+export declare const DEFAULT_PAGE_SIZE = 10;
+/**
+ * Fetches one page of members. `keepPreviousData` holds the current rows on
+ * screen while a new page or search resolves, so the table doesn't flash
+ * empty between pages. Disabled until the caller confirms `users:read`.
+ */
+export declare function useMembers(params: MembersListParams, enabled?: boolean): import("@tanstack/react-query").UseQueryResult<NoInfer<MemberList>, Error>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useMembers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useMembers/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAG9E;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAuBpC;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,UAAO,8EAOnE"}

package/dist/lib/api/useMembersMutation/index.d.ts

@@ -0,0 +1,13 @@
+import { type ApiError } from '@ortha-cms/utils-admin';
+/**
+ * Shared shell for the member mutations. Every member mutation normalizes its
+ * transport error to {@link ApiError} (so dialogs can branch on
+ * `HTTP_STATUS.CONFLICT`) and, by default, invalidates the whole members cache
+ * on success (an added/changed/removed row may land on any page). The one
+ * exception is "resend invite", which changes no list-visible field — it opts
+ * out with `invalidate: false`. Each hook is then just its request function.
+ */
+export declare function useMembersMutation<TInput, TResult>(mutationFn: (input: TInput) => Promise<TResult>, { invalidate }?: {
+    invalidate?: boolean;
+}): import("@tanstack/react-query").UseMutationResult<TResult, ApiError, TInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useMembersMutation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useMembersMutation/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGnE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAC9C,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAC/C,EAAE,UAAiB,EAAE,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,yFAevD"}

package/dist/lib/api/useRemoveWorkspaceMember/index.d.ts

@@ -0,0 +1,15 @@
+import { type ApiError } from '@ortha-cms/utils-admin';
+/** Identifies the membership to remove: which member, which workspace. */
+export type RemoveWorkspaceMemberInput = {
+    /** The member being removed. */
+    userId: string;
+    /** The workspace to remove them from. */
+    workspaceId: string;
+};
+/**
+ * Removes a member from a workspace from the Workspaces tab. Invalidates the
+ * member's detail (its `workspaces` list) and the members list (its Workspaces
+ * column) on success. Errors normalize to {@link ApiError}.
+ */
+export declare function useRemoveWorkspaceMember(): import("@tanstack/react-query").UseMutationResult<void, ApiError, RemoveWorkspaceMemberInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useRemoveWorkspaceMember/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useRemoveWorkspaceMember/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAG9E,0EAA0E;AAC1E,MAAM,MAAM,0BAA0B,GAAG;IACrC,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAUF;;;;GAIG;AACH,wBAAgB,wBAAwB,2GAcvC"}

package/dist/lib/api/useResendInvite/index.d.ts

@@ -0,0 +1,8 @@
+import type { Member } from '../../types/member';
+/**
+ * Re-sends a pending member's invite (the server rotates the token,
+ * invalidating the previous link). No cache invalidation — the row itself is
+ * unchanged. Errors normalize to `ApiError`.
+ */
+export declare function useResendInvite(): import("@tanstack/react-query").UseMutationResult<Member, import("@ortha-cms/utils-admin").ApiError, string, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useResendInvite/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useResendInvite/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAYjD;;;;GAIG;AACH,wBAAgB,eAAe,0HAI9B"}

package/dist/lib/api/useRevokeInvite/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Revokes a pending invite — the row disappears from the list (the server
+ * deletes the placeholder account). Invalidates the members cache on
+ * success. Errors normalize to `ApiError`.
+ */
+export declare function useRevokeInvite(): import("@tanstack/react-query").UseMutationResult<void, import("@ortha-cms/utils-admin").ApiError, string, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useRevokeInvite/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useRevokeInvite/index.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,wBAAgB,eAAe,wHAE9B"}

package/dist/lib/api/useRevokeSession/index.d.ts

@@ -0,0 +1,15 @@
+import { type ApiError } from '@ortha-cms/utils-admin';
+/** Identifies the session to revoke: whose, and which. */
+export type RevokeSessionInput = {
+    /** The member who owns the session. */
+    userId: string;
+    /** The session row id to revoke. */
+    sessionId: string;
+};
+/**
+ * Revokes a member's session from the Sessions tab. Invalidates that member's
+ * sessions query on success so the revoked row drops off. Errors normalize to
+ * {@link ApiError}.
+ */
+export declare function useRevokeSession(): import("@tanstack/react-query").UseMutationResult<void, ApiError, RevokeSessionInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useRevokeSession/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useRevokeSession/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAG9E,0DAA0D;AAC1D,MAAM,MAAM,kBAAkB,GAAG;IAC7B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAUF;;;;GAIG;AACH,wBAAgB,gBAAgB,mGAa/B"}

package/dist/lib/api/useSetMemberStatus/index.d.ts

@@ -0,0 +1,15 @@
+import type { Member } from '../../types/member';
+/** Input for {@link useSetMemberStatus}: who, and which way to flip. */
+export type SetMemberStatusInput = {
+    /** The member to update. */
+    id: string;
+    /** `true` disables the account, `false` re-enables it. */
+    disabled: boolean;
+};
+/**
+ * Disables or re-enables a member's account from the row menu. One hook for
+ * the pair — the menu renders exactly one of the two actions per row, and
+ * both invalidate the same cache. Errors normalize to `ApiError`.
+ */
+export declare function useSetMemberStatus(): import("@tanstack/react-query").UseMutationResult<Member, import("@ortha-cms/utils-admin").ApiError, SetMemberStatusInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useSetMemberStatus/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useSetMemberStatus/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAIjD,wEAAwE;AACxE,MAAM,MAAM,oBAAoB,GAAG;IAC/B,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,0DAA0D;IAC1D,QAAQ,EAAE,OAAO,CAAC;CACrB,CAAC;AAkBF;;;;GAIG;AACH,wBAAgB,kBAAkB,wIAIjC"}

package/dist/lib/api/useUpdateMember/index.d.ts

@@ -0,0 +1,15 @@
+import type { Member, MemberRole } from '../../types/member';
+/** A partial member edit; omitted fields are left unchanged. */
+export type UpdateMemberInput = {
+    id: string;
+    name?: string;
+    role?: MemberRole;
+};
+/**
+ * Edits a member's name and/or role (the inline role select and the Edit
+ * dialog both submit through here). Errors normalize to `ApiError` —
+ * `HTTP_STATUS.CONFLICT` means the last-admin guardrail (or the self-role
+ * guard) rejected the change. Invalidates the members cache on success.
+ */
+export declare function useUpdateMember(): import("@tanstack/react-query").UseMutationResult<Member, import("@ortha-cms/utils-admin").ApiError, UpdateMemberInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useUpdateMember/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useUpdateMember/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAI7D,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC;CACrB,CAAC;AAYF;;;;;GAKG;AACH,wBAAgB,eAAe,qIAE9B"}

package/dist/lib/api/useUserDetail/index.d.ts

@@ -0,0 +1,9 @@
+import type { Member } from '../../types/member';
+/**
+ * Fetches a single member for the user detail page. The result is shared with
+ * every tab via the route's Outlet context, so the tabs never re-fetch. A 404
+ * (unknown/deleted member) surfaces as the query's error so the layout can show
+ * a not-found state. Disabled until the caller confirms `users:read`.
+ */
+export declare function useUserDetail(id: string, enabled?: boolean): import("@tanstack/react-query").UseQueryResult<NoInfer<Member>, Error>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useUserDetail/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useUserDetail/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAkBjD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,UAAO,0EAMvD"}

package/dist/lib/api/useUserSessions/index.d.ts

@@ -0,0 +1,25 @@
+/** A live session as the detail page's Sessions tab renders it. */
+export type UserSession = {
+    /** Revocation handle (the session row id). */
+    id: string;
+    /** Originating `User-Agent`, or `null` if it was never captured. */
+    userAgent: string | null;
+    /** Originating IP, or `null` if it was never captured. */
+    ipAddress: string | null;
+    /** When the session was opened. */
+    createdAt: Date;
+    /** Last authenticated request seen on this session. */
+    lastSeenAt: Date;
+    /** Absolute expiry. */
+    expiresAt: Date;
+    /** Whether this is the viewer's own session (never revocable from here). */
+    current: boolean;
+};
+/**
+ * Fetches the live sessions for a member (the Sessions tab). `staleTime: 0` so
+ * a session that has since expired or been revoked elsewhere drops off on the
+ * next mount/refocus rather than lingering. Gated on `users:update` (the tab
+ * is only shown to admins who can act on what they see).
+ */
+export declare function useUserSessions(id: string, enabled?: boolean): import("@tanstack/react-query").UseQueryResult<NoInfer<UserSession[]>, Error>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useUserSessions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useUserSessions/index.ts"],"names":[],"mappings":"AAIA,mEAAmE;AACnE,MAAM,MAAM,WAAW,GAAG;IACtB,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mCAAmC;IACnC,SAAS,EAAE,IAAI,CAAC;IAChB,uDAAuD;IACvD,UAAU,EAAE,IAAI,CAAC;IACjB,uBAAuB;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAkCF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,UAAO,iFAOzD"}

package/dist/lib/api/useWorkspaceOptions/index.d.ts

@@ -0,0 +1,18 @@
+import type { AvatarColor } from '@ortha-cms/design-system';
+/** A workspace as the invite wizard's assignment step renders it. */
+export type WorkspaceOption = {
+    id: string;
+    name: string;
+    description: string | null;
+    initials: string;
+    color: AvatarColor;
+};
+/** Query key for the workspace options list. */
+export declare const workspaceOptionsKey: readonly ["workspaces", "options"];
+/**
+ * Lists every workspace (via the shared `GET /api/workspaces`) for the invite
+ * wizard's "assign workspaces" step. `enabled` defers the fetch until the step
+ * is reached.
+ */
+export declare function useWorkspaceOptions(enabled?: boolean): import("@tanstack/react-query").UseQueryResult<NoInfer<WorkspaceOption[]>, Error>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/api/useWorkspaceOptions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/api/useWorkspaceOptions/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,qEAAqE;AACrE,MAAM,MAAM,eAAe,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,WAAW,CAAC;CACtB,CAAC;AAUF,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,oCAAqC,CAAC;AAkBtE;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,UAAO,qFAOjD"}

package/dist/lib/application/useAddWorkspaceMember/index.d.ts

@@ -0,0 +1,11 @@
+import type { ApiError } from '@orthacms/utils-admin';
+import type { AddWorkspaceMemberInput } from '../../infrastructure/memberGateway';
+export type { AddWorkspaceMemberInput } from '../../infrastructure/memberGateway';
+/**
+ * Adds a member to a workspace from the Workspaces tab via the gateway. The
+ * endpoint is idempotent (re-adding is a no-op). Invalidates the member's detail
+ * (its `workspaces` list) and the members list (its Workspaces column) on
+ * success. Errors normalize to {@link ApiError}.
+ */
+export declare function useAddWorkspaceMember(): import("@tanstack/react-query").UseMutationResult<void, ApiError, AddWorkspaceMemberInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/application/useAddWorkspaceMember/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/application/useAddWorkspaceMember/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAGlF,YAAY,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAElF;;;;;GAKG;AACH,wBAAgB,qBAAqB,wGAWpC"}

package/dist/lib/application/useAddWorkspaceMember/index.js

@@ -0,0 +1,21 @@
+import { useMutation, useQueryClient } from '@tanstack/react-query';
+import { httpMemberGateway } from '../../infrastructure/httpMemberGateway';
+import { membersKeys } from '../../infrastructure/membersKeys';
+/**
+ * Adds a member to a workspace from the Workspaces tab via the gateway. The
+ * endpoint is idempotent (re-adding is a no-op). Invalidates the member's detail
+ * (its `workspaces` list) and the members list (its Workspaces column) on
+ * success. Errors normalize to {@link ApiError}.
+ */
+export function useAddWorkspaceMember() {
+    const queryClient = useQueryClient();
+    return useMutation({
+        mutationFn: (input) => httpMemberGateway.addWorkspace(input),
+        onSuccess: (_data, { userId }) => {
+            queryClient.invalidateQueries({
+                queryKey: membersKeys.detail(userId)
+            });
+            queryClient.invalidateQueries({ queryKey: membersKeys.all });
+        }
+    });
+}

package/dist/lib/application/useInviteMember/index.d.ts

@@ -0,0 +1,12 @@
+import type { InvitedMember } from '../../domain/types/member';
+import type { InviteMemberInput } from '../../infrastructure/memberGateway';
+export type { InviteMemberInput } from '../../infrastructure/memberGateway';
+/**
+ * Invites a person by email via the gateway, resolving with the new member and
+ * their one-time invite token (the admin's only chance to capture the link).
+ * Errors are normalized to `ApiError` so the invite flow can branch on
+ * `HTTP_STATUS.CONFLICT` (email already taken); every page of the members cache
+ * is refreshed on success — the new "Invited" row may land on any page.
+ */
+export declare function useInviteMember(): import("@tanstack/react-query").UseMutationResult<InvitedMember, import("@orthacms/utils-admin").ApiError, InviteMemberInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/application/useInviteMember/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/application/useInviteMember/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAG5E,YAAY,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAE5E;;;;;;GAMG;AACH,wBAAgB,eAAe,2IAI9B"}

package/dist/lib/application/useInviteMember/index.js

@@ -0,0 +1,12 @@
+import { httpMemberGateway } from '../../infrastructure/httpMemberGateway';
+import { useMembersMutation } from '../useMembersMutation';
+/**
+ * Invites a person by email via the gateway, resolving with the new member and
+ * their one-time invite token (the admin's only chance to capture the link).
+ * Errors are normalized to `ApiError` so the invite flow can branch on
+ * `HTTP_STATUS.CONFLICT` (email already taken); every page of the members cache
+ * is refreshed on success — the new "Invited" row may land on any page.
+ */
+export function useInviteMember() {
+    return useMembersMutation((input) => httpMemberGateway.invite(input));
+}

package/dist/lib/application/useInviteMemberFlow/index.d.ts

@@ -0,0 +1,59 @@
+import type { MemberRole } from '../../domain/types/member';
+/** The fields the invite wizard collects, before the final guard + submit. */
+export type InviteMemberDraft = {
+    /** The invitee's email (trimmed by the flow). */
+    email: string;
+    /** The global role granted on acceptance. */
+    role: MemberRole;
+    /** Optional display name (blank becomes omitted). */
+    name?: string;
+    /** Workspaces to grant access to; `all` is expanded to ids by the caller. */
+    workspaceIds: string[];
+};
+/**
+ * Why the last submission failed, as a machine key the page maps to its inline
+ * alert copy: `taken` (email already exists — `409`) or `failed` (anything
+ * else).
+ */
+export type InviteErrorReason = 'taken' | 'failed';
+/** A completed invite, and the link the admin now has to deliver. */
+export type SentInvite = {
+    /** The invitee's email, as accepted by the server. */
+    email: string;
+    /** The full invite link, built from the one-time token. */
+    link: string;
+};
+/** What {@link useInviteMemberFlow} returns. */
+export type InviteMemberFlow = {
+    /**
+     * Runs the invite use case: guards the email through the {@link Email} value
+     * object, POSTs via the invite mutation (cache invalidation), then records
+     * the resulting link in {@link sent}. Rejections are swallowed — the caller
+     * reads {@link errorReason} to render the inline alert and let the user
+     * retry.
+     */
+    submit: (draft: InviteMemberDraft) => Promise<void>;
+    /** Whether an invite is currently in flight. */
+    submitting: boolean;
+    /** Why the last submission failed, or `null` when it hasn't. */
+    errorReason: InviteErrorReason | null;
+    /**
+     * The invite that was just sent, or `null` while the wizard is still
+     * collecting. Set once, and never re-fetchable — the server returns the raw
+     * token exactly once, so this state is the only copy.
+     */
+    sent: SentInvite | null;
+};
+/**
+ * The invite-member use-case hook. Orchestrates the wizard's submission — Email
+ * VO validation → invite → the shareable link — so the invite page stays layout
+ * + fields and owns none of the flow. The step's continue gate already blocks a
+ * malformed email; the {@link Email} guard here is the last check before the
+ * request.
+ *
+ * It deliberately does **not** navigate away on success: nothing emails the
+ * invite yet, so leaving the page would throw away the only copy of the link.
+ * The page shows it instead, and the admin leaves when they are done with it.
+ */
+export declare function useInviteMemberFlow(): InviteMemberFlow;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/application/useInviteMemberFlow/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/application/useInviteMemberFlow/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAI5D,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG;IAC5B,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,IAAI,EAAE,UAAU,CAAC;IACjB,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,YAAY,EAAE,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnD,qEAAqE;AACrE,MAAM,MAAM,UAAU,GAAG;IACrB,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,gBAAgB,GAAG;IAC3B;;;;;;OAMG;IACH,MAAM,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,gDAAgD;IAChD,UAAU,EAAE,OAAO,CAAC;IACpB,gEAAgE;IAChE,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC;;;;OAIG;IACH,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,CAoCtD"}

package/dist/lib/application/useInviteMemberFlow/index.js

@@ -0,0 +1,47 @@
+import { useCallback, useState } from 'react';
+import { HTTP_STATUS } from '@orthacms/utils-admin';
+import { Email } from '../../domain/value-objects/email';
+import { inviteLinkFor } from '../../infrastructure/inviteLink';
+import { useInviteMember } from '../useInviteMember';
+/**
+ * The invite-member use-case hook. Orchestrates the wizard's submission — Email
+ * VO validation → invite → the shareable link — so the invite page stays layout
+ * + fields and owns none of the flow. The step's continue gate already blocks a
+ * malformed email; the {@link Email} guard here is the last check before the
+ * request.
+ *
+ * It deliberately does **not** navigate away on success: nothing emails the
+ * invite yet, so leaving the page would throw away the only copy of the link.
+ * The page shows it instead, and the admin leaves when they are done with it.
+ */
+export function useInviteMemberFlow() {
+    const invite = useInviteMember();
+    const [sent, setSent] = useState(null);
+    const submit = useCallback(async (draft) => {
+        const email = draft.email.trim();
+        try {
+            // Guard the shape through the domain VO before hitting the API.
+            Email.create(email);
+            const created = await invite.mutateAsync({
+                email,
+                role: draft.role,
+                name: draft.name?.trim() || undefined,
+                workspaceIds: draft.workspaceIds
+            });
+            setSent({
+                email: created.email,
+                link: inviteLinkFor(created.inviteToken)
+            });
+        }
+        catch {
+            // The page's inline alert (via `errorReason`) explains; the user
+            // can go back, fix the email, and retry.
+        }
+    }, [invite]);
+    const errorReason = invite.isError
+        ? invite.error.status === HTTP_STATUS.CONFLICT
+            ? 'taken'
+            : 'failed'
+        : null;
+    return { submit, submitting: invite.isPending, errorReason, sent };
+}

package/dist/lib/application/useIssuePasswordReset/index.d.ts

@@ -0,0 +1,12 @@
+import type { MemberWithResetToken } from '../../domain/types/member';
+/**
+ * Mints a one-time password-reset link for a member via the gateway (the server
+ * rotates the token, invalidating any previous link). Resolves with the member
+ * **and** the raw token, so the caller can show the link — minting without
+ * handing the link over would leave the member with nothing and the admin with
+ * a dead one. No cache invalidation: no list-visible field changes, exactly
+ * like "resend invite". Errors normalize to `ApiError`, so a caller can branch
+ * on `HTTP_STATUS.CONFLICT` for "not active" / "just issued".
+ */
+export declare function useIssuePasswordReset(): import("@tanstack/react-query").UseMutationResult<MemberWithResetToken, import("@orthacms/utils-admin").ApiError, string, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/application/useIssuePasswordReset/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/application/useIssuePasswordReset/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAItE;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,uIAKpC"}

package/dist/lib/application/useIssuePasswordReset/index.js

@@ -0,0 +1,14 @@
+import { httpMemberGateway } from '../../infrastructure/httpMemberGateway';
+import { useMembersMutation } from '../useMembersMutation';
+/**
+ * Mints a one-time password-reset link for a member via the gateway (the server
+ * rotates the token, invalidating any previous link). Resolves with the member
+ * **and** the raw token, so the caller can show the link — minting without
+ * handing the link over would leave the member with nothing and the admin with
+ * a dead one. No cache invalidation: no list-visible field changes, exactly
+ * like "resend invite". Errors normalize to `ApiError`, so a caller can branch
+ * on `HTTP_STATUS.CONFLICT` for "not active" / "just issued".
+ */
+export function useIssuePasswordReset() {
+    return useMembersMutation((id) => httpMemberGateway.issuePasswordReset(id), { invalidate: false });
+}

package/dist/lib/application/useMembers/index.d.ts

@@ -0,0 +1,15 @@
+import { type MembersListParams } from '../../infrastructure/membersKeys';
+/**
+ * Page size the server applies when none is requested. Mirrors the server's
+ * `DEFAULT_PAGE_SIZE`; used only as a fallback for the page-count math before
+ * the first response lands.
+ */
+export declare const DEFAULT_PAGE_SIZE = 10;
+/**
+ * Fetches one page of members via the member gateway. `keepPreviousData` holds
+ * the current rows on screen while a new page or search resolves, so the table
+ * doesn't flash empty between pages. Disabled until the caller confirms
+ * `users:read`.
+ */
+export declare function useMembers(params: MembersListParams, enabled?: boolean): import("@tanstack/react-query").UseQueryResult<NoInfer<import("../../..").MemberList>, Error>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/application/useMembers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/application/useMembers/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAEH,KAAK,iBAAiB,EACzB,MAAM,kCAAkC,CAAC;AAE1C;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,UAAO,iGAOnE"}

package/dist/lib/application/useMembers/index.js

@@ -0,0 +1,23 @@
+import { keepPreviousData, useQuery } from '@tanstack/react-query';
+import { httpMemberGateway } from '../../infrastructure/httpMemberGateway';
+import { membersKeys } from '../../infrastructure/membersKeys';
+/**
+ * Page size the server applies when none is requested. Mirrors the server's
+ * `DEFAULT_PAGE_SIZE`; used only as a fallback for the page-count math before
+ * the first response lands.
+ */
+export const DEFAULT_PAGE_SIZE = 10;
+/**
+ * Fetches one page of members via the member gateway. `keepPreviousData` holds
+ * the current rows on screen while a new page or search resolves, so the table
+ * doesn't flash empty between pages. Disabled until the caller confirms
+ * `users:read`.
+ */
+export function useMembers(params, enabled = true) {
+    return useQuery({
+        queryKey: membersKeys.list(params),
+        queryFn: () => httpMemberGateway.list(params),
+        placeholderData: keepPreviousData,
+        enabled
+    });
+}

package/dist/lib/application/useMembersMutation/index.d.ts

@@ -0,0 +1,14 @@
+import { type ApiError } from '@orthacms/utils-admin';
+/**
+ * Shared shell for the member mutations. The gateway already normalizes its
+ * transport error to {@link ApiError} (so dialogs can branch on
+ * `HTTP_STATUS.CONFLICT`); this re-normalizes defensively and, by default,
+ * invalidates the whole members cache on success (an added/changed/removed row
+ * may land on any page). The one exception is "resend invite", which changes no
+ * list-visible field — it opts out with `invalidate: false`. Each hook is then
+ * just its gateway call.
+ */
+export declare function useMembersMutation<TInput, TResult>(mutationFn: (input: TInput) => Promise<TResult>, { invalidate }?: {
+    invalidate?: boolean;
+}): import("@tanstack/react-query").UseMutationResult<TResult, ApiError, TInput, unknown>;
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/application/useMembersMutation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/application/useMembersMutation/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAGlE;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAC9C,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAC/C,EAAE,UAAiB,EAAE,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,yFAevD"}

package/dist/lib/application/useMembersMutation/index.js

@@ -0,0 +1,25 @@
+import { useMutation, useQueryClient } from '@tanstack/react-query';
+import { toApiError } from '@orthacms/utils-admin';
+import { membersKeys } from '../../infrastructure/membersKeys';
+/**
+ * Shared shell for the member mutations. The gateway already normalizes its
+ * transport error to {@link ApiError} (so dialogs can branch on
+ * `HTTP_STATUS.CONFLICT`); this re-normalizes defensively and, by default,
+ * invalidates the whole members cache on success (an added/changed/removed row
+ * may land on any page). The one exception is "resend invite", which changes no
+ * list-visible field — it opts out with `invalidate: false`. Each hook is then
+ * just its gateway call.
+ */
+export function useMembersMutation(mutationFn, { invalidate = true } = {}) {
+    const queryClient = useQueryClient();
+    return useMutation({
+        mutationFn: (input) => mutationFn(input).catch((error) => {
+            throw toApiError(error);
+        }),
+        onSuccess: invalidate
+            ? () => {
+                queryClient.invalidateQueries({ queryKey: membersKeys.all });
+            }
+            : undefined
+    });
+}