@protobase/server 0.53.8 → 0.54.1

package/dist/better-auth/auth-settings.d.ts

@@ -2,6 +2,7 @@ import { UserColumn } from "./user-table.js";
 import { Mailer } from "../mail/smtp-mailer.js";
 import { SignInPolicy } from "./sign-in-policy.js";
 import { StaffSignIn } from "./staff-log.js";
+import { Person } from "./organizations/people-endpoint.js";
 import { RoleDefinitions } from "./organizations/role-definitions.js";
 import { ConnectedApp } from "./mcp/connected-apps.js";
 import { ReplacingContext } from "./end-replaced-session.js";
@@ -5222,6 +5223,34 @@ export declare const buildAppAuth: (settings: AuthSettings, input: AppAuthInput)
   }> | {
     id: "protobase-organizations";
     endpoints: {
+      peopleEndpoint: import("better-call").StrictEndpoint<"/organization/people", {
+        method: "GET";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+      }, {
+        people: Person[];
+      }>;
       setAppRoles: import("better-call").StrictEndpoint<"/organization/set-app-roles", {
         method: "POST";
         use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{

package/dist/better-auth/create-auth.d.ts

@@ -2,6 +2,7 @@ import { UserColumn, UserTableOptions } from "./user-table.js";
 import { Mailer } from "../mail/smtp-mailer.js";
 import { SignInPolicy } from "./sign-in-policy.js";
 import { StaffSignIn } from "./staff-log.js";
+import { Person } from "./organizations/people-endpoint.js";
 import { RoleDefinitions, RolesInput } from "./organizations/role-definitions.js";
 import { ConnectedApp } from "./mcp/connected-apps.js";
 import { ReplacingContext } from "./end-replaced-session.js";
@@ -5341,6 +5342,34 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
   }> | {
     id: "protobase-organizations";
     endpoints: {
+      peopleEndpoint: import("better-call").StrictEndpoint<"/organization/people", {
+        method: "GET";
+        use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+          session: {
+            session: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              userId: string;
+              expiresAt: Date;
+              token: string;
+              ipAddress?: string | null | undefined;
+              userAgent?: string | null | undefined;
+            };
+            user: Record<string, any> & {
+              id: string;
+              createdAt: Date;
+              updatedAt: Date;
+              email: string;
+              emailVerified: boolean;
+              name: string;
+              image?: string | null | undefined;
+            };
+          };
+        }>>[];
+      }, {
+        people: Person[];
+      }>;
       setAppRoles: import("better-call").StrictEndpoint<"/organization/set-app-roles", {
         method: "POST";
         use: import("better-call").Middleware<import("better-call").MiddlewareOptions, (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{

package/dist/better-auth/organizations/people-endpoint.d.ts

@@ -0,0 +1,8 @@
+//#region src/better-auth/organizations/people-endpoint.d.ts
+/** A member as everyone in the organization may see them: their user id, name and photo, never their address. */
+export type Person = {
+  id: string;
+  name: string;
+  image?: string;
+};
+//#endregion

package/dist/better-auth/organizations/people-endpoint.js

@@ -0,0 +1,48 @@
+import { everyRow, findMember, membersOf } from "./store.js";
+import { APIError, createAuthEndpoint, sessionMiddleware } from "better-auth/api";
+//#region src/better-auth/organizations/people-endpoint.ts
+/** The people of these users, by name; one without a name is shown by nothing else, so is left out. */
+const peopleOf = (users) => users.flatMap((user) => user.name ? [{
+	id: user.id,
+	name: user.name,
+	...user.image && { image: user.image }
+}] : []).sort((a, b) => a.name.localeCompare(b.name));
+/**
+* `GET /organization/people`: the members of the organization the session works in, for every member of it, as
+* `{ people: Person[] }`, to show authors and offer mentions. The organization comes from the session alone, never
+* from the request, and someone who is not a member of it, a global role included, is refused.
+*/
+const peopleEndpoint = createAuthEndpoint("/organization/people", {
+	method: "GET",
+	use: [sessionMiddleware]
+}, async (ctx) => {
+	const { adapter } = ctx.context;
+	const { user, session } = ctx.context.session;
+	const organizationId = session.activeOrganizationId;
+	const member = organizationId ? await findMember(adapter, {
+		organizationId,
+		userId: user.id
+	}) : void 0;
+	if (!organizationId || !member) throw new APIError("FORBIDDEN", {
+		code: "NOT_A_MEMBER",
+		message: "Only the members of the organization you work in can see its people."
+	});
+	const ids = (await membersOf(adapter, organizationId)).map((row) => row.userId);
+	const users = await adapter.findMany({
+		model: "user",
+		where: [{
+			field: "id",
+			operator: "in",
+			value: ids
+		}],
+		select: [
+			"id",
+			"name",
+			"image"
+		],
+		limit: everyRow
+	});
+	return ctx.json({ people: peopleOf(users) });
+});
+//#endregion
+export { peopleEndpoint, peopleOf };

package/dist/better-auth/organizations/protobase-plugin.js

@@ -1,17 +1,19 @@
 import { invitationLinkHook } from "../invitations/invitation-link-hook.js";
 import { invitationEndpoints } from "./invitation-endpoints.js";
 import { memberEndpoints } from "./member-endpoints.js";
+import { peopleEndpoint } from "./people-endpoint.js";
 //#region src/better-auth/organizations/protobase-plugin.ts
 /**
 * Protobase's endpoints beside Better Auth's organization plugin: accepting invitations signed in, app roles, handing
-* ownership over, and finding organizations for people with a global role. Without a mailer, whoever invites gets the
-* link in the answer.
+* ownership over, the people of the organization one works in for its members, and finding organizations for people
+* with a global role. Without a mailer, whoever invites gets the link in the answer.
 */
 const protobaseOrganizationPlugin = ({ resolved, mail }) => ({
 	id: "protobase-organizations",
 	endpoints: {
 		...invitationEndpoints({ resolved }),
-		...memberEndpoints({ resolved })
+		...memberEndpoints({ resolved }),
+		peopleEndpoint
 	},
 	hooks: { after: mail ? [] : [invitationLinkHook(["/organization/invite-member"], resolved.invitationUrl)] }
 });

package/dist/check-views.js

@@ -34,7 +34,7 @@ const sensitiveErrors = (view, model) => {
 		["the sidebar", layoutItems(view.layout).flatMap((item) => item.kind === "sidebar" ? item.fields : [])],
 		["a map", layoutItems(view.layout).flatMap((item) => item.kind === "map" ? [item.latitude, item.longitude] : [])],
 		["a gallery", layoutItems(view.layout).flatMap((item) => item.kind === "gallery" && item.image !== void 0 ? [item.image] : [])],
-		["the recent records", view.nav?.recent ? [view.nav.recent.status] : []],
+		["the recent records", view.nav?.recent?.status === void 0 ? [] : [view.nav.recent.status]],
 		["an action", view.actions.flatMap((action) => [...actionFields(action.run), ...actionWhenFields(action.when)])]
 	].flatMap(([place, names]) => [...new Set(names.filter(sensitive))].map((name) => `sensitive field "${name}" cannot be in ${place}`));
 };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.53.8";
+var version = "0.54.1";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.53.8",
+  "version": "0.54.1",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -40,9 +40,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.53.8",
-    "@protobase/query": "0.53.8",
-    "@protobase/schema": "0.53.8",
+    "@protobase/layout": "0.54.1",
+    "@protobase/query": "0.54.1",
+    "@protobase/schema": "0.54.1",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",