@shipfox/api-workspaces 2.0.0

package/dist/core/invitations.d.ts

@@ -0,0 +1,51 @@
+import type { UserContextMembership } from '@shipfox/api-auth-context';
+import { type AcceptInvitationResult } from '#db/invitations.js';
+import type { Invitation } from './entities/invitation.js';
+export declare function createWorkspaceInvitation(params: {
+    workspaceId: string;
+    email: string;
+    invitedByUserId: string;
+    invitedByDisplay?: string | null;
+    invitedByMemberships: ReadonlyArray<UserContextMembership>;
+}): Promise<Invitation>;
+export declare function peekInvitationByRawToken(params: {
+    token: string;
+}): Promise<Invitation | undefined>;
+export type PreviewInvitationResult = {
+    status: 'pending';
+    workspaceId: string;
+    workspaceName: string;
+    email: string;
+    invitedByDisplay: string | null;
+    expiresAt: Date;
+} | {
+    status: 'expired';
+    workspaceName: string;
+    expiresAt: Date;
+} | {
+    status: 'already_used';
+    workspaceName: string;
+} | {
+    status: 'invalid';
+};
+export declare function previewInvitation(params: {
+    token: string;
+}): Promise<PreviewInvitationResult>;
+export declare function acceptWorkspaceInvitation(params: {
+    token: string;
+    userId: string;
+    email: string;
+    name?: string | null | undefined;
+}): Promise<AcceptInvitationResult>;
+export declare function listWorkspaceInvitations(params: {
+    workspaceId: string;
+    requesterUserId: string;
+    requesterMemberships: ReadonlyArray<UserContextMembership>;
+}): Promise<Invitation[]>;
+export declare function revokeWorkspaceInvitation(params: {
+    workspaceId: string;
+    requesterUserId: string;
+    requesterMemberships: ReadonlyArray<UserContextMembership>;
+    invitationId: string;
+}): Promise<void>;
+//# sourceMappingURL=invitations.d.ts.map

package/dist/core/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../src/core/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,2BAA2B,CAAC;AAGrE,OAAO,EACL,KAAK,sBAAsB,EAO5B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAsBzD,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,UAAU,CAAC,CAuBtB;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAElC;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,IAAI,CAAC;CACjB,GACD;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAC,GAC3D;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAC,GAC/C;IAAC,MAAM,EAAE,SAAS,CAAA;CAAC,CAAC;AAExB,wBAAsB,iBAAiB,CAAC,MAAM,EAAE;IAAC,KAAK,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAgCjG;AAED,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CAClC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA4BlC;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAQxB;AAED,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAC3D,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB"}

package/dist/core/invitations.js

@@ -0,0 +1,136 @@
+import { generateOpaqueToken, hashOpaqueToken } from '@shipfox/node-tokens';
+import { config } from '#config.js';
+import { acceptInvitation, createInvitation, findInvitationById, findInvitationByToken, listOpenInvitationsByWorkspace, revokeInvitation } from '#db/invitations.js';
+import { getWorkspaceById } from '#db/workspaces.js';
+import { InvitationEmailMismatchError, InvitationNotFoundError, InvitationWorkspaceMismatchError, TokenAlreadyUsedError, TokenExpiredError, TokenInvalidError } from './errors.js';
+import { requireWorkspaceMembership } from './workspaces.js';
+const INVITATION_TTL_DAYS = 7;
+function daysFromNow(days) {
+    return new Date(Date.now() + days * 24 * 60 * 60 * 1000);
+}
+function nonBlankOrFallback(value, fallback) {
+    const trimmed = value?.trim();
+    return trimmed ? trimmed : fallback;
+}
+export async function createWorkspaceInvitation(params) {
+    const { workspace } = await requireWorkspaceMembership({
+        workspaceId: params.workspaceId,
+        userId: params.invitedByUserId,
+        memberships: params.invitedByMemberships
+    });
+    const rawToken = generateOpaqueToken('invitation');
+    const invitation = await createInvitation({
+        workspaceId: params.workspaceId,
+        email: params.email,
+        hashedToken: hashOpaqueToken(rawToken),
+        expiresAt: daysFromNow(INVITATION_TTL_DAYS),
+        invitedByUserId: params.invitedByUserId,
+        invitedByDisplay: params.invitedByDisplay ?? null,
+        sendEmail: {
+            workspaceName: nonBlankOrFallback(workspace.name, 'your workspace'),
+            inviterName: nonBlankOrFallback(params.invitedByDisplay, 'A teammate'),
+            inviteLink: `${config.CLIENT_BASE_URL}/invitations/accept?token=${rawToken}`
+        }
+    });
+    return invitation;
+}
+export async function peekInvitationByRawToken(params) {
+    return await findInvitationByToken({
+        hashedToken: hashOpaqueToken(params.token)
+    });
+}
+export async function previewInvitation(params) {
+    const invitation = await peekInvitationByRawToken({
+        token: params.token
+    });
+    if (!invitation) {
+        return {
+            status: 'invalid'
+        };
+    }
+    const workspace = await getWorkspaceById(invitation.workspaceId);
+    if (!workspace) {
+        // Workspace cascade-deleted — the invitation row is orphaned. Treat as invalid.
+        return {
+            status: 'invalid'
+        };
+    }
+    if (invitation.acceptedAt !== null) {
+        return {
+            status: 'already_used',
+            workspaceName: workspace.name
+        };
+    }
+    if (invitation.expiresAt.getTime() <= Date.now()) {
+        return {
+            status: 'expired',
+            workspaceName: workspace.name,
+            expiresAt: invitation.expiresAt
+        };
+    }
+    return {
+        status: 'pending',
+        workspaceId: workspace.id,
+        workspaceName: workspace.name,
+        email: invitation.email,
+        invitedByDisplay: invitation.invitedByDisplay,
+        expiresAt: invitation.expiresAt
+    };
+}
+export async function acceptWorkspaceInvitation(params) {
+    const invitation = await peekInvitationByRawToken({
+        token: params.token
+    });
+    if (!invitation) {
+        throw new TokenInvalidError('Invitation token is invalid');
+    }
+    if (invitation.acceptedAt !== null) {
+        throw new TokenAlreadyUsedError();
+    }
+    if (invitation.expiresAt.getTime() <= Date.now()) {
+        throw new TokenExpiredError();
+    }
+    if (params.email !== invitation.email) {
+        throw new InvitationEmailMismatchError();
+    }
+    const result = await acceptInvitation({
+        invitationId: invitation.id,
+        acceptedByUserId: params.userId,
+        acceptedByUserName: params.name
+    });
+    if (!result) {
+        throw new TokenInvalidError('Invitation is no longer valid');
+    }
+    return result;
+}
+export async function listWorkspaceInvitations(params) {
+    await requireWorkspaceMembership({
+        workspaceId: params.workspaceId,
+        userId: params.requesterUserId,
+        memberships: params.requesterMemberships
+    });
+    return listOpenInvitationsByWorkspace({
+        workspaceId: params.workspaceId
+    });
+}
+export async function revokeWorkspaceInvitation(params) {
+    await requireWorkspaceMembership({
+        workspaceId: params.workspaceId,
+        userId: params.requesterUserId,
+        memberships: params.requesterMemberships
+    });
+    const invitation = await findInvitationById({
+        id: params.invitationId
+    });
+    if (!invitation) {
+        throw new InvitationNotFoundError(params.invitationId);
+    }
+    if (invitation.workspaceId !== params.workspaceId) {
+        throw new InvitationWorkspaceMismatchError();
+    }
+    await revokeInvitation({
+        invitationId: params.invitationId
+    });
+}
+
+//# sourceMappingURL=invitations.js.map

package/dist/core/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/invitations.ts"],"sourcesContent":["import type {UserContextMembership} from '@shipfox/api-auth-context';\nimport {generateOpaqueToken, hashOpaqueToken} from '@shipfox/node-tokens';\nimport {config} from '#config.js';\nimport {\n  type AcceptInvitationResult,\n  acceptInvitation,\n  createInvitation,\n  findInvitationById,\n  findInvitationByToken,\n  listOpenInvitationsByWorkspace,\n  revokeInvitation,\n} from '#db/invitations.js';\nimport {getWorkspaceById} from '#db/workspaces.js';\nimport type {Invitation} from './entities/invitation.js';\nimport {\n  InvitationEmailMismatchError,\n  InvitationNotFoundError,\n  InvitationWorkspaceMismatchError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  TokenInvalidError,\n} from './errors.js';\nimport {requireWorkspaceMembership} from './workspaces.js';\n\nconst INVITATION_TTL_DAYS = 7;\n\nfunction daysFromNow(days: number): Date {\n  return new Date(Date.now() + days * 24 * 60 * 60 * 1000);\n}\n\nfunction nonBlankOrFallback(value: string | null | undefined, fallback: string): string {\n  const trimmed = value?.trim();\n  return trimmed ? trimmed : fallback;\n}\n\nexport async function createWorkspaceInvitation(params: {\n  workspaceId: string;\n  email: string;\n  invitedByUserId: string;\n  invitedByDisplay?: string | null;\n  invitedByMemberships: ReadonlyArray<UserContextMembership>;\n}): Promise<Invitation> {\n  const {workspace} = await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.invitedByUserId,\n    memberships: params.invitedByMemberships,\n  });\n\n  const rawToken = generateOpaqueToken('invitation');\n  const invitation = await createInvitation({\n    workspaceId: params.workspaceId,\n    email: params.email,\n    hashedToken: hashOpaqueToken(rawToken),\n    expiresAt: daysFromNow(INVITATION_TTL_DAYS),\n    invitedByUserId: params.invitedByUserId,\n    invitedByDisplay: params.invitedByDisplay ?? null,\n    sendEmail: {\n      workspaceName: nonBlankOrFallback(workspace.name, 'your workspace'),\n      inviterName: nonBlankOrFallback(params.invitedByDisplay, 'A teammate'),\n      inviteLink: `${config.CLIENT_BASE_URL}/invitations/accept?token=${rawToken}`,\n    },\n  });\n\n  return invitation;\n}\n\nexport async function peekInvitationByRawToken(params: {\n  token: string;\n}): Promise<Invitation | undefined> {\n  return await findInvitationByToken({hashedToken: hashOpaqueToken(params.token)});\n}\n\nexport type PreviewInvitationResult =\n  | {\n      status: 'pending';\n      workspaceId: string;\n      workspaceName: string;\n      email: string;\n      invitedByDisplay: string | null;\n      expiresAt: Date;\n    }\n  | {status: 'expired'; workspaceName: string; expiresAt: Date}\n  | {status: 'already_used'; workspaceName: string}\n  | {status: 'invalid'};\n\nexport async function previewInvitation(params: {token: string}): Promise<PreviewInvitationResult> {\n  const invitation = await peekInvitationByRawToken({token: params.token});\n  if (!invitation) {\n    return {status: 'invalid'};\n  }\n\n  const workspace = await getWorkspaceById(invitation.workspaceId);\n  if (!workspace) {\n    // Workspace cascade-deleted — the invitation row is orphaned. Treat as invalid.\n    return {status: 'invalid'};\n  }\n\n  if (invitation.acceptedAt !== null) {\n    return {status: 'already_used', workspaceName: workspace.name};\n  }\n\n  if (invitation.expiresAt.getTime() <= Date.now()) {\n    return {\n      status: 'expired',\n      workspaceName: workspace.name,\n      expiresAt: invitation.expiresAt,\n    };\n  }\n\n  return {\n    status: 'pending',\n    workspaceId: workspace.id,\n    workspaceName: workspace.name,\n    email: invitation.email,\n    invitedByDisplay: invitation.invitedByDisplay,\n    expiresAt: invitation.expiresAt,\n  };\n}\n\nexport async function acceptWorkspaceInvitation(params: {\n  token: string;\n  userId: string;\n  email: string;\n  name?: string | null | undefined;\n}): Promise<AcceptInvitationResult> {\n  const invitation = await peekInvitationByRawToken({token: params.token});\n  if (!invitation) {\n    throw new TokenInvalidError('Invitation token is invalid');\n  }\n\n  if (invitation.acceptedAt !== null) {\n    throw new TokenAlreadyUsedError();\n  }\n\n  if (invitation.expiresAt.getTime() <= Date.now()) {\n    throw new TokenExpiredError();\n  }\n\n  if (params.email !== invitation.email) {\n    throw new InvitationEmailMismatchError();\n  }\n\n  const result = await acceptInvitation({\n    invitationId: invitation.id,\n    acceptedByUserId: params.userId,\n    acceptedByUserName: params.name,\n  });\n  if (!result) {\n    throw new TokenInvalidError('Invitation is no longer valid');\n  }\n\n  return result;\n}\n\nexport async function listWorkspaceInvitations(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n}): Promise<Invitation[]> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n  });\n\n  return listOpenInvitationsByWorkspace({workspaceId: params.workspaceId});\n}\n\nexport async function revokeWorkspaceInvitation(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n  invitationId: string;\n}): Promise<void> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n  });\n\n  const invitation = await findInvitationById({id: params.invitationId});\n  if (!invitation) {\n    throw new InvitationNotFoundError(params.invitationId);\n  }\n\n  if (invitation.workspaceId !== params.workspaceId) {\n    throw new InvitationWorkspaceMismatchError();\n  }\n\n  await revokeInvitation({invitationId: params.invitationId});\n}\n"],"names":["generateOpaqueToken","hashOpaqueToken","config","acceptInvitation","createInvitation","findInvitationById","findInvitationByToken","listOpenInvitationsByWorkspace","revokeInvitation","getWorkspaceById","InvitationEmailMismatchError","InvitationNotFoundError","InvitationWorkspaceMismatchError","TokenAlreadyUsedError","TokenExpiredError","TokenInvalidError","requireWorkspaceMembership","INVITATION_TTL_DAYS","daysFromNow","days","Date","now","nonBlankOrFallback","value","fallback","trimmed","trim","createWorkspaceInvitation","params","workspace","workspaceId","userId","invitedByUserId","memberships","invitedByMemberships","rawToken","invitation","email","hashedToken","expiresAt","invitedByDisplay","sendEmail","workspaceName","name","inviterName","inviteLink","CLIENT_BASE_URL","peekInvitationByRawToken","token","previewInvitation","status","acceptedAt","getTime","id","acceptWorkspaceInvitation","result","invitationId","acceptedByUserId","acceptedByUserName","listWorkspaceInvitations","requesterUserId","requesterMemberships","revokeWorkspaceInvitation"],"mappings":"AACA,SAAQA,mBAAmB,EAAEC,eAAe,QAAO,uBAAuB;AAC1E,SAAQC,MAAM,QAAO,aAAa;AAClC,SAEEC,gBAAgB,EAChBC,gBAAgB,EAChBC,kBAAkB,EAClBC,qBAAqB,EACrBC,8BAA8B,EAC9BC,gBAAgB,QACX,qBAAqB;AAC5B,SAAQC,gBAAgB,QAAO,oBAAoB;AAEnD,SACEC,4BAA4B,EAC5BC,uBAAuB,EACvBC,gCAAgC,EAChCC,qBAAqB,EACrBC,iBAAiB,EACjBC,iBAAiB,QACZ,cAAc;AACrB,SAAQC,0BAA0B,QAAO,kBAAkB;AAE3D,MAAMC,sBAAsB;AAE5B,SAASC,YAAYC,IAAY;IAC/B,OAAO,IAAIC,KAAKA,KAAKC,GAAG,KAAKF,OAAO,KAAK,KAAK,KAAK;AACrD;AAEA,SAASG,mBAAmBC,KAAgC,EAAEC,QAAgB;IAC5E,MAAMC,UAAUF,OAAOG;IACvB,OAAOD,UAAUA,UAAUD;AAC7B;AAEA,OAAO,eAAeG,0BAA0BC,MAM/C;IACC,MAAM,EAACC,SAAS,EAAC,GAAG,MAAMb,2BAA2B;QACnDc,aAAaF,OAAOE,WAAW;QAC/BC,QAAQH,OAAOI,eAAe;QAC9BC,aAAaL,OAAOM,oBAAoB;IAC1C;IAEA,MAAMC,WAAWnC,oBAAoB;IACrC,MAAMoC,aAAa,MAAMhC,iBAAiB;QACxC0B,aAAaF,OAAOE,WAAW;QAC/BO,OAAOT,OAAOS,KAAK;QACnBC,aAAarC,gBAAgBkC;QAC7BI,WAAWrB,YAAYD;QACvBe,iBAAiBJ,OAAOI,eAAe;QACvCQ,kBAAkBZ,OAAOY,gBAAgB,IAAI;QAC7CC,WAAW;YACTC,eAAepB,mBAAmBO,UAAUc,IAAI,EAAE;YAClDC,aAAatB,mBAAmBM,OAAOY,gBAAgB,EAAE;YACzDK,YAAY,GAAG3C,OAAO4C,eAAe,CAAC,0BAA0B,EAAEX,UAAU;QAC9E;IACF;IAEA,OAAOC;AACT;AAEA,OAAO,eAAeW,yBAAyBnB,MAE9C;IACC,OAAO,MAAMtB,sBAAsB;QAACgC,aAAarC,gBAAgB2B,OAAOoB,KAAK;IAAC;AAChF;AAeA,OAAO,eAAeC,kBAAkBrB,MAAuB;IAC7D,MAAMQ,aAAa,MAAMW,yBAAyB;QAACC,OAAOpB,OAAOoB,KAAK;IAAA;IACtE,IAAI,CAACZ,YAAY;QACf,OAAO;YAACc,QAAQ;QAAS;IAC3B;IAEA,MAAMrB,YAAY,MAAMpB,iBAAiB2B,WAAWN,WAAW;IAC/D,IAAI,CAACD,WAAW;QACd,gFAAgF;QAChF,OAAO;YAACqB,QAAQ;QAAS;IAC3B;IAEA,IAAId,WAAWe,UAAU,KAAK,MAAM;QAClC,OAAO;YAACD,QAAQ;YAAgBR,eAAeb,UAAUc,IAAI;QAAA;IAC/D;IAEA,IAAIP,WAAWG,SAAS,CAACa,OAAO,MAAMhC,KAAKC,GAAG,IAAI;QAChD,OAAO;YACL6B,QAAQ;YACRR,eAAeb,UAAUc,IAAI;YAC7BJ,WAAWH,WAAWG,SAAS;QACjC;IACF;IAEA,OAAO;QACLW,QAAQ;QACRpB,aAAaD,UAAUwB,EAAE;QACzBX,eAAeb,UAAUc,IAAI;QAC7BN,OAAOD,WAAWC,KAAK;QACvBG,kBAAkBJ,WAAWI,gBAAgB;QAC7CD,WAAWH,WAAWG,SAAS;IACjC;AACF;AAEA,OAAO,eAAee,0BAA0B1B,MAK/C;IACC,MAAMQ,aAAa,MAAMW,yBAAyB;QAACC,OAAOpB,OAAOoB,KAAK;IAAA;IACtE,IAAI,CAACZ,YAAY;QACf,MAAM,IAAIrB,kBAAkB;IAC9B;IAEA,IAAIqB,WAAWe,UAAU,KAAK,MAAM;QAClC,MAAM,IAAItC;IACZ;IAEA,IAAIuB,WAAWG,SAAS,CAACa,OAAO,MAAMhC,KAAKC,GAAG,IAAI;QAChD,MAAM,IAAIP;IACZ;IAEA,IAAIc,OAAOS,KAAK,KAAKD,WAAWC,KAAK,EAAE;QACrC,MAAM,IAAI3B;IACZ;IAEA,MAAM6C,SAAS,MAAMpD,iBAAiB;QACpCqD,cAAcpB,WAAWiB,EAAE;QAC3BI,kBAAkB7B,OAAOG,MAAM;QAC/B2B,oBAAoB9B,OAAOe,IAAI;IACjC;IACA,IAAI,CAACY,QAAQ;QACX,MAAM,IAAIxC,kBAAkB;IAC9B;IAEA,OAAOwC;AACT;AAEA,OAAO,eAAeI,yBAAyB/B,MAI9C;IACC,MAAMZ,2BAA2B;QAC/Bc,aAAaF,OAAOE,WAAW;QAC/BC,QAAQH,OAAOgC,eAAe;QAC9B3B,aAAaL,OAAOiC,oBAAoB;IAC1C;IAEA,OAAOtD,+BAA+B;QAACuB,aAAaF,OAAOE,WAAW;IAAA;AACxE;AAEA,OAAO,eAAegC,0BAA0BlC,MAK/C;IACC,MAAMZ,2BAA2B;QAC/Bc,aAAaF,OAAOE,WAAW;QAC/BC,QAAQH,OAAOgC,eAAe;QAC9B3B,aAAaL,OAAOiC,oBAAoB;IAC1C;IAEA,MAAMzB,aAAa,MAAM/B,mBAAmB;QAACgD,IAAIzB,OAAO4B,YAAY;IAAA;IACpE,IAAI,CAACpB,YAAY;QACf,MAAM,IAAIzB,wBAAwBiB,OAAO4B,YAAY;IACvD;IAEA,IAAIpB,WAAWN,WAAW,KAAKF,OAAOE,WAAW,EAAE;QACjD,MAAM,IAAIlB;IACZ;IAEA,MAAMJ,iBAAiB;QAACgD,cAAc5B,OAAO4B,YAAY;IAAA;AAC3D"}

package/dist/core/memberships.d.ts

@@ -0,0 +1,9 @@
+import { type EnsureMembershipParams } from '#db/memberships.js';
+import type { Membership } from './entities/membership.js';
+export type { EnsureMembershipParams } from '#db/memberships.js';
+/**
+ * Ensures an external identity has a workspace membership without refreshing
+ * the profile snapshot stored on an existing membership.
+ */
+export declare function ensureMembership(params: EnsureMembershipParams): Promise<Membership>;
+//# sourceMappingURL=memberships.d.ts.map

package/dist/core/memberships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memberships.d.ts","sourceRoot":"","sources":["../../src/core/memberships.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AAGzD,YAAY,EAAC,sBAAsB,EAAC,MAAM,oBAAoB,CAAC;AAE/D;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,UAAU,CAAC,CAG1F"}

package/dist/core/memberships.js

@@ -0,0 +1,13 @@
+import { ensureMembership as ensureDbMembership } from '#db/memberships.js';
+import { getWorkspace } from './workspaces.js';
+/**
+ * Ensures an external identity has a workspace membership without refreshing
+ * the profile snapshot stored on an existing membership.
+ */ export async function ensureMembership(params) {
+    await getWorkspace({
+        workspaceId: params.workspaceId
+    });
+    return await ensureDbMembership(params);
+}
+
+//# sourceMappingURL=memberships.js.map

package/dist/core/memberships.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/memberships.ts"],"sourcesContent":["import {\n  type EnsureMembershipParams,\n  ensureMembership as ensureDbMembership,\n} from '#db/memberships.js';\nimport type {Membership} from './entities/membership.js';\nimport {getWorkspace} from './workspaces.js';\n\nexport type {EnsureMembershipParams} from '#db/memberships.js';\n\n/**\n * Ensures an external identity has a workspace membership without refreshing\n * the profile snapshot stored on an existing membership.\n */\nexport async function ensureMembership(params: EnsureMembershipParams): Promise<Membership> {\n  await getWorkspace({workspaceId: params.workspaceId});\n  return await ensureDbMembership(params);\n}\n"],"names":["ensureMembership","ensureDbMembership","getWorkspace","params","workspaceId"],"mappings":"AAAA,SAEEA,oBAAoBC,kBAAkB,QACjC,qBAAqB;AAE5B,SAAQC,YAAY,QAAO,kBAAkB;AAI7C;;;CAGC,GACD,OAAO,eAAeF,iBAAiBG,MAA8B;IACnE,MAAMD,aAAa;QAACE,aAAaD,OAAOC,WAAW;IAAA;IACnD,OAAO,MAAMH,mBAAmBE;AAClC"}

package/dist/core/workspaces.d.ts

@@ -0,0 +1,40 @@
+import type { UserContextMembership } from '@shipfox/api-auth-context';
+import type { WorkspaceRole } from '@shipfox/api-workspaces-dto';
+import { type MembershipWithUser, type MembershipWithWorkspace } from '#db/memberships.js';
+import type { Workspace } from './entities/workspace.js';
+export interface RequireWorkspaceMembershipParams {
+    workspaceId: string;
+    userId: string;
+    memberships: ReadonlyArray<UserContextMembership>;
+}
+export interface RequireWorkspaceMembershipResult {
+    workspace: Workspace;
+    workspaceId: string;
+    userId: string;
+    role: WorkspaceRole;
+}
+export declare function requireWorkspaceMembership(params: RequireWorkspaceMembershipParams): Promise<RequireWorkspaceMembershipResult>;
+export declare function createWorkspaceForUser(params: {
+    name: string;
+    userId: string;
+    userEmail?: string | undefined;
+    userName?: string | null | undefined;
+}): Promise<Workspace>;
+export declare function getWorkspace(params: {
+    workspaceId: string;
+}): Promise<Workspace>;
+export declare function listUserWorkspaceMemberships(params: {
+    userId: string;
+}): Promise<MembershipWithWorkspace[]>;
+export declare function listWorkspaceMembers(params: {
+    workspaceId: string;
+    requesterUserId: string;
+    requesterMemberships: ReadonlyArray<UserContextMembership>;
+}): Promise<MembershipWithUser[]>;
+export declare function removeWorkspaceMember(params: {
+    workspaceId: string;
+    requesterUserId: string;
+    requesterMemberships: ReadonlyArray<UserContextMembership>;
+    userId: string;
+}): Promise<void>;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/core/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/core/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,6BAA6B,CAAC;AAE/D,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAE7B,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,yBAAyB,CAAC;AASvD,MAAM,WAAW,gCAAgC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,gCAAgC,GACvC,OAAO,CAAC,gCAAgC,CAAC,CAe3C;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC,GAAG,OAAO,CAAC,SAAS,CAAC,CAYrB;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE;IAAC,WAAW,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAOpF;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAErC;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQhC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB"}

package/dist/core/workspaces.js

@@ -0,0 +1,85 @@
+import { db } from '#db/db.js';
+import { findMembership, listMembershipsByUser, listMembershipsByWorkspace, removeMembership } from '#db/memberships.js';
+import { memberships } from '#db/schema/memberships.js';
+import { toWorkspace, workspaces } from '#db/schema/workspaces.js';
+import { getWorkspaceById } from '#db/workspaces.js';
+import { MembershipNotFoundError, MembershipRequiredError, SelfRemovalNotAllowedError, WorkspaceInactiveError, WorkspaceNotFoundError } from './errors.js';
+export async function requireWorkspaceMembership(params) {
+    const membership = params.memberships.find((m)=>m.workspaceId === params.workspaceId);
+    if (!membership) {
+        throw new MembershipRequiredError(params.workspaceId);
+    }
+    const workspace = await getWorkspaceById(params.workspaceId);
+    if (!workspace) {
+        throw new WorkspaceNotFoundError(params.workspaceId);
+    }
+    if (workspace.status !== 'active') {
+        throw new WorkspaceInactiveError(params.workspaceId);
+    }
+    return {
+        workspace,
+        workspaceId: workspace.id,
+        userId: params.userId,
+        role: membership.role
+    };
+}
+export async function createWorkspaceForUser(params) {
+    return await db().transaction(async (tx)=>{
+        const [workspaceRow] = await tx.insert(workspaces).values({
+            name: params.name
+        }).returning();
+        if (!workspaceRow) throw new Error('Insert returned no rows');
+        await tx.insert(memberships).values({
+            userId: params.userId,
+            userEmail: params.userEmail ?? `user-${params.userId}@example.local`,
+            userName: params.userName ?? null,
+            workspaceId: workspaceRow.id
+        });
+        return toWorkspace(workspaceRow);
+    });
+}
+export async function getWorkspace(params) {
+    const workspace = await getWorkspaceById(params.workspaceId);
+    if (!workspace) {
+        throw new WorkspaceNotFoundError(params.workspaceId);
+    }
+    return workspace;
+}
+export async function listUserWorkspaceMemberships(params) {
+    return await listMembershipsByUser({
+        userId: params.userId
+    });
+}
+export async function listWorkspaceMembers(params) {
+    await requireWorkspaceMembership({
+        workspaceId: params.workspaceId,
+        userId: params.requesterUserId,
+        memberships: params.requesterMemberships
+    });
+    return listMembershipsByWorkspace({
+        workspaceId: params.workspaceId
+    });
+}
+export async function removeWorkspaceMember(params) {
+    await requireWorkspaceMembership({
+        workspaceId: params.workspaceId,
+        userId: params.requesterUserId,
+        memberships: params.requesterMemberships
+    });
+    if (params.userId === params.requesterUserId) {
+        throw new SelfRemovalNotAllowedError();
+    }
+    const target = await findMembership({
+        userId: params.userId,
+        workspaceId: params.workspaceId
+    });
+    if (!target) {
+        throw new MembershipNotFoundError(params.userId, params.workspaceId);
+    }
+    await removeMembership({
+        userId: params.userId,
+        workspaceId: params.workspaceId
+    });
+}
+
+//# sourceMappingURL=workspaces.js.map

package/dist/core/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/workspaces.ts"],"sourcesContent":["import type {UserContextMembership} from '@shipfox/api-auth-context';\nimport type {WorkspaceRole} from '@shipfox/api-workspaces-dto';\nimport {db} from '#db/db.js';\nimport {\n  findMembership,\n  listMembershipsByUser,\n  listMembershipsByWorkspace,\n  type MembershipWithUser,\n  type MembershipWithWorkspace,\n  removeMembership,\n} from '#db/memberships.js';\nimport {memberships} from '#db/schema/memberships.js';\nimport {toWorkspace, workspaces} from '#db/schema/workspaces.js';\nimport {getWorkspaceById} from '#db/workspaces.js';\nimport type {Workspace} from './entities/workspace.js';\nimport {\n  MembershipNotFoundError,\n  MembershipRequiredError,\n  SelfRemovalNotAllowedError,\n  WorkspaceInactiveError,\n  WorkspaceNotFoundError,\n} from './errors.js';\n\nexport interface RequireWorkspaceMembershipParams {\n  workspaceId: string;\n  userId: string;\n  memberships: ReadonlyArray<UserContextMembership>;\n}\n\nexport interface RequireWorkspaceMembershipResult {\n  workspace: Workspace;\n  workspaceId: string;\n  userId: string;\n  role: WorkspaceRole;\n}\n\nexport async function requireWorkspaceMembership(\n  params: RequireWorkspaceMembershipParams,\n): Promise<RequireWorkspaceMembershipResult> {\n  const membership = params.memberships.find((m) => m.workspaceId === params.workspaceId);\n  if (!membership) {\n    throw new MembershipRequiredError(params.workspaceId);\n  }\n\n  const workspace = await getWorkspaceById(params.workspaceId);\n  if (!workspace) {\n    throw new WorkspaceNotFoundError(params.workspaceId);\n  }\n  if (workspace.status !== 'active') {\n    throw new WorkspaceInactiveError(params.workspaceId);\n  }\n\n  return {workspace, workspaceId: workspace.id, userId: params.userId, role: membership.role};\n}\n\nexport async function createWorkspaceForUser(params: {\n  name: string;\n  userId: string;\n  userEmail?: string | undefined;\n  userName?: string | null | undefined;\n}): Promise<Workspace> {\n  return await db().transaction(async (tx) => {\n    const [workspaceRow] = await tx.insert(workspaces).values({name: params.name}).returning();\n    if (!workspaceRow) throw new Error('Insert returned no rows');\n    await tx.insert(memberships).values({\n      userId: params.userId,\n      userEmail: params.userEmail ?? `user-${params.userId}@example.local`,\n      userName: params.userName ?? null,\n      workspaceId: workspaceRow.id,\n    });\n    return toWorkspace(workspaceRow);\n  });\n}\n\nexport async function getWorkspace(params: {workspaceId: string}): Promise<Workspace> {\n  const workspace = await getWorkspaceById(params.workspaceId);\n  if (!workspace) {\n    throw new WorkspaceNotFoundError(params.workspaceId);\n  }\n\n  return workspace;\n}\n\nexport async function listUserWorkspaceMemberships(params: {\n  userId: string;\n}): Promise<MembershipWithWorkspace[]> {\n  return await listMembershipsByUser({userId: params.userId});\n}\n\nexport async function listWorkspaceMembers(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n}): Promise<MembershipWithUser[]> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n  });\n\n  return listMembershipsByWorkspace({workspaceId: params.workspaceId});\n}\n\nexport async function removeWorkspaceMember(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n  userId: string;\n}): Promise<void> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n  });\n\n  if (params.userId === params.requesterUserId) {\n    throw new SelfRemovalNotAllowedError();\n  }\n\n  const target = await findMembership({userId: params.userId, workspaceId: params.workspaceId});\n  if (!target) {\n    throw new MembershipNotFoundError(params.userId, params.workspaceId);\n  }\n\n  await removeMembership({userId: params.userId, workspaceId: params.workspaceId});\n}\n"],"names":["db","findMembership","listMembershipsByUser","listMembershipsByWorkspace","removeMembership","memberships","toWorkspace","workspaces","getWorkspaceById","MembershipNotFoundError","MembershipRequiredError","SelfRemovalNotAllowedError","WorkspaceInactiveError","WorkspaceNotFoundError","requireWorkspaceMembership","params","membership","find","m","workspaceId","workspace","status","id","userId","role","createWorkspaceForUser","transaction","tx","workspaceRow","insert","values","name","returning","Error","userEmail","userName","getWorkspace","listUserWorkspaceMemberships","listWorkspaceMembers","requesterUserId","requesterMemberships","removeWorkspaceMember","target"],"mappings":"AAEA,SAAQA,EAAE,QAAO,YAAY;AAC7B,SACEC,cAAc,EACdC,qBAAqB,EACrBC,0BAA0B,EAG1BC,gBAAgB,QACX,qBAAqB;AAC5B,SAAQC,WAAW,QAAO,4BAA4B;AACtD,SAAQC,WAAW,EAAEC,UAAU,QAAO,2BAA2B;AACjE,SAAQC,gBAAgB,QAAO,oBAAoB;AAEnD,SACEC,uBAAuB,EACvBC,uBAAuB,EACvBC,0BAA0B,EAC1BC,sBAAsB,EACtBC,sBAAsB,QACjB,cAAc;AAerB,OAAO,eAAeC,2BACpBC,MAAwC;IAExC,MAAMC,aAAaD,OAAOV,WAAW,CAACY,IAAI,CAAC,CAACC,IAAMA,EAAEC,WAAW,KAAKJ,OAAOI,WAAW;IACtF,IAAI,CAACH,YAAY;QACf,MAAM,IAAIN,wBAAwBK,OAAOI,WAAW;IACtD;IAEA,MAAMC,YAAY,MAAMZ,iBAAiBO,OAAOI,WAAW;IAC3D,IAAI,CAACC,WAAW;QACd,MAAM,IAAIP,uBAAuBE,OAAOI,WAAW;IACrD;IACA,IAAIC,UAAUC,MAAM,KAAK,UAAU;QACjC,MAAM,IAAIT,uBAAuBG,OAAOI,WAAW;IACrD;IAEA,OAAO;QAACC;QAAWD,aAAaC,UAAUE,EAAE;QAAEC,QAAQR,OAAOQ,MAAM;QAAEC,MAAMR,WAAWQ,IAAI;IAAA;AAC5F;AAEA,OAAO,eAAeC,uBAAuBV,MAK5C;IACC,OAAO,MAAMf,KAAK0B,WAAW,CAAC,OAAOC;QACnC,MAAM,CAACC,aAAa,GAAG,MAAMD,GAAGE,MAAM,CAACtB,YAAYuB,MAAM,CAAC;YAACC,MAAMhB,OAAOgB,IAAI;QAAA,GAAGC,SAAS;QACxF,IAAI,CAACJ,cAAc,MAAM,IAAIK,MAAM;QACnC,MAAMN,GAAGE,MAAM,CAACxB,aAAayB,MAAM,CAAC;YAClCP,QAAQR,OAAOQ,MAAM;YACrBW,WAAWnB,OAAOmB,SAAS,IAAI,CAAC,KAAK,EAAEnB,OAAOQ,MAAM,CAAC,cAAc,CAAC;YACpEY,UAAUpB,OAAOoB,QAAQ,IAAI;YAC7BhB,aAAaS,aAAaN,EAAE;QAC9B;QACA,OAAOhB,YAAYsB;IACrB;AACF;AAEA,OAAO,eAAeQ,aAAarB,MAA6B;IAC9D,MAAMK,YAAY,MAAMZ,iBAAiBO,OAAOI,WAAW;IAC3D,IAAI,CAACC,WAAW;QACd,MAAM,IAAIP,uBAAuBE,OAAOI,WAAW;IACrD;IAEA,OAAOC;AACT;AAEA,OAAO,eAAeiB,6BAA6BtB,MAElD;IACC,OAAO,MAAMb,sBAAsB;QAACqB,QAAQR,OAAOQ,MAAM;IAAA;AAC3D;AAEA,OAAO,eAAee,qBAAqBvB,MAI1C;IACC,MAAMD,2BAA2B;QAC/BK,aAAaJ,OAAOI,WAAW;QAC/BI,QAAQR,OAAOwB,eAAe;QAC9BlC,aAAaU,OAAOyB,oBAAoB;IAC1C;IAEA,OAAOrC,2BAA2B;QAACgB,aAAaJ,OAAOI,WAAW;IAAA;AACpE;AAEA,OAAO,eAAesB,sBAAsB1B,MAK3C;IACC,MAAMD,2BAA2B;QAC/BK,aAAaJ,OAAOI,WAAW;QAC/BI,QAAQR,OAAOwB,eAAe;QAC9BlC,aAAaU,OAAOyB,oBAAoB;IAC1C;IAEA,IAAIzB,OAAOQ,MAAM,KAAKR,OAAOwB,eAAe,EAAE;QAC5C,MAAM,IAAI5B;IACZ;IAEA,MAAM+B,SAAS,MAAMzC,eAAe;QAACsB,QAAQR,OAAOQ,MAAM;QAAEJ,aAAaJ,OAAOI,WAAW;IAAA;IAC3F,IAAI,CAACuB,QAAQ;QACX,MAAM,IAAIjC,wBAAwBM,OAAOQ,MAAM,EAAER,OAAOI,WAAW;IACrE;IAEA,MAAMf,iBAAiB;QAACmB,QAAQR,OAAOQ,MAAM;QAAEJ,aAAaJ,OAAOI,WAAW;IAAA;AAChF"}