@somewhatintelligent/guestlist 0.0.6-beta.1783733618.d38901c → 0.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@somewhatintelligent/guestlist",
-  "version": "0.0.6-beta.1783733618.d38901c",
+  "version": "0.0.6",
   "type": "module",
   "sideEffects": false,
   "publishConfig": {
@@ -29,8 +29,8 @@
     "@better-auth/core": "^1.6.9",
     "@better-auth/oauth-provider": "^1.6.0",
     "@better-auth/passkey": "^1.6.0",
-    "@somewhatintelligent/auth": "^0.0.4-beta.1783733618.d38901c",
-    "@somewhatintelligent/kit": "^0.0.3-beta.1783733618.d38901c",
+    "@somewhatintelligent/auth": "^0.0.3",
+    "@somewhatintelligent/kit": "^0.0.3",
     "better-auth": "^1.6.0",
     "cookie-es": "^3.1.1",
     "drizzle-orm": "^0.45.2",

package/src/entrypoint.ts

@@ -202,6 +202,12 @@ export function buildGuestlistEntrypoint<TEnv extends GuestlistEnv>(
       return this.#gated(input.cookie, () => orgOps.getOrg(this.#inst(), input.id));
     }
 
+    async adminUpdateOrg(input: WithCookie<{ id: string; name?: string; slug?: string }>) {
+      return this.#gated(input.cookie, () =>
+        orgOps.updateOrg(this.#inst(), input.id, { name: input.name, slug: input.slug }),
+      );
+    }
+
     async adminSearchUsersByEmail(input: WithCookie<{ email: string }>) {
       return this.#gated(input.cookie, () =>
         orgOps.searchUsersByEmail(this.#inst(), input.email),
@@ -236,6 +242,18 @@ export function buildGuestlistEntrypoint<TEnv extends GuestlistEnv>(
       );
     }
 
+    async adminResendOrgInvitation(input: WithCookie<{ orgId: string; invitationId: string }>) {
+      return this.#gated(input.cookie, (operator) =>
+        orgOps.resendInvitation(
+          this.#inst(),
+          this.env.IDENTITY_URL,
+          operator,
+          input.orgId,
+          input.invitationId,
+        ),
+      );
+    }
+
     async adminCancelOrgInvitation(input: WithCookie<{ orgId: string; invitationId: string }>) {
       return this.#gated(input.cookie, () =>
         orgOps.cancelInvitation(this.#inst(), input.orgId, input.invitationId),

package/src/ops/orgs.ts

@@ -11,7 +11,7 @@
  * `cancelInvitation`) fall back to direct Drizzle writes with the same
  * invariants BA enforces (last-owner guards, pending-only cancellation).
  */
-import { and, count, desc, eq, like } from "drizzle-orm";
+import { and, count, desc, eq, like, ne } from "drizzle-orm";
 import { ulid } from "@somewhatintelligent/kit/ids";
 
 import type { GuestlistInstances } from "../instances";
@@ -163,6 +163,53 @@ export async function getOrg(inst: GuestlistInstances, id: string) {
   return { ok: true as const, organization: org, members: memberRows, invitations: invitationRows };
 }
 
+export async function updateOrg(
+  inst: GuestlistInstances,
+  orgId: string,
+  input: { name?: string; slug?: string },
+) {
+  const { db } = inst;
+  if (input.name !== undefined && (input.name.length < 2 || input.name.length > 60)) {
+    return err("validation", "name must be 2-60 chars");
+  }
+  if (
+    input.slug !== undefined &&
+    (input.slug.length < 2 || input.slug.length > 48 || !SLUG_RE.test(input.slug))
+  ) {
+    return err("validation", "slug must be kebab-case, 2-48 chars");
+  }
+  const orgRows = await db
+    .select({ id: organization.id })
+    .from(organization)
+    .where(eq(organization.id, orgId))
+    .limit(1);
+  if (!orgRows[0]) return err("not_found");
+  // BA's `updateOrganization` has `requireHeaders: true` (session-bound) —
+  // same direct-Drizzle fallback as updateMemberRole. Slug uniqueness needs
+  // its own probe-select since BA's `checkSlug` isn't reachable on this
+  // no-session path.
+  if (input.slug !== undefined) {
+    const slugRows = await db
+      .select({ id: organization.id })
+      .from(organization)
+      .where(and(eq(organization.slug, input.slug), ne(organization.id, orgId)))
+      .limit(1);
+    if (slugRows[0]) return err("slug_taken");
+  }
+  const updates: { name?: string; slug?: string } = {};
+  if (input.name !== undefined) updates.name = input.name;
+  if (input.slug !== undefined) updates.slug = input.slug;
+  if (Object.keys(updates).length > 0) {
+    await db.update(organization).set(updates).where(eq(organization.id, orgId));
+  }
+  const updatedRows = await db
+    .select()
+    .from(organization)
+    .where(eq(organization.id, orgId))
+    .limit(1);
+  return { ok: true as const, organization: updatedRows[0] };
+}
+
 export async function addMember(
   inst: GuestlistInstances,
   orgId: string,
@@ -305,6 +352,59 @@ export async function createInvitation(
   };
 }
 
+export async function resendInvitation(
+  inst: GuestlistInstances,
+  identityUrl: string,
+  operator: Authed,
+  orgId: string,
+  invitationId: string,
+) {
+  const { db } = inst;
+  const rows = await db
+    .select({
+      id: invitation.id,
+      status: invitation.status,
+      email: invitation.email,
+      role: invitation.role,
+    })
+    .from(invitation)
+    .where(and(eq(invitation.id, invitationId), eq(invitation.organizationId, orgId)))
+    .limit(1);
+  const inv = rows[0];
+  if (!inv) return err("invitation_not_found");
+  if (inv.status !== "pending") return err("invitation_not_pending", inv.status);
+  // Same 7-day window as createInvitation. The id is reused, so previously
+  // copied accept links stay valid.
+  const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000);
+  await db.update(invitation).set({ expiresAt }).where(eq(invitation.id, invitationId));
+  const orgRows = await db
+    .select({ name: organization.name })
+    .from(organization)
+    .where(eq(organization.id, orgId))
+    .limit(1);
+  // Unlike createInvitation (raw-link-in-UI, no send), resend's whole point
+  // is delivery — emit the org-invitation email event with the operator as
+  // inviter. Best-effort: the extended expiry and accept link stand even if
+  // the consumer's transport fails.
+  let emailSent = false;
+  try {
+    await inst.sendEmail({
+      kind: "org-invitation",
+      to: { email: inv.email },
+      url: `${identityUrl}/orgs/accept/${inv.id}`,
+      organizationName: orgRows[0]?.name ?? "",
+      // `invitation.role` is nullable in the BA schema; every write path
+      // sets it, but default to BA's member role if absent.
+      role: inv.role ?? "member",
+      inviter: { name: operator.user.name, email: operator.user.email },
+    });
+    emailSent = true;
+  } catch {
+    // Consumer transport failure — surface via emailSent, don't fail the op.
+  }
+  return { ok: true as const, emailSent, expiresAt: expiresAt.getTime() };
+}
+
 export async function cancelInvitation(
   inst: GuestlistInstances,
   orgId: string,

package/src/version.gen.ts

@@ -2,6 +2,6 @@
 // values are dev placeholders, identical to the runtime fallbacks.
 export const PKG = {
   name: "@somewhatintelligent/guestlist",
-  version: "0.0.6-beta.1783733618.d38901c",
-  commit: "d38901c2c285f8e92bed43496747988fbb24271f",
+  version: "0.0.6",
+  commit: "80b5bf630d4e7bf08ab0f9f7adf0463bb34fceff",
 } as const;