@stapel/workspaces-react 0.14.0 → 0.15.0

package/src/api/generated/schema.ts

@@ -89,6 +89,43 @@ export interface paths {
         patch: operations["workspaces_api_v1_partial_update"];
         trace?: never;
     };
+    "/workspaces/api/v1/{workspace_id}/audit": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * @description ``GET <workspace_id>/audit`` — the workspace's membership history.
+         *
+         *     THE QUESTION THIS ANSWERS is "who let this person in, who took them out,
+         *     and when" — which nothing in this module could answer before. Half the
+         *     transitions the owner listed emit no comm event at all (an invitation
+         *     created, an invitation accepted, an account born from one), and the ones
+         *     that do emit are fire-and-forget notifications to other services: nothing
+         *     keeps them, so there was no record to ask.
+         *
+         *     GATED ON ``members.view``, not on a new capability of its own. An audit of
+         *     who is in the workspace is the same class of fact as the member list —
+         *     every role that may see who is in the room may see how they got there. A
+         *     separate mandate would mean a deployment could grant one without the
+         *     other, which describes no real product.
+         *
+         *     Read-only by construction: this view has no write method, and the model
+         *     has no update or delete path.
+         *
+         *     **Permissions:** `IsAuthenticated`
+         */
+        get: operations["workspaces_api_v1_audit_list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/workspaces/api/v1/{workspace_id}/invitations": {
         parameters: {
             query?: never;
@@ -180,9 +217,9 @@ export interface paths {
          *
          *     Accepts an **expired** invitation on purpose — a dead TTL is the most
          *     common reason to resend — and refuses the three stored terminal states,
-         *     which are decisions rather than delivery failures. The token is
-         *     rotated and the TTL restarts, so the fresh letter carries a fresh link
-         *     and any stale copy of the old one stops working.
+         *     which are decisions rather than delivery failures. The TTL restarts, so
+         *     the invitee has the full window again from the letter that just went
+         *     out.
          *
          *     Reviving an expired invitation re-reserves a seat, so the plan ceiling
          *     is re-checked here exactly as it is on invite: capability first ("may
@@ -190,6 +227,17 @@ export interface paths {
          *     that is already pending costs no additional seat and is never blocked
          *     by that check.
          *
+         *     Then the cooldown ("may we mail this PERSON again yet", 429). It is
+         *     read here and enforced again inside the service's row lock, the same
+         *     two-level shape the state check already has: the view answers a number
+         *     the admin can read, the lock is what actually makes two simultaneous
+         *     presses send one letter.
+         *
+         *     The token is NOT rotated by default from 0.23 — the invitee's existing
+         *     link keeps working, because the resend goes to the same mailbox that
+         *     link is already sitting in. See
+         *     ``STAPEL_WORKSPACES["INVITATION_ROTATE_TOKEN_ON_RESEND"]``.
+         *
          *     **Permissions:** `IsAuthenticated`
          */
         post: operations["workspaces_api_v1_invitations_resend_create"];
@@ -739,6 +787,54 @@ export interface paths {
 export type webhooks = Record<string, never>;
 export interface components {
     schemas: {
+        /** @description One line of a workspace's membership history. */
+        AuditEventResponse: {
+            /**
+             * Format: uuid
+             * @description Audit event UUID
+             */
+            id: string;
+            /**
+             * @description What happened — a CLOSED vocabulary (models.AuditAction): invitation_created, invitation_accepted, invitation_revoked, invitation_declined, account_created_by_invitation, member_joined, member_provisioned, member_removed, member_role_changed, member_suspended, member_unsuspended
+             * @example member_removed
+             */
+            action: string;
+            /**
+             * Format: uuid
+             * @description Who performed it; null for a transition nobody performed (a policy sweep)
+             * @example 0192a...
+             */
+            actor_id: string | null;
+            /** @description Best-effort name of the actor, resolved like every other name in this module (stapel-profiles first); "" when unknown */
+            actor_display_name: string;
+            /**
+             * Format: uuid
+             * @description Whom it happened to; null for an invitation to an address with no account yet
+             * @example 0192b...
+             */
+            subject_id: string | null;
+            /** @description Best-effort name of the subject; "" when unknown */
+            subject_display_name: string;
+            /**
+             * @description The invited address, when the row is about an invitation
+             * @example new@acme.test
+             */
+            subject_email: string;
+            /**
+             * @description Role involved, when the action carries one
+             * @example member
+             */
+            role: string;
+            /** @description Action-specific extras — old_role/new_role for a role change, reason for a suspension */
+            metadata: {
+                [key: string]: unknown;
+            };
+            /**
+             * @description ISO 8601 timestamp
+             * @example 2026-08-13T10:00:00Z
+             */
+            created_at: string;
+        };
         /** @description What the name is after the write — the stored value, not the request. */
         DisplayNameResponse: {
             /**
@@ -891,6 +987,17 @@ export interface components {
              * @example Ada Lovelace
              */
             display_name?: string | null;
+            /**
+             * Format: uuid
+             * @description UUID of the admin who withdrew it; null unless revoked, or when that account is gone
+             * @example 0192a...
+             */
+            revoked_by_id?: string | null;
+            /**
+             * @description ISO 8601 time the invitation was last emailed; null if no letter was ever sent
+             * @example 2026-07-24T10:00:00Z
+             */
+            last_sent_at?: string | null;
         };
         /** @description Invite payload. */
         MemberInviteRequest: {
@@ -1003,6 +1110,19 @@ export interface components {
              */
             display_name?: string | null;
         };
+        PaginatedAuditEventResponseList: {
+            items: components["schemas"]["AuditEventResponse"][];
+            /** @description Anchor value for next page */
+            next_anchor?: string | null;
+            /** @description Anchor value for previous page */
+            prev_anchor?: string | null;
+            /** @description Whether there are more items after this page */
+            has_next: boolean;
+            /** @description Whether there are items before this page */
+            has_prev: boolean;
+            /** @description Number of items in current page */
+            count: number;
+        };
         PaginatedInvitationResponseList: {
             items: components["schemas"]["InvitationResponse"][];
             /** @description Anchor value for next page */
@@ -1203,6 +1323,11 @@ export interface components {
              * @example a8bba7ae-5d2e-43e5-9911-0553e7df50b3
              */
             preferred_workspace_id?: string;
+            /**
+             * @description Whether THIS caller may found a new workspace on this instance (WORKSPACE_CREATE_POLICY, evaluated by services.can_create_workspace). The ANSWER, not the policy name: resolving "instance_owner" client-side would mean re-implementing the instance-owner lookup in every client, and a client that got it wrong would draw a button that 403s — or hide one that should be there. Rides the list because the workspace switcher is the surface that draws "+ New space", and it already fetches this
+             * @example true
+             */
+            can_create_workspace?: boolean;
         };
         /** @description Workspace details. */
         WorkspaceResponse: {
@@ -1266,6 +1391,11 @@ export interface components {
              *     ]
              */
             my_capabilities?: string[];
+            /**
+             * @description The owner's display name, best-effort from stapel-profiles (empty when it has none, is not installed, or is unreachable — never invented). Exists because a workspace NAME stopped identifying one: a person can belong to several spaces all called "Personal" — one per company that made them one — and ownership can be handed over, so "Personal" answers nothing on its own. Pickers draw it as the second line under the name. Resolved here rather than in each client, which would otherwise each need a profiles batch of its own for a caption
+             * @example Victor P.
+             */
+            owner_display_name?: string;
         };
     };
     responses: never;
@@ -1388,6 +1518,38 @@ export interface operations {
             };
         };
     };
+    workspaces_api_v1_audit_list: {
+        parameters: {
+            query?: {
+                /** @description Narrow to one action (models.AuditAction). An unknown value matches nothing rather than being ignored — a filter that silently does not apply is worse than an empty page. */
+                action?: string;
+                /** @description Anchor value to paginate from (exclusive) */
+                anchor?: string;
+                /** @description Pagination direction */
+                direction?: "next" | "prev" | "center";
+                /** @description Number of items (default 100, max 500) */
+                limit?: number;
+                /** @description Narrow to one person's history (as the SUBJECT). */
+                user_id?: string;
+            };
+            header?: never;
+            path: {
+                workspace_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PaginatedAuditEventResponseList"];
+                };
+            };
+        };
+    };
     workspaces_api_v1_invitations_list: {
         parameters: {
             query?: {

package/src/api/types.ts

@@ -33,6 +33,29 @@ export type PreferredWorkspace = Schemas["PreferredWorkspaceRequest"];
 /** PUT/DELETE /me/preferred-workspace 200 body — the choice after the write
  * (`""` after a DELETE cleared it). */
 export type PreferredWorkspaceResult = Schemas["PreferredWorkspaceResponse"];
+/** One line of a workspace's membership history (`GET {id}/audit`).
+ *
+ * The vocabulary of `action` is CLOSED on the server (stapel-workspaces
+ * `models.AuditAction`) — an audit whose action is a free string is a log:
+ * nobody can filter it, translate it, or notice that a new lifecycle
+ * transition shipped without a line.
+ */
+export type AuditEvent = Schemas["AuditEventResponse"];
+/** `GET {id}/audit` 200 body — one anchor-paginated page of history. */
+export type AuditPage = Schemas["PaginatedAuditEventResponseList"];
+/** Query parameters for the audit list (narrow by action or by subject). */
+export interface AuditParams {
+  /** One `AuditEvent["action"]`. An unknown value matches nothing rather than
+   * being ignored — a filter that silently does not apply is worse than an
+   * empty page. */
+  readonly action?: string;
+  /** One person's history, as the SUBJECT of the events. */
+  readonly user_id?: string;
+  readonly anchor?: string;
+  readonly direction?: "next" | "prev";
+  readonly limit?: number;
+}
+
 /** POST / request body — create a workspace (slug auto-generated when omitted). */
 export type WorkspaceCreate = Schemas["WorkspaceCreateRequest"];
 /** PATCH /{id} request body — a partial name / slug / settings update. */

package/src/api/workspacesApi.ts

@@ -12,6 +12,8 @@ import type {
   MemberPasswordReset,
   MemberPasswordResetResult,
   MemberRoleUpdate,
+  AuditParams,
+  AuditPage,
   MembersParams,
   PreferredWorkspace,
   PreferredWorkspaceResult,
@@ -88,6 +90,14 @@ export interface WorkspacesApi {
   clearPreferredWorkspace(): Promise<PreferredWorkspaceResult>;
 
   /** A workspace's members (viewer+), an anchor-paginated page. */
+  /** The workspace's membership history, newest first — who let this person
+   * in, who took them out, and when (stapel-workspaces 0.24). Anchor-paginated
+   * like the member and invitation lists. */
+  listAudit(
+    workspaceId: string,
+    params?: AuditParams
+  ): Promise<AuditPage>;
+
   listMembers(
     workspaceId: string,
     params?: MembersParams
@@ -259,6 +269,18 @@ export function createWorkspacesApi(client: StapelClient): WorkspacesApi {
     clearPreferredWorkspace: () =>
       client.delete("/me/preferred-workspace", mutating()),
 
+    listAudit: (workspaceId, params) => {
+      const query: Record<string, string | number> = {};
+      if (params?.action !== undefined) query.action = params.action;
+      if (params?.user_id !== undefined) query.user_id = params.user_id;
+      if (params?.anchor !== undefined) query.anchor = params.anchor;
+      if (params?.direction !== undefined) query.direction = params.direction;
+      if (params?.limit !== undefined) query.limit = params.limit;
+      return client.get(`/${encodeURIComponent(workspaceId)}/audit`, {
+        query,
+      });
+    },
+
     listMembers: (workspaceId, params) => {
       const query: Record<string, string | number> = {};
       if (params?.anchor !== undefined) query.anchor = params.anchor;

package/src/i18n/generated/errors.es.gen.ts

@@ -56,6 +56,7 @@ export const workspacesErrorBundleEs: Record<WorkspacesErrorCode, string> = {
   "error.403.role_exceeds_inviter_rank": "No puedes conceder un rol superior al tuyo ({role})",
   "error.403.verification_enrollment_required": "Es necesario registrar un factor de verificación.",
   "error.403.verification_required": "Se requiere verificación adicional",
+  "error.403.workspace_creation_closed": "Esta instancia no te permite crear espacios de trabajo",
   "error.404.ad_not_found": "Anuncio no encontrado",
   "error.404.invitation_not_found": "Invitación no encontrada",
   "error.404.member_not_found": "Miembro no encontrado en este espacio de trabajo",
@@ -73,6 +74,7 @@ export const workspacesErrorBundleEs: Record<WorkspacesErrorCode, string> = {
   "error.422.unprocessable_entity": "Entidad no procesable",
   "error.423.locked": "El recurso está bloqueado",
   "error.423.verification_locked": "Demasiados intentos fallidos — verificación bloqueada",
+  "error.429.invitation_resend_cooldown": "Esta invitación se envió por correo hace poco; puedes volver a enviarla en {retry_after} segundos",
   "error.429.rate_limit": "Demasiados intentos. Inténtalo de nuevo en {retry_after_minutes} minutos.",
   "error.429.too_many_requests": "Demasiadas solicitudes. Inténtalo de nuevo más tarde.",
   "error.500.internal": "Algo salió mal",

package/src/i18n/generated/errors.gen.ts

@@ -79,6 +79,7 @@ export const WORKSPACES_ERRORS = {
   "error.403.role_exceeds_inviter_rank": { status: 403, params: ["role"], remediation: "fix_input", en: "You cannot grant a role that outranks your own ({role})" },
   "error.403.verification_enrollment_required": { status: 403, params: [], remediation: "verify", en: "Verification factor enrollment required" },
   "error.403.verification_required": { status: 403, params: [], remediation: "verify", en: "Additional verification required" },
+  "error.403.workspace_creation_closed": { status: 403, params: [], remediation: "contact_support", en: "This instance does not allow you to create workspaces" },
   "error.404.ad_not_found": { status: 404, params: [], remediation: "retry", en: "Listing not found" },
   "error.404.invitation_not_found": { status: 404, params: [], remediation: "fix_input", en: "Invitation not found" },
   "error.404.member_not_found": { status: 404, params: [], remediation: "fix_input", en: "Member not found in this workspace" },
@@ -96,6 +97,7 @@ export const WORKSPACES_ERRORS = {
   "error.422.unprocessable_entity": { status: 422, params: [], remediation: "wait_and_retry", en: "Unprocessable entity" },
   "error.423.locked": { status: 423, params: [], remediation: "wait_and_retry", en: "Resource is locked" },
   "error.423.verification_locked": { status: 423, params: [], remediation: "wait_and_retry", en: "Too many failed attempts — verification locked" },
+  "error.429.invitation_resend_cooldown": { status: 429, params: ["retry_after"], remediation: "wait_and_retry", en: "This invitation was emailed recently; you can send it again in {retry_after} seconds" },
   "error.429.rate_limit": { status: 429, params: ["retry_after_minutes"], remediation: "wait_and_retry", en: "Too many attempts. Try again in {retry_after_minutes} minutes." },
   "error.429.too_many_requests": { status: 429, params: [], remediation: "wait_and_retry", en: "Too many requests. Please try again later." },
   "error.500.internal": { status: 500, params: [], remediation: "contact_support", en: "Something went wrong" },
@@ -152,6 +154,7 @@ export const WORKSPACES_ERROR_CODES: readonly WorkspacesErrorCode[] = [
   "error.403.role_exceeds_inviter_rank",
   "error.403.verification_enrollment_required",
   "error.403.verification_required",
+  "error.403.workspace_creation_closed",
   "error.404.ad_not_found",
   "error.404.invitation_not_found",
   "error.404.member_not_found",
@@ -169,6 +172,7 @@ export const WORKSPACES_ERROR_CODES: readonly WorkspacesErrorCode[] = [
   "error.422.unprocessable_entity",
   "error.423.locked",
   "error.423.verification_locked",
+  "error.429.invitation_resend_cooldown",
   "error.429.rate_limit",
   "error.429.too_many_requests",
   "error.500.internal",
@@ -227,6 +231,7 @@ export const workspacesErrorBundleEn: Record<WorkspacesErrorCode, string> = {
   "error.403.role_exceeds_inviter_rank": "You cannot grant a role that outranks your own ({role})",
   "error.403.verification_enrollment_required": "Verification factor enrollment required",
   "error.403.verification_required": "Additional verification required",
+  "error.403.workspace_creation_closed": "This instance does not allow you to create workspaces",
   "error.404.ad_not_found": "Listing not found",
   "error.404.invitation_not_found": "Invitation not found",
   "error.404.member_not_found": "Member not found in this workspace",
@@ -244,6 +249,7 @@ export const workspacesErrorBundleEn: Record<WorkspacesErrorCode, string> = {
   "error.422.unprocessable_entity": "Unprocessable entity",
   "error.423.locked": "Resource is locked",
   "error.423.verification_locked": "Too many failed attempts — verification locked",
+  "error.429.invitation_resend_cooldown": "This invitation was emailed recently; you can send it again in {retry_after} seconds",
   "error.429.rate_limit": "Too many attempts. Try again in {retry_after_minutes} minutes.",
   "error.429.too_many_requests": "Too many requests. Please try again later.",
   "error.500.internal": "Something went wrong",

package/src/i18n/generated/errors.json

@@ -341,6 +341,13 @@
     "remediation": "verify",
     "en": "Additional verification required"
   },
+  {
+    "code": "error.403.workspace_creation_closed",
+    "status": 403,
+    "params": [],
+    "remediation": "contact_support",
+    "en": "This instance does not allow you to create workspaces"
+  },
   {
     "code": "error.404.ad_not_found",
     "status": 404,
@@ -460,6 +467,15 @@
     "remediation": "wait_and_retry",
     "en": "Too many failed attempts — verification locked"
   },
+  {
+    "code": "error.429.invitation_resend_cooldown",
+    "status": 429,
+    "params": [
+      "retry_after"
+    ],
+    "remediation": "wait_and_retry",
+    "en": "This invitation was emailed recently; you can send it again in {retry_after} seconds"
+  },
   {
     "code": "error.429.rate_limit",
     "status": 429,

package/src/i18n/generated/errors.ru.gen.ts

@@ -56,6 +56,7 @@ export const workspacesErrorBundleRu: Record<WorkspacesErrorCode, string> = {
   "error.403.role_exceeds_inviter_rank": "Вы не можете выдать роль, которая превышает вашу собственную ({role})",
   "error.403.verification_enrollment_required": "Требуется регистрация фактора подтверждения.",
   "error.403.verification_required": "Требуется дополнительная проверка",
+  "error.403.workspace_creation_closed": "На этом сервере вам недоступно создание рабочих пространств",
   "error.404.ad_not_found": "Объявление не найдено",
   "error.404.invitation_not_found": "Приглашение не найдено",
   "error.404.member_not_found": "Участник не найден в этом рабочем пространстве",
@@ -73,6 +74,7 @@ export const workspacesErrorBundleRu: Record<WorkspacesErrorCode, string> = {
   "error.422.unprocessable_entity": "Невозможно обработать данные запроса",
   "error.423.locked": "Ресурс заблокирован",
   "error.423.verification_locked": "Слишком много неудачных попыток — подтверждение заблокировано",
+  "error.429.invitation_resend_cooldown": "Это приглашение недавно отправлялось; отправить снова можно через {retry_after} с",
   "error.429.rate_limit": "Слишком много попыток. Повторите попытку через {retry_after_minutes} мин.",
   "error.429.too_many_requests": "Слишком много запросов. Пожалуйста, повторите попытку позже.",
   "error.500.internal": "Что-то пошло не так",

package/src/index.ts

@@ -69,6 +69,8 @@ export {
   useWorkspaces,
   useWorkspace,
   useMembers,
+  useAudit,
+  useCanCreateWorkspace,
   useInvitations,
   useInfiniteInvitations,
   useRoles,
@@ -126,6 +128,9 @@ export type {
   WorkspaceList as WorkspaceListData,
   WorkspaceCreate,
   WorkspaceUpdate,
+  AuditEvent,
+  AuditPage,
+  AuditParams,
   Member as MemberData,
   MemberPage as MemberListData,
   MembersParams,

package/src/model/queries.ts

@@ -12,6 +12,8 @@ import type {
   InstanceShape,
   InvitationsParams,
   MemberPage,
+  AuditPage,
+  AuditParams,
   MembersParams,
   RoleInfo,
   Workspace,
@@ -90,6 +92,55 @@ export function useMembers(
   });
 }
 
+/**
+ * One page of a workspace's membership history (GET /{id}/audit,
+ * stapel-workspaces 0.24) — who let this person in, who took them out, when.
+ *
+ * WHY THE PAIR CARRIES THIS AT ALL. Nothing kept a record before: the comm
+ * events this module emits are notifications to other services that nobody
+ * stores, and half the transitions emit nothing. Every product that grew an
+ * admin screen therefore had the same unanswerable question, and the first one
+ * to need it wrote a bespoke fetch through the runtime client — the copy this
+ * hook exists to make unnecessary.
+ *
+ * Gated on `members.view` server-side: every role that may see who is in the
+ * room may see how they got there. Disabled until a `workspaceId` is given
+ * (and the session is ready — see {@link useWorkspace}).
+ *
+ * ANCHOR pagination like {@link useMembers}. `action` narrows to one
+ * transition, `user_id` to one person's history AS THE SUBJECT — a value the
+ * server cannot parse matches nothing rather than being ignored.
+ */
+export function useAudit(
+  workspaceId: string | null,
+  params?: AuditParams
+): UseQueryResult<AuditPage, StapelApiError> {
+  const api = useWorkspacesApi();
+  const sessionReady = useActiveSessionReady();
+  const p = params ?? {};
+  return useQuery({
+    queryKey: workspacesQueryKeys.auditPage(workspaceId ?? "", p),
+    queryFn: () => api.listAudit(workspaceId as string, p),
+    enabled: sessionReady && workspaceId !== null && workspaceId !== "",
+  });
+}
+
+/**
+ * MAY THIS CALLER FOUND A WORKSPACE on this instance — the server's answer
+ * (`can_create_workspace`, stapel-workspaces 0.24's `WORKSPACE_CREATE_POLICY`),
+ * not a rule re-derived from the deploy shape.
+ *
+ * Ask this before drawing a "+ New space" control. The same helper answers the
+ * gate on `POST /workspaces`, so a drawn button always opens — a client that
+ * decided for itself would either draw one that 403s or hide one that should
+ * be there. FAILS CLOSED while the list is loading or failed: a hidden action
+ * for a second beats an action that refuses.
+ */
+export function useCanCreateWorkspace(): boolean {
+  const { data } = useWorkspaces();
+  return data?.can_create_workspace ?? false;
+}
+
 /**
  * One page of a workspace's invitations (GET /{id}/invitations, #109) — the
  * admin's "who has not accepted yet" table. Disabled until a `workspaceId` is

package/src/model/queryKeys.ts

@@ -1,4 +1,8 @@
-import type { InvitationsParams, MembersParams } from "../api/types.js";
+import type {
+  AuditParams,
+  InvitationsParams,
+  MembersParams,
+} from "../api/types.js";
 
 /**
  * Namespaced TanStack Query keys (frontend-standard §2 — namespaced keys).
@@ -19,6 +23,11 @@ export const workspacesQueryKeys: {
     workspaceId: string,
     params: MembersParams
   ): readonly ["workspaces", "members", string, MembersParams];
+  audit(workspaceId: string): readonly ["workspaces", "audit", string];
+  auditPage(
+    workspaceId: string,
+    params: AuditParams
+  ): readonly ["workspaces", "audit", string, AuditParams];
   invitations(workspaceId: string): readonly ["workspaces", "invitations", string];
   invitationsPage(
     workspaceId: string,
@@ -46,6 +55,12 @@ export const workspacesQueryKeys: {
   // The bare 3-tuple is a valid prefix of membersPage's 4-tuple, so
   // invalidating `members(workspaceId)` (mutations.ts) drops every page.
   members: (workspaceId) => [ROOT, "members", workspaceId],
+  /** The workspace's membership history (stapel-workspaces 0.24). Its own
+   * root, not a slice of `members`: history is append-only and a member
+   * mutation invalidates the ROSTER — the history it also appended to is
+   * invalidated deliberately, by naming this key, not as a side effect. */
+  audit: (workspaceId) => [ROOT, "audit", workspaceId],
+  auditPage: (workspaceId, params) => [ROOT, "audit", workspaceId, params],
   // EVERY workspace's roster, not one. Not a read key — nothing fetches it —
   // but the invalidation scope of a write that moves a name the whole fleet
   // shares: `MemberResponse.display_name` is a live lookup in