@stapel/workspaces-react 0.6.0 → 0.8.0

package/manifest.json

@@ -1,10 +1,10 @@
 {
   "$generated": "by scripts/gen-manifest.mjs — do not edit; drift-gated (pnpm gen:manifest:check)",
   "package": "@stapel/workspaces-react",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "backend": {
     "module": "stapel-workspaces",
-    "contract": ">=0.4 <0.5"
+    "contract": ">=0.14 <0.15"
   },
   "layers": [
     "api",
@@ -14,7 +14,9 @@
     "i18n"
   ],
   "flows": {},
-  "machines": [],
+  "machines": [
+    "createInviteAcceptFlow"
+  ],
   "operations": {
     "workspaces_api_v1_create": {
       "method": "POST",
@@ -51,6 +53,48 @@
       "request": "InvitationAcceptRequest",
       "response": "MemberResponse"
     },
+    "workspaces_api_v1_invitations_claim_create": {
+      "method": "POST",
+      "path": "/workspaces/api/v1/invitations/{token}/claim",
+      "tag": "Members",
+      "request": null,
+      "response": "InvitationClaimResponse"
+    },
+    "workspaces_api_v1_invitations_decline_create": {
+      "method": "POST",
+      "path": "/workspaces/api/v1/invitations/{token}/decline",
+      "tag": "Members",
+      "request": null,
+      "response": null
+    },
+    "workspaces_api_v1_invitations_list": {
+      "method": "GET",
+      "path": "/workspaces/api/v1/{workspace_id}/invitations",
+      "tag": "Members",
+      "request": null,
+      "response": "PaginatedInvitationResponseList"
+    },
+    "workspaces_api_v1_invitations_resend_create": {
+      "method": "POST",
+      "path": "/workspaces/api/v1/{workspace_id}/invitations/{invitation_id}/resend",
+      "tag": "Members",
+      "request": null,
+      "response": "InvitationResponse"
+    },
+    "workspaces_api_v1_invitations_retrieve": {
+      "method": "GET",
+      "path": "/workspaces/api/v1/invitations/{token}",
+      "tag": "Members",
+      "request": null,
+      "response": "InvitationPreviewResponse"
+    },
+    "workspaces_api_v1_invitations_revoke_create": {
+      "method": "POST",
+      "path": "/workspaces/api/v1/{workspace_id}/invitations/{invitation_id}/revoke",
+      "tag": "Members",
+      "request": null,
+      "response": "InvitationResponse"
+    },
     "workspaces_api_v1_members_destroy": {
       "method": "DELETE",
       "path": "/workspaces/api/v1/{workspace_id}/members/{user_id}",
@@ -79,6 +123,20 @@
       "request": "PatchedMemberUpdateRequest",
       "response": "MemberResponse"
     },
+    "workspaces_api_v1_members_password_reset_create": {
+      "method": "POST",
+      "path": "/workspaces/api/v1/{workspace_id}/members/{user_id}/password/reset",
+      "tag": "Members",
+      "request": "MemberPasswordResetRequest",
+      "response": "MemberPasswordResetResponse"
+    },
+    "workspaces_api_v1_members_provision_create": {
+      "method": "POST",
+      "path": "/workspaces/api/v1/{workspace_id}/members/provision",
+      "tag": "Members",
+      "request": "ProvisionMemberRequest",
+      "response": "ProvisionMemberResponse"
+    },
     "workspaces_api_v1_partial_update": {
       "method": "PATCH",
       "path": "/workspaces/api/v1/{workspace_id}",
@@ -99,6 +157,13 @@
       "tag": "Workspaces",
       "request": null,
       "response": "WorkspaceResponse"
+    },
+    "workspaces_api_v1_roles_retrieve": {
+      "method": "GET",
+      "path": "/workspaces/api/v1/roles",
+      "tag": "Workspaces",
+      "request": null,
+      "response": "RoleListResponse"
     }
   },
   "hooks": {
@@ -106,12 +171,21 @@
       "kind": "mutation",
       "operation": "acceptInvitation",
       "invalidates": [
+        [
+          "workspaces",
+          "invitation-preview",
+          "{token}"
+        ],
         [
           "workspaces",
           "list"
         ]
       ]
     },
+    "useClaimInvitation": {
+      "kind": "mutation",
+      "operation": "claimInvitation"
+    },
     "useCreateWorkspace": {
       "kind": "mutation",
       "operation": "createWorkspace",
@@ -122,6 +196,17 @@
         ]
       ]
     },
+    "useDeclineInvitation": {
+      "kind": "mutation",
+      "operation": "declineInvitation",
+      "invalidates": [
+        [
+          "workspaces",
+          "invitation-preview",
+          "{token}"
+        ]
+      ]
+    },
     "useDeleteWorkspace": {
       "kind": "mutation",
       "operation": "deleteWorkspace",
@@ -137,6 +222,25 @@
         ]
       ]
     },
+    "useInvitationPreview": {
+      "kind": "query",
+      "operation": "getInvitationPreview",
+      "queryKey": [
+        "workspaces",
+        "invitation-preview",
+        "{token}"
+      ]
+    },
+    "useInvitations": {
+      "kind": "query",
+      "operation": "listInvitations",
+      "queryKey": [
+        "workspaces",
+        "invitations",
+        "{workspaceId}",
+        "{params}"
+      ]
+    },
     "useInviteMembers": {
       "kind": "mutation",
       "operation": "inviteMembers",
@@ -169,6 +273,52 @@
         ]
       ]
     },
+    "useResendInvitation": {
+      "kind": "mutation",
+      "operation": "resendInvitation",
+      "invalidates": [
+        [
+          "workspaces",
+          "invitations",
+          "{workspaceId}"
+        ]
+      ]
+    },
+    "useResetMemberPassword": {
+      "kind": "mutation",
+      "operation": "resetMemberPassword",
+      "invalidates": [
+        [
+          "workspaces",
+          "members",
+          "{workspaceId}"
+        ]
+      ]
+    },
+    "useRevokeInvitation": {
+      "kind": "mutation",
+      "operation": "revokeInvitation",
+      "invalidates": [
+        [
+          "workspaces",
+          "invitations",
+          "{workspaceId}"
+        ],
+        [
+          "workspaces",
+          "members",
+          "{workspaceId}"
+        ]
+      ]
+    },
+    "useRoles": {
+      "kind": "query",
+      "operation": "listRoles",
+      "queryKey": [
+        "workspaces",
+        "roles"
+      ]
+    },
     "useUpdateMemberRole": {
       "kind": "mutation",
       "operation": "updateMemberRole",
@@ -180,6 +330,29 @@
         ]
       ]
     },
+    "useUpdateSecuritySettings": {
+      "kind": "mutation",
+      "operations": [
+        "getWorkspace",
+        "updateWorkspace"
+      ],
+      "invalidates": [
+        [
+          "workspaces",
+          "detail",
+          "{workspaceId}"
+        ],
+        [
+          "workspaces",
+          "list"
+        ],
+        [
+          "workspaces",
+          "members",
+          "{workspaceId}"
+        ]
+      ]
+    },
     "useUpdateWorkspace": {
       "kind": "mutation",
       "operation": "updateWorkspace",
@@ -325,6 +498,11 @@
       "params": [],
       "remediation": "fix_input"
     },
+    "error.400.invalid_provision_username": {
+      "status": 400,
+      "params": [],
+      "remediation": "fix_input"
+    },
     "error.400.invalid_role": {
       "status": 400,
       "params": [],
@@ -335,6 +513,11 @@
       "params": [],
       "remediation": "fix_input"
     },
+    "error.400.invitation_declined": {
+      "status": 400,
+      "params": [],
+      "remediation": "contact_support"
+    },
     "error.400.invitation_expired": {
       "status": 400,
       "params": [],
@@ -370,6 +553,18 @@
       "params": [],
       "remediation": "reauthenticate"
     },
+    "error.402.entitlement_required": {
+      "status": 402,
+      "params": [],
+      "remediation": "fix_input"
+    },
+    "error.402.member_limit_reached": {
+      "status": 402,
+      "params": [
+        "limit"
+      ],
+      "remediation": "fix_input"
+    },
     "error.402.payment_required": {
       "status": 402,
       "params": [],
@@ -390,6 +585,20 @@
       "params": [],
       "remediation": "fix_input"
     },
+    "error.403.membership_suspended": {
+      "status": 403,
+      "params": [
+        "reason"
+      ],
+      "remediation": "fix_input"
+    },
+    "error.403.missing_capability": {
+      "status": 403,
+      "params": [
+        "capability"
+      ],
+      "remediation": "contact_support"
+    },
     "error.403.network_blocked": {
       "status": 403,
       "params": [],
@@ -455,6 +664,11 @@
       "params": [],
       "remediation": "fix_input"
     },
+    "error.409.email_already_registered": {
+      "status": 409,
+      "params": [],
+      "remediation": "reauthenticate"
+    },
     "error.410.gone": {
       "status": 410,
       "params": [],
@@ -501,6 +715,11 @@
       "status": 500,
       "params": [],
       "remediation": "contact_support"
+    },
+    "error.503.auth_unavailable": {
+      "status": 503,
+      "params": [],
+      "remediation": "wait_and_retry"
     }
   },
   "events": {
@@ -522,6 +741,34 @@
       ],
       "source": "demo/AcceptInvitation.demo.tsx"
     },
+    {
+      "id": "workspaces.can",
+      "title": "Capability gate",
+      "description": "The headless Can gates UI on the caller's my_capabilities in a workspace, with the backend's wildcard matcher (* and prefix.*) ported client-side. Static children render only when allowed; the render-prop variant hands the verdict out for disabled-state UI. UI convenience only — the backend re-checks every operation.",
+      "component": "Can",
+      "tokens": [
+        "card-bg",
+        "card-border"
+      ],
+      "variants": [
+        "default"
+      ],
+      "source": "demo/Can.demo.tsx"
+    },
+    {
+      "id": "workspaces.invite-accept",
+      "title": "Invite accept flow",
+      "description": "The headless InviteAcceptFlow drives the /invite/{token} journey: public preview routing (accept prompt / wrong account / login / claim), the grant_token hand-off seam to auth (onLoginGrant), the basic-data slot, and accept/decline. Every screen is the host's; InviteAcceptPage is the reference skin.",
+      "component": "InviteAcceptFlow",
+      "tokens": [
+        "card-bg",
+        "button-primary-bg"
+      ],
+      "variants": [
+        "default"
+      ],
+      "source": "demo/InviteAcceptFlow.demo.tsx"
+    },
     {
       "id": "workspaces.list",
       "title": "Workspace list",
@@ -562,6 +809,20 @@
         "default"
       ],
       "source": "demo/Workspaces.demo.tsx"
+    },
+    {
+      "id": "workspaces.role-select",
+      "title": "Role select (registry)",
+      "description": "The headless RoleSelect reads the effective role registry (builtin four + the deployment's STAPEL_WORKSPACES[\"ROLES\"] overlay) from GET /roles and resolves labels via workspaces.role.<key> with a raw-name fallback — role UI stops hardcoding the builtin four.",
+      "component": "RoleSelect",
+      "tokens": [
+        "card-bg",
+        "card-border"
+      ],
+      "variants": [
+        "default"
+      ],
+      "source": "demo/RoleSelect.demo.tsx"
     }
   ],
   "i18nKeys": [
@@ -582,8 +843,10 @@
     "error.400.field.required",
     "error.400.field.unique",
     "error.400.invalid_ad_id",
+    "error.400.invalid_provision_username",
     "error.400.invalid_role",
     "error.400.invitation_already_used",
+    "error.400.invitation_declined",
     "error.400.invitation_expired",
     "error.400.invitation_revoked",
     "error.400.validation_error",
@@ -591,10 +854,14 @@
     "error.400.verification_invalid_factor",
     "error.400.workspace_slug_taken",
     "error.401.unauthorized",
+    "error.402.entitlement_required",
+    "error.402.member_limit_reached",
     "error.402.payment_required",
     "error.403.forbidden",
     "error.403.forbidden_workspace",
     "error.403.last_owner_cannot_be_removed",
+    "error.403.membership_suspended",
+    "error.403.missing_capability",
     "error.403.network_blocked",
     "error.403.verification_enrollment_required",
     "error.403.verification_required",
@@ -608,6 +875,7 @@
     "error.406.not_acceptable",
     "error.408.request_timeout",
     "error.409.conflict",
+    "error.409.email_already_registered",
     "error.410.gone",
     "error.413.payload_too_large",
     "error.415.unsupported_media_type",
@@ -617,10 +885,35 @@
     "error.429.rate_limit",
     "error.429.too_many_requests",
     "error.500.internal",
+    "error.503.auth_unavailable",
     "workspaces.accept.accept",
     "workspaces.accept.accepted",
     "workspaces.accept.accepting",
     "workspaces.error.unknown",
+    "workspaces.invite.acceptTitle",
+    "workspaces.invite.accepted",
+    "workspaces.invite.basicDataContinueCta",
+    "workspaces.invite.basicDataTitle",
+    "workspaces.invite.claiming",
+    "workspaces.invite.createAccountCta",
+    "workspaces.invite.declineCta",
+    "workspaces.invite.declined",
+    "workspaces.invite.emailLine",
+    "workspaces.invite.exchangeFailed",
+    "workspaces.invite.exchanging",
+    "workspaces.invite.joinCta",
+    "workspaces.invite.loading",
+    "workspaces.invite.loginTitle",
+    "workspaces.invite.newUserHint",
+    "workspaces.invite.retryCta",
+    "workspaces.invite.roleLine",
+    "workspaces.invite.switchAccountCta",
+    "workspaces.invite.unavailable.accepted",
+    "workspaces.invite.unavailable.declined",
+    "workspaces.invite.unavailable.expired",
+    "workspaces.invite.unavailable.revoked",
+    "workspaces.invite.wrongAccount",
+    "workspaces.invite.wrongAccountHint",
     "workspaces.list.create",
     "workspaces.list.creating",
     "workspaces.list.empty",
@@ -641,6 +934,10 @@
     "workspaces.members.subtitle",
     "workspaces.members.title",
     "workspaces.members.update_role",
+    "workspaces.role.admin",
+    "workspaces.role.member",
+    "workspaces.role.owner",
+    "workspaces.role.viewer",
     "workspaces.settings.danger_zone.delete",
     "workspaces.settings.danger_zone.delete_confirm",
     "workspaces.settings.danger_zone.title",
@@ -655,7 +952,12 @@
   "exports": {
     "runtime": [
       "AcceptInvitation",
+      "BUILTIN_CAPABILITY_LEVELS",
+      "Can",
+      "InviteAcceptFlow",
       "Members",
+      "RoleSelect",
+      "SENSITIVE_SCOPE",
       "WORKSPACES_ERRORS",
       "WORKSPACES_ERROR_CODES",
       "WORKSPACES_FLOWS",
@@ -663,22 +965,41 @@
       "WorkspaceList",
       "WorkspacesProvider",
       "WorkspacesRuntimeContext",
+      "capabilityLevel",
+      "capabilityMatches",
       "createFlowMachine",
+      "createInviteAcceptFlow",
       "createWorkspacesApi",
       "createWorkspacesRuntime",
+      "emailMatchesMask",
       "explainWorkspacesError",
       "flowEndpoints",
+      "hasCapability",
       "isErrorCode",
+      "maskEmail",
+      "readVerificationEnrollment",
       "registerWorkspacesI18n",
       "toFlowError",
       "useAcceptInvitation",
+      "useCapabilities",
+      "useCapabilityGate",
+      "useClaimInvitation",
       "useCreateWorkspace",
+      "useDeclineInvitation",
       "useDeleteWorkspace",
       "useFlow",
+      "useInfiniteInvitations",
+      "useInvitationPreview",
+      "useInvitations",
       "useInviteMembers",
       "useMembers",
       "useRemoveMember",
+      "useResendInvitation",
+      "useResetMemberPassword",
+      "useRevokeInvitation",
+      "useRoles",
       "useUpdateMemberRole",
+      "useUpdateSecuritySettings",
       "useUpdateWorkspace",
       "useWorkspace",
       "useWorkspaces",
@@ -691,6 +1012,10 @@
     ],
     "types": [
       "AcceptInvitationBag",
+      "CanBag",
+      "CapabilitiesResult",
+      "CapabilityGate",
+      "CapabilityLevel",
       "CreateWorkspacesRuntimeOptions",
       "FlowEndpoint",
       "FlowError",
@@ -699,22 +1024,40 @@
       "FlowStateBase",
       "Invitation",
       "InvitationAccept",
+      "InvitationClaim",
+      "InvitationListData",
+      "InvitationPreview",
+      "InvitationStatusFilter",
+      "InvitationsParams",
+      "InviteAcceptFlowBag",
+      "InviteAcceptFlowController",
+      "InviteAcceptFlowDeps",
+      "InviteAcceptState",
       "MemberData",
       "MemberInvite",
       "MemberInviteResult",
       "MemberListData",
+      "MemberPasswordReset",
+      "MemberPasswordResetResult",
+      "MemberPasswordResetVars",
       "MemberRoleChange",
       "MemberRoleUpdate",
       "MembersBag",
       "MembersParams",
+      "ProvisionedUserPolicy",
       "Remediation",
+      "RoleInfo",
+      "RoleList",
+      "RoleSelectBag",
       "Schemas",
+      "VerificationEnrollment",
       "WorkspaceCreate",
       "WorkspaceData",
       "WorkspaceKind",
       "WorkspaceListBag",
       "WorkspaceListData",
       "WorkspaceRole",
+      "WorkspaceSecuritySettings",
       "WorkspaceUpdate",
       "WorkspacesApi",
       "WorkspacesErrorCode",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stapel/workspaces-react",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Headless React flow pair for stapel-workspaces: typed API client, TanStack Query hooks, flow machines, headless components, and i18n keys. Zero visual opinion.",
   "license": "MIT",
   "repository": {
@@ -49,7 +49,7 @@
     {
       "name": "i18n/ru subpath (opt-in locale: en floor + generated ru + ru UI)",
       "path": "dist/i18n/ru.js",
-      "limit": "3.5 KB"
+      "limit": "5 KB"
     },
     {
       "name": "default — the settings skin (antd) must stay out of the main bundle",
@@ -82,9 +82,9 @@
     "size-limit": "^11.2.0",
     "typescript": "^5.8.3",
     "vitest": "^3.2.4",
-    "@stapel/core": "^0.6.0",
-    "@stapel/tokens": "^0.4.0",
-    "@stapel/showcase": "^0.2.0"
+    "@stapel/showcase": "^0.2.0",
+    "@stapel/core": "^0.9.0",
+    "@stapel/tokens": "^0.5.0"
   },
   "engines": {
     "node": ">=22"

package/src/analytics/generated/events.json

@@ -1,7 +1,7 @@
 {
   "$generated": "by scripts/gen-events.mjs — do not edit; drift-gated (pnpm gen:events:check)",
   "package": "@stapel/workspaces-react",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "defined": [],
   "flows": []
 }