@streamoid/settings 0.4.6 → 0.6.0

package/dist/index.d.mts

@@ -233,21 +233,46 @@ interface SettingsWorkspaceAdapter {
     /** Toggle this workspace's `orgVisibility` within its parent org. */
     setOrgVisibility?: (visibility: "private" | "shared") => Promise<void>;
 }
+/**
+ * An organization membership role.
+ *
+ * `guest` is an outsider who accepted an invite to a single workspace inside
+ * the organization. They hold a membership row — so they show up in these
+ * responses — but inherit nothing from the org: no implicit access to its
+ * shared workspaces, and every org-level write is refused by the backend.
+ *
+ * Gate write affordances on `=== "admin"`, never on `!== "member"`: a role this
+ * union does not yet name must read as least-privileged, not as an editor.
+ *
+ * Deliberately NOT applied to `autoJoinRole` or to workspace/team roles — a
+ * domain claim that auto-joins its own company as guests is a contradiction,
+ * and a workspace role of "guest" is not a value the backend accepts.
+ */
+type SettingsOrganizationRole = "admin" | "member" | "guest";
 interface SettingsOrganizationListItem {
     _id: string;
     name: string;
     imageUrl?: string;
-    role?: "admin" | "member";
+    role?: SettingsOrganizationRole;
 }
 interface SettingsOrganizationCurrent {
     id: string;
     name?: string;
     imageUrl?: string;
-    role?: "admin" | "member" | string;
+    role?: SettingsOrganizationRole | string;
+    /**
+     * Whether the viewer may invite into this organization.
+     *
+     * Orthogonal to `role`, not implied by it: a guest row can carry it too, so
+     * gate on `role !== "guest" && (role === "admin" || inviteAccess)`. The
+     * shorter `role === "admin" || inviteAccess` is the escalation the backend
+     * explicitly refuses.
+     */
+    inviteAccess?: boolean;
 }
 interface OrganizationMember {
     _id: string;
-    role: "admin" | "member";
+    role: SettingsOrganizationRole;
     inviteAccess: boolean;
     /** Populated user. Rows whose user document was deleted come back from the
      *  API with a null `user` — OrganizationContent drops those on fetch, so
@@ -357,9 +382,21 @@ interface SettingsOrganizationAdapter {
         role: "admin" | "member";
         inviteAccess?: boolean;
     }) => Promise<void>;
-    /** Optional: gates write affordances inside the Organization tab. */
+    /** Optional: gates write affordances inside the Organization tab. Can report
+     *  "guest", so callers must gate on `=== "admin"` rather than `!== "member"`. */
     getHighestRole?: () => Promise<{
-        role: "admin" | "member";
+        role: SettingsOrganizationRole;
+        /**
+         * The viewer's own email domain, and whether it can be claimed at all.
+         *
+         * A self-serve domain claim can only ever be the claimer's OWN domain —
+         * there is no DNS verification, so the backend refuses any other — which
+         * makes one boolean about one known domain the entire answer. Server
+         * computed on purpose: the disposable-domain lists it consults are
+         * provisioned at runtime, so no bundled list could agree with it.
+         */
+        emailDomain?: string | null;
+        canClaimEmailDomain?: boolean;
     }>;
     fetchWorkspaces: () => Promise<OrganizationWorkspaceItem[]>;
     fetchJoinRequests: () => Promise<OrganizationJoinRequest[]>;
@@ -675,7 +712,18 @@ interface SettingsApiAdapter {
     /** Send an invitation to `email` with the given permissions. */
     inviteMember: (input: {
         email: string;
-    } & MemberPermissionsPayload) => Promise<void>;
+    } & MemberPermissionsPayload & {
+        /**
+         * Standing in the workspace's ORGANIZATION, independent of `role`,
+         * which is the role inside the workspace. Omit for "no preference" —
+         * the backend then derives it from the invitee's email domain, which
+         * is what it has always done.
+         *
+         * Deliberately not on MemberPermissionsPayload: that type is shared
+         * with `updateMemberRole`, and org membership is not editable there.
+         */
+        organizationRole?: "member" | "guest";
+    }) => Promise<void>;
     /**
      * Canonical name for role updates. CXO's underlying service is named
      * `changeUserRole(workspaceId, payload)`; the adapter wraps that. Both
@@ -1090,30 +1138,6 @@ interface MemberListFrameProps {
     children?: ReactNode;
 }
 declare function MemberListFrame({ header, emptyText, isEmpty, grow, maxHeight, contentMinWidth, children, }: MemberListFrameProps): react.JSX.Element;
-/**
- * A small pill marking a workspace member who is *also* a member of the
- * organization above this workspace.
- *
- * It answers a question neither list used to acknowledge: removing someone
- * here may not remove all their access. Per the org contract, admins of the
- * parent organization keep implicit access to its workspaces, and a workspace
- * set to organization-wide visibility is readable by every org member.
- *
- * Derived by intersecting this workspace's members with the organization's, so
- * it states a fact both APIs already report — it is not a guess at an
- * "inherited permission" flag, which no endpoint exposes.
- *
- * ONLY ADMINS GET A CHIP NOW. The other state read "in org", which told you
- * that someone in the workspace list is also in the organization -- true of
- * nearly everyone, actionable for no one, and one more thing to read on every
- * row. An org admin is different: they keep access to this workspace whatever
- * is set here, and they are who you ask for permissions. That is worth a chip;
- * "also in the org" is not.
- */
-declare function OrgMembershipTag({ organizationName, isOrgAdmin, }: {
-    organizationName?: string | null;
-    isOrgAdmin?: boolean;
-}): react.JSX.Element;
 
 type SettingsTooltipPlacement = "right" | "top" | "bottom";
 interface SettingsTooltipProps {
@@ -1159,7 +1183,36 @@ interface OrganizationInviteModalProps {
     mode: ModalMode$1;
     /** Update mode: the target member's email (read-only display). */
     userEmail?: string;
+    /** admin/member only — the toggle below cannot express any other role, so
+     *  pass `lockRole` for a target whose role is outside that pair. */
     initialRole?: "admin" | "member";
+    /**
+     * Show the target's role read-only and disable Save, leaving Remove as the
+     * only action.
+     *
+     * For an organization guest: the toggle offers Admin and Member and nothing
+     * else, so opening it on a guest preselected "Member" and quietly promoted
+     * them the moment Save was pressed — even by an admin who came only to flip
+     * `inviteAccess`, which is itself the thing a guest must never hold. Removing
+     * a guest happens through this same modal, so refusing to open it was not an
+     * option.
+     */
+    lockRole?: boolean;
+    /**
+     * Whether the viewer's own email domain can be claimed at all. Defaults to
+     * true, preserving today's behaviour for any host that does not pass it.
+     *
+     * A domain claim can only ever be the claimer's OWN domain — there is no DNS
+     * verification, so the backend refuses any other — and a public provider
+     * like gmail.com can never be claimed by anybody. Offering the tab in that
+     * case advertises the one mechanism that would solve bulk onboarding and
+     * then fails after submit, which is worse than not offering it.
+     */
+    canClaimDomain?: boolean;
+    /** The viewer's own email domain: the only one they could ever claim. */
+    claimableDomain?: string | null;
+    /** Label for the read-only role shown when `lockRole` is set. */
+    lockedRoleLabel?: string;
     initialInviteAccess?: boolean;
     /** Lets a pending-invite row reopen this modal to resend without edits. */
     allowSubmitWithoutChanges?: boolean;
@@ -1180,7 +1233,7 @@ interface OrganizationInviteModalProps {
     }) => void;
     onRemove?: () => void;
 }
-declare function OrganizationInviteModal({ open, mode, userEmail, initialRole, initialInviteAccess, allowSubmitWithoutChanges, canRemove, onClose, onInviteEmail, onInviteDomain, onUpdate, onRemove, }: OrganizationInviteModalProps): react.JSX.Element | null;
+declare function OrganizationInviteModal({ open, mode, userEmail, initialRole, lockRole, canClaimDomain, claimableDomain, lockedRoleLabel, initialInviteAccess, allowSubmitWithoutChanges, canRemove, onClose, onInviteEmail, onInviteDomain, onUpdate, onRemove, }: OrganizationInviteModalProps): react.JSX.Element | null;
 
 interface ConfirmLeaveModalProps {
     open: boolean;
@@ -1215,6 +1268,12 @@ interface StoreOption {
     _id: string;
     name?: string;
 }
+/**
+ * Standing in the workspace's parent organization, as distinct from `role`,
+ * which is the role inside the workspace itself. The two are independent: an
+ * external collaborator is routinely a workspace admin and an org guest.
+ */
+type OrganizationStanding = "colleague" | "guest";
 interface InviteUpdateModalProps {
     open: boolean;
     mode: ModalMode;
@@ -1257,10 +1316,32 @@ interface InviteUpdateModalProps {
     onRemove?: () => void;
     /** Controls whether the Remove user button is enabled. Defaults to true. */
     canRemove?: boolean;
-    /** Called only in invite mode; receives (permissions, email) */
-    onInvite?: (permissions: UserPermissions, email: string) => void;
+    /**
+     * Offer the invitee an explicit standing in the workspace's parent
+     * organization.
+     *
+     * Omit it and nothing renders and nothing is submitted — the backend keeps
+     * deriving the standing from the invitee's email domain, which is today's
+     * behaviour. Pass it only when the workspace HAS an organization and the
+     * inviter may grant membership in it; showing the choice to someone who
+     * cannot grant it produces an invite the backend quietly downgrades.
+     */
+    showOrganizationStanding?: boolean;
+    /** Name of the parent organization, for the option copy. */
+    organizationName?: string;
+    /**
+     * Hide the Guest option. For an invitee whose email domain the organization
+     * already claims, guest is not expressible: the backend takes the higher of
+     * the requested and domain-derived roles, so choosing it would appear to
+     * work and change nothing.
+     */
+    allowGuestStanding?: boolean;
+    /** Defaults to "guest" — the least-privileged of the two. */
+    initialOrganizationStanding?: OrganizationStanding;
+    /** Called only in invite mode; receives (permissions, email, standing) */
+    onInvite?: (permissions: UserPermissions, email: string, organizationStanding?: OrganizationStanding) => void;
 }
-declare function InviteUpdateModal({ open, mode, userEmail, stores, hiddenApps, allowSubmitWithoutChanges, initialPermissions, onClose, onSave, onRemove, canRemove, onInvite, }: InviteUpdateModalProps): react.JSX.Element | null;
+declare function InviteUpdateModal({ open, mode, userEmail, stores, hiddenApps, allowSubmitWithoutChanges, initialPermissions, onClose, onSave, onRemove, canRemove, showOrganizationStanding, organizationName, allowGuestStanding, initialOrganizationStanding, onInvite, }: InviteUpdateModalProps): react.JSX.Element | null;
 
 interface ExportDateModalProps {
     title: string;
@@ -1280,4 +1361,4 @@ declare function SettingsAdaptersProvider({ adapters, children, }: {
  */
 declare function useSettingsAdapters(): SettingsAdapters;
 
-export { APP_KEYS, type ApiToken, type AppKey, type AvailableCreditsResponse, BillingContent, type BillingEventPayload, type BillingProduct, type BillingSubscription, BuyCreditsModal, type BuyCreditsPayload, type BuyCreditsResponse, ConfirmDeleteModal, ConfirmLeaveModal, type CreatedToken, type CustomCreditInfo, type CustomCreditResponse, DEFAULT_PERMISSIONS, DEFAULT_USER_LANGUAGE, ExportDateModal, InviteUpdateModal, type InvoicePdfResponse, MemberListFrame, type MemberListFrameProps, type MemberListTab, MemberListToolbar, type MemberListToolbarProps, type MemberPermissionsPayload, OrgMembershipTag, OrganizationContent, type OrganizationData, type OrganizationInvite, OrganizationInviteModal, type OrganizationInviteModalProps, type OrganizationJoinRequest, type OrganizationMember, OrganizationModal, type OrganizationView, type OrganizationWorkspaceItem, type Price, type PriceMetadata, type ProductsResponse, ProfileAvatar, ProfileTab, ReferralTab, SCOPE_LABELS, ScopeHeader, type ScopeHeaderProps, type ServiceItem, type SettingsAdapters, SettingsAdaptersProvider, type SettingsApiAdapter, type SettingsAuthAdapter, type SettingsAuthUser, SettingsContent, type SettingsContentProps, type SettingsImageUploadAdapter, type SettingsNavigationAdapter, type SettingsOrganizationAdapter, type SettingsOrganizationCurrent, type SettingsOrganizationListItem, type SettingsScope, type SettingsTab, type SettingsToastAdapter, SettingsTooltip, type SettingsTooltipPlacement, type SettingsTooltipProps, type SettingsWorkspaceAdapter, type SettingsWorkspaceCurrent, type SettingsWorkspaceListItem, SiconKey, type StoreItem, type SubscriptionPlan, type SubscriptionResponse, TAB_DESCRIPTIONS, TAB_LABELS, TAB_SCOPE, TAB_TO_URL, type TeamMember, TeamsContent, type TokenExpiry, TokensContent, URL_TO_TAB, USER_LANGUAGES, type UpdateSubscriptionPayload, type UpdateSubscriptionResponse, type UsageHistoryItem, type UsageHistoryResponse, type UserLanguage, type UserPermissions, type WorkspaceData, WorkspaceGeneralTab, type WorkspaceGeneralTabProps, type WorkspaceInvite, WorkspaceListTab, type WorkspaceMember, WorkspaceModal, WorkspaceTab, countLabel, resolveSettingsTabFromPath, useSettingsAdapters, userLanguageLabel };
+export { APP_KEYS, type ApiToken, type AppKey, type AvailableCreditsResponse, BillingContent, type BillingEventPayload, type BillingProduct, type BillingSubscription, BuyCreditsModal, type BuyCreditsPayload, type BuyCreditsResponse, ConfirmDeleteModal, ConfirmLeaveModal, type CreatedToken, type CustomCreditInfo, type CustomCreditResponse, DEFAULT_PERMISSIONS, DEFAULT_USER_LANGUAGE, ExportDateModal, InviteUpdateModal, type InvoicePdfResponse, MemberListFrame, type MemberListFrameProps, type MemberListTab, MemberListToolbar, type MemberListToolbarProps, type MemberPermissionsPayload, OrganizationContent, type OrganizationData, type OrganizationInvite, OrganizationInviteModal, type OrganizationInviteModalProps, type OrganizationJoinRequest, type OrganizationMember, OrganizationModal, type OrganizationView, type OrganizationWorkspaceItem, type Price, type PriceMetadata, type ProductsResponse, ProfileAvatar, ProfileTab, ReferralTab, SCOPE_LABELS, ScopeHeader, type ScopeHeaderProps, type ServiceItem, type SettingsAdapters, SettingsAdaptersProvider, type SettingsApiAdapter, type SettingsAuthAdapter, type SettingsAuthUser, SettingsContent, type SettingsContentProps, type SettingsImageUploadAdapter, type SettingsNavigationAdapter, type SettingsOrganizationAdapter, type SettingsOrganizationCurrent, type SettingsOrganizationListItem, type SettingsScope, type SettingsTab, type SettingsToastAdapter, SettingsTooltip, type SettingsTooltipPlacement, type SettingsTooltipProps, type SettingsWorkspaceAdapter, type SettingsWorkspaceCurrent, type SettingsWorkspaceListItem, SiconKey, type StoreItem, type SubscriptionPlan, type SubscriptionResponse, TAB_DESCRIPTIONS, TAB_LABELS, TAB_SCOPE, TAB_TO_URL, type TeamMember, TeamsContent, type TokenExpiry, TokensContent, URL_TO_TAB, USER_LANGUAGES, type UpdateSubscriptionPayload, type UpdateSubscriptionResponse, type UsageHistoryItem, type UsageHistoryResponse, type UserLanguage, type UserPermissions, type WorkspaceData, WorkspaceGeneralTab, type WorkspaceGeneralTabProps, type WorkspaceInvite, WorkspaceListTab, type WorkspaceMember, WorkspaceModal, WorkspaceTab, countLabel, resolveSettingsTabFromPath, useSettingsAdapters, userLanguageLabel };

package/dist/index.d.ts

@@ -233,21 +233,46 @@ interface SettingsWorkspaceAdapter {
     /** Toggle this workspace's `orgVisibility` within its parent org. */
     setOrgVisibility?: (visibility: "private" | "shared") => Promise<void>;
 }
+/**
+ * An organization membership role.
+ *
+ * `guest` is an outsider who accepted an invite to a single workspace inside
+ * the organization. They hold a membership row — so they show up in these
+ * responses — but inherit nothing from the org: no implicit access to its
+ * shared workspaces, and every org-level write is refused by the backend.
+ *
+ * Gate write affordances on `=== "admin"`, never on `!== "member"`: a role this
+ * union does not yet name must read as least-privileged, not as an editor.
+ *
+ * Deliberately NOT applied to `autoJoinRole` or to workspace/team roles — a
+ * domain claim that auto-joins its own company as guests is a contradiction,
+ * and a workspace role of "guest" is not a value the backend accepts.
+ */
+type SettingsOrganizationRole = "admin" | "member" | "guest";
 interface SettingsOrganizationListItem {
     _id: string;
     name: string;
     imageUrl?: string;
-    role?: "admin" | "member";
+    role?: SettingsOrganizationRole;
 }
 interface SettingsOrganizationCurrent {
     id: string;
     name?: string;
     imageUrl?: string;
-    role?: "admin" | "member" | string;
+    role?: SettingsOrganizationRole | string;
+    /**
+     * Whether the viewer may invite into this organization.
+     *
+     * Orthogonal to `role`, not implied by it: a guest row can carry it too, so
+     * gate on `role !== "guest" && (role === "admin" || inviteAccess)`. The
+     * shorter `role === "admin" || inviteAccess` is the escalation the backend
+     * explicitly refuses.
+     */
+    inviteAccess?: boolean;
 }
 interface OrganizationMember {
     _id: string;
-    role: "admin" | "member";
+    role: SettingsOrganizationRole;
     inviteAccess: boolean;
     /** Populated user. Rows whose user document was deleted come back from the
      *  API with a null `user` — OrganizationContent drops those on fetch, so
@@ -357,9 +382,21 @@ interface SettingsOrganizationAdapter {
         role: "admin" | "member";
         inviteAccess?: boolean;
     }) => Promise<void>;
-    /** Optional: gates write affordances inside the Organization tab. */
+    /** Optional: gates write affordances inside the Organization tab. Can report
+     *  "guest", so callers must gate on `=== "admin"` rather than `!== "member"`. */
     getHighestRole?: () => Promise<{
-        role: "admin" | "member";
+        role: SettingsOrganizationRole;
+        /**
+         * The viewer's own email domain, and whether it can be claimed at all.
+         *
+         * A self-serve domain claim can only ever be the claimer's OWN domain —
+         * there is no DNS verification, so the backend refuses any other — which
+         * makes one boolean about one known domain the entire answer. Server
+         * computed on purpose: the disposable-domain lists it consults are
+         * provisioned at runtime, so no bundled list could agree with it.
+         */
+        emailDomain?: string | null;
+        canClaimEmailDomain?: boolean;
     }>;
     fetchWorkspaces: () => Promise<OrganizationWorkspaceItem[]>;
     fetchJoinRequests: () => Promise<OrganizationJoinRequest[]>;
@@ -675,7 +712,18 @@ interface SettingsApiAdapter {
     /** Send an invitation to `email` with the given permissions. */
     inviteMember: (input: {
         email: string;
-    } & MemberPermissionsPayload) => Promise<void>;
+    } & MemberPermissionsPayload & {
+        /**
+         * Standing in the workspace's ORGANIZATION, independent of `role`,
+         * which is the role inside the workspace. Omit for "no preference" —
+         * the backend then derives it from the invitee's email domain, which
+         * is what it has always done.
+         *
+         * Deliberately not on MemberPermissionsPayload: that type is shared
+         * with `updateMemberRole`, and org membership is not editable there.
+         */
+        organizationRole?: "member" | "guest";
+    }) => Promise<void>;
     /**
      * Canonical name for role updates. CXO's underlying service is named
      * `changeUserRole(workspaceId, payload)`; the adapter wraps that. Both
@@ -1090,30 +1138,6 @@ interface MemberListFrameProps {
     children?: ReactNode;
 }
 declare function MemberListFrame({ header, emptyText, isEmpty, grow, maxHeight, contentMinWidth, children, }: MemberListFrameProps): react.JSX.Element;
-/**
- * A small pill marking a workspace member who is *also* a member of the
- * organization above this workspace.
- *
- * It answers a question neither list used to acknowledge: removing someone
- * here may not remove all their access. Per the org contract, admins of the
- * parent organization keep implicit access to its workspaces, and a workspace
- * set to organization-wide visibility is readable by every org member.
- *
- * Derived by intersecting this workspace's members with the organization's, so
- * it states a fact both APIs already report — it is not a guess at an
- * "inherited permission" flag, which no endpoint exposes.
- *
- * ONLY ADMINS GET A CHIP NOW. The other state read "in org", which told you
- * that someone in the workspace list is also in the organization -- true of
- * nearly everyone, actionable for no one, and one more thing to read on every
- * row. An org admin is different: they keep access to this workspace whatever
- * is set here, and they are who you ask for permissions. That is worth a chip;
- * "also in the org" is not.
- */
-declare function OrgMembershipTag({ organizationName, isOrgAdmin, }: {
-    organizationName?: string | null;
-    isOrgAdmin?: boolean;
-}): react.JSX.Element;
 
 type SettingsTooltipPlacement = "right" | "top" | "bottom";
 interface SettingsTooltipProps {
@@ -1159,7 +1183,36 @@ interface OrganizationInviteModalProps {
     mode: ModalMode$1;
     /** Update mode: the target member's email (read-only display). */
     userEmail?: string;
+    /** admin/member only — the toggle below cannot express any other role, so
+     *  pass `lockRole` for a target whose role is outside that pair. */
     initialRole?: "admin" | "member";
+    /**
+     * Show the target's role read-only and disable Save, leaving Remove as the
+     * only action.
+     *
+     * For an organization guest: the toggle offers Admin and Member and nothing
+     * else, so opening it on a guest preselected "Member" and quietly promoted
+     * them the moment Save was pressed — even by an admin who came only to flip
+     * `inviteAccess`, which is itself the thing a guest must never hold. Removing
+     * a guest happens through this same modal, so refusing to open it was not an
+     * option.
+     */
+    lockRole?: boolean;
+    /**
+     * Whether the viewer's own email domain can be claimed at all. Defaults to
+     * true, preserving today's behaviour for any host that does not pass it.
+     *
+     * A domain claim can only ever be the claimer's OWN domain — there is no DNS
+     * verification, so the backend refuses any other — and a public provider
+     * like gmail.com can never be claimed by anybody. Offering the tab in that
+     * case advertises the one mechanism that would solve bulk onboarding and
+     * then fails after submit, which is worse than not offering it.
+     */
+    canClaimDomain?: boolean;
+    /** The viewer's own email domain: the only one they could ever claim. */
+    claimableDomain?: string | null;
+    /** Label for the read-only role shown when `lockRole` is set. */
+    lockedRoleLabel?: string;
     initialInviteAccess?: boolean;
     /** Lets a pending-invite row reopen this modal to resend without edits. */
     allowSubmitWithoutChanges?: boolean;
@@ -1180,7 +1233,7 @@ interface OrganizationInviteModalProps {
     }) => void;
     onRemove?: () => void;
 }
-declare function OrganizationInviteModal({ open, mode, userEmail, initialRole, initialInviteAccess, allowSubmitWithoutChanges, canRemove, onClose, onInviteEmail, onInviteDomain, onUpdate, onRemove, }: OrganizationInviteModalProps): react.JSX.Element | null;
+declare function OrganizationInviteModal({ open, mode, userEmail, initialRole, lockRole, canClaimDomain, claimableDomain, lockedRoleLabel, initialInviteAccess, allowSubmitWithoutChanges, canRemove, onClose, onInviteEmail, onInviteDomain, onUpdate, onRemove, }: OrganizationInviteModalProps): react.JSX.Element | null;
 
 interface ConfirmLeaveModalProps {
     open: boolean;
@@ -1215,6 +1268,12 @@ interface StoreOption {
     _id: string;
     name?: string;
 }
+/**
+ * Standing in the workspace's parent organization, as distinct from `role`,
+ * which is the role inside the workspace itself. The two are independent: an
+ * external collaborator is routinely a workspace admin and an org guest.
+ */
+type OrganizationStanding = "colleague" | "guest";
 interface InviteUpdateModalProps {
     open: boolean;
     mode: ModalMode;
@@ -1257,10 +1316,32 @@ interface InviteUpdateModalProps {
     onRemove?: () => void;
     /** Controls whether the Remove user button is enabled. Defaults to true. */
     canRemove?: boolean;
-    /** Called only in invite mode; receives (permissions, email) */
-    onInvite?: (permissions: UserPermissions, email: string) => void;
+    /**
+     * Offer the invitee an explicit standing in the workspace's parent
+     * organization.
+     *
+     * Omit it and nothing renders and nothing is submitted — the backend keeps
+     * deriving the standing from the invitee's email domain, which is today's
+     * behaviour. Pass it only when the workspace HAS an organization and the
+     * inviter may grant membership in it; showing the choice to someone who
+     * cannot grant it produces an invite the backend quietly downgrades.
+     */
+    showOrganizationStanding?: boolean;
+    /** Name of the parent organization, for the option copy. */
+    organizationName?: string;
+    /**
+     * Hide the Guest option. For an invitee whose email domain the organization
+     * already claims, guest is not expressible: the backend takes the higher of
+     * the requested and domain-derived roles, so choosing it would appear to
+     * work and change nothing.
+     */
+    allowGuestStanding?: boolean;
+    /** Defaults to "guest" — the least-privileged of the two. */
+    initialOrganizationStanding?: OrganizationStanding;
+    /** Called only in invite mode; receives (permissions, email, standing) */
+    onInvite?: (permissions: UserPermissions, email: string, organizationStanding?: OrganizationStanding) => void;
 }
-declare function InviteUpdateModal({ open, mode, userEmail, stores, hiddenApps, allowSubmitWithoutChanges, initialPermissions, onClose, onSave, onRemove, canRemove, onInvite, }: InviteUpdateModalProps): react.JSX.Element | null;
+declare function InviteUpdateModal({ open, mode, userEmail, stores, hiddenApps, allowSubmitWithoutChanges, initialPermissions, onClose, onSave, onRemove, canRemove, showOrganizationStanding, organizationName, allowGuestStanding, initialOrganizationStanding, onInvite, }: InviteUpdateModalProps): react.JSX.Element | null;
 
 interface ExportDateModalProps {
     title: string;
@@ -1280,4 +1361,4 @@ declare function SettingsAdaptersProvider({ adapters, children, }: {
  */
 declare function useSettingsAdapters(): SettingsAdapters;
 
-export { APP_KEYS, type ApiToken, type AppKey, type AvailableCreditsResponse, BillingContent, type BillingEventPayload, type BillingProduct, type BillingSubscription, BuyCreditsModal, type BuyCreditsPayload, type BuyCreditsResponse, ConfirmDeleteModal, ConfirmLeaveModal, type CreatedToken, type CustomCreditInfo, type CustomCreditResponse, DEFAULT_PERMISSIONS, DEFAULT_USER_LANGUAGE, ExportDateModal, InviteUpdateModal, type InvoicePdfResponse, MemberListFrame, type MemberListFrameProps, type MemberListTab, MemberListToolbar, type MemberListToolbarProps, type MemberPermissionsPayload, OrgMembershipTag, OrganizationContent, type OrganizationData, type OrganizationInvite, OrganizationInviteModal, type OrganizationInviteModalProps, type OrganizationJoinRequest, type OrganizationMember, OrganizationModal, type OrganizationView, type OrganizationWorkspaceItem, type Price, type PriceMetadata, type ProductsResponse, ProfileAvatar, ProfileTab, ReferralTab, SCOPE_LABELS, ScopeHeader, type ScopeHeaderProps, type ServiceItem, type SettingsAdapters, SettingsAdaptersProvider, type SettingsApiAdapter, type SettingsAuthAdapter, type SettingsAuthUser, SettingsContent, type SettingsContentProps, type SettingsImageUploadAdapter, type SettingsNavigationAdapter, type SettingsOrganizationAdapter, type SettingsOrganizationCurrent, type SettingsOrganizationListItem, type SettingsScope, type SettingsTab, type SettingsToastAdapter, SettingsTooltip, type SettingsTooltipPlacement, type SettingsTooltipProps, type SettingsWorkspaceAdapter, type SettingsWorkspaceCurrent, type SettingsWorkspaceListItem, SiconKey, type StoreItem, type SubscriptionPlan, type SubscriptionResponse, TAB_DESCRIPTIONS, TAB_LABELS, TAB_SCOPE, TAB_TO_URL, type TeamMember, TeamsContent, type TokenExpiry, TokensContent, URL_TO_TAB, USER_LANGUAGES, type UpdateSubscriptionPayload, type UpdateSubscriptionResponse, type UsageHistoryItem, type UsageHistoryResponse, type UserLanguage, type UserPermissions, type WorkspaceData, WorkspaceGeneralTab, type WorkspaceGeneralTabProps, type WorkspaceInvite, WorkspaceListTab, type WorkspaceMember, WorkspaceModal, WorkspaceTab, countLabel, resolveSettingsTabFromPath, useSettingsAdapters, userLanguageLabel };
+export { APP_KEYS, type ApiToken, type AppKey, type AvailableCreditsResponse, BillingContent, type BillingEventPayload, type BillingProduct, type BillingSubscription, BuyCreditsModal, type BuyCreditsPayload, type BuyCreditsResponse, ConfirmDeleteModal, ConfirmLeaveModal, type CreatedToken, type CustomCreditInfo, type CustomCreditResponse, DEFAULT_PERMISSIONS, DEFAULT_USER_LANGUAGE, ExportDateModal, InviteUpdateModal, type InvoicePdfResponse, MemberListFrame, type MemberListFrameProps, type MemberListTab, MemberListToolbar, type MemberListToolbarProps, type MemberPermissionsPayload, OrganizationContent, type OrganizationData, type OrganizationInvite, OrganizationInviteModal, type OrganizationInviteModalProps, type OrganizationJoinRequest, type OrganizationMember, OrganizationModal, type OrganizationView, type OrganizationWorkspaceItem, type Price, type PriceMetadata, type ProductsResponse, ProfileAvatar, ProfileTab, ReferralTab, SCOPE_LABELS, ScopeHeader, type ScopeHeaderProps, type ServiceItem, type SettingsAdapters, SettingsAdaptersProvider, type SettingsApiAdapter, type SettingsAuthAdapter, type SettingsAuthUser, SettingsContent, type SettingsContentProps, type SettingsImageUploadAdapter, type SettingsNavigationAdapter, type SettingsOrganizationAdapter, type SettingsOrganizationCurrent, type SettingsOrganizationListItem, type SettingsScope, type SettingsTab, type SettingsToastAdapter, SettingsTooltip, type SettingsTooltipPlacement, type SettingsTooltipProps, type SettingsWorkspaceAdapter, type SettingsWorkspaceCurrent, type SettingsWorkspaceListItem, SiconKey, type StoreItem, type SubscriptionPlan, type SubscriptionResponse, TAB_DESCRIPTIONS, TAB_LABELS, TAB_SCOPE, TAB_TO_URL, type TeamMember, TeamsContent, type TokenExpiry, TokensContent, URL_TO_TAB, USER_LANGUAGES, type UpdateSubscriptionPayload, type UpdateSubscriptionResponse, type UsageHistoryItem, type UsageHistoryResponse, type UserLanguage, type UserPermissions, type WorkspaceData, WorkspaceGeneralTab, type WorkspaceGeneralTabProps, type WorkspaceInvite, WorkspaceListTab, type WorkspaceMember, WorkspaceModal, WorkspaceTab, countLabel, resolveSettingsTabFromPath, useSettingsAdapters, userLanguageLabel };