@tailor-platform/erp-kit 0.7.0 → 0.9.0

package/templates/scaffold/app/docs/resolver/deactivateUser.md

@@ -0,0 +1,17 @@
+# deactivateUser
+
+## Overview
+
+Deactivates a user account, preventing system access. Only ACTIVE users can be deactivated. Users cannot deactivate their own account.
+
+## Modules Commands Used
+
+- `user-management.deactivateUser` — Changes user status from ACTIVE to INACTIVE
+
+## Exception Handling
+
+| Error Code                | Description                                |
+| ------------------------- | ------------------------------------------ |
+| USER_NOT_FOUND            | The specified user does not exist          |
+| INVALID_STATUS_TRANSITION | The user is not in ACTIVE status           |
+| SELF_DEACTIVATION         | A user cannot deactivate their own account |

package/templates/scaffold/app/docs/resolver/reactivateUser.md

@@ -0,0 +1,16 @@
+# reactivateUser
+
+## Overview
+
+Reactivates a previously deactivated user account. Only INACTIVE users can be reactivated.
+
+## Modules Commands Used
+
+- `user-management.reactivateUser` — Changes user status from INACTIVE to ACTIVE
+
+## Exception Handling
+
+| Error Code                | Description                        |
+| ------------------------- | ---------------------------------- |
+| USER_NOT_FOUND            | The specified user does not exist  |
+| INVALID_STATUS_TRANSITION | The user is not in INACTIVE status |

package/templates/scaffold/app/docs/resolver/revokePermissionFromRole.md

@@ -0,0 +1,17 @@
+# revokePermissionFromRole
+
+## Overview
+
+Removes a permission from a role, revoking that permission from all users with the role.
+
+## Modules Commands Used
+
+- `user-management.revokePermissionFromRole` — Removes a role-permission association
+
+## Exception Handling
+
+| Error Code           | Description                                |
+| -------------------- | ------------------------------------------ |
+| ROLE_NOT_FOUND       | The specified role does not exist          |
+| PERMISSION_NOT_FOUND | The specified permission does not exist    |
+| ASSIGNMENT_NOT_FOUND | The permission is not assigned to the role |

package/templates/scaffold/app/docs/resolver/revokeRoleFromUser.md

@@ -0,0 +1,17 @@
+# revokeRoleFromUser
+
+## Overview
+
+Removes a role from a user, revoking the role's permissions.
+
+## Modules Commands Used
+
+- `user-management.revokeRoleFromUser` — Removes a user-role association
+
+## Exception Handling
+
+| Error Code           | Description                          |
+| -------------------- | ------------------------------------ |
+| USER_NOT_FOUND       | The specified user does not exist    |
+| ROLE_NOT_FOUND       | The specified role does not exist    |
+| ASSIGNMENT_NOT_FOUND | The role is not assigned to the user |

package/templates/scaffold/app/docs/resolver/updateOwnProfile.md

@@ -0,0 +1,20 @@
+# updateOwnProfile
+
+## Overview
+
+Updates the authenticated user's own profile information. Uses the session context to identify the user. Only ACTIVE users can update their own profile.
+
+## Modules Commands Used
+
+- `user-management.updateOwnProfile` — Updates caller's own name and email (ACTIVE only, targets caller via ctx.actorId)
+
+## Exception Handling
+
+| Error Code                | Description                                    |
+| ------------------------- | ---------------------------------------------- |
+| USER_NOT_FOUND            | The authenticated user does not exist          |
+| INVALID_STATUS_TRANSITION | Caller is not ACTIVE (PENDING or INACTIVE)     |
+| USER_ALREADY_EXISTS       | A user with the same email exists              |
+| MISSING_REQUIRED_FIELD    | A required field was cleared or missing        |
+| INVALID_NAME              | Name is empty or whitespace only               |
+| INVALID_EMAIL             | Email does not follow valid email format        |

package/templates/scaffold/app/docs/resolver/updateUserProfile.md

@@ -0,0 +1,19 @@
+# updateUserProfile
+
+## Overview
+
+Updates another user's profile information (name and email). Admin-only operation that works on users in any status.
+
+## Modules Commands Used
+
+- `user-management.updateUser` — Updates user name and email (any status)
+
+## Exception Handling
+
+| Error Code             | Description                              |
+| ---------------------- | ---------------------------------------- |
+| USER_NOT_FOUND         | The specified user does not exist        |
+| USER_ALREADY_EXISTS    | A user with the same email exists        |
+| MISSING_REQUIRED_FIELD | Neither name nor email was provided      |
+| INVALID_NAME           | Name is empty or whitespace only         |
+| INVALID_EMAIL          | Email does not follow valid email format |

package/templates/scaffold/app/docs/screen/audit-entry-detail.md

@@ -0,0 +1,30 @@
+# audit-entry-detail
+
+## Overview
+
+Displays the full details of an audit log entry including actor, timestamp, and field-level change details (old and new values).
+
+## Screen Type
+
+DetailView
+
+### DetailView Details
+
+#### Displayed Fields
+
+- Event ID
+- Timestamp
+- Operation Type
+- Entity Type
+- Entity ID
+- Actor Type
+- Actor ID
+- Change Details (field name, old value, new value)
+
+#### Available Actions
+
+- Back to Audit Log List
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/audit-entry-list.md

@@ -0,0 +1,25 @@
+# audit-entry-list
+
+## Overview
+
+Displays a paginated list of audit log entries with filtering by entity type and date range.
+
+## Screen Type
+
+ListView
+
+### ListView Details
+
+#### Required Columns
+
+| Column Name    | Hideable (Yes/No) | Sort-able (Yes/No) | Filter-able (Yes/No) | Searchable (Yes/No) |
+| -------------- | ----------------- | ------------------ | -------------------- | ------------------- |
+| Timestamp      | No                | Yes                | Yes                  | No                  |
+| Entity Type    | No                | Yes                | Yes                  | No                  |
+| Entity ID      | Yes               | No                 | No                   | Yes                 |
+| Operation Type | No                | Yes                | Yes                  | No                  |
+| Actor          | Yes               | Yes                | No                   | Yes                 |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/my-profile-edit-form.md

@@ -0,0 +1,22 @@
+# my-profile-edit-form
+
+## Overview
+
+Form to update the authenticated user's own profile information.
+
+## Screen Type
+
+Form
+
+### Form Details
+
+#### Input Fields
+
+| Field Name | Field Type | Required (Yes/No) |
+| ---------- | ---------- | ----------------- |
+| Name       | String     | Yes               |
+| Email      | String     | Yes               |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/my-profile.md

@@ -0,0 +1,27 @@
+# my-profile
+
+## Overview
+
+Displays the authenticated user's own profile details and assigned roles.
+
+## Screen Type
+
+DetailView
+
+### DetailView Details
+
+#### Displayed Fields
+
+- Name
+- Email
+- Status (ACTIVE / INACTIVE)
+- Assigned Roles
+
+#### Available Actions
+
+- Edit Profile
+- Sign out
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/role-create-form.md

@@ -0,0 +1,23 @@
+# role-create-form
+
+## Overview
+
+Form to create a new role with name and permission selection.
+
+## Screen Type
+
+Form
+
+### Form Details
+
+#### Input Fields
+
+| Field Name  | Field Type   | Required (Yes/No) |
+| ----------- | ------------ | ----------------- |
+| Name        | String       | Yes               |
+| Description | String       | No                |
+| Permissions | Multi-select | Yes               |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/role-detail.md

@@ -0,0 +1,27 @@
+# role-detail
+
+## Overview
+
+Displays role details including assigned permissions.
+
+## Screen Type
+
+DetailView
+
+### DetailView Details
+
+#### Displayed Fields
+
+- Name
+- Description
+- Created At
+- Assigned Permissions
+
+#### Available Actions
+
+- Edit Role
+- Back to Role List
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/role-edit-form.md

@@ -0,0 +1,21 @@
+# role-edit-form
+
+## Overview
+
+Form to modify a role's permission assignments.
+
+## Screen Type
+
+Form
+
+### Form Details
+
+#### Input Fields
+
+| Field Name  | Field Type   | Required (Yes/No) |
+| ----------- | ------------ | ----------------- |
+| Permissions | Multi-select | Yes               |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/role-list.md

@@ -0,0 +1,23 @@
+# role-list
+
+## Overview
+
+Displays a list of all roles. Provides navigation to role detail and role creation.
+
+## Screen Type
+
+ListView
+
+### ListView Details
+
+#### Required Columns
+
+| Column Name | Hideable (Yes/No) | Sort-able (Yes/No) | Filter-able (Yes/No) | Searchable (Yes/No) |
+| ----------- | ----------------- | ------------------ | -------------------- | ------------------- |
+| Name        | No                | Yes                | No                   | Yes                 |
+| Description | Yes               | No                 | No                   | No                  |
+| Created At  | Yes               | Yes                | No                   | No                  |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/user-create-form.md

@@ -0,0 +1,23 @@
+# user-create-form
+
+## Overview
+
+Form to create a new user account with name, email, and optional role assignments.
+
+## Screen Type
+
+Form
+
+### Form Details
+
+#### Input Fields
+
+| Field Name | Field Type   | Required (Yes/No) |
+| ---------- | ------------ | ----------------- |
+| Name       | String       | Yes               |
+| Email      | String       | Yes               |
+| Roles      | MultiSelect  | No                |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/user-detail.md

@@ -0,0 +1,33 @@
+# user-detail
+
+## Overview
+
+Displays user profile details including assigned roles. Provides actions for editing, status toggling, and role management.
+
+## Screen Type
+
+DetailView
+
+### DetailView Details
+
+#### Displayed Fields
+
+- Name
+- Email
+- Status (ACTIVE / INACTIVE)
+- Assigned Roles
+- Created At
+- Updated At
+
+#### Available Actions
+
+- Edit User
+- Deactivate User (when ACTIVE and not self)
+- Reactivate User (when INACTIVE)
+- Assign Roles (multiple selection)
+- Remove Role
+- Back to User List
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/user-edit-form.md

@@ -0,0 +1,22 @@
+# user-edit-form
+
+## Overview
+
+Form to update another user's profile information including name and email.
+
+## Screen Type
+
+Form
+
+### Form Details
+
+#### Input Fields
+
+| Field Name | Field Type | Required (Yes/No) |
+| ---------- | ---------- | ----------------- |
+| Name       | String     | Yes               |
+| Email      | String     | Yes               |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/docs/screen/user-list.md

@@ -0,0 +1,24 @@
+# user-list
+
+## Overview
+
+Displays a paginated list of all users. Supports filtering by status and searching by name or email.
+
+## Screen Type
+
+ListView
+
+### ListView Details
+
+#### Required Columns
+
+| Column Name | Hideable (Yes/No) | Sort-able (Yes/No) | Filter-able (Yes/No) | Searchable (Yes/No) |
+| ----------- | ----------------- | ------------------ | -------------------- | ------------------- |
+| Name        | No                | Yes                | No                   | Yes                 |
+| Email       | No                | Yes                | No                   | Yes                 |
+| Status      | No                | Yes                | Yes                  | No                  |
+| Roles       | Yes               | No                 | No                   | No                  |
+
+## Access Control
+
+- [user](../actors/user.md)

package/templates/scaffold/app/frontend/package.json

@@ -16,7 +16,7 @@
     "@hookform/resolvers": "5.2.2",
     "@radix-ui/react-label": "2.1.8",
     "@radix-ui/react-slot": "1.2.4",
-    "@tailor-platform/app-shell": "0.28.0",
+    "@tailor-platform/app-shell": "0.31.0",
     "class-variance-authority": "0.7.1",
     "clsx": "2.1.1",
     "gql.tada": "1.9.0",

package/templates/scaffold/app/frontend/src/App.tsx

@@ -7,8 +7,18 @@ import {
   SidebarLayout,
   useAuth,
 } from "@tailor-platform/app-shell";
+import { useQuery } from "urql";
 import { GraphQLProvider } from "./providers/graphql-provider";
 import { authClient } from "./lib/auth-client";
+import { graphql } from "@/graphql";
+
+const MeStatusQuery = graphql(`
+  query MeStatus {
+    me {
+      status
+    }
+  }
+`);
 
 const AuthGuard = () => {
   const { login } = useAuth();
@@ -34,22 +44,57 @@ const AuthGuard = () => {
   );
 };
 
+const ActiveUserGuard = ({ children }: { children: React.ReactNode }) => {
+  const { logout } = useAuth();
+  const [{ data, fetching }] = useQuery({ query: MeStatusQuery });
+
+  if (fetching) return null;
+
+  if (data?.me?.status !== "ACTIVE") {
+    return (
+      <main className="min-h-screen grid place-items-center px-4">
+        <div className="w-full max-w-sm rounded-lg border bg-card p-6 space-y-4">
+          <h1 className="text-lg font-semibold">Account deactivated</h1>
+          <p className="text-sm text-muted-foreground">
+            Your account has been deactivated. Please contact an administrator.
+          </p>
+          <button
+            type="button"
+            onClick={() => void logout()}
+            className="inline-flex h-9 w-full items-center justify-center rounded-md bg-primary px-4 text-sm font-medium text-primary-foreground hover:bg-primary/90"
+          >
+            Sign out
+          </button>
+        </div>
+      </main>
+    );
+  }
+
+  return <>{children}</>;
+};
+
 const App = () => {
   return (
     <AuthProvider client={authClient} guardComponent={AuthGuard}>
       <GraphQLProvider authClient={authClient}>
-        <AppShell>
-          <SidebarLayout
-            sidebar={
-              <DefaultSidebar>
-                <SidebarGroup title="User Management">
-                  <SidebarItem to="/user-management/user" />
-                  <SidebarItem to="/user-management/profile" />
-                </SidebarGroup>
-              </DefaultSidebar>
-            }
-          />
-        </AppShell>
+        <ActiveUserGuard>
+          <AppShell>
+            <SidebarLayout
+              sidebar={
+                <DefaultSidebar>
+                  <SidebarGroup title="User Management">
+                    <SidebarItem to="/user-management/user" />
+                    <SidebarItem to="/user-management/role" />
+                    <SidebarItem to="/user-management/profile" />
+                  </SidebarGroup>
+                  <SidebarGroup title="Audit">
+                    <SidebarItem to="/audit" />
+                  </SidebarGroup>
+                </DefaultSidebar>
+              }
+            />
+          </AppShell>
+        </ActiveUserGuard>
       </GraphQLProvider>
     </AuthProvider>
   );

package/templates/scaffold/app/frontend/src/components/composed/error-fallback.tsx

@@ -1,4 +1,4 @@
-import { Button } from "../ui/button";
+import { Button } from "@tailor-platform/app-shell";
 
 interface ErrorFallbackProps {
   title?: string;