@tangle-network/agent-app 0.45.53 → 0.45.55

package/dist/{access-490O6aOU.d.ts → teams/drizzle/schema.d.ts}

@@ -1,25 +1,42 @@
-import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
-import { AnySQLiteTable, AnySQLiteColumn, BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core';
-import { O as OrganizationRole, f as WorkspaceRole } from './roles-B4nU3jDi.js';
-
+/**
+ * Drizzle schema factory for the teams tables. The product owns the user and
+ * workspace tables; this factory creates the tenancy/membership tables and
+ * wires their foreign keys into the passed-in tables so the whole graph lives
+ * in one drizzle schema with real cascade semantics. Column names, types,
+ * defaults, enums, and indexes mirror gtm's hand-rolled tables so a product
+ * with those tables can adopt the factory without rewriting rows.
+ *
+ * The three tables and their roles:
+ *   - `organization` — the TENANT/ownership primitive. `kind` is 'personal'
+ *     (one auto-created per user; see ensurePersonalOrganization) or 'team'.
+ *     This is what owns workspaces and what billing/seats attach to.
+ *   - `organizationMember` — who belongs to an org and at what org role.
+ *   - `workspaceMember` — the additive invite/member surface: per-workspace
+ *     access grants, including pending email-only invites carrying a token.
+ *
+ * Imports `drizzle-orm` at module top — that is WHY this lives behind the
+ * `/teams/drizzle` sub-subpath. The pure `./teams` leaf imports none of this,
+ * so a consumer that never touches the DB never pulls the optional peer.
+ */
+import type { AnySQLiteColumn, AnySQLiteTable } from 'drizzle-orm/sqlite-core';
 /** A product table referenced by FK — only the `id` column is touched. */
-type TeamParentTable = AnySQLiteTable & {
+export type TeamParentTable = AnySQLiteTable & {
     id: AnySQLiteColumn;
 };
 /** Define options specifying user and workspace tables for creating team-related tables */
-interface CreateTeamTablesOptions {
+export interface CreateTeamTablesOptions {
     /** The product's user table — org/member rows reference `userTable.id`. */
     userTable: TeamParentTable;
     /** The product's workspace table — workspace members reference `workspaceTable.id`. */
     workspaceTable: TeamParentTable;
 }
 /** Build SQLite tables for organizations and related team structures using provided options */
-declare function createTeamTables(opts: CreateTeamTablesOptions): {
-    organizations: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+export declare function createTeamTables(opts: CreateTeamTablesOptions): {
+    organizations: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
         name: "organization";
         schema: undefined;
         columns: {
-            id: drizzle_orm_sqlite_core.SQLiteColumn<{
+            id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "id";
                 tableName: "organization";
                 dataType: "string";
@@ -38,7 +55,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            name: drizzle_orm_sqlite_core.SQLiteColumn<{
+            name: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "name";
                 tableName: "organization";
                 dataType: "string";
@@ -57,7 +74,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            slug: drizzle_orm_sqlite_core.SQLiteColumn<{
+            slug: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "slug";
                 tableName: "organization";
                 dataType: "string";
@@ -76,12 +93,12 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            kind: drizzle_orm_sqlite_core.SQLiteColumn<{
+            kind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "kind";
                 tableName: "organization";
                 dataType: "string";
                 columnType: "SQLiteText";
-                data: "personal" | "team";
+                data: "team" | "personal";
                 driverParam: string;
                 notNull: true;
                 hasDefault: true;
@@ -95,7 +112,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            createdBy: drizzle_orm_sqlite_core.SQLiteColumn<{
+            createdBy: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "created_by";
                 tableName: "organization";
                 dataType: "string";
@@ -114,7 +131,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "created_at";
                 tableName: "organization";
                 dataType: "date";
@@ -131,7 +148,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
                 identity: undefined;
                 generated: undefined;
             }, {}, {}>;
-            updatedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "updated_at";
                 tableName: "organization";
                 dataType: "date";
@@ -151,11 +168,11 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
         };
         dialect: "sqlite";
     }>;
-    organizationMembers: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+    organizationMembers: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
         name: "organization_member";
         schema: undefined;
         columns: {
-            id: drizzle_orm_sqlite_core.SQLiteColumn<{
+            id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "id";
                 tableName: "organization_member";
                 dataType: "string";
@@ -174,7 +191,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            organizationId: drizzle_orm_sqlite_core.SQLiteColumn<{
+            organizationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "organization_id";
                 tableName: "organization_member";
                 dataType: "string";
@@ -193,7 +210,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            userId: drizzle_orm_sqlite_core.SQLiteColumn<{
+            userId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "user_id";
                 tableName: "organization_member";
                 dataType: "string";
@@ -212,12 +229,12 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            role: drizzle_orm_sqlite_core.SQLiteColumn<{
+            role: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "role";
                 tableName: "organization_member";
                 dataType: "string";
                 columnType: "SQLiteText";
-                data: "admin" | "owner" | "member" | "billing";
+                data: "billing" | "owner" | "admin" | "member";
                 driverParam: string;
                 notNull: true;
                 hasDefault: true;
@@ -231,7 +248,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            createdAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "created_at";
                 tableName: "organization_member";
                 dataType: "date";
@@ -248,7 +265,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
                 identity: undefined;
                 generated: undefined;
             }, {}, {}>;
-            updatedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "updated_at";
                 tableName: "organization_member";
                 dataType: "date";
@@ -268,11 +285,11 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
         };
         dialect: "sqlite";
     }>;
-    workspaceMembers: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
+    workspaceMembers: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
         name: "workspace_member";
         schema: undefined;
         columns: {
-            id: drizzle_orm_sqlite_core.SQLiteColumn<{
+            id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "id";
                 tableName: "workspace_member";
                 dataType: "string";
@@ -291,7 +308,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            workspaceId: drizzle_orm_sqlite_core.SQLiteColumn<{
+            workspaceId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "workspace_id";
                 tableName: "workspace_member";
                 dataType: "string";
@@ -310,7 +327,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            organizationMemberId: drizzle_orm_sqlite_core.SQLiteColumn<{
+            organizationMemberId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "organization_member_id";
                 tableName: "workspace_member";
                 dataType: "string";
@@ -329,7 +346,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            userId: drizzle_orm_sqlite_core.SQLiteColumn<{
+            userId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "user_id";
                 tableName: "workspace_member";
                 dataType: "string";
@@ -348,12 +365,12 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            role: drizzle_orm_sqlite_core.SQLiteColumn<{
+            role: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "role";
                 tableName: "workspace_member";
                 dataType: "string";
                 columnType: "SQLiteText";
-                data: "viewer" | "editor" | "admin" | "owner";
+                data: "owner" | "admin" | "viewer" | "editor";
                 driverParam: string;
                 notNull: true;
                 hasDefault: true;
@@ -367,7 +384,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            invitedBy: drizzle_orm_sqlite_core.SQLiteColumn<{
+            invitedBy: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "invited_by";
                 tableName: "workspace_member";
                 dataType: "string";
@@ -386,7 +403,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            inviteEmail: drizzle_orm_sqlite_core.SQLiteColumn<{
+            inviteEmail: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "invite_email";
                 tableName: "workspace_member";
                 dataType: "string";
@@ -405,7 +422,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            inviteToken: drizzle_orm_sqlite_core.SQLiteColumn<{
+            inviteToken: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "invite_token";
                 tableName: "workspace_member";
                 dataType: "string";
@@ -424,7 +441,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
             }, {}, {
                 length: number | undefined;
             }>;
-            invitedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            invitedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "invited_at";
                 tableName: "workspace_member";
                 dataType: "date";
@@ -441,7 +458,7 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
                 identity: undefined;
                 generated: undefined;
             }, {}, {}>;
-            acceptedAt: drizzle_orm_sqlite_core.SQLiteColumn<{
+            acceptedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
                 name: "accepted_at";
                 tableName: "workspace_member";
                 dataType: "date";
@@ -463,92 +480,10 @@ declare function createTeamTables(opts: CreateTeamTablesOptions): {
     }>;
 };
 /** Resolve team tables by deriving the return type of createTeamTables */
-type TeamTables = ReturnType<typeof createTeamTables>;
+export type TeamTables = ReturnType<typeof createTeamTables>;
 /** Resolve the structure of an organization row from the organizations table in TeamTables */
-type OrganizationRow = TeamTables['organizations']['$inferSelect'];
+export type OrganizationRow = TeamTables['organizations']['$inferSelect'];
 /** Resolve the structure of an organization member row from the team tables selection */
-type OrganizationMemberRow = TeamTables['organizationMembers']['$inferSelect'];
+export type OrganizationMemberRow = TeamTables['organizationMembers']['$inferSelect'];
 /** Resolve a workspace member row with selected fields from the workspaceMembers table */
-type WorkspaceMemberRow = TeamTables['workspaceMembers']['$inferSelect'];
-
-/**
- * RBAC access builders over the teams tables. `createWorkspaceAccess` and
- * `createOrganizationAccess` close over the product's `db`, the tables from
- * `createTeamTables`, and the product's `workspace` table, returning the exact
- * `getWorkspaceAccess` / `requireWorkspaceAccess` / `listUserWorkspaces` /
- * `getOrganizationAccess` / `requireOrganizationAccess` functions a consumer
- * already calls — so adoption is a one-line import swap, every call site stays
- * identical.
- *
- * Defense in depth: org owners/admins are workspace owners across the org;
- * everyone else gets their explicit per-workspace role. Effective role is the
- * fold in `resolveWorkspaceRole` (pure, from `../roles`). Every query pins
- * `userId`, so a leaked id can never read across the tenancy boundary — it
- * surfaces as "not found".
- *
- * Driver-agnostic: builders are awaited, never `.run()`/`.all()`, so
- * better-sqlite3, D1, and libsql handles all behave identically.
- */
-
-/** Any SQLite drizzle database — `any` erases driver-specific generics so
- *  better-sqlite3, D1, and libsql handles all fit. */
-type TeamDatabase = BaseSQLiteDatabase<'sync' | 'async', any, any>;
-/**
- * The product's workspace table, narrowed to the columns the access joins read.
- * Adopters pass their real drizzle workspace table — it carries these columns
- * (gtm's does); the type only asserts the minimum the joins touch.
- */
-interface WorkspaceAccessTable {
-    id: any;
-    organizationId: any;
-    name: any;
-    updatedAt: any;
-}
-/** Define options required to create access with database, tables, and workspace table references */
-interface CreateAccessOptions {
-    db: TeamDatabase;
-    tables: TeamTables;
-    /** The product's workspace table (the FK target passed to createTeamTables). */
-    workspaceTable: TeamParentTable & WorkspaceAccessTable;
-}
-/** Define access details including workspace data, organization info, member info, and role within workspace */
-interface WorkspaceAccess {
-    workspace: Record<string, unknown>;
-    organization: OrganizationRow;
-    organizationMember: OrganizationMemberRow;
-    role: WorkspaceRole;
-}
-/** Describe a user's workspace details including organization and role information */
-interface UserWorkspaceSummary extends Record<string, unknown> {
-    organizationId: string;
-    organizationName: string;
-    role: WorkspaceRole;
-}
-/** Define methods to retrieve and enforce user access permissions within workspaces */
-interface WorkspaceAccessApi {
-    getWorkspaceAccess(workspaceId: string, userId: string, minRole?: WorkspaceRole): Promise<WorkspaceAccess | null>;
-    requireWorkspaceAccess(workspaceId: string, userId: string, minRole?: WorkspaceRole): Promise<WorkspaceAccess>;
-    listUserWorkspaces(userId: string): Promise<UserWorkspaceSummary[]>;
-}
-/** Create workspace access API to manage user roles and permissions within a workspace */
-declare function createWorkspaceAccess(opts: CreateAccessOptions): WorkspaceAccessApi;
-/** Define access details linking an organization, its member, and the member's role */
-interface OrganizationAccess {
-    organization: OrganizationRow;
-    member: OrganizationMemberRow;
-    role: OrganizationRole;
-}
-/** Define methods to retrieve and enforce user access levels within an organization */
-interface OrganizationAccessApi {
-    getOrganizationAccess(organizationId: string, userId: string, minRole?: OrganizationRole): Promise<OrganizationAccess | null>;
-    requireOrganizationAccess(organizationId: string, userId: string, minRole?: OrganizationRole): Promise<OrganizationAccess>;
-}
-/** Define options required to create access for an organization including database and tables */
-interface CreateOrganizationAccessOptions {
-    db: TeamDatabase;
-    tables: TeamTables;
-}
-/** Resolve organization access API with specified database and table options */
-declare function createOrganizationAccess(opts: CreateOrganizationAccessOptions): OrganizationAccessApi;
-
-export { type CreateAccessOptions as C, type OrganizationRow as O, type TeamDatabase as T, type UserWorkspaceSummary as U, type WorkspaceAccess as W, type TeamTables as a, type OrganizationMemberRow as b, type CreateOrganizationAccessOptions as c, type CreateTeamTablesOptions as d, type OrganizationAccess as e, type OrganizationAccessApi as f, type TeamParentTable as g, type WorkspaceAccessApi as h, type WorkspaceAccessTable as i, type WorkspaceMemberRow as j, createOrganizationAccess as k, createTeamTables as l, createWorkspaceAccess as m };
+export type WorkspaceMemberRow = TeamTables['workspaceMembers']['$inferSelect'];

package/dist/teams/drizzle.d.ts

@@ -1,47 +1,15 @@
-import { T as TeamDatabase, a as TeamTables, O as OrganizationRow, b as OrganizationMemberRow } from '../access-490O6aOU.js';
-export { C as CreateAccessOptions, c as CreateOrganizationAccessOptions, d as CreateTeamTablesOptions, e as OrganizationAccess, f as OrganizationAccessApi, g as TeamParentTable, U as UserWorkspaceSummary, W as WorkspaceAccess, h as WorkspaceAccessApi, i as WorkspaceAccessTable, j as WorkspaceMemberRow, k as createOrganizationAccess, l as createTeamTables, m as createWorkspaceAccess } from '../access-490O6aOU.js';
-export { C as CreateWorkspaceInvitationTableOptions, W as WorkspaceInvitationRow, a as WorkspaceInvitationTables, c as createWorkspaceInvitationTable } from '../invitations-schema-_fI7HkJP.js';
-import { O as OrganizationRole } from '../roles-B4nU3jDi.js';
-import 'drizzle-orm/sqlite-core';
-
 /**
- * `ensurePersonalOrganization` — the substrate that makes solo-user adoption
- * work. Every user gets exactly one auto-created `kind: 'personal'` org with
- * the user as `owner` member. That org is the tenant that owns their
- * workspaces, so role resolution (`getWorkspaceAccess`) has an org row to read
- * even before any team/invite exists.
+ * Drizzle-backed substrate for the teams module: the table factory
+ * (`createTeamTables`), the RBAC access builders (`createWorkspaceAccess`,
+ * `createOrganizationAccess`), and `createEnsurePersonalOrganization`. Its own
+ * subpath (`@tangle-network/agent-app/teams/drizzle`) because every file here
+ * imports `drizzle-orm` at module top — bundling them into `./teams` would make
+ * the optional peer a hard requirement for every teams consumer.
  *
- * Idempotent by construction: the org `slug` is derived from the user id
- * (`personal-<id>`) and upserted; the membership upserts on the
- * (organizationId, userId) unique index. Concurrent calls converge — no
- * duplicate personal orgs, no duplicate owner rows.
- *
- * ADOPTION CONTRACT: call this once per user at first authenticated entry
- * (e.g. right after sign-in / session bootstrap) BEFORE the first
- * `getWorkspaceAccess`. Role resolution requires the org membership to exist;
- * an adopter that skips this will see `null` access for a brand-new user with
- * no org row. There is no implicit creation inside the access builders — that
- * keeps reads side-effect-free; provisioning is this explicit call.
+ * The pure `./teams` leaf (role algebra + invite helpers) stays drizzle-free,
+ * so an app that imports only `./teams` (or only `.`) never pulls drizzle.
  */
-
-/** Define the structure for a user within a personal organization context */
-interface EnsurePersonalOrganizationUser {
-    id: string;
-    name?: string | null;
-    email?: string | null;
-}
-/** Describe a personal organization result including organization, member, and role details */
-interface PersonalOrganizationResult {
-    organization: OrganizationRow;
-    member: OrganizationMemberRow;
-    role: OrganizationRole;
-}
-/** Define options required to create a personal organization including database and tables references */
-interface CreatePersonalOrganizationOptions {
-    db: TeamDatabase;
-    tables: TeamTables;
-}
-/** Ensure a user has a personal organization by creating or retrieving it as needed */
-declare function createEnsurePersonalOrganization(opts: CreatePersonalOrganizationOptions): (user: EnsurePersonalOrganizationUser) => Promise<PersonalOrganizationResult>;
-
-export { type CreatePersonalOrganizationOptions, type EnsurePersonalOrganizationUser, OrganizationMemberRow, OrganizationRow, type PersonalOrganizationResult, TeamDatabase, TeamTables, createEnsurePersonalOrganization };
+export * from './drizzle/schema';
+export * from './drizzle/invitations-schema';
+export * from './drizzle/access';
+export * from './drizzle/personal-organization';

package/dist/teams/index.d.ts

@@ -1,47 +1,23 @@
-export { a as ASSIGNABLE_WORKSPACE_ROLES, A as AssignableWorkspaceRole, b as ORGANIZATION_ROLES, c as ORGANIZATION_ROLE_RANK, O as OrganizationRole, S as SandboxWorkspaceRole, W as WORKSPACE_ROLES, d as WORKSPACE_ROLE_RANK, e as WorkspaceCollaborationAccess, f as WorkspaceRole, g as canManageWorkspaceMemberRole, h as hasOrganizationRole, i as hasWorkspaceRole, j as isAssignableWorkspaceRole, o as organizationRoleGrantsWorkspaceOwner, r as resolveWorkspaceRole, w as workspaceRoleToCollaborationAccess, k as workspaceRoleToSandboxRole } from '../roles-B4nU3jDi.js';
-export { I as INVITATION_EXPIRY_DAYS, a as InvitationEmailBrand, b as InvitationEmailStatus, c as InvitationPermission, d as InvitationStatus, R as RenderInvitationEmailInput, e as RenderedInvitationEmail, g as generateInvitationToken, f as getInvitationExpiresAt, i as inviteUrlForToken, n as normalizeInvitationEmail, p as parseInvitationPermission, r as renderInvitationEmail } from '../invitations-DoYMvXea.js';
-
 /**
- * Pure invite-token helpers — generation, shape validation, and expiry math.
- * No I/O: the members API persists/looks up tokens; these functions only
- * produce well-formed tokens and decide, given values the caller already
- * loaded, whether an invite is usable.
+ * Teams capability — the tenancy/membership model for agent products, exposed
+ * as opt-in subpaths so an app that never imports `./teams*` pulls zero teams
+ * code (and zero `drizzle-orm`). This barrel is the PURE leaf: role algebra and
+ * invite-token helpers with no drizzle, no env, no react, no I/O.
  *
- * A token is an opaque high-entropy URL-safe string. It is the bearer secret
- * in `/invite/:token`, so it must be unguessable and never derived from the
- * email or workspace. `generateInviteToken` uses Web Crypto (`crypto`), which
- * is present in Workers, Node 18+, Deno, and browsers — no Node-only import,
- * so this stays a pure leaf.
- */
-/** Cryptographically-random, URL-safe (base64url) invite token. */
-declare function generateInviteToken(): string;
-/** True when `value` has the shape of an invite token (not whether it exists). */
-declare function isInviteTokenShape(value: unknown): value is string;
-/** A pending invite row, narrowed to the fields invite acceptance reasons over. */
-interface InviteTokenState {
-    /** null until accepted — a non-null value means the invite was already used. */
-    acceptedAt: Date | number | null | undefined;
-    /** Email the invite was addressed to, if any. */
-    inviteEmail?: string | null;
-    /** Optional hard expiry; omit/undefined for invites that never expire. */
-    expiresAt?: Date | number | null;
-}
-/** Define possible reasons for rejecting an invite including acceptance, expiration, or email mismatch */
-type InviteRejectionReason = 'already-accepted' | 'expired' | 'email-mismatch';
-/** Represent the outcome of validating an invite with success status and optional rejection reason */
-interface InviteValidationResult {
-    ok: boolean;
-    reason?: InviteRejectionReason;
-}
-/**
- * Decide whether a loaded invite can be accepted by `acceptingEmail` at `now`.
- * Pure: the caller has already fetched the row by token; this only judges it.
- * Email match is case-insensitive and only enforced when the invite was
- * addressed to a specific email (an open invite has no `inviteEmail`).
+ * The rest of the capability layers on top, each behind its own subpath:
+ *   - `@tangle-network/agent-app/teams/drizzle`     — table factory + access
+ *       builders + `ensurePersonalOrganization` (imports `drizzle-orm`).
+ *   - `@tangle-network/agent-app/teams/members-api` — framework-neutral
+ *       invite/list/role/remove handlers (imports `drizzle-orm`).
+ *   - `@tangle-network/agent-app/teams/invitations-api` — framework-neutral
+ *       email-invitation lifecycle (create/list/resend/revoke/preview/accept,
+ *       imports `drizzle-orm`).
+ *   - `@tangle-network/agent-app/teams-react`       — MembersPanel +
+ *       InvitationsPanel + InviteAcceptPage (optional `react` peer).
+ *
+ * NEVER re-exported from the package root: `drizzle-orm` and `react` are
+ * optional peers, and the whole point is that the tax stays clean.
  */
-declare function validateInviteToken(invite: InviteTokenState, opts?: {
-    acceptingEmail?: string | null;
-    now?: Date;
-}): InviteValidationResult;
-
-export { type InviteRejectionReason, type InviteTokenState, type InviteValidationResult, generateInviteToken, isInviteTokenShape, validateInviteToken };
+export * from './roles';
+export * from './invite';
+export * from './invitations';

package/dist/teams/invitations-api.d.ts

@@ -1,11 +1,3 @@
-import { c as InvitationPermission, d as InvitationStatus, b as InvitationEmailStatus } from '../invitations-DoYMvXea.js';
-import { EnforceSeatSeam, MemberSyncSeam } from './members-api.js';
-export { SeatLimitError } from './members-api.js';
-import { T as TeamDatabase, a as TeamTables, g as TeamParentTable, h as WorkspaceAccessApi } from '../access-490O6aOU.js';
-import { a as WorkspaceInvitationTables } from '../invitations-schema-_fI7HkJP.js';
-import '../roles-B4nU3jDi.js';
-import 'drizzle-orm/sqlite-core';
-
 /**
  * Framework-neutral email-invitation lifecycle for the teams module: create /
  * list / resend / revoke / preview / accept over the dedicated
@@ -31,9 +23,15 @@ import 'drizzle-orm/sqlite-core';
  *
  * Imports `drizzle-orm`, so this is a subpath, never re-exported from root.
  */
-
+import { type InvitationEmailStatus, type InvitationPermission, type InvitationStatus } from './invitations';
+import { type EnforceSeatSeam, type MemberSyncSeam } from './members-api';
+import type { TeamDatabase, WorkspaceAccessApi } from './drizzle/access';
+import type { TeamParentTable, TeamTables } from './drizzle/schema';
+import type { WorkspaceInvitationTables } from './drizzle/invitations-schema';
+export { SeatLimitError } from './members-api';
+export type { EnforceSeatSeam, MemberSyncSeam } from './members-api';
 /** The app's mail transport. Returns a typed outcome; never throws to the API. */
-interface SendInvitationEmailInput {
+export interface SendInvitationEmailInput {
     to: string;
     workspaceName: string;
     inviterEmail: string;
@@ -42,29 +40,29 @@ interface SendInvitationEmailInput {
     expiresAt: Date;
 }
 /** Represent the outcome of sending an invitation email with success status and optional error message */
-type SendInvitationEmailResult = {
+export type SendInvitationEmailResult = {
     succeeded: true;
 } | {
     succeeded: false;
     error: string;
 };
 /** Resolve sending an invitation email and return the result asynchronously */
-interface SendInvitationEmailSeam {
+export interface SendInvitationEmailSeam {
     (input: SendInvitationEmailInput): Promise<SendInvitationEmailResult>;
 }
 /** The product's user table, narrowed to the columns the queries read. */
-interface InvitationUserTable {
+export interface InvitationUserTable {
     id: any;
     email: any;
     emailVerified: any;
 }
 /** The product's workspace table, narrowed to the columns the queries read. */
-interface InvitationWorkspaceTable {
+export interface InvitationWorkspaceTable {
     id: any;
     name: any;
 }
 /** Define configuration options required to manage workspace invitations and related data sources */
-interface InvitationsApiOptions {
+export interface InvitationsApiOptions {
     db: TeamDatabase;
     tables: TeamTables;
     /** The invitation table from `createWorkspaceInvitationTable`. */
@@ -82,7 +80,7 @@ interface InvitationsApiOptions {
     productDisplayName?: string;
 }
 /** Represent a workspace invitation with details about inviter, permissions, status, and timestamps */
-interface WorkspaceInvitationView {
+export interface WorkspaceInvitationView {
     id: string;
     workspaceId: string;
     organizationId: string;
@@ -100,7 +98,7 @@ interface WorkspaceInvitationView {
     lastSentAt: Date | null;
 }
 /** Describe the structure of an invitation preview with workspace, email, permissions, status, and expiration details */
-interface InvitationPreview {
+export interface InvitationPreview {
     workspaceId: string;
     workspaceName: string;
     email: string;
@@ -110,7 +108,7 @@ interface InvitationPreview {
     expiresAt: Date;
 }
 /** Resolve the result of an invitation as success with a value or failure with status and error details */
-type InvitationOutcome<T> = {
+export type InvitationOutcome<T> = {
     succeeded: true;
     value: T;
 } | {
@@ -122,7 +120,7 @@ type InvitationOutcome<T> = {
  * Build the invitations API bound to one product's db/tables/access/seams.
  * Returns the six lifecycle handlers an app mounts in its routes.
  */
-declare function createInvitationsApi(opts: InvitationsApiOptions): {
+export declare function createInvitationsApi(opts: InvitationsApiOptions): {
     createInvitation: (input: {
         workspaceId: string;
         email: string;
@@ -171,5 +169,3 @@ declare function createInvitationsApi(opts: InvitationsApiOptions): {
         workspaceId: string;
     }>>;
 };
-
-export { EnforceSeatSeam, type InvitationOutcome, type InvitationPreview, type InvitationUserTable, type InvitationWorkspaceTable, type InvitationsApiOptions, MemberSyncSeam, type SendInvitationEmailInput, type SendInvitationEmailResult, type SendInvitationEmailSeam, type WorkspaceInvitationView, createInvitationsApi };