cauthy-auth 0.33.0 → 0.34.0

package/README.md

@@ -96,7 +96,7 @@ import { OrganizationMembers } from 'cauthy-auth/react'
 
 const { organizations } = useAuth()
 const [org] = await organizations.list()         // org.can: { readMembers, manageMembers, removeMembers, update, archive, delete }
-await organizations.add(org.id, { email: 'ana@example.com', role: 'reader' })
+await organizations.add(org.id, { email: 'ana@example.com', role: 'reader' })   // already a member: error member_exists, role unchanged
 await organizations.setRole(org.id, userId, 'admin')
 await organizations.remove(org.id, userId)        // anybody may remove themselves: leave
 await organizations.rename(org.id, 'Acme Books')  // r.organization
@@ -228,6 +228,8 @@ const org = await auth.system.organizations.create({ name: 'Acme' })
 await auth.system.members.add(org.id, { role: 'owner', email: 'ana@acme.com' })
 ```
 
+`members.add` only adds: a person who already belongs keeps their role, and it throws `CauthyApiError` with `code: 'member_exists'` (409). Change a role with `members.setRole`, or pass `onlyNew: false` to set the role of whoever is already there. `<OrganizationMembers />` and `organizations.add` never change a member's role either: they answer `member_exists` (the text is `errors.member_exists`).
+
 Its invitations open your `pages.acceptInvite` when the application knows its public origin (`baseURL`, `CAUTHY_BASE_URL`); otherwise Cauthy's own page.
 
 A backend that is handed a Cauthy access token checks it with Cauthy's published keys: no secret, no call per request.

package/dist/{cauthy-CKfvvv_i.d.ts → cauthy-BUozWD72.d.ts}

@@ -1,4 +1,4 @@
-import { J as JsonValue, S as Session, t as SessionStatus, s as SessionOrganization, f as CheckQuestion, k as OrganizationRef, g as CheckResult, d as CauthySystem, q as PublicSession, c as CauthyOptions } from './system-BvvoNs2y.js';
+import { J as JsonValue, S as Session, t as SessionStatus, s as SessionOrganization, f as CheckQuestion, k as OrganizationRef, g as CheckResult, d as CauthySystem, q as PublicSession, c as CauthyOptions } from './system-Bz4haPrI.js';
 import { JWTVerifyGetKey } from 'jose';
 
 /** Something that happened in Cauthy, as a subscriber is told. Moments are UTC. */

package/dist/{cauthy-2jtP2LVQ.d.mts → cauthy-C-GoRXy9.d.mts}

@@ -1,4 +1,4 @@
-import { J as JsonValue, S as Session, t as SessionStatus, s as SessionOrganization, f as CheckQuestion, k as OrganizationRef, g as CheckResult, d as CauthySystem, q as PublicSession, c as CauthyOptions } from './system-BrrJsrFW.mjs';
+import { J as JsonValue, S as Session, t as SessionStatus, s as SessionOrganization, f as CheckQuestion, k as OrganizationRef, g as CheckResult, d as CauthySystem, q as PublicSession, c as CauthyOptions } from './system-DUGV040y.mjs';
 import { JWTVerifyGetKey } from 'jose';
 
 /** Something that happened in Cauthy, as a subscriber is told. Moments are UTC. */

package/dist/cli.js

@@ -1084,7 +1084,7 @@ function createSystem(given = {}) {
         return toMember(await data(
           "POST",
           `/v1/organizations/${id(orgId)}/members`,
-          { role: m.role, user_id: m.userId, email: m.email, name: m.name, locale: m.locale, client_id: clientId },
+          { role: m.role, user_id: m.userId, email: m.email, name: m.name, locale: m.locale, client_id: clientId, only_new: m.onlyNew !== false },
           inviteHeaders
         ));
       },

package/dist/client.d.mts

@@ -1,6 +1,6 @@
 import { CauthyTheme } from './theme.mjs';
-import { q as PublicSession, f as CheckQuestion, k as OrganizationRef, g as CheckResult } from './system-BrrJsrFW.mjs';
-export { h as CheckRule } from './system-BrrJsrFW.mjs';
+import { q as PublicSession, f as CheckQuestion, k as OrganizationRef, g as CheckResult } from './system-DUGV040y.mjs';
+export { h as CheckRule } from './system-DUGV040y.mjs';
 import { A as AuthField, b as PasswordPolicy } from './validate-sEXG82po.mjs';
 export { D as DEFAULT_PASSWORD_POLICY, F as FieldProblem, M as MIN_PASSWORD, P as PasswordClass, a as PasswordLocale, c as PasswordReason, d as checkCode, e as checkEmail, f as checkName, g as checkNewPassword, h as checkPassword, i as describePasswordPolicy, j as explainPasswordProblems, p as passwordPolicyOf, k as passwordProblems } from './validate-sEXG82po.mjs';
 import 'jose';
@@ -291,7 +291,11 @@ interface OrganizationsClient {
     members(organizationId: string): Promise<OrganizationPerson[] | null>;
     /** The roles a member may be given, or null when the person may not see them. */
     roles(organizationId: string): Promise<OrganizationRoleChoice[] | null>;
-    /** Adds a person by their address; an address with no account gets one and its invitation. */
+    /**
+     * Adds a person by their address; an address with no account gets one and
+     * its invitation. It only adds: a person who already belongs keeps their
+     * role and the result is the error `member_exists` (change it with `setRole`).
+     */
     add(organizationId: string, form: {
         email: string;
         role: string;

package/dist/client.d.ts

@@ -1,6 +1,6 @@
 import { CauthyTheme } from './theme.js';
-import { q as PublicSession, f as CheckQuestion, k as OrganizationRef, g as CheckResult } from './system-BvvoNs2y.js';
-export { h as CheckRule } from './system-BvvoNs2y.js';
+import { q as PublicSession, f as CheckQuestion, k as OrganizationRef, g as CheckResult } from './system-Bz4haPrI.js';
+export { h as CheckRule } from './system-Bz4haPrI.js';
 import { A as AuthField, b as PasswordPolicy } from './validate-sEXG82po.js';
 export { D as DEFAULT_PASSWORD_POLICY, F as FieldProblem, M as MIN_PASSWORD, P as PasswordClass, a as PasswordLocale, c as PasswordReason, d as checkCode, e as checkEmail, f as checkName, g as checkNewPassword, h as checkPassword, i as describePasswordPolicy, j as explainPasswordProblems, p as passwordPolicyOf, k as passwordProblems } from './validate-sEXG82po.js';
 import 'jose';
@@ -291,7 +291,11 @@ interface OrganizationsClient {
     members(organizationId: string): Promise<OrganizationPerson[] | null>;
     /** The roles a member may be given, or null when the person may not see them. */
     roles(organizationId: string): Promise<OrganizationRoleChoice[] | null>;
-    /** Adds a person by their address; an address with no account gets one and its invitation. */
+    /**
+     * Adds a person by their address; an address with no account gets one and
+     * its invitation. It only adds: a person who already belongs keeps their
+     * role and the result is the error `member_exists` (change it with `setRole`).
+     */
     add(organizationId: string, form: {
         email: string;
         role: string;