smoodly 0.0.23 → 0.0.24

package/dist/supabase-member-store.js

@@ -1,4 +1,4 @@
-import { sortMembers } from "./member-store.js";
+import { memberErrors, sortMembers } from "./member-store.js";
 export class SupabaseMemberStore {
     constructor(db) {
         this.db = db;
@@ -7,7 +7,7 @@ export class SupabaseMemberStore {
         const res = await this.db.from("members").select("user_id, email, role");
         if (res.error)
             throw new Error(`smoodly: ${res.error.message}`);
-        return sortMembers(res.data.map((r) => ({ userId: r.user_id, email: r.email, role: r.role })));
+        return sortMembers(res.data.map((r) => this.toRecord(r)));
     }
     async consoleUrl() {
         const res = await this.db.from("spaces").select("console_url").limit(1).maybeSingle();
@@ -15,4 +15,64 @@ export class SupabaseMemberStore {
             throw new Error(`smoodly: ${res.error.message}`);
         return res.data?.console_url ?? null;
     }
+    toRecord(row) {
+        return { userId: row.user_id, email: row.email, role: row.role };
+    }
+    /** The admin API has no lookup by email: page through the users (tens, not thousands). */
+    async userIdByEmail(email) {
+        const wanted = email.toLowerCase();
+        for (let page = 1; page <= 50; page++) {
+            const res = await this.db.auth.admin.listUsers({ page, perPage: 200 });
+            if (res.error)
+                throw new Error(`smoodly: ${res.error.message}`);
+            const hit = res.data.users.find((u) => u.email?.toLowerCase() === wanted);
+            if (hit)
+                return hit.id;
+            if (res.data.users.length < 200)
+                break;
+        }
+        throw memberErrors.noAccount(email);
+    }
+    async invite(input) {
+        // Self-host: the content client is the auth project's service role, so
+        // the admin API is reachable. A cloud write key never gets here — the
+        // ops refuse behind the console URL first.
+        const sent = await this.db.auth.admin.inviteUserByEmail(input.email, { redirectTo: input.redirectTo });
+        let userId;
+        let invited;
+        if (!sent.error) {
+            userId = sent.data.user.id;
+            invited = true;
+        }
+        else if (sent.error.code === "email_exists" || /already (been )?registered/i.test(sent.error.message)) {
+            userId = await this.userIdByEmail(input.email);
+            invited = false;
+        }
+        else {
+            throw new Error(`smoodly: ${sent.error.message}`);
+        }
+        const res = await this.db
+            .from("members")
+            .upsert({ user_id: userId, email: input.email, role: input.role }, { onConflict: "space_id,user_id" })
+            .select("user_id, email, role")
+            .single();
+        if (res.error)
+            throw new Error(`smoodly: ${res.error.message}`);
+        return { member: this.toRecord(res.data), invited };
+    }
+    async setRole(userId, role) {
+        const res = await this.db.from("members").update({ role }).eq("user_id", userId).select("user_id, email, role").maybeSingle();
+        if (res.error)
+            throw new Error(`smoodly: ${res.error.message}`);
+        if (!res.data)
+            throw memberErrors.notFound(userId);
+        return this.toRecord(res.data);
+    }
+    async remove(userId) {
+        const res = await this.db.from("members").delete().eq("user_id", userId).select("user_id");
+        if (res.error)
+            throw new Error(`smoodly: ${res.error.message}`);
+        if (!res.data || res.data.length === 0)
+            throw memberErrors.notFound(userId);
+    }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "smoodly",
-  "version": "0.0.23",
+  "version": "0.0.24",
   "description": "Open-source, code-first CMS for Next.js on Supabase: define a component once, it becomes a typed, editable building block.",
   "license": "MIT",
   "repository": {