invite

type API struct {
	// contains filtered or unexported fields
}

type APIConfig struct {
	// BasePath is the base path for all endpoints (default: "/api/v1").
	BasePath string
	// Logger is the logger to use (default: slog.Default()).
	Logger *slog.Logger
	// Authorizer checks the caller's organization permissions; managing
	// an organization's invites needs authz.PermOrgInviteMember. Until it
	// is set, those endpoints answer 501.
	Authorizer authz.Authorizer
	// Caller identifies the authenticated principal (default:
	// requestprincipal.PrincipalUUID, set by requestprincipal.Middleware).
	Caller func(ctx context.Context) (uuid.UUID, error)
	// PrincipalEmail returns the caller's email, which an invite must be
	// addressed to (default: the service's PrincipalEmail, when it has
	// one, as DefaultService does).
	PrincipalEmail PrincipalEmailFunc
}

type AcceptInviteInput struct {
	Token       string
	PrincipalID uuid.UUID // The principal accepting the invite
}

type AcceptInviteRequest struct {
	Token string `path:"token"`
	Body  struct {
		PrincipalID string `` /* 169-byte string literal not displayed */
	}
}

type AcceptInviteResponse struct {
	Body *InviteResponse
}

type CreateInviteInput struct {
	OrganizationID     uuid.UUID
	InviterPrincipalID uuid.UUID
	Email              string
	Role               string
	// AppRoles are the application roles to grant on acceptance:
	// application identifier to role. None is preselected; an inviter
	// chooses each. With an approle service configured (WithAppRoles),
	// an admin or member invitation to an organization entitled to any
	// application must name at least one (ErrAppRoleRequired).
	AppRoles map[string]string
	// ResourceType, ResourceID and ResourceRole target the invite at one
	// resource (ADR-008); set all three, or none. They require Role to be
	// "collaborator" and the service to be built with WithResourceGrants.
	// A personal organization accepts only resource-targeted invites.
	ResourceType string
	ResourceID   string
	ResourceRole string
	Message      *string
	ExpiresIn    time.Duration // How long until expiry (default: 7 days)
}

type CreateInviteRequest struct {
	Slug string `path:"slug"`
	Body struct {
		Email              string            `json:"email" required:"true" format:"email"`
		Role               string            `json:"role" required:"true" enum:"owner,admin,member,collaborator"`
		AppRoles           map[string]string `` /* 126-byte string literal not displayed */
		ResourceType       string            `` /* 179-byte string literal not displayed */
		ResourceID         string            `json:"resource_id,omitempty" doc:"The application's identifier of the resource"`
		ResourceRole       string            `json:"resource_role,omitempty" enum:"viewer,contributor,maintainer" doc:"The resource role granted on acceptance"`
		Message            *string           `json:"message,omitempty"`
		InviterPrincipalID string            `` /* 165-byte string literal not displayed */
		ExpiresInHours     int               `json:"expires_in_hours,omitempty" minimum:"1" maximum:"720"`
	}
}

type CreateInviteResponse struct {
	Body *InviteResultResponse
}

type DeclineInviteRequest struct {
	Token string `path:"token"`
}

type DeclineInviteResponse struct {
	Body *InviteResponse
}

type DefaultService struct {
	// contains filtered or unexported fields
}

type GetInviteByTokenRequest struct {
	Token string `path:"token"`
}

type GetInviteByTokenResponse struct {
	Body *InviteResponse
}

type Invite struct {
	ID                 uuid.UUID
	OrganizationID     uuid.UUID
	InviterPrincipalID uuid.UUID
	Email              string
	Role               string
	// AppRoles are the application roles granted when the invite is
	// accepted: application identifier to role. Empty means none.
	AppRoles map[string]string
	// ResourceType, ResourceID and ResourceRole, all set or all empty,
	// target the invite at one resource (ADR-008): accepting it makes the
	// invitee a collaborator of the organization and grants ResourceRole on
	// the resource in one transaction. Role is then "collaborator".
	ResourceType          string
	ResourceID            string
	ResourceRole          string
	Status                Status
	Message               *string
	ExpiresAt             time.Time
	AcceptedAt            *time.Time
	AcceptedByPrincipalID *uuid.UUID
	ResendCount           int
	LastSentAt            time.Time
	CreatedAt             time.Time
	UpdatedAt             time.Time
}

type InviteResponse struct {
	ID                    string            `json:"id"`
	OrganizationID        string            `json:"organization_id"`
	InviterPrincipalID    string            `json:"inviter_principal_id"`
	Email                 string            `json:"email"`
	Role                  string            `json:"role"`
	AppRoles              map[string]string `json:"app_roles,omitempty"`
	ResourceType          string            `json:"resource_type,omitempty"`
	ResourceID            string            `json:"resource_id,omitempty"`
	ResourceRole          string            `json:"resource_role,omitempty"`
	Status                string            `json:"status"`
	Message               *string           `json:"message,omitempty"`
	ExpiresAt             time.Time         `json:"expires_at"`
	AcceptedAt            *time.Time        `json:"accepted_at,omitempty"`
	AcceptedByPrincipalID *string           `json:"accepted_by_principal_id,omitempty"`
	ResendCount           int               `json:"resend_count"`
	LastSentAt            time.Time         `json:"last_sent_at"`
	CreatedAt             time.Time         `json:"created_at"`
	UpdatedAt             time.Time         `json:"updated_at"`
}

type InviteResult struct {
	Invite *Invite
	// InviteURL is the full URL to accept the invite
	InviteURL string
}

type InviteResultResponse struct {
	Invite    *InviteResponse `json:"invite"`
	InviteURL string          `json:"invite_url"`
}

type ListInvitesInput struct {
	OrganizationID *uuid.UUID
	Email          *string
	Status         *Status
	Limit          int
	Offset         int
}

type ListInvitesRequest struct {
	Slug string `path:"slug"`
	// Huma does not support pointer parameters; empty lists every status.
	Status string `query:"status" enum:"pending,accepted,declined,expired,revoked"`
	Limit  int    `query:"limit" default:"20" minimum:"1" maximum:"100"`
	Offset int    `query:"offset" default:"0" minimum:"0"`
}

type ListInvitesResponse struct {
	Body struct {
		Invites []*InviteResponse `json:"invites"`
	}
}

type ListPendingInvitesForEmailRequest struct {
	// Email is deprecated: the invites listed are the caller's. When
	// present it must be the caller's email.
	Email string `` /* 130-byte string literal not displayed */
}

type ListPendingInvitesForEmailResponse struct {
	Body struct {
		Invites []*InviteResponse `json:"invites"`
	}
}

type PrincipalEmailFunc func(ctx context.Context, principalID uuid.UUID) (string, error)

type ResendInviteRequest struct {
	Slug     string `path:"slug"`
	InviteID string `path:"invite_id" format:"uuid"`
}

type ResendInviteResponse struct {
	Body *InviteResultResponse
}

type RevokeInviteRequest struct {
	Slug     string `path:"slug"`
	InviteID string `path:"invite_id" format:"uuid"`
}

type Service interface {
	// Create creates a new invite.
	Create(ctx context.Context, input CreateInviteInput) (*InviteResult, error)

	// GetByToken retrieves an invite by its token.
	GetByToken(ctx context.Context, token string) (*Invite, error)

	// GetByID retrieves an invite by ID.
	GetByID(ctx context.Context, id uuid.UUID) (*Invite, error)

	// Accept accepts an invite and creates the membership.
	Accept(ctx context.Context, input AcceptInviteInput) (*Invite, error)

	// Decline declines an invite.
	Decline(ctx context.Context, token string) (*Invite, error)

	// Revoke revokes an invite.
	Revoke(ctx context.Context, id uuid.UUID) error

	// Resend resends an invite with a new token.
	Resend(ctx context.Context, id uuid.UUID) (*InviteResult, error)

	// List lists invites with optional filters.
	List(ctx context.Context, input ListInvitesInput) ([]*Invite, error)

	// ListPendingForEmail lists pending invites for an email address.
	ListPendingForEmail(ctx context.Context, email string) ([]*Invite, error)

	// ExpireOld expires invites that have passed their expiration time.
	ExpireOld(ctx context.Context) (int, error)

	// HasPendingInvite checks if there's already a pending invite for this email/org.
	HasPendingInvite(ctx context.Context, organizationID uuid.UUID, email string) (bool, error)
}

type ServiceOption func(*DefaultService)

type Status string