Feat/organizations backend#5

Merged

rowforce merged 49 commits into

mainfrom

feat/organizations-backend

Jun 7, 2026

Commits on Jun 5, 2026

feat(db): add organizations schema (orgs, members, member roles, invites)
rowforce
committed
feat(core): add organization models + App/ClientSession org fields
rowforce
committed
feat(repo): organization create/member/role queries
rowforce
committed
feat(repo): persist active organization on client sessions
rowforce
committed
feat(repo): read organizations_enabled + org_creation_policy on apps
rowforce
committed
feat(auth): include active org id in client access token
rowforce
committed
feat(api): org-aware role/permission resolution + appData org fields
rowforce
committed
feat(api): org-switch endpoint with membership enforcement
rowforce
committed
feat(auth): default single-org users into their active org at login
rowforce
committed
feat(api): make client CheckPermission organization-aware
rowforce
committed
fix(api): org-enabled apps with no active org resolve to empty roles/permissions
rowforce
committed
fix(api): re-validate org/member status + org→app ownership in role resolution and server permission check
rowforce
committed
feat(repo): organization write methods (unique-slug create, update, archive)
rowforce
committed
feat(repo): organization member list/set-role/remove/count-owners
rowforce
committed
feat(api): server org CRUD endpoints (create/list-for-user/get/rename/archive)
rowforce
committed
fix(api): atomic create-organization-with-owner; single 201 write
rowforce
committed
feat(api): server org member endpoints (add-by-id/email, list, set-tier, remove, get) + last-owner guard
rowforce
committed
fix(api): fail closed when owner count errors in last-owner guard; cover add-by-id + multi-owner guard
rowforce
committed
test(api): cover cross-app org 404 + foreign-pool owner 400 guards
rowforce
committed

Commits on Jun 6, 2026

Commits on Jun 7, 2026