Org, Team & RBAC

experimental

Multi-tenant organizations, memberships, roles, and invitations with a permission-resolution gate. Enforces tenant isolation and single-use, expiring invites — the B2B foundation other modules scope against.

2 hooks 5 events 3 permissions

Org, Team & RBAC is source-visible, contract-first code — your agent reads the whole interface before it composes, never a black box.

Every hook has typed I/O and required tests, and the composition is pinned in microservices.lock.json — what you inspect here is exactly what pnpm microservices check verifies and deploys.

Typed hooks

Extension points with typed input/output and required tests — customize behavior without forking the module.

  • beforeInvite
  • onMembershipChanged

Events emitted

A stable, documented event surface other modules can subscribe to.

  • org.created
  • member.invited
  • member.joined
  • member.removed
  • role.updated

Permissions

Scoped capabilities the module declares; the gateway enforces them at the boundary.

  • org.read
  • org.manage
  • member.manage

Experimental listing. Generated from the canonical module manifest via `registry build`.