Platform

Workflows for identity, organization lifecycle, membership, invitations, and API tokens. They sit between the public API and the Platform and OrganizationSettings components. The platform schema is the only place L3 reaches outside a tenant; creating the user record and accepting an invitation both establish the tenant context everything else assumes.

External side-effects in this domain: Firebase Authentication (create and delete users), email sending (invitation delivery), and GCS (organization logo). Each is wrapped in its own helper; the workflow itself stays the unit of work. Login and logout have no workflow: Firebase manages them client-side.

Workflows W001–W023, grouped by the endpoint namespace they back. Each maps 1:1 to the endpoint with the same number.

User

• W001 Create user
• W002 Get user
• W003 Update user
• W004 Delete user

API tokens (PATs)

• W005 Create API token
• W006 List my API tokens
• W007 Revoke API token

Invitations — invitee side

• W008 List my pending invitations
• W009 Look up invitation by token
• W010 Accept invitation
• W011 Decline invitation

Organization

• W012 Create organization
• W013 Get organization
• W014 Update organization
• W015 Delete organization

Members

• W016 List organization members
• W017 Update user role
• W018 Remove user from organization
• W019 Leave organization

Org invitations

• W020 Send invitation
• W021 Resend invitation
• W022 Revoke invitation
• W023 List organization invitations