Merge pull request #204 from reqcore-inc/fix/demo-account-org-isolation

feat: enforce demo account isolation and organization access restrictions

Author: JoachimLK

.github/workflows/pr-validation.yml

@@ -28,6 +28,7 @@ jobs:
           cache: npm
 
       - name: Install dependencies
+        id: install
         run: npm ci
 
       - name: Run tests (if present)
@@ -40,7 +41,7 @@ jobs:
 
       - name: Typecheck
         id: typecheck
-        run: npx nuxi typecheck
+        run: npm run typecheck
 
       - name: Audit dependencies (high severity+)
         id: audit
@@ -67,7 +68,7 @@ jobs:
 
           status_icon() { [ "$1" = "success" ] && echo "✅" || echo "❌"; }
 
-          echo "| Install dependencies | $(status_icon '${{ steps.tests.outcome != 'skipped' && 'success' || 'failure' }}') |" >> "$GITHUB_STEP_SUMMARY"
+          echo "| Install dependencies | $(status_icon '${{ steps.install.outcome }}') ${{ steps.install.outcome }} |" >> "$GITHUB_STEP_SUMMARY"
           echo "| Tests | $(status_icon '${{ steps.tests.outcome }}') ${{ steps.tests.outcome }} |" >> "$GITHUB_STEP_SUMMARY"
           echo "| Lint | $(status_icon '${{ steps.lint.outcome }}') ${{ steps.lint.outcome }} |" >> "$GITHUB_STEP_SUMMARY"
           echo "| Typecheck | $(status_icon '${{ steps.typecheck.outcome }}') ${{ steps.typecheck.outcome }} |" >> "$GITHUB_STEP_SUMMARY"

app/pages/dashboard/settings/index.vue

@@ -60,12 +60,17 @@ async function handleSaveOrg() {
   saveSuccess.value = false
 
   try {
-    await authClient.organization.update({
+    const result = await authClient.organization.update({
       data: {
         name: trimmedName,
         slug: trimmedSlug,
       },
     })
+
+    if (result.error) {
+      throw new Error(result.error.message || 'Failed to update organization')
+    }
+
     track('org_settings_saved')
     saveSuccess.value = true
     setTimeout(() => { saveSuccess.value = false }, 3000)
@@ -97,10 +102,15 @@ async function handleDeleteOrg() {
   deleteError.value = ''
 
   try {
-    track('org_deleted')
-    await authClient.organization.delete({
+    const result = await authClient.organization.delete({
       organizationId: activeOrg.value!.id,
     })
+
+    if (result.error) {
+      throw new Error(result.error.message || 'Failed to delete organization')
+    }
+
+    track('org_deleted')
     // Use navigateTo for Nuxt-managed navigation, then force reload
     // so all cached org state is cleared.
     const localePath = useLocalePath()