feat: add membership package and AddOrganizationMembers RPC (#1537)

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: whoAbhishekSah

.mockery.yaml

@@ -59,6 +59,10 @@ packages:
     config:
       dir: "core/user/mocks"
       all: true
+  github.com/raystack/frontier/core/membership:
+    config:
+      dir: "core/membership/mocks"
+      all: true
   github.com/raystack/frontier/core/organization:
     config:
       dir: "core/organization/mocks"

Makefile

@@ -4,7 +4,7 @@ TAG := $(shell git rev-list --tags --max-count=1)
 VERSION := $(shell git describe --tags ${TAG})
 .PHONY: build check fmt lint test test-race vet test-cover-html help install proto admin-app compose-up-dev
 .DEFAULT_GOAL := build
-PROTON_COMMIT := "ac2df1932fcddcd7f7ff1af0ded07b14d73b781b"
+PROTON_COMMIT := "c3eb9d66b9f6dd04f7d87a7829565be4772f9c47"
 
 admin-app:
 	@echo " > generating admin build"

cmd/serve.go

@@ -92,6 +92,7 @@ import (
 	"github.com/go-webauthn/webauthn/webauthn"
 	"github.com/raystack/frontier/config"
 	"github.com/raystack/frontier/core/group"
+	"github.com/raystack/frontier/core/membership"
 	"github.com/raystack/frontier/core/namespace"
 	"github.com/raystack/frontier/core/organization"
 	"github.com/raystack/frontier/core/policy"
@@ -420,6 +421,8 @@ func buildAPIDependencies(
 	organizationService := organization.NewService(organizationRepository, relationService, userService,
 		authnService, policyService, preferenceService, auditRecordRepository, roleService)
 
+	membershipService := membership.NewService(logger, policyService, relationService, roleService, organizationService, userService, auditRecordRepository)
+
 	orgKycRepository := postgres.NewOrgKycRepository(dbc)
 	orgKycService := kyc.NewService(orgKycRepository)
 
@@ -620,6 +623,7 @@ func buildAPIDependencies(
 		UserProjectsService:              userProjectsService,
 		AuditRecordService:               auditRecordService,
 		UserPATService:                   userPATService,
+		MembershipService:                membershipService,
 	}
 	return dependencies, nil
 }

core/membership/errors.go

@@ -0,0 +1,11 @@
+package membership
+
+import "errors"
+
+var (
+	ErrAlreadyMember    = errors.New("principal is already a member of this resource")
+	ErrNotMember        = errors.New("principal is not a member of this resource")
+	ErrInvalidOrgRole   = errors.New("role is not valid for organization scope")
+	ErrLastOwnerRole    = errors.New("cannot change role: this is the last owner of the organization")
+	ErrInvalidPrincipal = errors.New("only user principals are supported")
+)