feat: gate org-creation API behind a flag and complete create-org field parity

Author: nicktrn

.changeset/create-org-api-schemas.md

@@ -0,0 +1,5 @@
+---
+"@trigger.dev/core": patch
+---
+
+Add typed schemas for the create-organization management API endpoint.

apps/webapp/app/env.server.ts

@@ -113,6 +113,8 @@ const EnvironmentSchema = z
     // agent dark; flip to "1" to enable it for everyone at GA. Per-org overrides
     // (org featureFlags) win regardless.
     DASHBOARD_AGENT_ENABLED: z.string().default("0"),
+    // Gates the create-org management API endpoint (default off).
+    ORG_CREATION_API_ENABLED: z.string().default("0"),
     // "1" gives admins/impersonators an everywhere-preview (default off),
     // separate from the per-org rollout flag above.
     DASHBOARD_AGENT_ADMIN_PREVIEW: z.string().default("0"),

apps/webapp/app/routes/api.v1.orgs.ts

@@ -1,12 +1,14 @@
 import { json } from "@remix-run/server-runtime";
 import type { GetOrgsResponseBody } from "@trigger.dev/core/v3";
-import { z } from "zod";
+import { CreateOrgRequestBody } from "@trigger.dev/core/v3";
 import { prisma } from "~/db.server";
+import { env } from "~/env.server";
 import { createOrganization } from "~/models/organization.server";
 import {
   createActionPATApiRoute,
   createLoaderPATApiRoute,
 } from "~/services/routeBuilders/apiBuilder.server";
+import { extractDomain, faviconUrl } from "~/utils/favicon";
 
 // Identity-only: lists the caller's own orgs, so no authorization gate.
 export const loader = createLoaderPATApiRoute({}, async ({ authentication }) => {
@@ -35,11 +37,6 @@ export const loader = createLoaderPATApiRoute({}, async ({ authentication }) =>
   return json(result);
 });
 
-const CreateOrgRequestBody = z.object({
-  title: z.string().min(1),
-  companySize: z.string().optional(),
-});
-
 // No org exists yet, so no authorization gate; any authenticated user can
 // create an org and becomes its ADMIN.
 export const action = createActionPATApiRoute(
@@ -48,10 +45,34 @@ export const action = createActionPATApiRoute(
     body: CreateOrgRequestBody,
   },
   async ({ body, authentication }) => {
+    if (env.ORG_CREATION_API_ENABLED !== "1") {
+      return json({ error: "Not found" }, { status: 404 });
+    }
+
+    // Mirror the dashboard: stash companyUrl/companySize as onboarding data and
+    // derive the org avatar from the company domain's favicon.
+    const onboardingData: Record<string, string> = {};
+    if (body.companyUrl) {
+      onboardingData.companyUrl = body.companyUrl;
+    }
+    if (body.companySize) {
+      onboardingData.companySize = body.companySize;
+    }
+
+    let avatar: { type: "image"; url: string } | undefined;
+    if (body.companyUrl) {
+      const domain = extractDomain(body.companyUrl);
+      if (domain) {
+        avatar = { type: "image", url: faviconUrl(domain) };
+      }
+    }
+
     const organization = await createOrganization({
       title: body.title,
       companySize: body.companySize ?? null,
       userId: authentication.userId,
+      onboardingData: Object.keys(onboardingData).length > 0 ? onboardingData : undefined,
+      avatar,
     });
 
     return json(

packages/core/src/v3/schemas/api.ts

@@ -67,6 +67,21 @@ export const GetOrgsResponseBody = z.array(
 
 export type GetOrgsResponseBody = z.infer<typeof GetOrgsResponseBody>;
 
+export const CreateOrgRequestBody = z.object({
+  title: z.string().trim().min(3).max(50),
+  companySize: z.string().optional(),
+  companyUrl: z.string().optional(),
+});
+export type CreateOrgRequestBody = z.infer<typeof CreateOrgRequestBody>;
+
+export const CreateOrgResponseBody = z.object({
+  id: z.string(),
+  title: z.string(),
+  slug: z.string(),
+  createdAt: z.coerce.date(),
+});
+export type CreateOrgResponseBody = z.infer<typeof CreateOrgResponseBody>;
+
 export const CreateProjectRequestBody = z.object({
   name: z
     .string()