Name: Clerk access hygiene digest
Author: recued-core

Clerk access hygiene digest

by recued-core v1

Scheduled read-only Clerk access governance digest. It reads bounded pages of users, sessions, organizations, invitations, organization roles, and organization permissions through recued-core.clerk, renders compact review tables, and can send an in-app nudge when pending invitations are visible. It never creates or deletes users, changes passwords or MFA, creates sessions or tokens, revokes sessions or invitations, changes roles, changes domains, mutates webhooks, or calls arbitrary Clerk APIs.

How it works 36 steps

Inspect the data fetches, transforms, gates, and output this recipe runs.

Process (36 steps)

■ users_raw ?

■ user_count_raw ?

■ sessions_raw ?

■ orgs_raw ?

■ invitations_raw ?

■ roles_raw ?

■ permissions_raw ?

■ users default

Apply default

■ sessions default

Apply default

■ orgs default

Apply default

■ invitations default

Apply default

■ roles default

Apply default

■ permissions default

Apply default

■ user_count default

Apply default

■ session_count count

Count items in sessions

■ org_count count

Count items in orgs

■ invitation_count count

Count items in invitations

■ role_count count

Count items in roles

■ permission_count count

Count items in permissions

■ has_pending_invites compare

Check if invitation count is greater than 0

■ notify_enabled compare

Check if setting notify when pending invites equals true

■ should_notify all

Check if all conditions are true

■ notify ?

skip: step.should_notify not_equal true

■ user_rows slice

Take a subset of

■ session_rows slice

Take a subset of

■ org_rows slice

Take a subset of

■ invitation_rows slice

Take a subset of

■ role_rows slice

Take a subset of

■ permission_rows slice

Take a subset of

■ user_table to_table