feat: refactor rbac to its own package

apps/captable/app/(authenticated)/(dashboard)/[publicId]/(legal)/3921/page.tsx

@@ -1,4 +1,4 @@
-import { type Metadata } from "next";
+import type { Metadata } from "next";
 
 export const metadata: Metadata = {
   title: "3921 Form",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/(legal)/409a/page.tsx

@@ -1,4 +1,4 @@
-import { type Metadata } from "next";
+import type { Metadata } from "next";
 
 export const metadata: Metadata = {
   title: "409A Valuation",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/audits/page.tsx

@@ -1,7 +1,7 @@
 import { AuditTable } from "@/components/audit/audit-table";
 import { Card } from "@/components/ui/card";
 import { UnAuthorizedState } from "@/components/ui/un-authorized-state";
-import { serverAccessControl } from "@/lib/rbac/access-control";
+import { serverAccessControl } from "@/server/member";
 import { api } from "@/trpc/server";
 import type { Metadata } from "next";
 import { headers } from "next/headers";

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/[bucketId]/page.tsx

@@ -3,13 +3,13 @@ import FilePreview from "@/components/file/preview";
 import { Button } from "@/components/ui/button";
 import { Card } from "@/components/ui/card";
 import { useServerSideSession } from "@/hooks/use-server-side-session";
-import { db, documents, buckets, eq, and } from "@captable/db";
 import { getPresignedGetUrl } from "@/server/file-uploads";
+import { and, buckets, db, documents, eq } from "@captable/db";
 import { RiArrowLeftSLine } from "@remixicon/react";
+import { headers } from "next/headers";
 import Link from "next/link";
 import { notFound } from "next/navigation";
 import { Fragment } from "react";
-import { headers } from "next/headers";
 
 const DocumentPreview = async ({
   params,

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/components/table.tsx

@@ -1,8 +1,8 @@
 "use client";
 
-import { dayjsExt } from "@/lib/common/dayjs";
 import FileIcon from "@/components/common/file-icon";
 import { Card } from "@/components/ui/card";
+import { dayjsExt } from "@/lib/common/dayjs";
 import { getPresignedGetUrl } from "@/server/file-uploads";
 import { RiMore2Fill } from "@remixicon/react";
 import { useRouter } from "next/navigation";

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/data-rooms/components/data-room-popover.tsx

@@ -10,8 +10,8 @@ import {
   PopoverTrigger,
 } from "@/components/ui/popover";
 import { api } from "@/trpc/react";
-import { RiArrowRightLine as ArrowRightIcon } from "@remixicon/react";
 import { clientSideSession } from "@captable/auth/client";
+import { RiArrowRightLine as ArrowRightIcon } from "@remixicon/react";
 import { useRouter } from "next/navigation";
 import { useState } from "react";
 import { toast } from "sonner";

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/data-rooms/page.tsx

@@ -4,18 +4,18 @@ import EmptyState from "@/components/common/empty-state";
 import { Button } from "@/components/ui/button";
 import { serverSideSession } from "@captable/auth/server";
 import {
-  db,
-  dataRooms,
+  count,
   dataRoomDocuments,
-  eq,
+  dataRooms,
+  db,
   desc,
-  count,
+  eq,
 } from "@captable/db";
+import { RiAddFill, RiFolderCheckFill } from "@remixicon/react";
+import { headers } from "next/headers";
 import { Fragment } from "react";
 import DataRoomPopover from "./components/data-room-popover";
 import Folders from "./components/dataroom-folders";
-import { headers } from "next/headers";
-import { RiAddFill, RiFolderCheckFill } from "@remixicon/react";
 
 const getDataRooms = async (companyId: string) => {
   return await db

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/esign/[templatePublicId]/page.tsx

@@ -2,8 +2,8 @@ import { CanvasToolbar } from "@/components/template/canavs-toolbar";
 import { PdfCanvas } from "@/components/template/pdf-canvas";
 import { TemplateFieldForm } from "@/components/template/template-field-form";
 import { Badge } from "@/components/ui/badge";
-import { TemplateFieldProvider } from "@/providers/template-field-provider";
 import { useServerSideSession } from "@/hooks/use-server-side-session";
+import { TemplateFieldProvider } from "@/providers/template-field-provider";
 import { api } from "@/trpc/server";
 import { headers } from "next/headers";
 

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/esign/components/table.tsx

@@ -1,6 +1,6 @@
-import { dayjsExt } from "@/lib/common/dayjs";
 import FileIcon from "@/components/common/file-icon";
 import { buttonVariants } from "@/components/ui/button";
+import { dayjsExt } from "@/lib/common/dayjs";
 
 import {
   Table,

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/esign/page.tsx

@@ -5,9 +5,9 @@ import { useServerSideSession } from "@/hooks/use-server-side-session";
 import { api } from "@/trpc/server";
 import { RiUploadCloudLine } from "@remixicon/react";
 import type { Metadata } from "next";
+import { headers } from "next/headers";
 import { AddEsignDocumentButton } from "./components/add-esign-doc-button";
 import { ESignTable } from "./components/table";
-import { headers } from "next/headers";
 
 export const metadata: Metadata = {
   title: "Documents",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/esign/v/[templatePublicId]/page.tsx

@@ -2,8 +2,9 @@ import { PdfCanvas } from "@/components/template/pdf-canvas";
 import { Alert, AlertDescription } from "@/components/ui/alert";
 import { Badge } from "@/components/ui/badge";
 import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
-import { serverAccessControl } from "@/lib/rbac/access-control";
+import { UnAuthorizedState } from "@/components/ui/un-authorized-state";
 import { TemplateSigningFieldProvider } from "@/providers/template-signing-field-provider";
+import { serverAccessControl } from "@/server/member";
 import { api } from "@/trpc/server";
 import type { RouterOutputs } from "@/trpc/shared";
 import { RiCheckFill } from "@remixicon/react";

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/page.tsx

@@ -1,15 +1,16 @@
 import EmptyState from "@/components/common/empty-state";
 import { PageLayout } from "@/components/dashboard/page-layout";
+import { Button } from "@/components/ui/button";
 import { Card } from "@/components/ui/card";
 import { UnAuthorizedState } from "@/components/ui/un-authorized-state";
-import { serverAccessControl } from "@/lib/rbac/access-control";
 import { useServerSideSession } from "@/hooks/use-server-side-session";
+import { serverAccessControl } from "@/server/member";
 import { api } from "@/trpc/server";
-import { RiUploadCloudLine } from "@remixicon/react";
+import { RiAddFill, RiUploadCloudLine } from "@remixicon/react";
 import type { Metadata } from "next";
+import { headers } from "next/headers";
 import DocumentsTable from "./components/table";
 import { DocumentUploadButton } from "./document-upload-button";
-import { headers } from "next/headers";
 
 export const metadata: Metadata = {
   title: "Documents",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/share/_page.tsx

@@ -6,9 +6,9 @@ import { useServerSideSession } from "@/hooks/use-server-side-session";
 import { api } from "@/trpc/server";
 import { RiAddFill, RiUploadCloudLine } from "@remixicon/react";
 import type { Metadata } from "next";
+import { headers } from "next/headers";
 import DocumentUploadModal from "../components/modal";
 import DocumentsTable from "../components/table";
-import { headers } from "next/headers";
 
 export const metadata: Metadata = {
   title: "Documents",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/documents/share/analytics/page.tsx

@@ -1,4 +1,4 @@
-const DocumentAnalyticsPage = async () => {
+const DocumentAnalyticsPage = () => {
   return <div>Document Analytics Page</div>;
 };
 

apps/captable/app/(authenticated)/(dashboard)/[publicId]/equity-plans/page.tsx

@@ -2,14 +2,14 @@ import EmptyState from "@/components/common/empty-state";
 import Tldr from "@/components/common/tldr";
 import { Card } from "@/components/ui/card";
 import { useServerSideSession } from "@/hooks/use-server-side-session";
-import { db, equityPlans, shareClasses, eq } from "@captable/db";
 import type { EquityPlanMutationType } from "@/trpc/routers/equity-plan/schema";
 import type { ShareClassMutationType } from "@/trpc/routers/share-class/schema";
+import { db, eq, equityPlans, shareClasses } from "@captable/db";
 import { RiPieChart2Line } from "@remixicon/react";
 import type { Metadata } from "next";
+import { headers } from "next/headers";
 import { CreateEquityPlanButton } from "./create-equity-plan-button";
 import EquityPlanTable from "./table";
-import { headers } from "next/headers";
 
 export const metadata: Metadata = {
   title: "Equity plans",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/equity-plans/table.tsx

@@ -9,14 +9,13 @@ import {
 
 import Tldr from "@/components/common/tldr";
 import { Card } from "@/components/ui/card";
-import { type EquityPlanMutationType } from "@/trpc/routers/equity-plan/schema";
-import { type ShareClassMutationType } from "@/trpc/routers/share-class/schema";
-import { RiEqualizer2Line } from "@remixicon/react";
-import EquityPlanModal from "./modal";
 import { cn } from "@/lib/utils";
-import { pushModal } from "@/providers/modal-provider";
+import type { EquityPlanMutationType } from "@/trpc/routers/equity-plan/schema";
+import type { ShareClassMutationType } from "@/trpc/routers/share-class/schema";
 import type { RouterOutputs } from "@/trpc/shared";
+import { RiEqualizer2Line } from "@remixicon/react";
 import type { ColumnDef } from "@tanstack/react-table";
+import EquityPlanModal from "./modal";
 const formatter = new Intl.NumberFormat("en-US");
 
 type EquityPlanTableProps = {
@@ -53,7 +52,7 @@ const EquityPlanTable = ({
             <TableHead>Cancellation behavior</TableHead>
             <TableHead>Board approval date</TableHead>
             <TableHead>Plan effective date</TableHead>
-            <TableHead></TableHead>
+            <TableHead />
           </TableRow>
         </TableHeader>
         <TableBody>

apps/captable/app/(authenticated)/(dashboard)/[publicId]/layout.tsx

@@ -5,9 +5,11 @@ import { useServerSideSession } from "@/hooks/use-server-side-session";
 import { getCompanyList } from "@/server/company";
 import { redirect } from "next/navigation";
 import "@/styles/hint.css";
-import { RBAC } from "@/lib/rbac";
-import { getServerPermissions } from "@/lib/rbac/access-control";
 import { RolesProvider } from "@/providers/roles-provider";
+import { getServerPermissions } from "@/server/member";
+import { checkMembership } from "@/server/member";
+import { db } from "@captable/db";
+import { RBAC } from "@captable/rbac";
 import { headers } from "next/headers";
 
 type DashboardLayoutProps = {

apps/captable/app/(authenticated)/(dashboard)/[publicId]/settings/bank-accounts/page.tsx

@@ -1,13 +1,14 @@
 import EmptyState from "@/components/common/empty-state";
+import { PageLayout } from "@/components/dashboard/page-layout";
 import { UnAuthorizedState } from "@/components/ui/un-authorized-state";
-import { serverAccessControl } from "@/lib/rbac/access-control";
+import { serverAccessControl } from "@/server/member";
 import { api } from "@/trpc/server";
 import { RiBankFill } from "@remixicon/react";
 import type { Metadata } from "next";
+import { headers } from "next/headers";
 import { Fragment } from "react";
 import CtaButton from "./components/cta-button";
 import BankAccountsTable from "./components/table";
-import { headers } from "next/headers";
 
 export const metadata: Metadata = {
   title: "Bank accounts",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/settings/company/page.tsx

@@ -1,6 +1,7 @@
+import { PageLayout } from "@/components/dashboard/page-layout";
 import { CompanyForm } from "@/components/onboarding/company-form";
 import { UnAuthorizedState } from "@/components/ui/un-authorized-state";
-import { serverAccessControl } from "@/lib/rbac/access-control";
+import { serverAccessControl } from "@/server/member";
 import { api } from "@/trpc/server";
 import type { Metadata } from "next";
 import { headers } from "next/headers";

apps/captable/app/(authenticated)/(dashboard)/[publicId]/settings/developer/components/table.tsx

@@ -1,6 +1,5 @@
 "use client";
 
-import { dayjsExt } from "@/lib/common/dayjs";
 import Tldr from "@/components/common/tldr";
 import { Allow } from "@/components/rbac/allow";
 import {
@@ -30,6 +29,7 @@ import {
   TableHeader,
   TableRow,
 } from "@/components/ui/table";
+import { dayjsExt } from "@/lib/common/dayjs";
 import { api } from "@/trpc/react";
 import type { RouterOutputs } from "@/trpc/shared";
 import { RiMore2Fill } from "@remixicon/react";

apps/captable/app/(authenticated)/(dashboard)/[publicId]/settings/profile/page.tsx

@@ -1,6 +1,6 @@
 import { ProfileSettings } from "@/components/member/member-profile";
 import { api } from "@/trpc/server";
-import { type Metadata } from "next";
+import type { Metadata } from "next";
 
 export const metadata: Metadata = {
   title: "Profile",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/settings/roles/page.tsx

@@ -1,8 +1,11 @@
 import { PageLayout } from "@/components/dashboard/page-layout";
-import { RoleCreateUpdateModalAction } from "@/components/modals/role-create-update-modal";
-import { RoleTable } from "@/components/rbac/role-table";
+import { pushModal } from "@/components/modals";
+import RoleCreateUpdateModal from "@/components/modals/role-create-update-modal";
+import RoleTable from "@/components/rbac/role-table";
+import { Button } from "@/components/ui/button";
 import { Card } from "@/components/ui/card";
-import { serverAccessControl } from "@/lib/rbac/access-control";
+import { UnAuthorizedState } from "@/components/ui/un-authorized-state";
+import { serverAccessControl } from "@/server/member";
 import { api } from "@/trpc/server";
 import { headers } from "next/headers";
 
@@ -18,7 +21,7 @@ export default async function RolesPage() {
       <PageLayout
         title="Roles"
         description="Create and manage roles for your company."
-        action={<RoleCreateUpdateModalAction disabled={!canCreate} />}
+        action={<RoleCreateUpdateModal disabled={!canCreate} />}
       />
 
       {data ? <RoleTable roles={data.rolesList} /> : null}

apps/captable/app/(authenticated)/(dashboard)/[publicId]/share-classes/page.tsx

@@ -1,13 +1,13 @@
 import EmptyState from "@/components/common/empty-state";
 import { Card } from "@/components/ui/card";
 import { useServerSideSession } from "@/hooks/use-server-side-session";
-import { db, shareClasses, eq } from "@captable/db";
 import type { ShareClassMutationType } from "@/trpc/routers/share-class/schema";
+import { db, eq, shareClasses } from "@captable/db";
 import { RiPieChart2Line } from "@remixicon/react";
 import type { Metadata } from "next";
+import { headers } from "next/headers";
 import { CreateShareButton } from "./create-share-class-button";
 import ShareClassTable from "./table";
-import { headers } from "next/headers";
 
 export const metadata: Metadata = {
   title: "Share classes",

apps/captable/app/(authenticated)/(dashboard)/[publicId]/stakeholders/page.tsx

@@ -1,9 +1,11 @@
 import EmptyState from "@/components/common/empty-state";
+import { PageLayout } from "@/components/dashboard/page-layout";
 import StakeholderDropdown from "@/components/stakeholder/stakeholder-dropdown";
 import StakeholderTable from "@/components/stakeholder/stakeholder-table";
+import { Button } from "@/components/ui/button";
 import { Card } from "@/components/ui/card";
 import { UnAuthorizedState } from "@/components/ui/un-authorized-state";
-import { serverAccessControl } from "@/lib/rbac/access-control";
+import { serverAccessControl } from "@/server/member";
 import { api } from "@/trpc/server";
 import { RiGroup2Fill } from "@remixicon/react";
 import type { Metadata } from "next";

apps/captable/app/(authenticated)/(dashboard)/[publicId]/updates/[updatePublicId]/editor-wrapper.tsx

@@ -1,7 +1,7 @@
 "use client";
 
-import dynamic from "next/dynamic";
 import type { Update } from "@captable/db";
+import dynamic from "next/dynamic";
 
 const Editor = dynamic(
   () => import("../../../../../../components/update/editor"),

apps/captable/app/(authenticated)/(dashboard)/[publicId]/updates/[updatePublicId]/page.tsx

@@ -1,6 +1,6 @@
 "use server";
 
-import { db, updates, eq } from "@captable/db";
+import { db, eq, updates } from "@captable/db";
 import EditorWrapper from "./editor-wrapper";
 
 const getUpdate = async (publicId: string) => {

apps/captable/app/(authenticated)/(dashboard)/company/new/page.tsx

@@ -1,11 +1,11 @@
 import { CompanyForm } from "@/components/onboarding/company-form";
-import { type Metadata } from "next";
+import type { Metadata } from "next";
 
 export const metadata: Metadata = {
   title: "New",
 };
 
-const OnboardingPage = async () => {
+const OnboardingPage = () => {
   return (
     <div className="flex min-h-screen justify-center bg-background px-5 pb-5 pt-20">
       <div className="border-rounded w-full max-w-2xl border bg-card p-10 shadow">

apps/captable/app/(authenticated)/(dashboard)/layout.tsx

@@ -1,6 +1,6 @@
 import { useServerSideSession } from "@/hooks/use-server-side-session";
-import { redirect } from "next/navigation";
 import { headers } from "next/headers";
+import { redirect } from "next/navigation";
 
 export default async function OnboardedLayout({
   children,

apps/captable/app/(authenticated)/layout.tsx

@@ -1,7 +1,7 @@
 import { serverSideSession } from "@captable/auth/server";
 import { redirect } from "next/navigation";
 
-export default async function AuthenticatedLayout({
+export default function AuthenticatedLayout({
   children,
 }: {
   children: React.ReactNode;
@@ -10,7 +10,7 @@ export default async function AuthenticatedLayout({
     // Better Auth requires request parameter - we'll handle this in a middleware or different approach
     // For now, we'll remove server-side session check and handle it client-side
     return <>{children}</>;
-  } catch (error) {
+  } catch (_error) {
     redirect("/login");
   }
 }

apps/captable/app/(authenticated)/onboarding/page.tsx

@@ -1,8 +1,8 @@
 import { CompanyForm } from "@/components/onboarding/company-form";
 import { useServerSideSession } from "@/hooks/use-server-side-session";
 import type { Metadata } from "next";
-import { redirect } from "next/navigation";
 import { headers } from "next/headers";
+import { redirect } from "next/navigation";
 
 export const metadata: Metadata = {
   title: "Onboarding",