Queries organizations. domain matches an org's configured domain, which
is how onboarding decides whether a workspace already exists.
This is a POST despite being a read — that is PropelAuth's contract, not a mistake.
Fetches a single user.
Returns null when PropelAuth has no such user — callers already branch on
that, so it stays a value rather than an exception.
populates orgIdToOrgInfo with per-org roles and
permissions. Off by default; the payload is meaningfully larger with it on.
Fetches one page of an organization's members.
Yields every organization, paging transparently.
Yields every user in a PropelAuth organization, paging transparently.
Creates an organization.
namemay only contain alphanumeric characters, spaces and underscores — callers are expected to sanitize before calling.