feat(rbac): add ParentId to project membership response

app/controlplane/api/controlplane/v1/project.proto

@@ -68,6 +68,8 @@ message ProjectMember {
   google.protobuf.Timestamp updated_at = 5;
   // The ID of latest project version this member is associated with
   string latest_project_version_id = 6;
+  // Optional parent ID for nested project memberships
+  optional string parent_id = 7;
 }
 
 // ProjectServiceAddMemberRequest contains the information needed to add a user to a project

app/controlplane/internal/service/project.go

@@ -382,15 +382,16 @@ func mapProjectMemberRoleToAuthzRole(role pb.ProjectMemberRole) authz.Role {
 
 // bizProjectMembershipToPb converts a biz.ProjectMembership to a pb.ProjectMember
 func bizProjectMembershipToPb(m *biz.ProjectMembership) *pb.ProjectMember {
-	var role pb.ProjectMemberRole
-
-	// Map the role string back to a protobuf enum
-	role = mapAuthzRoleToProjectMemberRole(m.Role)
+	role := mapAuthzRoleToProjectMemberRole(m.Role)
 
 	pbMember := &pb.ProjectMember{
 		Role: role,
 	}
 
+	if m.ParentID != nil {
+		pbMember.ParentId = biz.ToPtr(m.ParentID.String())
+	}
+
 	if m.User != nil {
 		pbMember.Subject = &pb.ProjectMember_User{
 			User: bizUserToPb(m.User),

app/controlplane/pkg/biz/project.go

@@ -94,6 +94,8 @@ type ProjectMembership struct {
 	CreatedAt *time.Time
 	// UpdatedAt is the timestamp when the membership was last updated.
 	UpdatedAt *time.Time
+	// ParentID is used for nested memberships, if applicable
+	ParentID *uuid.UUID
 }
 
 // GroupProjectInfo represents detailed information about a project that a group is a member of

app/controlplane/pkg/data/project.go

@@ -359,6 +359,7 @@ func entProjectMembershipToBiz(m *ent.Membership, u *ent.User, g *ent.Group) *bi
 		Role:           m.Role,
 		CreatedAt:      &m.CreatedAt,
 		UpdatedAt:      &m.UpdatedAt,
+		ParentID:       m.ParentID,
 	}
 
 	if u != nil {