@coursebuilder/adapter-drizzle 1.0.6 → 2.0.0

package/src/index.ts

@@ -5,9 +5,9 @@ import {
 	type MySqlTableFn,
 } from 'drizzle-orm/mysql-core'
 
-import { type CourseBuilderAdapter } from '@coursebuilder/core/adapters'
 import { PaymentsProviderConfig } from '@coursebuilder/core/types'
 
+import type { AuthJsCourseBuilderAdapter } from './authjs.js'
 import {
 	createTables as createMySqlTables,
 	mySqlDrizzleAdapter,
@@ -18,7 +18,7 @@ export function DrizzleAdapter<SqlFlavor extends SqlFlavorOptions>(
 	db: SqlFlavor,
 	table: TableFn<SqlFlavor>,
 	paymentProvider?: PaymentsProviderConfig,
-): CourseBuilderAdapter {
+): AuthJsCourseBuilderAdapter {
 	if (is(db, MySqlDatabase)) {
 		return mySqlDrizzleAdapter(
 			db,

package/src/lib/mysql/index.ts

@@ -1,4 +1,3 @@
-import type { AdapterSession, AdapterUser } from '@auth/core/adapters'
 import slugify from '@sindresorhus/slugify'
 import { addSeconds, isAfter } from 'date-fns'
 import {
@@ -24,7 +23,14 @@ import { customAlphabet } from 'nanoid'
 import { v4 } from 'uuid'
 import { z } from 'zod'
 
-import { type CourseBuilderAdapter } from '@coursebuilder/core/adapters'
+import type {
+	CourseBuilderAuthSession,
+	CourseBuilderUser,
+} from '@coursebuilder/core/auth'
+import {
+	parseAndExpandPurchaseBenefitTransport,
+	PURCHASE_BENEFIT_METADATA_KEY,
+} from '@coursebuilder/core/pricing/purchase-benefit-transport'
 import {
 	Coupon,
 	couponSchema,
@@ -79,6 +85,7 @@ import { PaymentsProviderConfig } from '@coursebuilder/core/types'
 import { logger as baseLogger } from '@coursebuilder/core/utils/logger'
 import { validateCoupon } from '@coursebuilder/core/utils/validate-coupon'
 
+import type { AuthJsCourseBuilderAdapter } from '../../authjs.js'
 import {
 	getAccountsRelationsSchema,
 	getAccountsSchema,
@@ -95,6 +102,10 @@ import {
 	getPermissionsRelationsSchema,
 	getPermissionsSchema,
 } from './schemas/auth/permissions.js'
+import {
+	getPersonalAccessTokenRelationsSchema,
+	getPersonalAccessTokenSchema,
+} from './schemas/auth/personal-access-token.js'
 import {
 	getProfilesRelationsSchema,
 	getProfilesSchema,
@@ -270,6 +281,24 @@ const logger = baseLogger as unknown as {
 	info: (message: string, attrs?: Record<string, unknown>) => void
 }
 
+type PurchaseBenefitExpansion = ReturnType<
+	typeof parseAndExpandPurchaseBenefitTransport
+> | null
+
+function mergePurchaseBenefitFields(
+	fields: Record<string, any>,
+	expansion: PurchaseBenefitExpansion,
+) {
+	if (!expansion) return fields
+
+	return {
+		...fields,
+		...(expansion.success
+			? { purchaseBenefits: expansion.benefits }
+			: { purchaseBenefitsReview: expansion.review }),
+	}
+}
+
 export type CourseBuilderSchemaOverrides<
 	TUsers extends ReturnType<typeof getUsersSchema> = ReturnType<
 		typeof getUsersSchema
@@ -404,6 +433,11 @@ export function getCourseBuilderSchema<
 			mysqlTable,
 			userRelationsOverrides,
 		),
+		personalAccessToken: getPersonalAccessTokenSchema(mysqlTable),
+		personalAccessTokenRelations: getPersonalAccessTokenRelationsSchema(
+			mysqlTable,
+			userRelationsOverrides,
+		),
 		tag: getTagSchema(mysqlTable),
 		tagRelations: getTagRelationsSchema(mysqlTable),
 		tagTag: getTagTagSchema(mysqlTable),
@@ -449,11 +483,58 @@ export function createTables(mySqlTable: MySqlTableFn) {
 
 export type DefaultSchema = ReturnType<typeof createTables>
 
+/**
+ * Provisions the personal organization every Course Builder user owns:
+ * creates the organization, adds the user as a member, and grants the owner
+ * role. Exposed on the adapter as the UserProvisioningPort contract from
+ * @coursebuilder/core (ADR-0012 section 3).
+ *
+ * MIGRATION BRIDGE (ADR-0012 section 6): createUser still invokes this from
+ * inside the Auth.js storage hook, and 7 apps carry duplicate logic in
+ * src/lib/personal-organization-service.ts. Phase 3 must move the trigger to
+ * the app auth boundary (NextAuth createUser event / signIn callback) and
+ * delete the app copies. Removal criteria: no call sites inside createUser
+ * and zero personal-organization-service.ts files under apps/.
+ * Do not add new callers of the inline-hook path.
+ */
+async function provisionPersonalOrganization(
+	adapter: AuthJsCourseBuilderAdapter<typeof MySqlDatabase>,
+	params: { userId: string; email: string },
+): Promise<void> {
+	const { userId, email } = params
+
+	// creating a personal organization for the user
+	// every user gets an organization of their very own
+	const personalOrganization = await adapter.createOrganization({
+		name: `Personal (${email})`,
+	})
+
+	if (!personalOrganization) {
+		throw new Error('Failed to create personal organization')
+	}
+
+	const membership = await adapter.addMemberToOrganization({
+		organizationId: personalOrganization.id,
+		userId: userId,
+		invitedById: userId,
+	})
+
+	if (!membership) {
+		throw new Error('Failed to add user to personal organization')
+	}
+
+	await adapter.addRoleForMember({
+		organizationId: personalOrganization.id,
+		memberId: membership.id,
+		role: 'owner',
+	})
+}
+
 export function mySqlDrizzleAdapter(
 	client: InstanceType<typeof MySqlDatabase>,
 	tableFn = defaultMySqlTableFn,
 	paymentProvider?: PaymentsProviderConfig,
-): CourseBuilderAdapter<typeof MySqlDatabase> {
+): AuthJsCourseBuilderAdapter<typeof MySqlDatabase> {
 	const {
 		users,
 		accounts,
@@ -489,8 +570,14 @@ export function mySqlDrizzleAdapter(
 		entitlementTypes,
 	} = createTables(tableFn)
 
-	const adapter: CourseBuilderAdapter = {
+	const normalizeLearnerEmail = (email: string) =>
+		email.trim().toLowerCase().replace(/\s+/g, '+')
+
+	const adapter: AuthJsCourseBuilderAdapter<typeof MySqlDatabase> = {
 		client,
+		async provisionPersonalOrganization(params) {
+			await provisionPersonalOrganization(adapter, params)
+		},
 		async redeemFullPriceCoupon(options) {
 			const {
 				email: baseEmail,
@@ -499,7 +586,7 @@ export function mySqlDrizzleAdapter(
 				currentUserId,
 				redeemingProductId,
 			} = options
-			const email = String(baseEmail).replace(' ', '+')
+			const email = normalizeLearnerEmail(String(baseEmail))
 
 			const coupon = await adapter.getCouponWithBulkPurchases(couponId)
 
@@ -526,6 +613,35 @@ export function mySqlDrizzleAdapter(
 
 				const redeemingForCurrentUser = currentUser?.id === user.id
 
+				if (bulkCouponRedemption) {
+					const existingValidRedemption =
+						await client.query.purchases.findFirst({
+							where: and(
+								eq(purchaseTable.redeemedBulkCouponId, coupon.id),
+								eq(purchaseTable.userId, user.id),
+								eq(purchaseTable.status, 'Valid'),
+							),
+						})
+
+					if (existingValidRedemption) {
+						logger.info('adapter.coupon.redeem.duplicate_team_seat', {
+							couponId: coupon.id,
+							currentUserId,
+							email,
+							productId,
+							purchaseId: existingValidRedemption.id,
+							userId: user.id,
+						})
+						return {
+							error: {
+								message: 'team-seat-redemption-already-claimed',
+							},
+							redeemingForCurrentUser,
+							purchase: null,
+						}
+					}
+				}
+
 				// To prevent double-purchasing, check if this user already has a
 				// Purchase record for this product that is valid and wasn't a bulk
 				// coupon purchase.
@@ -756,7 +872,12 @@ export function mySqlDrizzleAdapter(
 							completedAt: now,
 							updatedAt: now,
 						})
-						.where(eq(resourceProgress.resourceId, options.lessonId))
+						.where(
+							and(
+								eq(resourceProgress.userId, options.userId),
+								eq(resourceProgress.resourceId, options.lessonId),
+							),
+						)
 				}
 			} else {
 				await client.insert(resourceProgress).values({
@@ -868,6 +989,7 @@ export function mySqlDrizzleAdapter(
 						country,
 						usedCouponId,
 						organizationId,
+						attributionSnapshot,
 					} = options
 
 					const existingMerchantCharge = merchantChargeSchema.nullable().parse(
@@ -931,6 +1053,7 @@ export function mySqlDrizzleAdapter(
 								and(
 									eq(coupon.restrictedToProductId, productId),
 									eq(purchaseTable.userId, userId),
+									eq(purchaseTable.status, 'Valid'),
 								),
 							)
 							.then((res) => {
@@ -939,26 +1062,48 @@ export function mySqlDrizzleAdapter(
 					)
 
 					const isBulkPurchase =
-						quantity > 1 ||
-						Boolean(existingBulkCoupon) ||
-						options.bulk ||
-						Boolean(existingPurchase?.status === 'Valid')
+						quantity > 1 || Boolean(existingBulkCoupon) || Boolean(options.bulk)
 
 					let bulkCouponId: string | null = null
 					let couponToUpdate = null
+					const purchaseBenefitsTransport =
+						options.purchaseBenefitsTransport?.trim() || undefined
+					const purchaseBenefitExpansion = purchaseBenefitsTransport
+						? parseAndExpandPurchaseBenefitTransport({
+								transport: purchaseBenefitsTransport,
+								appliesTo: isBulkPurchase ? 'redeemed_team_seat' : 'buyer',
+							})
+						: null
+
+					if (purchaseBenefitExpansion && !purchaseBenefitExpansion.success) {
+						logger.info('purchase_benefits.transport.needs_review', {
+							checkoutSessionId,
+							event: 'purchase_benefits.transport.needs_review',
+							metadataKey: PURCHASE_BENEFIT_METADATA_KEY,
+							productId,
+							stripeChargeId,
+							userId,
+							errors: purchaseBenefitExpansion.review.errors,
+						})
+					}
 
 					if (isBulkPurchase) {
 						bulkCouponId =
 							existingBulkCoupon !== null ? existingBulkCoupon.id : v4()
 
 						if (existingBulkCoupon !== null) {
+							const existingCouponFields = existingBulkCoupon.fields ?? {}
 							couponToUpdate = await client
 								.update(coupon)
 								.set({
 									maxUses: (existingBulkCoupon?.maxUses || 0) + quantity,
+									fields: mergePurchaseBenefitFields(
+										existingCouponFields,
+										purchaseBenefitExpansion,
+									),
 									...(organizationId ? { organizationId } : {}),
 								})
-								.where(eq(coupon.id, bulkCouponId))
+								.where(eq(coupon.id, bulkCouponId as string))
 						} else {
 							// Try to find merchant coupon by stripeCouponId first
 							let merchantCouponToUse = stripeCouponId
@@ -994,6 +1139,10 @@ export function mySqlDrizzleAdapter(
 								restrictedToProductId: productId,
 								maxUses: quantity,
 								status: 1,
+								fields: mergePurchaseBenefitFields(
+									{},
+									purchaseBenefitExpansion,
+								),
 								...(organizationId ? { organizationId } : {}),
 								...(merchantCouponToUse
 									? {
@@ -1047,6 +1196,14 @@ export function mySqlDrizzleAdapter(
 						bulkCouponId,
 						merchantSessionId,
 						country,
+						fields: {
+							...(!isBulkPurchase
+								? mergePurchaseBenefitFields({}, purchaseBenefitExpansion)
+								: {}),
+							...(attributionSnapshot
+								? { attribution: attributionSnapshot }
+								: {}),
+						},
 						upgradedFromId: upgradedFromPurchaseId || null,
 						couponId: usedCouponId || null,
 						...(organizationId ? { organizationId } : {}),
@@ -2535,7 +2692,12 @@ export function mySqlDrizzleAdapter(
 						completedAt: lessonProgress.completedAt ? null : now,
 						updatedAt: now,
 					})
-					.where(eq(resourceProgress.resourceId, options.lessonId))
+					.where(
+						and(
+							eq(resourceProgress.userId, options.userId),
+							eq(resourceProgress.resourceId, options.lessonId),
+						),
+					)
 			} else {
 				await client.insert(resourceProgress).values({
 					userId: options.userId,
@@ -2765,7 +2927,13 @@ export function mySqlDrizzleAdapter(
 				},
 			})
 
-			const parentResource = ContentResourceSchema.parse(parentResourceData)
+			const parsedParentResource =
+				ContentResourceSchema.safeParse(parentResourceData)
+			if (!parsedParentResource.success) {
+				return null
+			}
+
+			const parentResource = parsedParentResource.data
 
 			await client.insert(contentResourceResource).values({
 				resourceOfId: parentResource.id,
@@ -2773,15 +2941,17 @@ export function mySqlDrizzleAdapter(
 				position: parentResource.resources?.length || 0,
 			})
 
-			const resourceJoin = client.query.contentResourceResource.findFirst({
-				where: and(
-					eq(contentResourceResource.resourceOfId, parentResourceId),
-					eq(contentResourceResource.resourceId, childResourceId),
-				),
-				with: {
-					resource: true,
+			const resourceJoin = await client.query.contentResourceResource.findFirst(
+				{
+					where: and(
+						eq(contentResourceResource.resourceOfId, parentResource.id),
+						eq(contentResourceResource.resourceId, childResourceId),
+					),
+					with: {
+						resource: true,
+					},
 				},
-			})
+			)
 
 			const parsedResourceJoin =
 				ContentResourceResourceSchema.safeParse(resourceJoin)
@@ -2794,12 +2964,33 @@ export function mySqlDrizzleAdapter(
 		async removeResourceFromResource(options) {
 			const { childResourceId, parentResourceId } = options
 
+			const parentResourceData = await client.query.contentResource.findFirst({
+				where: or(
+					eq(
+						sql`JSON_EXTRACT (${contentResource.fields}, "$.slug")`,
+						parentResourceId,
+					),
+					eq(contentResource.id, parentResourceId),
+				),
+			})
+
+			const parsedParentResource =
+				ContentResourceSchema.safeParse(parentResourceData)
+			if (!parsedParentResource.success) {
+				return null
+			}
+
+			const parentResource = parsedParentResource.data
+
 			const resourceJoin = await client.query.contentResourceResource.findFirst(
 				{
 					where: and(
-						eq(contentResourceResource.resourceOfId, parentResourceId),
+						eq(contentResourceResource.resourceOfId, parentResource.id),
 						eq(contentResourceResource.resourceId, childResourceId),
 					),
+					with: {
+						resource: true,
+					},
 				},
 			)
 
@@ -2813,7 +3004,7 @@ export function mySqlDrizzleAdapter(
 				.delete(contentResourceResource)
 				.where(
 					and(
-						eq(contentResourceResource.resourceOfId, parentResourceId),
+						eq(contentResourceResource.resourceOfId, parentResource.id),
 						eq(contentResourceResource.resourceId, childResourceId),
 					),
 				)
@@ -2883,7 +3074,8 @@ export function mySqlDrizzleAdapter(
       JSON_EXTRACT (${contentResource.fields}, "$.duration") AS duration,
       JSON_EXTRACT (${contentResource.fields}, "$.muxPlaybackId") AS muxPlaybackId,
       JSON_EXTRACT (${contentResource.fields}, "$.muxAssetId") AS muxAssetId,
-      JSON_EXTRACT (${contentResource.fields}, "$.transcript") AS transcript
+      JSON_EXTRACT (${contentResource.fields}, "$.transcript") AS transcript,
+      JSON_EXTRACT (${contentResource.fields}, "$.chapters") AS chapters
     FROM
       ${contentResource}
     WHERE
@@ -4209,9 +4401,12 @@ export function mySqlDrizzleAdapter(
 			}
 
 			const codesArray: string[] = []
+			const requestedQuantity = Number(input.quantity)
+			const couponQuantity = requestedQuantity < 0 ? 1 : requestedQuantity
+
 			await client.transaction(async (trx) => {
 				// insert coupon for CouponInput quantity
-				for (let i = 0; i < Number(input.quantity); i++) {
+				for (let i = 0; i < couponQuantity; i++) {
 					const id = `coupon_${guid()}`
 					await trx.insert(coupon).values({
 						...input,
@@ -4229,30 +4424,9 @@ export function mySqlDrizzleAdapter(
 			try {
 				await client.insert(users).values({ ...data, id })
 
-				// creating a personal organization for the user
-				// every user gets an organization of their very own
-				const personalOrganization = await adapter.createOrganization({
-					name: `Personal (${data.email})`,
-				})
-
-				if (!personalOrganization) {
-					throw new Error('Failed to create personal organization')
-				}
-
-				const membership = await adapter.addMemberToOrganization({
-					organizationId: personalOrganization.id,
+				await provisionPersonalOrganization(adapter, {
 					userId: id,
-					invitedById: id,
-				})
-
-				if (!membership) {
-					throw new Error('Failed to add user to personal organization')
-				}
-
-				await adapter.addRoleForMember({
-					organizationId: personalOrganization.id,
-					memberId: membership.id,
-					role: 'owner',
+					email: data.email,
 				})
 
 				const user = await adapter.getUser?.(id)
@@ -4296,7 +4470,7 @@ export function mySqlDrizzleAdapter(
 				.select()
 				.from(sessions)
 				.where(eq(sessions.sessionToken, data.sessionToken))
-				.then((res) => res[0] as AdapterSession)
+				.then((res) => res[0] as CourseBuilderAuthSession)
 		},
 		async getSessionAndUser(data) {
 			return (
@@ -4322,7 +4496,7 @@ export function mySqlDrizzleAdapter(
 				.select()
 				.from(users)
 				.where(eq(users.id, data.id))
-				.then((res) => res[0] as AdapterUser)
+				.then((res) => res[0] as CourseBuilderUser)
 		},
 		async updateSession(data) {
 			await client

package/src/lib/mysql/schemas/auth/accounts.ts

@@ -1,4 +1,3 @@
-import { AdapterAccount } from '@auth/core/adapters'
 import { relations } from 'drizzle-orm'
 import {
 	index,
@@ -9,6 +8,8 @@ import {
 	varchar,
 } from 'drizzle-orm/mysql-core'
 
+import type { CourseBuilderAccountType } from '@coursebuilder/core/auth'
+
 import { getUsersSchema, type UsersSchemaOverrides } from './users.js'
 
 export function getAccountsSchema(mysqlTable: MySqlTableFn) {
@@ -17,7 +18,7 @@ export function getAccountsSchema(mysqlTable: MySqlTableFn) {
 		{
 			userId: varchar('userId', { length: 255 }).notNull(),
 			type: varchar('type', { length: 255 })
-				.$type<AdapterAccount['type']>()
+				.$type<CourseBuilderAccountType>()
 				.notNull(),
 			provider: varchar('provider', { length: 255 }).notNull(),
 			providerAccountId: varchar('providerAccountId', {

package/src/lib/mysql/schemas/auth/personal-access-token.ts

@@ -0,0 +1,107 @@
+import { relations, sql } from 'drizzle-orm'
+import {
+	index,
+	json,
+	MySqlTableFn,
+	primaryKey,
+	timestamp,
+	uniqueIndex,
+	varchar,
+} from 'drizzle-orm/mysql-core'
+
+import { getUsersSchema, type UsersSchemaOverrides } from './users.js'
+
+/**
+ * Creates the PersonalAccessToken table schema for operator API credentials.
+ *
+ * Stores safe token metadata and a derived token hash, never the raw token
+ * secret. Key fields are `publicId` and `tokenPrefix` for lookup/display,
+ * `tokenHash` for verification, `scopes` for coarse authorization, and
+ * `expiresAt`, `lastUsedAt`, and `revokedAt` for lifecycle control.
+ *
+ * @param mysqlTable - Drizzle MySQL table factory, usually app-prefixed.
+ * @returns The PersonalAccessToken MySQL table schema.
+ *
+ * @example
+ * ```ts
+ * const personalAccessToken = getPersonalAccessTokenSchema(mysqlTable)
+ * ```
+ */
+export function getPersonalAccessTokenSchema(mysqlTable: MySqlTableFn) {
+	return mysqlTable(
+		'PersonalAccessToken',
+		{
+			id: varchar('id', { length: 191 }).notNull(),
+			userId: varchar('userId', { length: 191 }).notNull(),
+			name: varchar('name', { length: 255 }).notNull(),
+			publicId: varchar('publicId', { length: 64 }).notNull(),
+			tokenPrefix: varchar('tokenPrefix', { length: 128 }).notNull(),
+			tokenHash: varchar('tokenHash', { length: 128 }).notNull(),
+			scopes: json('scopes').$type<string[]>().notNull(),
+			expiresAt: timestamp('expiresAt', {
+				mode: 'date',
+				fsp: 3,
+			}),
+			lastUsedAt: timestamp('lastUsedAt', {
+				mode: 'date',
+				fsp: 3,
+			}),
+			revokedAt: timestamp('revokedAt', {
+				mode: 'date',
+				fsp: 3,
+			}),
+			createdAt: timestamp('createdAt', {
+				mode: 'date',
+				fsp: 3,
+			}).default(sql`CURRENT_TIMESTAMP(3)`),
+			updatedAt: timestamp('updatedAt', {
+				mode: 'date',
+				fsp: 3,
+			})
+				.default(sql`CURRENT_TIMESTAMP(3)`)
+				.$onUpdate(() => new Date()),
+		},
+		(pat) => ({
+			pk: primaryKey({ columns: [pat.id] }),
+			publicIdIdx: uniqueIndex('publicId_idx').on(pat.publicId),
+			tokenHashIdx: uniqueIndex('tokenHash_idx').on(pat.tokenHash),
+			userIdIdx: index('userId_idx').on(pat.userId),
+			expiresAtIdx: index('expiresAt_idx').on(pat.expiresAt),
+			revokedAtIdx: index('revokedAt_idx').on(pat.revokedAt),
+		}),
+	)
+}
+
+/**
+ * Creates PersonalAccessToken relations for the Users table.
+ *
+ * Links `personalAccessToken.userId` to `user.id` with relation name `user`.
+ * Uses `getPersonalAccessTokenSchema` and either the default `getUsersSchema`
+ * helper or `overrides.getUsersSchema` when an app needs a custom user schema.
+ *
+ * @param mysqlTable - Drizzle MySQL table factory, usually app-prefixed.
+ * @param overrides - Optional schema overrides, especially `getUsersSchema`.
+ * @returns A Drizzle relations schema for PersonalAccessToken.
+ *
+ * @example
+ * ```ts
+ * const relations = getPersonalAccessTokenRelationsSchema(mysqlTable, {
+ * 	getUsersSchema: customGetUsersSchema,
+ * })
+ * ```
+ */
+export function getPersonalAccessTokenRelationsSchema(
+	mysqlTable: MySqlTableFn,
+	overrides: UsersSchemaOverrides = {},
+) {
+	const personalAccessToken = getPersonalAccessTokenSchema(mysqlTable)
+	const resolveUsersSchema = overrides.getUsersSchema ?? getUsersSchema
+	const user = resolveUsersSchema(mysqlTable)
+	return relations(personalAccessToken, ({ one }) => ({
+		user: one(user, {
+			fields: [personalAccessToken.userId],
+			references: [user.id],
+			relationName: 'user',
+		}),
+	}))
+}

package/src/lib/mysql/schemas/commerce/purchase.ts

@@ -62,6 +62,9 @@ export function getPurchaseSchema(mysqlTable: MySqlTableFn) {
 				organizationMembershipIdIdx: index('organizationMembershipId_idx').on(
 					table.purchasedByorganizationMembershipId,
 				),
+				userStatusProductIdx: index(
+					'idx_Purchase_on_userId_status_productId',
+				).on(table.userId, table.status, table.productId),
 			}
 		},
 	)

package/src/lib/mysql/schemas/entitlements/entitlement.ts

@@ -39,6 +39,9 @@ export function getEntitlementsSchema(mysqlTable: MySqlTableFn) {
 			orgIdIdx: index('orgId_idx').on(table.organizationId),
 			sourceIdx: index('source_idx').on(table.sourceType, table.sourceId),
 			typeIdx: index('type_idx').on(table.entitlementType),
+			userIdTypeDeletedAtIdx: index(
+				'idx_Entitlement_on_userId_type_deletedAt',
+			).on(table.userId, table.entitlementType, table.deletedAt),
 		}),
 	)
 }