@friggframework/core 2.0.0--canary.686.3e27a92.0 → 2.0.0--canary.663.8de669c.0

package/modules/use-cases/get-module.js

@@ -1,12 +1,9 @@
 const { Module } = require('../module');
-const { DEFAULT_SCOPE_POLICY } = require('../scope-policy');
 
 class GetModule {
-    constructor({ moduleRepository, moduleDefinitions, scopePolicy }) {
+    constructor({ moduleRepository, moduleDefinitions }) {
         this.moduleRepository = moduleRepository;
         this.moduleDefinitions = moduleDefinitions;
-        // Who may load an entity follows its scope (ADR-056 §3.6).
-        this.scopePolicy = scopePolicy || DEFAULT_SCOPE_POLICY;
     }
 
     /**
@@ -35,7 +32,7 @@ class GetModule {
         // If User object provided, use ownsUserId to check linked users
         // Otherwise fall back to simple equality check
         const isOwned = typeof userIdOrUser === 'object' && userIdOrUser?.ownsUserId
-            ? this.scopePolicy.canUseEntity(userIdOrUser, entity)
+            ? userIdOrUser.ownsUserId(entity.userId)
             : entity.userId?.toString() === userId?.toString();
 
         if (!isOwned) {
@@ -56,11 +53,8 @@ class GetModule {
             );
         }
 
-        // Built for the entity's OWNER, not the caller: a caller may use an
-        // organization's entity, and a token refresh during this call must
-        // update the owner's credential, not create one under the caller.
-        const module = await Module.create({
-            userId: entity.userId ?? userId,
+        const module = new Module({
+            userId,
             entity,
             definition: moduleDefinition,
         });

package/modules/use-cases/process-authorization-callback.js

@@ -1,16 +1,5 @@
 const { Module } = require('../module');
 const { ModuleConstants } = require('../ModuleConstants');
-const { pickExistingEntity } = require('../scope-resolution');
-
-/**
- * What an entity belongs to when the caller says nothing: the person's own,
- * outside any organization.
- */
-const DEFAULT_TENANCY = Object.freeze({
-    scope: 'individual',
-    organizationId: null,
-    legacyOrgId: null,
-});
 const { getLogger } = require('../../logs');
 
 const log = getLogger('frigg.modules.authorization_callback');
@@ -41,17 +30,7 @@ class ProcessAuthorizationCallback {
         this.integrationRepository = integrationRepository;
     }
 
-    /**
-     * @param {string} userId - the OWNER of what this creates (ADR-056 §3.2): the
-     *   person for `individual`, the organization's user for `organization`.
-     *   Not necessarily the caller; callers resolve it from the scope.
-     * @param {string} entityType
-     * @param {Object} params - what the module's authorization needs
-     * @param {{scope: string, organizationId: (string|null), legacyOrgId: (string|null)}} [tenancy]
-     *   the entity's scope and organization (§3.6); default: the person's own,
-     *   with no organization
-     */
-    async execute(userId, entityType, params, tenancy = DEFAULT_TENANCY) {
+    async execute(userId, entityType, params) {
         log.debug('Authorization callback started', {
             eventName: `${log.name}.started`,
             userId,
@@ -78,7 +57,10 @@ class ProcessAuthorizationCallback {
                 userId,
                 entityType
             );
-        const existingEntity = pickExistingEntity(existingEntities, tenancy);
+        const existingEntity =
+            existingEntities && existingEntities.length > 0
+                ? existingEntities[0]
+                : null;
 
         if (existingEntity) {
             log.debug('Existing entity found', {
@@ -88,7 +70,7 @@ class ProcessAuthorizationCallback {
             });
         }
 
-        const module = await Module.create({
+        const module = new Module({
             userId,
             entity: existingEntity,
             definition: moduleDefinition,
@@ -174,8 +156,7 @@ class ProcessAuthorizationCallback {
         const persistedEntity = await this.findOrCreateEntity(
             entityDetails,
             entityType,
-            module.credential.id,
-            tenancy
+            module.credential.id
         );
         log.debug('Authorization callback completed', {
             eventName: `${log.name}.completed`,
@@ -252,12 +233,7 @@ class ProcessAuthorizationCallback {
         module.credential = persisted;
     }
 
-    async findOrCreateEntity(
-        entityDetails,
-        moduleName,
-        credentialId,
-        tenancy = DEFAULT_TENANCY
-    ) {
+    async findOrCreateEntity(entityDetails, moduleName, credentialId) {
         const { identifiers, details } = entityDetails;
 
         // Support both 'user' and 'userId' field names from module definitions
@@ -271,16 +247,11 @@ class ProcessAuthorizationCallback {
             );
         }
 
-        // The same provider account in two organizations is two entities
-        // (ADR-056 §3.6), so the match is per organization.
-        const existingEntity = pickExistingEntity(
-            await this.moduleRepository.findEntities({
-                externalId: identifiers.externalId,
-                user: userId,
-                moduleName: moduleName,
-            }),
-            tenancy
-        );
+        const existingEntity = await this.moduleRepository.findEntity({
+            externalId: identifiers.externalId,
+            user: userId,
+            moduleName: moduleName,
+        });
 
         if (existingEntity) {
             // Repoint the entity's credentialId when re-auth produced a
@@ -311,17 +282,12 @@ class ProcessAuthorizationCallback {
             return existingEntity;
         }
 
-        // `organizationId` is not part of the entity data: that carries provider
-        // fields, and one that happens to be called organizationId is theirs.
-        return await this.moduleRepository.createEntity(
-            {
-                ...identifiers,
-                ...details,
-                moduleName: moduleName,
-                credential: credentialId,
-            },
-            { organizationId: tenancy.organizationId ?? null }
-        );
+        return await this.moduleRepository.createEntity({
+            ...identifiers,
+            ...details,
+            moduleName: moduleName,
+            credential: credentialId,
+        });
     }
 }
 

package/modules/use-cases/refresh-entity-options.js

@@ -1,5 +1,4 @@
 const { Module } = require('../module');
-const { DEFAULT_SCOPE_POLICY } = require('../scope-policy');
 
 class RefreshEntityOptions {
     /**
@@ -7,11 +6,9 @@ class RefreshEntityOptions {
      * @param {import('../repositories/module-repository-interface').ModuleRepositoryInterface} params.moduleRepository
      * @param {} params.moduleDefinitions
      */
-    constructor({ moduleRepository, moduleDefinitions, scopePolicy }) {
+    constructor({ moduleRepository, moduleDefinitions }) {
         this.moduleRepository = moduleRepository;
         this.moduleDefinitions = moduleDefinitions;
-        // Who may load an entity follows its scope (ADR-056 §3.6).
-        this.scopePolicy = scopePolicy || DEFAULT_SCOPE_POLICY;
     }
 
     /**
@@ -39,7 +36,7 @@ class RefreshEntityOptions {
 
         // Validate entity ownership
         const isOwned = typeof userIdOrUser === 'object' && userIdOrUser?.ownsUserId
-            ? this.scopePolicy.canUseEntity(userIdOrUser, entity)
+            ? userIdOrUser.ownsUserId(entity.userId)
             : entity.userId?.toString() === userId?.toString();
 
         if (!isOwned) {
@@ -61,11 +58,8 @@ class RefreshEntityOptions {
             );
         }
 
-        // Built for the entity's OWNER, not the caller: a caller may use an
-        // organization's entity, and a token refresh during this call must
-        // update the owner's credential, not create one under the caller.
-        const module = await Module.create({
-            userId: entity.userId ?? userId,
+        const module = new Module({
+            userId,
             entity,
             definition: moduleDefinition,
         });

package/modules/use-cases/test-module-auth.js

@@ -1,5 +1,4 @@
 const { Module } = require('../module');
-const { DEFAULT_SCOPE_POLICY } = require('../scope-policy');
 
 class TestModuleAuth {
     /**
@@ -7,11 +6,9 @@ class TestModuleAuth {
      * @param {import('../repositories/module-repository-interface').ModuleRepositoryInterface} params.moduleRepository - Repository for module data operations.
      * @param {Array<Object>} params.moduleDefinitions - Array of module definitions.
      */
-    constructor({ moduleRepository, moduleDefinitions, scopePolicy }) {
+    constructor({ moduleRepository, moduleDefinitions }) {
         this.moduleRepository = moduleRepository;
         this.moduleDefinitions = moduleDefinitions;
-        // Who may load an entity follows its scope (ADR-056 §3.6).
-        this.scopePolicy = scopePolicy || DEFAULT_SCOPE_POLICY;
     }
 
     /**
@@ -38,7 +35,7 @@ class TestModuleAuth {
 
         // Validate entity ownership
         const isOwned = typeof userIdOrUser === 'object' && userIdOrUser?.ownsUserId
-            ? this.scopePolicy.canUseEntity(userIdOrUser, entity)
+            ? userIdOrUser.ownsUserId(entity.userId)
             : entity.userId?.toString() === userId?.toString();
 
         if (!isOwned) {
@@ -60,11 +57,8 @@ class TestModuleAuth {
             );
         }
 
-        // Built for the entity's OWNER, not the caller: a caller may use an
-        // organization's entity, and a token refresh during this call must
-        // update the owner's credential, not create one under the caller.
-        const module = await Module.create({
-            userId: entity.userId ?? userId,
+        const module = new Module({
+            userId,
             entity,
             definition: moduleDefinition,
         });

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@friggframework/core",
     "prettier": "@friggframework/prettier-config",
-    "version": "2.0.0--canary.686.3e27a92.0",
+    "version": "2.0.0--canary.663.8de669c.0",
     "dependencies": {
         "@aws-sdk/client-apigatewaymanagementapi": "^3.588.0",
         "@aws-sdk/client-kms": "^3.588.0",
@@ -28,7 +28,6 @@
         "express-async-handler": "^1.2.0",
         "form-data": "^4.0.6",
         "fs-extra": "^11.2.0",
-        "jose": "^5.10.0",
         "lodash": "4.18.1",
         "lodash.get": "^4.4.2",
         "node-fetch": "^2.6.7",
@@ -48,9 +47,9 @@
         }
     },
     "devDependencies": {
-        "@friggframework/eslint-config": "2.0.0--canary.686.3e27a92.0",
-        "@friggframework/prettier-config": "2.0.0--canary.686.3e27a92.0",
-        "@friggframework/test": "2.0.0--canary.686.3e27a92.0",
+        "@friggframework/eslint-config": "2.0.0--canary.663.8de669c.0",
+        "@friggframework/prettier-config": "2.0.0--canary.663.8de669c.0",
+        "@friggframework/test": "2.0.0--canary.663.8de669c.0",
         "@prisma/client": "^6.19.3",
         "@types/lodash": "4.17.15",
         "@typescript-eslint/eslint-plugin": "^8.0.0",
@@ -90,5 +89,5 @@
     "publishConfig": {
         "access": "public"
     },
-    "gitHead": "3e27a92b49a9502f9e022df07c5219783e614cad"
+    "gitHead": "8de669cbe925abbcd0908be6e792e38e2a14ffd8"
 }

package/prisma-mongodb/schema.prisma

@@ -56,14 +56,6 @@ model User {
   integrations Integration[]
   processes    Process[]
 
-  // Organization memberships (ADR-056 §3.6). `organizationId` above is the legacy
-  // single-org pointer: set on a person's first link, never moved afterwards, and
-  // read as an implicit membership when no row exists for it.
-  // As an individual: the organizations this person belongs to.
-  memberships OrganizationMembership[] @relation("IndividualMemberships")
-  // As an organization: the people who belong to it.
-  orgMembers OrganizationMembership[] @relation("OrganizationMemberships")
-
   @@unique([username, appUserId])
   @@index([type])
   @@index([appUserId])
@@ -134,14 +126,6 @@ model Entity {
   moduleName   String?
   externalId   String?
 
-  // Organization this entity was connected in (ADR-056 §3.6): the active
-  // organization for `individual`, the owner for `organization`, null for
-  // `global`. Null on an `individual` entity is also what every row written
-  // before this column existed has, and what `individualAcross: 'all'` writes.
-  // Deliberately not a relation: a deleted organization must leave its rows
-  // invisible, not turn them into "unscoped" ones (SetNull would do that).
-  organizationId String? @db.ObjectId
-
   data Json @default("{}")
 
   createdAt DateTime @default(now())
@@ -158,7 +142,6 @@ model Entity {
   associationObjects AssociationObject[]
 
   @@index([userId])
-  @@index([userId, organizationId])
   @@index([externalId])
   @@index([moduleName])
   @@index([credentialId])
@@ -176,11 +159,6 @@ model Integration {
   user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)
   status IntegrationStatus @default(IN_CREATION)
 
-  // Organization this integration was created in (ADR-056 §3.6): the active
-  // organization at create time. Null for rows that predate the column. Not a
-  // relation, for the same reason as Entity.organizationId.
-  organizationId String? @db.ObjectId
-
   // Configuration and version
   config  Json? // Integration configuration object
   version String?
@@ -205,7 +183,6 @@ model Integration {
   processes    Process[]
 
   @@index([userId])
-  @@index([userId, organizationId])
   @@index([status])
   @@map("Integration")
 }
@@ -476,72 +453,3 @@ model UsageCounter {
   @@index([metric, integrationType, window])
   @@map("UsageCounter")
 }
-
-// ============================================================================
-// MANAGEMENT API MODELS
-// ============================================================================
-
-/// Multi-step authorization state for Management API v2 (/api/v2/authorize,
-/// /api/v2/credentials/:id/reauthorize). Short-lived: expired documents are
-/// removed opportunistically. stepData is encrypted at rest.
-model AuthorizationSession {
-  id           String   @id @default(auto()) @map("_id") @db.ObjectId
-  sessionId    String   @unique
-  userId       String
-  entityType   String
-  credentialId String?
-  currentStep  Int      @default(1)
-  maxSteps     Int
-  stepData     Json     @default("{}")
-  expiresAt    DateTime
-  completed    Boolean  @default(false)
-
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-
-  @@index([userId, entityType])
-  @@index([expiresAt])
-  @@map("AuthorizationSession")
-}
-
-// ============================================================================
-// ORGANIZATION MEMBERSHIP (ADR-056 §3.6)
-// ============================================================================
-
-/// One person's membership of one organization. Unique on the pair, so adding a
-/// membership is an idempotent upsert. `orgRole` is the organization role the
-/// adopter token carried when the membership was created (MEMBER when it named none). NoAction on delete
-/// because MongoDB gives no referential integrity: delete a user's memberships
-/// before the user.
-model OrganizationMembership {
-  id                 String   @id @default(auto()) @map("_id") @db.ObjectId
-  individualUserId   String   @db.ObjectId
-  organizationUserId String   @db.ObjectId
-  orgRole            String   @default("MEMBER")
-  createdAt          DateTime @default(now())
-
-  individualUser   User @relation("IndividualMemberships", fields: [individualUserId], references: [id], onDelete: NoAction, onUpdate: NoAction)
-  organizationUser User @relation("OrganizationMemberships", fields: [organizationUserId], references: [id], onDelete: NoAction, onUpdate: NoAction)
-
-  @@unique([individualUserId, organizationUserId])
-  @@index([organizationUserId])
-  @@map("OrganizationMembership")
-}
-
-/// One-time scheduled jobs for poll-and-dispatch scheduling pattern.
-/// Used by providers without native one-time scheduling APIs (e.g., Netlify).
-/// A cron function queries for due jobs and dispatches them to a queue.
-model ScheduledJob {
-  id              String   @id @default(auto()) @map("_id") @db.ObjectId
-  scheduleName    String   @unique
-  scheduledAt     DateTime
-  queueResourceId String
-  payload         Json?
-  state           String   @default("PENDING")
-
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-
-  @@index([state, scheduledAt])
-  @@map("ScheduledJob")
-}

package/prisma-postgresql/schema.prisma

@@ -56,14 +56,6 @@ model User {
   integrations Integration[]
   processes    Process[]
 
-  // Organization memberships (ADR-056 §3.6). `organizationId` above is the legacy
-  // single-org pointer: set on a person's first link, never moved afterwards, and
-  // read as an implicit membership when no row exists for it.
-  // As an individual: the organizations this person belongs to.
-  memberships OrganizationMembership[] @relation("IndividualMemberships")
-  // As an organization: the people who belong to it.
-  orgMembers OrganizationMembership[] @relation("OrganizationMemberships")
-
   @@unique([username, appUserId])
   @@index([type])
   @@index([appUserId])
@@ -131,14 +123,6 @@ model Entity {
   moduleName   String?
   externalId   String?
 
-  // Organization this entity was connected in (ADR-056 §3.6): the active
-  // organization for `individual`, the owner for `organization`, null for
-  // `global`. Null on an `individual` entity is also what every row written
-  // before this column existed has, and what `individualAcross: 'all'` writes.
-  // Deliberately not a relation: a deleted organization must leave its rows
-  // invisible, not turn them into "unscoped" ones (SetNull would do that).
-  organizationId Int?
-
   data Json @default("{}")
 
   createdAt DateTime @default(now())
@@ -152,7 +136,6 @@ model Entity {
   associationObjects AssociationObject[]
 
   @@index([userId])
-  @@index([userId, organizationId])
   @@index([externalId])
   @@index([moduleName])
   @@index([credentialId])
@@ -169,11 +152,6 @@ model Integration {
   user   User?             @relation(fields: [userId], references: [id], onDelete: Cascade)
   status IntegrationStatus @default(IN_CREATION)
 
-  // Organization this integration was created in (ADR-056 §3.6): the active
-  // organization at create time. Null for rows that predate the column. Not a
-  // relation, for the same reason as Entity.organizationId.
-  organizationId Int?
-
   // Configuration and version
   config  Json? // Integration configuration object
   version String?
@@ -197,7 +175,6 @@ model Integration {
   processes    Process[]
 
   @@index([userId])
-  @@index([userId, organizationId])
   @@index([status])
 }
 
@@ -457,67 +434,3 @@ model UsageCounter {
   // Covers series() (metric + integrationType + window range).
   @@index([metric, integrationType, window])
 }
-
-// ============================================================================
-// MANAGEMENT API MODELS
-// ============================================================================
-
-/// Multi-step authorization state for Management API v2 (/api/v2/authorize,
-/// /api/v2/credentials/:id/reauthorize). Short-lived: expired rows are removed
-/// opportunistically. stepData is encrypted at rest.
-model AuthorizationSession {
-  id           Int      @id @default(autoincrement())
-  sessionId    String   @unique
-  userId       String
-  entityType   String
-  credentialId String?
-  currentStep  Int      @default(1)
-  maxSteps     Int
-  stepData     Json     @default("{}")
-  expiresAt    DateTime
-  completed    Boolean  @default(false)
-
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-
-  @@index([userId, entityType])
-  @@index([expiresAt])
-}
-
-// ============================================================================
-// ORGANIZATION MEMBERSHIP (ADR-056 §3.6)
-// ============================================================================
-
-/// One person's membership of one organization. Unique on the pair, so adding a
-/// membership is an idempotent upsert. `orgRole` is the organization role the
-/// adopter token carried when the membership was created (MEMBER when it named none).
-model OrganizationMembership {
-  id                 Int      @id @default(autoincrement())
-  individualUserId   Int
-  organizationUserId Int
-  orgRole            String   @default("MEMBER")
-  createdAt          DateTime @default(now())
-
-  individualUser   User @relation("IndividualMemberships", fields: [individualUserId], references: [id], onDelete: Cascade, onUpdate: NoAction)
-  organizationUser User @relation("OrganizationMemberships", fields: [organizationUserId], references: [id], onDelete: Cascade, onUpdate: NoAction)
-
-  @@unique([individualUserId, organizationUserId])
-  @@index([organizationUserId])
-}
-
-/// One-time scheduled jobs for poll-and-dispatch scheduling pattern.
-/// Used by providers without native one-time scheduling APIs (e.g., Netlify).
-/// A cron function queries for due jobs and dispatches them to a queue.
-model ScheduledJob {
-  id              Int       @id @default(autoincrement())
-  scheduleName    String    @unique
-  scheduledAt     DateTime
-  queueResourceId String
-  payload         Json?
-  state           String    @default("PENDING")
-
-  createdAt DateTime @default(now())
-  updatedAt DateTime @updatedAt
-
-  @@index([state, scheduledAt])
-}

package/queues/index.js

@@ -1,29 +1,4 @@
 const { QueuerUtil } = require('./queuer-util');
-const { QueueProvider } = require('./queue-provider');
-const { QueueClientInterface } = require('./queue-client-interface');
-const {
-    createQueueProvider,
-    determineProvider,
-    QUEUE_PROVIDERS,
-} = require('./queue-provider-factory');
-const {
-    NetlifyBackgroundProvider,
-    QStashQueueProvider,
-} = require('./providers');
-
 module.exports = {
     QueuerUtil,
-    QueueProvider,
-    QueueClientInterface,
-    createQueueProvider,
-    determineProvider,
-    QUEUE_PROVIDERS,
-    NetlifyBackgroundProvider,
-    QStashQueueProvider,
-    get SqsQueueProvider() {
-        return require('./providers/sqs-queue-provider').SqsQueueProvider;
-    },
-    get SqsQueueClient() {
-        return require('./sqs-queue-client').SqsQueueClient;
-    },
 };

package/types/index.d.ts

@@ -12,5 +12,3 @@
 /// <reference path="./eslint-config/index.d.ts" />
 /// <reference path="./associations/index.d.ts" />
 /// <reference path="./syncs/index.d.ts" />
-/// <reference path="./user/index.d.ts" />
-/// <reference path="./modules/index.d.ts" />

package/user/repositories/user-repository-documentdb.js

@@ -4,7 +4,7 @@ const {
     toObjectId,
     fromObjectId,
     findOne,
-    findManyDrained,
+    findMany,
     insertOne,
     updateOne,
     deleteOne,
@@ -72,9 +72,7 @@ class UserRepositoryDocumentDB extends UserRepositoryInterface {
     }
 
     async findIndividualUsersByOrganizationId(organizationUserId) {
-        // Drained: findMany returns only the first cursor batch, which would
-        // drop people from a large organization.
-        const docs = await findManyDrained(this.prisma, 'User', {
+        const docs = await findMany(this.prisma, 'User', {
             organizationId: toObjectId(organizationUserId),
             type: 'INDIVIDUAL',
         });
@@ -423,29 +421,6 @@ class UserRepositoryDocumentDB extends UserRepositoryInterface {
         );
         return this._mapUser(decrypted);
     }
-
-    /**
-     * Set the legacy organizationId only if it is still null or absent (see the
-     * interface): the filter carries the condition, so it is one atomic update.
-     * @param {string} individualUserId
-     * @param {string} organizationUserId
-     * @returns {Promise<Object|null>} The individual user as stored afterwards
-     */
-    async linkIndividualToOrganizationIfUnset(individualUserId, organizationUserId) {
-        await updateOne(
-            this.prisma,
-            'User',
-            {
-                _id: toObjectId(individualUserId),
-                type: 'INDIVIDUAL',
-                // Raw MongoDB query (not Prisma): `{ field: null }` matches both a
-                // null value and a missing field, so no `$exists` branch is needed.
-                organizationId: null,
-            },
-            { $set: { organizationId: toObjectId(organizationUserId) } }
-        );
-        return this.findIndividualUserById(individualUserId);
-    }
 }
 
 module.exports = { UserRepositoryDocumentDB };

package/user/repositories/user-repository-interface.js

@@ -209,24 +209,6 @@ class UserRepositoryInterface {
             'Method linkIndividualToOrganization must be implemented by subclass'
         );
     }
-
-    /**
-     * Set an individual user's legacy `organizationId` pointer only if it is
-     * not set yet (their first link), decided by the database in the same
-     * statement so two concurrent first logins cannot overwrite each other.
-     * Never changes an existing pointer (ADR-056 §3.6).
-     *
-     * @param {string|number} individualUserId - Individual user ID
-     * @param {string|number} organizationUserId - Organization user ID
-     * @returns {Promise<Object|null>} The individual user as stored afterwards
-     *   (null if there is no such individual)
-     * @abstract
-     */
-    async linkIndividualToOrganizationIfUnset(individualUserId, organizationUserId) {
-        throw new Error(
-            'Method linkIndividualToOrganizationIfUnset must be implemented by subclass'
-        );
-    }
 }
 
 module.exports = { UserRepositoryInterface };

package/user/repositories/user-repository-mongo.js

@@ -318,30 +318,6 @@ class UserRepositoryMongo extends UserRepositoryInterface {
             },
         });
     }
-
-    /**
-     * Set the legacy organizationId only if it is still null (see the interface).
-     * @param {string} individualUserId
-     * @param {string} organizationUserId
-     * @returns {Promise<Object|null>} The individual user as stored afterwards
-     */
-    async linkIndividualToOrganizationIfUnset(individualUserId, organizationUserId) {
-        await this.prisma.user.updateMany({
-            where: {
-                id: individualUserId,
-                type: 'INDIVIDUAL',
-                // Prisma on MongoDB: `null` matches only an explicit null, and
-                // `isSet: false` only a missing field. An individual created
-                // without the field is the common case, so match both.
-                OR: [
-                    { organizationId: null },
-                    { organizationId: { isSet: false } },
-                ],
-            },
-            data: { organizationId: organizationUserId },
-        });
-        return this.findIndividualUserById(individualUserId);
-    }
 }
 
 module.exports = { UserRepositoryMongo };