@govcore/schema 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @govcore/schema
 
+## 0.2.0
+
+### Minor Changes
+
+- d255afc: Operator-plane console mutations (#63). The org/user administration flows behind an instance console were rebuilt by every consumer (GovEA `actions/instance.ts`, GovCRM `lib/platform.ts`), and the user path is exactly where they diverged. Promote the mutations to core, composing the membership invariants from #65 so the guard and write-sync are identical everywhere.
+
+  `@govcore/tenancy` gains `createOrganization` (auto-slug via the new exported `slugify`; a duplicate slug returns a typed `slug-taken`), `renameOrganization` (name-only; audited before/after), and `updateUserAdministration` — the guard-heavy one: it enforces the last-active-admin invariant via `assertNotLastActiveAdmin` (inside the transaction) and an own-instance-admin lockout, updates the `users` row, and keeps the membership in lockstep via `upsertMembership`. All audited as `platform.org.*` / `platform.user.update` and generic over the app's admin role name; tenancy now depends on `@govcore/audit`.
+
+  `@govcore/auth` gains `provisionUser` — create a user with an initial password + primary membership. It lives here (not tenancy) because it hashes: validates against the policy, hashes, inserts, writes the membership through tenancy's `upsertMembership`, and audits `platform.user.create` without ever putting the password in the payload; a duplicate email returns a typed `email-taken`.
+
+  `@govcore/schema` gains `isUniqueViolation(err)` — a pure, edge-safe SQLSTATE-23505 predicate so operator flows turn a duplicate slug/email into a typed result instead of a 500.
+
+  All framework-agnostic (no FormData/redirect/revalidate — the consumer keeps the thin `'use server'` wrapper and the `instance_admin` gate) and returning typed results rather than throwing.
+
 ## 0.1.0
 
 ### Minor Changes

package/dist/index.d.ts

@@ -6,6 +6,15 @@ export * from './schema';
  * app's `postgres-js` db, or a `tx` inside a transaction — which extends it).
  */
 export type GovcoreDb = PgDatabase<PgQueryResultHKT, any, any>;
+/**
+ * True when `err` is (or wraps) a Postgres unique-constraint violation
+ * (SQLSTATE 23505). Pure and edge-safe — inspects `code`, touches no DB client.
+ * Lets operator flows turn a duplicate slug/email into a typed result instead of
+ * a 500. Walks the `cause` chain because Drizzle wraps the driver error in a
+ * `DrizzleQueryError` and puts the `postgres-js`/`pg` error (which carries the
+ * `code`) on `.cause` — so the top-level error's own `code` is undefined.
+ */
+export declare function isUniqueViolation(err: unknown): boolean;
 /**
  * Bumped whenever the platform schema changes. Written to instance settings on
  * boot for observability ("this instance runs platform schema vN", design §5),

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEvE,cAAc,UAAU,CAAA;AAExB;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,UAAU,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEvE,cAAc,UAAU,CAAA;AAExB;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAE9D;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAMvD;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,UAAU,CAAA"}

package/dist/index.js

@@ -1,6 +1,22 @@
 // @govcore/schema — platform table definitions + schema version.
 // Edge-safe entrypoint (no DB client). The migrate runner is ./migrate.
 export * from './schema';
+/**
+ * True when `err` is (or wraps) a Postgres unique-constraint violation
+ * (SQLSTATE 23505). Pure and edge-safe — inspects `code`, touches no DB client.
+ * Lets operator flows turn a duplicate slug/email into a typed result instead of
+ * a 500. Walks the `cause` chain because Drizzle wraps the driver error in a
+ * `DrizzleQueryError` and puts the `postgres-js`/`pg` error (which carries the
+ * `code`) on `.cause` — so the top-level error's own `code` is undefined.
+ */
+export function isUniqueViolation(err) {
+    for (let e = err, depth = 0; e && typeof e === 'object' && depth < 5; depth++) {
+        if (e.code === '23505')
+            return true;
+        e = e.cause;
+    }
+    return false;
+}
 /**
  * Bumped whenever the platform schema changes. Written to instance settings on
  * boot for observability ("this instance runs platform schema vN", design §5),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@govcore/schema",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Platform tables, enums, migrations, and the govcore-migrate runner",
   "type": "module",
   "main": "./src/index.ts",

package/src/index.ts

@@ -12,6 +12,22 @@ export * from './schema'
  */
 export type GovcoreDb = PgDatabase<PgQueryResultHKT, any, any>
 
+/**
+ * True when `err` is (or wraps) a Postgres unique-constraint violation
+ * (SQLSTATE 23505). Pure and edge-safe — inspects `code`, touches no DB client.
+ * Lets operator flows turn a duplicate slug/email into a typed result instead of
+ * a 500. Walks the `cause` chain because Drizzle wraps the driver error in a
+ * `DrizzleQueryError` and puts the `postgres-js`/`pg` error (which carries the
+ * `code`) on `.cause` — so the top-level error's own `code` is undefined.
+ */
+export function isUniqueViolation(err: unknown): boolean {
+  for (let e: unknown = err, depth = 0; e && typeof e === 'object' && depth < 5; depth++) {
+    if ((e as { code?: string }).code === '23505') return true
+    e = (e as { cause?: unknown }).cause
+  }
+  return false
+}
+
 /**
  * Bumped whenever the platform schema changes. Written to instance settings on
  * boot for observability ("this instance runs platform schema vN", design §5),