@headless-lms/adapter-db 0.1.0 → 0.3.0

package/dist/repositories/org-user-profile.d.ts

@@ -87,6 +87,219 @@ declare const orgUserProfileColumns: {
     generated: undefined;
   }, {}, {}>;
 };
+declare const authorProfileColumns: {
+  role: import("drizzle-orm/pg-core").PgColumn<{
+    name: "role";
+    tableName: "org_users";
+    dataType: "string";
+    columnType: "PgText";
+    data: "student" | "owner" | "admin" | "instructor" | "moderator";
+    driverParam: string;
+    notNull: true;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: ["owner", "admin", "instructor", "moderator", "student"];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  displayName: import("drizzle-orm/pg-core").PgColumn<{
+    name: "display_name";
+    tableName: "user_profiles";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  headline: import("drizzle-orm/pg-core").PgColumn<{
+    name: "headline";
+    tableName: "user_profiles";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  imageAssetOrgId: import("drizzle-orm/pg-core").PgColumn<{
+    name: "image_asset_org_id";
+    tableName: "user_profiles";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  imageAssetId: import("drizzle-orm/pg-core").PgColumn<{
+    name: "image_asset_id";
+    tableName: "user_profiles";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  id: import("drizzle-orm/pg-core").PgColumn<{
+    name: "id";
+    tableName: "org_users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: true;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: true;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  firstName: import("drizzle-orm/pg-core").PgColumn<{
+    name: "first_name";
+    tableName: "users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  lastName: import("drizzle-orm/pg-core").PgColumn<{
+    name: "last_name";
+    tableName: "users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  email: import("drizzle-orm/pg-core").PgColumn<{
+    name: "email";
+    tableName: "users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  image: import("drizzle-orm/pg-core").PgColumn<{
+    name: "image";
+    tableName: "ba_user";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+};
+declare const studentFirstName: import("drizzle-orm").SQL<string | null>;
+declare const studentLastName: import("drizzle-orm").SQL<string | null>;
+declare const studentProfileColumns: {
+  id: import("drizzle-orm/pg-core").PgColumn<{
+    name: "id";
+    tableName: "org_users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: true;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: true;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  firstName: import("drizzle-orm").SQL<string | null>;
+  lastName: import("drizzle-orm").SQL<string | null>;
+  email: import("drizzle-orm/pg-core").PgColumn<{
+    name: "email";
+    tableName: "users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  image: import("drizzle-orm").SQL<string | null>;
+};
 //#endregion
-export { orgUserProfileColumns };
+export { authorProfileColumns, orgUserProfileColumns, studentFirstName, studentLastName, studentProfileColumns };
 //# sourceMappingURL=org-user-profile.d.ts.map

package/dist/repositories/org-user-profile.js

@@ -1,6 +1,7 @@
-import { users } from "../schema/identity.js";
+import { userProfiles, users } from "../schema/identity.js";
 import { orgUsers } from "../schema/organizations.js";
 import { user } from "../schema/better-auth.js";
+import { sql } from "drizzle-orm";
 //#region src/repositories/org-user-profile.ts
 /** Spread into a `.select({ ... })` to get the profile columns. */
 const orgUserProfileColumns = {
@@ -10,7 +11,27 @@ const orgUserProfileColumns = {
 	email: users.email,
 	image: user.image
 };
+const authorProfileColumns = {
+	...orgUserProfileColumns,
+	role: orgUsers.role,
+	displayName: userProfiles.displayName,
+	headline: userProfiles.headline,
+	imageAssetOrgId: userProfiles.imageAssetOrgId,
+	imageAssetId: userProfiles.imageAssetId
+};
+const profileVisible = sql`(${orgUsers.status} <> 'invited' or (${users.externalId} is null and not exists (
+  select 1 from org_users other where other.user_id = ${users.id} and other.org_id <> ${orgUsers.orgId}
+)))`;
+const studentFirstName = sql`case when ${profileVisible} then ${users.firstName} end`;
+const studentLastName = sql`case when ${profileVisible} then ${users.lastName} end`;
+const studentProfileColumns = {
+	id: orgUsers.id,
+	firstName: studentFirstName,
+	lastName: studentLastName,
+	email: users.email,
+	image: sql`case when ${profileVisible} then ${user.image} end`
+};
 //#endregion
-export { orgUserProfileColumns };
+export { authorProfileColumns, orgUserProfileColumns, studentFirstName, studentLastName, studentProfileColumns };
 
 //# sourceMappingURL=org-user-profile.js.map

package/dist/repositories/org-user-profile.js.map

@@ -1 +1 @@
-{"version":3,"file":"org-user-profile.js","names":[],"sources":["../../src/repositories/org-user-profile.ts"],"sourcesContent":["// The one display join for an org user's profile.\n//\n// The names and email live on the identity `users` row the org_users row links\n// to; the avatar lives on the auth engine's mirrored `user` table, reached\n// through that same identity row. The identity join is INNER (user_id is NOT\n// NULL); the auth join is LEFT, since only the avatar depends on it.\n//\n// Sanctioned by .eslintrc.cjs — \"db repositories read the auth adapter's\n// mirrored `user` table for display joins\".\n//\n// No `joinOrgUserProfile` helper: Drizzle's query builder type narrows on every\n// chained call, so a generic wrapper around `.innerJoin(...).leftJoin(...)`\n// can't be typed without widening it to `unknown` — each repository chains the\n// two joins inline instead.\nimport { orgUsers } from '../schema/organizations.js';\nimport { users } from '../schema/identity.js';\nimport { user } from '../schema/better-auth.js';\n\n/** Spread into a `.select({ ... })` to get the profile columns. */\nexport const orgUserProfileColumns = {\n  id: orgUsers.id,\n  firstName: users.firstName,\n  lastName: users.lastName,\n  email: users.email,\n  image: user.image,\n};\n"],"mappings":";;;;;AAmBA,MAAa,wBAAwB;CACnC,IAAI,SAAS;CACb,WAAW,MAAM;CACjB,UAAU,MAAM;CAChB,OAAO,MAAM;CACb,OAAO,KAAK;AACd"}
+{"version":3,"file":"org-user-profile.js","names":[],"sources":["../../src/repositories/org-user-profile.ts"],"sourcesContent":["// The one display join for an org user's profile.\n//\n// The names and email live on the identity `users` row the org_users row links\n// to; the avatar lives on the auth engine's mirrored `user` table, reached\n// through that same identity row. The identity join is INNER (user_id is NOT\n// NULL); the auth join is LEFT, since only the avatar depends on it.\n//\n// Sanctioned by .eslintrc.cjs — \"db repositories read the auth adapter's\n// mirrored `user` table for display joins\".\n//\n// No `joinOrgUserProfile` helper: Drizzle's query builder type narrows on every\n// chained call, so a generic wrapper around `.innerJoin(...).leftJoin(...)`\n// can't be typed without widening it to `unknown` — each repository chains the\n// two joins inline instead.\nimport { sql } from \"drizzle-orm\";\nimport { orgUsers } from \"../schema/organizations.js\";\nimport { userProfiles, users } from \"../schema/identity.js\";\nimport { user } from \"../schema/better-auth.js\";\n\n/** Spread into a `.select({ ... })` to get the profile columns. */\nexport const orgUserProfileColumns = {\n  id: orgUsers.id,\n  firstName: users.firstName,\n  lastName: users.lastName,\n  email: users.email,\n  image: user.image,\n};\n\nexport const authorProfileColumns = {\n  ...orgUserProfileColumns,\n  role: orgUsers.role,\n  displayName: userProfiles.displayName,\n  headline: userProfiles.headline,\n  imageAssetOrgId: userProfiles.imageAssetOrgId,\n  imageAssetId: userProfiles.imageAssetId,\n};\n\n// A person is shared across organizations. Until an invited student accepts,\n// the inviting org sees the name and avatar only when the profile is its own:\n// no account yet and no other organization.\nconst profileVisible = sql`(${orgUsers.status} <> 'invited' or (${users.externalId} is null and not exists (\n  select 1 from org_users other where other.user_id = ${users.id} and other.org_id <> ${orgUsers.orgId}\n)))`;\n\nexport const studentFirstName = sql<\n  string | null\n>`case when ${profileVisible} then ${users.firstName} end`;\nexport const studentLastName = sql<\n  string | null\n>`case when ${profileVisible} then ${users.lastName} end`;\n\nexport const studentProfileColumns = {\n  id: orgUsers.id,\n  firstName: studentFirstName,\n  lastName: studentLastName,\n  email: users.email,\n  image: sql<string | null>`case when ${profileVisible} then ${user.image} end`,\n};\n"],"mappings":";;;;;;AAoBA,MAAa,wBAAwB;CACnC,IAAI,SAAS;CACb,WAAW,MAAM;CACjB,UAAU,MAAM;CAChB,OAAO,MAAM;CACb,OAAO,KAAK;AACd;AAEA,MAAa,uBAAuB;CAClC,GAAG;CACH,MAAM,SAAS;CACf,aAAa,aAAa;CAC1B,UAAU,aAAa;CACvB,iBAAiB,aAAa;CAC9B,cAAc,aAAa;AAC7B;AAKA,MAAM,iBAAiB,GAAG,IAAI,SAAS,OAAO,oBAAoB,MAAM,WAAW;wDAC3B,MAAM,GAAG,uBAAuB,SAAS,MAAM;;AAGvG,MAAa,mBAAmB,GAE/B,aAAa,eAAe,QAAQ,MAAM,UAAU;AACrD,MAAa,kBAAkB,GAE9B,aAAa,eAAe,QAAQ,MAAM,SAAS;AAEpD,MAAa,wBAAwB;CACnC,IAAI,SAAS;CACb,WAAW;CACX,UAAU;CACV,OAAO,MAAM;CACb,OAAO,GAAkB,aAAa,eAAe,QAAQ,KAAK,MAAM;AAC1E"}

package/dist/repositories/organizations.d.ts

@@ -1,5 +1,5 @@
 import { NodePgDatabase } from "drizzle-orm/node-postgres";
-import { AddOrgUserInput, CreateOrgUserInput, Invite, NewInviteRow, NewOrganizationRow, OrgUser, Organization, OrganizationsRepository, UpdateOrganizationInput } from "@headless-lms/core/organizations";
+import { CreateOrgUserInput, Invite, NewInviteRow, NewOrganizationRow, OrgUser, Organization, OrganizationsRepository, Role, UpdateOrgUserInput, UpdateOrganizationInput } from "@headless-lms/core/organizations";
 import { Logger } from "@headless-lms/core/shared/ports";
 //#region src/repositories/organizations.d.ts
 declare class DrizzleOrganizationsRepository implements OrganizationsRepository {
@@ -12,20 +12,19 @@ declare class DrizzleOrganizationsRepository implements OrganizationsRepository
   findById(id: string): Promise<Organization | null>;
   findByExternalId(externalId: string): Promise<Organization | null>;
   findBySlug(slug: string): Promise<Organization | null>;
-  upsertOrgUser(orgId: string, input: AddOrgUserInput): Promise<OrgUser>;
   upsertPendingInvite(orgId: string, input: NewInviteRow): Promise<Invite>;
   setInviteStatus(orgId: string, id: string, status: string): Promise<Invite | null>;
   findInviteByTokenHash(tokenHash: string): Promise<Invite | null>;
+  findPendingInvite(orgId: string, email: string): Promise<Invite | null>;
+  setInviteToken(orgId: string, id: string, tokenHash: string, expiresAt: Date): Promise<Invite | null>;
   findOrgUser(orgId: string, userId: string): Promise<OrgUser | null>;
   findOrgUsersByUser(userId: string): Promise<OrgUser[]>;
   findOrgUserById(orgId: string, id: string): Promise<OrgUser | null>;
+  findOrgUsersByIds(orgId: string, ids: string[]): Promise<OrgUser[]>;
+  findOrgUserIdsByRole(orgId: string, roles: Role[]): Promise<string[]>;
   createOrgUser(input: CreateOrgUserInput): Promise<OrgUser>;
-  ensureOrgUser(input: CreateOrgUserInput): Promise<{
-    orgUser: OrgUser;
-    created: boolean;
-  }>;
+  updateOrgUser(orgId: string, id: string, patch: UpdateOrgUserInput): Promise<OrgUser | null>;
   findStudentOrgUsers(userId: string): Promise<OrgUser[]>;
-  cancelPendingInvite(orgId: string, email: string): Promise<Invite | null>;
   deleteOrgUser(orgId: string, id: string): Promise<OrgUser | null>;
 }
 //#endregion

package/dist/repositories/organizations.js

@@ -1,9 +1,9 @@
 import { invites, orgUsers, organizations } from "../schema/organizations.js";
-import { isUniqueViolation } from "./pg-errors.js";
-import { and, eq, sql } from "drizzle-orm";
-import { noopLogger } from "@headless-lms/core/shared/logger";
+import { isUniqueViolation, pgErrorFields, translateDbErrors } from "./pg-errors.js";
+import { and, eq, inArray, sql } from "drizzle-orm";
 import { ConflictError } from "@headless-lms/core/shared/errors";
-import { normalizeRole, parseRole } from "@headless-lms/core/organizations";
+import { noopLogger } from "@headless-lms/core/shared/logger";
+import { parseRole } from "@headless-lms/core/organizations";
 //#region src/repositories/organizations.ts
 const INVITE_STATUSES = [
 	"pending",
@@ -22,7 +22,8 @@ function toInvite(row) {
 		invitedBy: row.invitedBy,
 		tokenHash: row.tokenHash,
 		expiresAt: row.expiresAt,
-		createdAt: row.createdAt
+		createdAt: row.createdAt,
+		updatedAt: row.updatedAt
 	};
 }
 var DrizzleOrganizationsRepository = class {
@@ -67,22 +68,6 @@ var DrizzleOrganizationsRepository = class {
 		const [row] = await this.db.select().from(organizations).where(eq(organizations.slug, slug)).limit(1);
 		return row ?? null;
 	}
-	async upsertOrgUser(orgId, input) {
-		const role = normalizeRole(input.role);
-		const [row] = await this.db.insert(orgUsers).values({
-			orgId,
-			userId: input.userId,
-			role
-		}).onConflictDoUpdate({
-			target: [orgUsers.orgId, orgUsers.userId],
-			set: { role }
-		}).returning();
-		if (!row) throw new Error("failed to upsert orgUser");
-		return {
-			...row,
-			role: parseRole(row.role)
-		};
-	}
 	async upsertPendingInvite(orgId, input) {
 		const [row] = await this.db.insert(invites).values({
 			orgId,
@@ -113,6 +98,17 @@ var DrizzleOrganizationsRepository = class {
 		const [row] = await this.db.select().from(invites).where(eq(invites.tokenHash, tokenHash)).limit(1);
 		return row ? toInvite(row) : null;
 	}
+	async findPendingInvite(orgId, email) {
+		const [row] = await this.db.select().from(invites).where(and(eq(invites.orgId, orgId), sql`lower(${invites.email}) = lower(${email})`, eq(invites.status, "pending"))).limit(1);
+		return row ? toInvite(row) : null;
+	}
+	async setInviteToken(orgId, id, tokenHash, expiresAt) {
+		const [row] = await this.db.update(invites).set({
+			tokenHash,
+			expiresAt
+		}).where(and(eq(invites.orgId, orgId), eq(invites.id, id), eq(invites.status, "pending"))).returning();
+		return row ? toInvite(row) : null;
+	}
 	async findOrgUser(orgId, userId) {
 		const [row] = await this.db.select().from(orgUsers).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.userId, userId))).limit(1);
 		return row ? {
@@ -133,6 +129,17 @@ var DrizzleOrganizationsRepository = class {
 			role: parseRole(row.role)
 		} : null;
 	}
+	async findOrgUsersByIds(orgId, ids) {
+		if (ids.length === 0) return [];
+		return (await this.db.select().from(orgUsers).where(and(eq(orgUsers.orgId, orgId), inArray(orgUsers.id, ids)))).map((row) => ({
+			...row,
+			role: parseRole(row.role)
+		}));
+	}
+	async findOrgUserIdsByRole(orgId, roles) {
+		if (roles.length === 0) return [];
+		return (await this.db.select({ id: orgUsers.id }).from(orgUsers).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.status, "active"), inArray(orgUsers.role, roles))).orderBy(orgUsers.id)).map((row) => row.id);
+	}
 	async createOrgUser(input) {
 		try {
 			const [row] = await this.db.insert(orgUsers).values({
@@ -151,31 +158,15 @@ var DrizzleOrganizationsRepository = class {
 			throw err;
 		}
 	}
-	async ensureOrgUser(input) {
-		const status = input.status ?? "active";
-		const [inserted] = await this.db.insert(orgUsers).values({
-			orgId: input.orgId,
-			userId: input.userId,
-			role: input.role,
-			status
-		}).onConflictDoNothing({ target: [orgUsers.orgId, orgUsers.userId] }).returning();
-		if (inserted) return {
-			orgUser: {
-				...inserted,
-				role: parseRole(inserted.role)
-			},
-			created: true
-		};
-		const where = and(eq(orgUsers.orgId, input.orgId), eq(orgUsers.userId, input.userId));
-		const [existing] = status === "active" ? await this.db.update(orgUsers).set({ status }).where(where).returning() : await this.db.select().from(orgUsers).where(where).limit(1);
-		if (!existing) throw new Error("failed to ensure org user");
-		return {
-			orgUser: {
-				...existing,
-				role: parseRole(existing.role)
-			},
-			created: false
-		};
+	async updateOrgUser(orgId, id, patch) {
+		const [row] = await this.db.update(orgUsers).set({
+			...patch.role !== void 0 && { role: patch.role },
+			...patch.status !== void 0 && { status: patch.status }
+		}).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id))).returning();
+		return row ? {
+			...row,
+			role: parseRole(row.role)
+		} : null;
 	}
 	async findStudentOrgUsers(userId) {
 		return (await this.db.select().from(orgUsers).where(and(eq(orgUsers.userId, userId), eq(orgUsers.role, "student"))).orderBy(orgUsers.createdAt)).map((row) => ({
@@ -183,15 +174,17 @@ var DrizzleOrganizationsRepository = class {
 			role: parseRole(row.role)
 		}));
 	}
-	async cancelPendingInvite(orgId, email) {
-		const [row] = await this.db.update(invites).set({ status: "canceled" }).where(and(eq(invites.orgId, orgId), sql`lower(${invites.email}) = lower(${email})`, eq(invites.status, "pending"))).returning();
-		return row ? toInvite(row) : null;
-	}
 	async deleteOrgUser(orgId, id) {
-		const [row] = await this.db.delete(orgUsers).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id))).returning();
-		return row ?? null;
+		try {
+			const [row] = await this.db.delete(orgUsers).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id))).returning();
+			return row ?? null;
+		} catch (err) {
+			if (pgErrorFields(err)?.code === "23503") throw Object.assign(new ConflictError("This person has written posts, comments or messages and cannot be deleted"), { cause: err });
+			throw err;
+		}
 	}
 };
+translateDbErrors(DrizzleOrganizationsRepository);
 //#endregion
 export { DrizzleOrganizationsRepository };
 

package/dist/repositories/organizations.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.js","names":[],"sources":["../../src/repositories/organizations.ts"],"sourcesContent":["// organizations — Drizzle repository (implements the core outbound port).\nimport { and, eq, sql } from 'drizzle-orm';\nimport type { NodePgDatabase } from 'drizzle-orm/node-postgres';\nimport {\n  normalizeRole,\n  parseRole,\n  type AddOrgUserInput,\n  type CreateOrgUserInput,\n  type Invite,\n  type NewInviteRow,\n  type NewOrganizationRow,\n  type Organization,\n  type OrganizationsRepository,\n  type OrgUser,\n  type UpdateOrganizationInput,\n} from '@headless-lms/core/organizations';\nimport { invites, organizations, orgUsers } from '../schema/organizations.js';\nimport type { Logger } from '@headless-lms/core/shared/ports';\nimport { noopLogger } from '@headless-lms/core/shared/logger';\nimport { ConflictError } from '@headless-lms/core/shared/errors';\nimport { isUniqueViolation } from './pg-errors.js';\n\nconst INVITE_STATUSES = ['pending', 'accepted', 'rejected', 'canceled'] as const;\ntype InviteStatus = (typeof INVITE_STATUSES)[number];\nconst toStatus = (s: string): InviteStatus =>\n  (INVITE_STATUSES as readonly string[]).includes(s) ? (s as InviteStatus) : 'pending';\n\nfunction toInvite(row: typeof invites.$inferSelect): Invite {\n  return {\n    id: row.id,\n    orgId: row.orgId,\n    email: row.email,\n    role: row.role,\n    status: row.status,\n    invitedBy: row.invitedBy,\n    tokenHash: row.tokenHash,\n    expiresAt: row.expiresAt,\n    createdAt: row.createdAt,\n  };\n}\n\nexport class DrizzleOrganizationsRepository implements OrganizationsRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async create(input: NewOrganizationRow): Promise<Organization> {\n    const [row] = await this.db\n      .insert(organizations)\n      .values({\n        externalId: input.externalId,\n        name: input.name,\n        slug: input.slug,\n        ownerId: input.ownerId,\n        id: input.id,\n      })\n      .returning();\n    if (!row) {\n      throw new Error('failed to insert organization');\n    }\n    return row!;\n  }\n\n  async update(id: string, input: UpdateOrganizationInput): Promise<Organization | null> {\n    const [row] = await this.db\n      .update(organizations)\n      .set({ name: input.name, slug: input.slug })\n      .where(eq(organizations.id, id))\n      .returning();\n    return row ?? null;\n  }\n\n  async delete(id: string): Promise<Organization> {\n    const [row] = await this.db.delete(organizations).where(eq(organizations.id, id)).returning();\n\n    if (!row) {\n      throw new Error('failed to delete organization');\n    }\n    return row;\n  }\n\n  async findById(id: string): Promise<Organization | null> {\n    const [row] = await this.db.select().from(organizations).where(eq(organizations.id, id));\n    return row ?? null;\n  }\n\n  async findByExternalId(externalId: string): Promise<Organization | null> {\n    const [row] = await this.db\n      .select()\n      .from(organizations)\n      .where(eq(organizations.externalId, externalId))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async findBySlug(slug: string): Promise<Organization | null> {\n    const [row] = await this.db\n      .select()\n      .from(organizations)\n      .where(eq(organizations.slug, slug))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async upsertOrgUser(orgId: string, input: AddOrgUserInput): Promise<OrgUser> {\n    const role = normalizeRole(input.role);\n    const [row] = await this.db\n      .insert(orgUsers)\n      .values({ orgId, userId: input.userId, role })\n      .onConflictDoUpdate({ target: [orgUsers.orgId, orgUsers.userId], set: { role } })\n      .returning();\n    if (!row) {\n      throw new Error('failed to upsert orgUser');\n    }\n    return { ...row, role: parseRole(row.role) };\n  }\n\n  async upsertPendingInvite(orgId: string, input: NewInviteRow): Promise<Invite> {\n    const [row] = await this.db\n      .insert(invites)\n      .values({\n        orgId,\n        email: input.email,\n        role: input.role,\n        status: 'pending',\n        invitedBy: input.invitedBy,\n        tokenHash: input.tokenHash,\n        expiresAt: input.expiresAt,\n      })\n      .onConflictDoUpdate({\n        target: [invites.orgId, invites.email],\n        targetWhere: sql`${invites.status} = 'pending'`,\n        set: {\n          role: input.role,\n          invitedBy: input.invitedBy,\n          tokenHash: input.tokenHash,\n          expiresAt: input.expiresAt,\n        },\n      })\n      .returning();\n    if (!row) {\n      throw new Error('failed to upsert invite');\n    }\n    return toInvite(row);\n  }\n\n  async setInviteStatus(orgId: string, id: string, status: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .update(invites)\n      .set({ status: toStatus(status) })\n      .where(and(eq(invites.orgId, orgId), eq(invites.id, id)))\n      .returning();\n    return row ? toInvite(row) : null;\n  }\n\n  async findInviteByTokenHash(tokenHash: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .select()\n      .from(invites)\n      .where(eq(invites.tokenHash, tokenHash))\n      .limit(1);\n    return row ? toInvite(row) : null;\n  }\n\n  async findOrgUser(orgId: string, userId: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.userId, userId)))\n      .limit(1);\n    return row ? { ...row, role: parseRole(row.role) } : null;\n  }\n\n  async findOrgUsersByUser(userId: string): Promise<OrgUser[]> {\n    const rows = await this.db\n      .select()\n      .from(orgUsers)\n      .where(eq(orgUsers.userId, userId))\n      .orderBy(orgUsers.createdAt);\n    return rows.map((row) => ({ ...row, role: parseRole(row.role) }));\n  }\n\n  async findOrgUserById(orgId: string, id: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id)))\n      .limit(1);\n    return row ? { ...row, role: parseRole(row.role) } : null;\n  }\n\n  async createOrgUser(input: CreateOrgUserInput): Promise<OrgUser> {\n    try {\n      const [row] = await this.db\n        .insert(orgUsers)\n        .values({\n          orgId: input.orgId,\n          userId: input.userId,\n          role: input.role,\n          status: input.status ?? 'active',\n        })\n        .returning();\n      if (!row) {\n        throw new Error('failed to insert org user');\n      }\n      return { ...row, role: parseRole(row.role) };\n    } catch (err) {\n      if (isUniqueViolation(err)) {\n        throw new ConflictError('That account already belongs to this organization');\n      }\n      throw err;\n    }\n  }\n\n  async ensureOrgUser(input: CreateOrgUserInput): Promise<{ orgUser: OrgUser; created: boolean }> {\n    const status = input.status ?? 'active';\n    const [inserted] = await this.db\n      .insert(orgUsers)\n      .values({\n        orgId: input.orgId,\n        userId: input.userId,\n        role: input.role,\n        status,\n      })\n      .onConflictDoNothing({ target: [orgUsers.orgId, orgUsers.userId] })\n      .returning();\n    if (inserted) {\n      return { orgUser: { ...inserted, role: parseRole(inserted.role) }, created: true };\n    }\n\n    const where = and(eq(orgUsers.orgId, input.orgId), eq(orgUsers.userId, input.userId));\n    // Only an acceptance writes. A re-invite asks for 'invited' against a row\n    // that already exists, and has nothing to say about it.\n    const [existing] =\n      status === 'active'\n        ? await this.db.update(orgUsers).set({ status }).where(where).returning()\n        : await this.db.select().from(orgUsers).where(where).limit(1);\n    if (!existing) {\n      throw new Error('failed to ensure org user');\n    }\n    return { orgUser: { ...existing, role: parseRole(existing.role) }, created: false };\n  }\n\n  async findStudentOrgUsers(userId: string): Promise<OrgUser[]> {\n    const rows = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.userId, userId), eq(orgUsers.role, 'student')))\n      .orderBy(orgUsers.createdAt);\n    return rows.map((row) => ({ ...row, role: parseRole(row.role) }));\n  }\n\n  async cancelPendingInvite(orgId: string, email: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .update(invites)\n      .set({ status: 'canceled' })\n      .where(\n        and(\n          eq(invites.orgId, orgId),\n          sql`lower(${invites.email}) = lower(${email})`,\n          eq(invites.status, 'pending'),\n        ),\n      )\n      .returning();\n    return row ? toInvite(row) : null;\n  }\n\n  async deleteOrgUser(orgId: string, id: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .delete(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id)))\n      .returning();\n\n    return row ?? null;\n  }\n}\n"],"mappings":";;;;;;;AAsBA,MAAM,kBAAkB;CAAC;CAAW;CAAY;CAAY;AAAU;AAEtE,MAAM,YAAY,MACf,gBAAsC,SAAS,CAAC,IAAK,IAAqB;AAE7E,SAAS,SAAS,KAA0C;CAC1D,OAAO;EACL,IAAI,IAAI;EACR,OAAO,IAAI;EACX,OAAO,IAAI;EACX,MAAM,IAAI;EACV,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,IAAa,iCAAb,MAA+E;CAE1D;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,OAAO,OAAkD;EAC7D,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,aAAa,CAAC,CACrB,OAAO;GACN,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,IAAI,MAAM;EACZ,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,+BAA+B;EAEjD,OAAO;CACT;CAEA,MAAM,OAAO,IAAY,OAA8D;EACrF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,aAAa,CAAC,CACrB,IAAI;GAAE,MAAM,MAAM;GAAM,MAAM,MAAM;EAAK,CAAC,CAAC,CAC3C,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC,CAAC,CAC/B,UAAU;EACb,OAAO,OAAO;CAChB;CAEA,MAAM,OAAO,IAAmC;EAC9C,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,aAAa,CAAC,CAAC,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU;EAE5F,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,+BAA+B;EAEjD,OAAO;CACT;CAEA,MAAM,SAAS,IAA0C;EACvD,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC;EACvF,OAAO,OAAO;CAChB;CAEA,MAAM,iBAAiB,YAAkD;EACvE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,aAAa,CAAC,CACnB,MAAM,GAAG,cAAc,YAAY,UAAU,CAAC,CAAC,CAC/C,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,WAAW,MAA4C;EAC3D,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,aAAa,CAAC,CACnB,MAAM,GAAG,cAAc,MAAM,IAAI,CAAC,CAAC,CACnC,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,cAAc,OAAe,OAA0C;EAC3E,MAAM,OAAO,cAAc,MAAM,IAAI;EACrC,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,OAAO;GAAE;GAAO,QAAQ,MAAM;GAAQ;EAAK,CAAC,CAAC,CAC7C,mBAAmB;GAAE,QAAQ,CAAC,SAAS,OAAO,SAAS,MAAM;GAAG,KAAK,EAAE,KAAK;EAAE,CAAC,CAAC,CAChF,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,0BAA0B;EAE5C,OAAO;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE;CAC7C;CAEA,MAAM,oBAAoB,OAAe,OAAsC;EAC7E,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,OAAO;GACN;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,QAAQ;GACR,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,WAAW,MAAM;EACnB,CAAC,CAAC,CACD,mBAAmB;GAClB,QAAQ,CAAC,QAAQ,OAAO,QAAQ,KAAK;GACrC,aAAa,GAAG,GAAG,QAAQ,OAAO;GAClC,KAAK;IACH,MAAM,MAAM;IACZ,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,WAAW,MAAM;GACnB;EACF,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,yBAAyB;EAE3C,OAAO,SAAS,GAAG;CACrB;CAEA,MAAM,gBAAgB,OAAe,IAAY,QAAwC;EACvF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,IAAI,EAAE,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CACjC,MAAM,IAAI,GAAG,QAAQ,OAAO,KAAK,GAAG,GAAG,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CACxD,UAAU;EACb,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,sBAAsB,WAA2C;EACrE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,OAAO,CAAC,CACb,MAAM,GAAG,QAAQ,WAAW,SAAS,CAAC,CAAC,CACvC,MAAM,CAAC;EACV,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,YAAY,OAAe,QAAyC;EACxE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,QAAQ,MAAM,CAAC,CAAC,CAAC,CAClE,MAAM,CAAC;EACV,OAAO,MAAM;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,IAAI;CACvD;CAEA,MAAM,mBAAmB,QAAoC;EAM3D,QAAO,MALY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,GAAG,SAAS,QAAQ,MAAM,CAAC,CAAC,CAClC,QAAQ,SAAS,SAAS,EAAA,CACjB,KAAK,SAAS;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,EAAE;CAClE;CAEA,MAAM,gBAAgB,OAAe,IAAqC;EACxE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1D,MAAM,CAAC;EACV,OAAO,MAAM;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,IAAI;CACvD;CAEA,MAAM,cAAc,OAA6C;EAC/D,IAAI;GACF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,OAAO;IACN,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,MAAM,MAAM;IACZ,QAAQ,MAAM,UAAU;GAC1B,CAAC,CAAC,CACD,UAAU;GACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,2BAA2B;GAE7C,OAAO;IAAE,GAAG;IAAK,MAAM,UAAU,IAAI,IAAI;GAAE;EAC7C,SAAS,KAAK;GACZ,IAAI,kBAAkB,GAAG,GACvB,MAAM,IAAI,cAAc,mDAAmD;GAE7E,MAAM;EACR;CACF;CAEA,MAAM,cAAc,OAA4E;EAC9F,MAAM,SAAS,MAAM,UAAU;EAC/B,MAAM,CAAC,YAAY,MAAM,KAAK,GAC3B,OAAO,QAAQ,CAAC,CAChB,OAAO;GACN,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,MAAM,MAAM;GACZ;EACF,CAAC,CAAC,CACD,oBAAoB,EAAE,QAAQ,CAAC,SAAS,OAAO,SAAS,MAAM,EAAE,CAAC,CAAC,CAClE,UAAU;EACb,IAAI,UACF,OAAO;GAAE,SAAS;IAAE,GAAG;IAAU,MAAM,UAAU,SAAS,IAAI;GAAE;GAAG,SAAS;EAAK;EAGnF,MAAM,QAAQ,IAAI,GAAG,SAAS,OAAO,MAAM,KAAK,GAAG,GAAG,SAAS,QAAQ,MAAM,MAAM,CAAC;EAGpF,MAAM,CAAC,YACL,WAAW,WACP,MAAM,KAAK,GAAG,OAAO,QAAQ,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU,IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;EAChE,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,2BAA2B;EAE7C,OAAO;GAAE,SAAS;IAAE,GAAG;IAAU,MAAM,UAAU,SAAS,IAAI;GAAE;GAAG,SAAS;EAAM;CACpF;CAEA,MAAM,oBAAoB,QAAoC;EAM5D,QAAO,MALY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,QAAQ,MAAM,GAAG,GAAG,SAAS,MAAM,SAAS,CAAC,CAAC,CAAC,CACrE,QAAQ,SAAS,SAAS,EAAA,CACjB,KAAK,SAAS;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,EAAE;CAClE;CAEA,MAAM,oBAAoB,OAAe,OAAuC;EAC9E,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,IAAI,EAAE,QAAQ,WAAW,CAAC,CAAC,CAC3B,MACC,IACE,GAAG,QAAQ,OAAO,KAAK,GACvB,GAAG,SAAS,QAAQ,MAAM,YAAY,MAAM,IAC5C,GAAG,QAAQ,QAAQ,SAAS,CAC9B,CACF,CAAC,CACA,UAAU;EACb,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,cAAc,OAAe,IAAqC;EACtE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1D,UAAU;EAEb,OAAO,OAAO;CAChB;AACF"}
+{"version":3,"file":"organizations.js","names":[],"sources":["../../src/repositories/organizations.ts"],"sourcesContent":["// organizations — Drizzle repository (implements the core outbound port).\nimport { and, eq, inArray, sql } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport {\n  parseRole,\n  type CreateOrgUserInput,\n  type Invite,\n  type NewInviteRow,\n  type NewOrganizationRow,\n  type Organization,\n  type OrganizationsRepository,\n  type OrgUser,\n  type Role,\n  type UpdateOrganizationInput,\n  type UpdateOrgUserInput,\n} from \"@headless-lms/core/organizations\";\nimport { invites, organizations, orgUsers } from \"../schema/organizations.js\";\nimport type { Logger } from \"@headless-lms/core/shared/ports\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { ConflictError } from \"@headless-lms/core/shared/errors\";\nimport { isUniqueViolation, pgErrorFields, translateDbErrors } from \"./pg-errors.js\";\n\nconst INVITE_STATUSES = [\"pending\", \"accepted\", \"rejected\", \"canceled\"] as const;\ntype InviteStatus = (typeof INVITE_STATUSES)[number];\nconst toStatus = (s: string): InviteStatus =>\n  (INVITE_STATUSES as readonly string[]).includes(s) ? (s as InviteStatus) : \"pending\";\n\nfunction toInvite(row: typeof invites.$inferSelect): Invite {\n  return {\n    id: row.id,\n    orgId: row.orgId,\n    email: row.email,\n    role: row.role,\n    status: row.status,\n    invitedBy: row.invitedBy,\n    tokenHash: row.tokenHash,\n    expiresAt: row.expiresAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport class DrizzleOrganizationsRepository implements OrganizationsRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async create(input: NewOrganizationRow): Promise<Organization> {\n    const [row] = await this.db\n      .insert(organizations)\n      .values({\n        externalId: input.externalId,\n        name: input.name,\n        slug: input.slug,\n        ownerId: input.ownerId,\n        id: input.id,\n      })\n      .returning();\n    if (!row) {\n      throw new Error(\"failed to insert organization\");\n    }\n    return row!;\n  }\n\n  async update(id: string, input: UpdateOrganizationInput): Promise<Organization | null> {\n    const [row] = await this.db\n      .update(organizations)\n      .set({ name: input.name, slug: input.slug })\n      .where(eq(organizations.id, id))\n      .returning();\n    return row ?? null;\n  }\n\n  async delete(id: string): Promise<Organization> {\n    const [row] = await this.db.delete(organizations).where(eq(organizations.id, id)).returning();\n\n    if (!row) {\n      throw new Error(\"failed to delete organization\");\n    }\n    return row;\n  }\n\n  async findById(id: string): Promise<Organization | null> {\n    const [row] = await this.db.select().from(organizations).where(eq(organizations.id, id));\n    return row ?? null;\n  }\n\n  async findByExternalId(externalId: string): Promise<Organization | null> {\n    const [row] = await this.db\n      .select()\n      .from(organizations)\n      .where(eq(organizations.externalId, externalId))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async findBySlug(slug: string): Promise<Organization | null> {\n    const [row] = await this.db\n      .select()\n      .from(organizations)\n      .where(eq(organizations.slug, slug))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async upsertPendingInvite(orgId: string, input: NewInviteRow): Promise<Invite> {\n    const [row] = await this.db\n      .insert(invites)\n      .values({\n        orgId,\n        email: input.email,\n        role: input.role,\n        status: \"pending\",\n        invitedBy: input.invitedBy,\n        tokenHash: input.tokenHash,\n        expiresAt: input.expiresAt,\n      })\n      .onConflictDoUpdate({\n        target: [invites.orgId, invites.email],\n        targetWhere: sql`${invites.status} = 'pending'`,\n        set: {\n          role: input.role,\n          invitedBy: input.invitedBy,\n          tokenHash: input.tokenHash,\n          expiresAt: input.expiresAt,\n        },\n      })\n      .returning();\n    if (!row) {\n      throw new Error(\"failed to upsert invite\");\n    }\n    return toInvite(row);\n  }\n\n  async setInviteStatus(orgId: string, id: string, status: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .update(invites)\n      .set({ status: toStatus(status) })\n      .where(and(eq(invites.orgId, orgId), eq(invites.id, id)))\n      .returning();\n    return row ? toInvite(row) : null;\n  }\n\n  async findInviteByTokenHash(tokenHash: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .select()\n      .from(invites)\n      .where(eq(invites.tokenHash, tokenHash))\n      .limit(1);\n    return row ? toInvite(row) : null;\n  }\n\n  async findPendingInvite(orgId: string, email: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .select()\n      .from(invites)\n      .where(\n        and(\n          eq(invites.orgId, orgId),\n          sql`lower(${invites.email}) = lower(${email})`,\n          eq(invites.status, \"pending\"),\n        ),\n      )\n      .limit(1);\n    return row ? toInvite(row) : null;\n  }\n\n  async setInviteToken(\n    orgId: string,\n    id: string,\n    tokenHash: string,\n    expiresAt: Date,\n  ): Promise<Invite | null> {\n    const [row] = await this.db\n      .update(invites)\n      .set({ tokenHash, expiresAt })\n      .where(and(eq(invites.orgId, orgId), eq(invites.id, id), eq(invites.status, \"pending\")))\n      .returning();\n    return row ? toInvite(row) : null;\n  }\n\n  async findOrgUser(orgId: string, userId: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.userId, userId)))\n      .limit(1);\n    return row ? { ...row, role: parseRole(row.role) } : null;\n  }\n\n  async findOrgUsersByUser(userId: string): Promise<OrgUser[]> {\n    const rows = await this.db\n      .select()\n      .from(orgUsers)\n      .where(eq(orgUsers.userId, userId))\n      .orderBy(orgUsers.createdAt);\n    return rows.map((row) => ({ ...row, role: parseRole(row.role) }));\n  }\n\n  async findOrgUserById(orgId: string, id: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id)))\n      .limit(1);\n    return row ? { ...row, role: parseRole(row.role) } : null;\n  }\n\n  async findOrgUsersByIds(orgId: string, ids: string[]): Promise<OrgUser[]> {\n    if (ids.length === 0) {\n      return [];\n    }\n    const rows = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), inArray(orgUsers.id, ids)));\n    return rows.map((row) => ({ ...row, role: parseRole(row.role) }));\n  }\n\n  async findOrgUserIdsByRole(orgId: string, roles: Role[]): Promise<string[]> {\n    if (roles.length === 0) {\n      return [];\n    }\n    const rows = await this.db\n      .select({ id: orgUsers.id })\n      .from(orgUsers)\n      .where(\n        and(\n          eq(orgUsers.orgId, orgId),\n          eq(orgUsers.status, \"active\"),\n          inArray(orgUsers.role, roles),\n        ),\n      )\n      .orderBy(orgUsers.id);\n    return rows.map((row) => row.id);\n  }\n\n  async createOrgUser(input: CreateOrgUserInput): Promise<OrgUser> {\n    try {\n      const [row] = await this.db\n        .insert(orgUsers)\n        .values({\n          orgId: input.orgId,\n          userId: input.userId,\n          role: input.role,\n          status: input.status ?? \"active\",\n        })\n        .returning();\n      if (!row) {\n        throw new Error(\"failed to insert org user\");\n      }\n      return { ...row, role: parseRole(row.role) };\n    } catch (err) {\n      if (isUniqueViolation(err)) {\n        throw new ConflictError(\"That account already belongs to this organization\");\n      }\n      throw err;\n    }\n  }\n\n  async updateOrgUser(\n    orgId: string,\n    id: string,\n    patch: UpdateOrgUserInput,\n  ): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .update(orgUsers)\n      .set({\n        ...(patch.role !== undefined && { role: patch.role }),\n        ...(patch.status !== undefined && { status: patch.status }),\n      })\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id)))\n      .returning();\n    return row ? { ...row, role: parseRole(row.role) } : null;\n  }\n\n  async findStudentOrgUsers(userId: string): Promise<OrgUser[]> {\n    const rows = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.userId, userId), eq(orgUsers.role, \"student\")))\n      .orderBy(orgUsers.createdAt);\n    return rows.map((row) => ({ ...row, role: parseRole(row.role) }));\n  }\n\n  async deleteOrgUser(orgId: string, id: string): Promise<OrgUser | null> {\n    try {\n      const [row] = await this.db\n        .delete(orgUsers)\n        .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id)))\n        .returning();\n      return row ?? null;\n    } catch (err) {\n      if (pgErrorFields(err)?.code === \"23503\") {\n        throw Object.assign(\n          new ConflictError(\n            \"This person has written posts, comments or messages and cannot be deleted\",\n          ),\n          { cause: err },\n        );\n      }\n      throw err;\n    }\n  }\n}\ntranslateDbErrors(DrizzleOrganizationsRepository);\n"],"mappings":";;;;;;;AAsBA,MAAM,kBAAkB;CAAC;CAAW;CAAY;CAAY;AAAU;AAEtE,MAAM,YAAY,MACf,gBAAsC,SAAS,CAAC,IAAK,IAAqB;AAE7E,SAAS,SAAS,KAA0C;CAC1D,OAAO;EACL,IAAI,IAAI;EACR,OAAO,IAAI;EACX,OAAO,IAAI;EACX,MAAM,IAAI;EACV,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,IAAa,iCAAb,MAA+E;CAE1D;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,OAAO,OAAkD;EAC7D,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,aAAa,CAAC,CACrB,OAAO;GACN,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,IAAI,MAAM;EACZ,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,+BAA+B;EAEjD,OAAO;CACT;CAEA,MAAM,OAAO,IAAY,OAA8D;EACrF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,aAAa,CAAC,CACrB,IAAI;GAAE,MAAM,MAAM;GAAM,MAAM,MAAM;EAAK,CAAC,CAAC,CAC3C,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC,CAAC,CAC/B,UAAU;EACb,OAAO,OAAO;CAChB;CAEA,MAAM,OAAO,IAAmC;EAC9C,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,aAAa,CAAC,CAAC,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU;EAE5F,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,+BAA+B;EAEjD,OAAO;CACT;CAEA,MAAM,SAAS,IAA0C;EACvD,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC;EACvF,OAAO,OAAO;CAChB;CAEA,MAAM,iBAAiB,YAAkD;EACvE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,aAAa,CAAC,CACnB,MAAM,GAAG,cAAc,YAAY,UAAU,CAAC,CAAC,CAC/C,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,WAAW,MAA4C;EAC3D,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,aAAa,CAAC,CACnB,MAAM,GAAG,cAAc,MAAM,IAAI,CAAC,CAAC,CACnC,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,oBAAoB,OAAe,OAAsC;EAC7E,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,OAAO;GACN;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,QAAQ;GACR,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,WAAW,MAAM;EACnB,CAAC,CAAC,CACD,mBAAmB;GAClB,QAAQ,CAAC,QAAQ,OAAO,QAAQ,KAAK;GACrC,aAAa,GAAG,GAAG,QAAQ,OAAO;GAClC,KAAK;IACH,MAAM,MAAM;IACZ,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,WAAW,MAAM;GACnB;EACF,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,yBAAyB;EAE3C,OAAO,SAAS,GAAG;CACrB;CAEA,MAAM,gBAAgB,OAAe,IAAY,QAAwC;EACvF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,IAAI,EAAE,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CACjC,MAAM,IAAI,GAAG,QAAQ,OAAO,KAAK,GAAG,GAAG,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CACxD,UAAU;EACb,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,sBAAsB,WAA2C;EACrE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,OAAO,CAAC,CACb,MAAM,GAAG,QAAQ,WAAW,SAAS,CAAC,CAAC,CACvC,MAAM,CAAC;EACV,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,kBAAkB,OAAe,OAAuC;EAC5E,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,OAAO,CAAC,CACb,MACC,IACE,GAAG,QAAQ,OAAO,KAAK,GACvB,GAAG,SAAS,QAAQ,MAAM,YAAY,MAAM,IAC5C,GAAG,QAAQ,QAAQ,SAAS,CAC9B,CACF,CAAC,CACA,MAAM,CAAC;EACV,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,eACJ,OACA,IACA,WACA,WACwB;EACxB,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,IAAI;GAAE;GAAW;EAAU,CAAC,CAAC,CAC7B,MAAM,IAAI,GAAG,QAAQ,OAAO,KAAK,GAAG,GAAG,QAAQ,IAAI,EAAE,GAAG,GAAG,QAAQ,QAAQ,SAAS,CAAC,CAAC,CAAC,CACvF,UAAU;EACb,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,YAAY,OAAe,QAAyC;EACxE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,QAAQ,MAAM,CAAC,CAAC,CAAC,CAClE,MAAM,CAAC;EACV,OAAO,MAAM;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,IAAI;CACvD;CAEA,MAAM,mBAAmB,QAAoC;EAM3D,QAAO,MALY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,GAAG,SAAS,QAAQ,MAAM,CAAC,CAAC,CAClC,QAAQ,SAAS,SAAS,EAAA,CACjB,KAAK,SAAS;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,EAAE;CAClE;CAEA,MAAM,gBAAgB,OAAe,IAAqC;EACxE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1D,MAAM,CAAC;EACV,OAAO,MAAM;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,IAAI;CACvD;CAEA,MAAM,kBAAkB,OAAe,KAAmC;EACxE,IAAI,IAAI,WAAW,GACjB,OAAO,CAAC;EAMV,QAAO,MAJY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,QAAQ,SAAS,IAAI,GAAG,CAAC,CAAC,EAAA,CACtD,KAAK,SAAS;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,EAAE;CAClE;CAEA,MAAM,qBAAqB,OAAe,OAAkC;EAC1E,IAAI,MAAM,WAAW,GACnB,OAAO,CAAC;EAaV,QAAO,MAXY,KAAK,GACrB,OAAO,EAAE,IAAI,SAAS,GAAG,CAAC,CAAC,CAC3B,KAAK,QAAQ,CAAC,CACd,MACC,IACE,GAAG,SAAS,OAAO,KAAK,GACxB,GAAG,SAAS,QAAQ,QAAQ,GAC5B,QAAQ,SAAS,MAAM,KAAK,CAC9B,CACF,CAAC,CACA,QAAQ,SAAS,EAAE,EAAA,CACV,KAAK,QAAQ,IAAI,EAAE;CACjC;CAEA,MAAM,cAAc,OAA6C;EAC/D,IAAI;GACF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,OAAO;IACN,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,MAAM,MAAM;IACZ,QAAQ,MAAM,UAAU;GAC1B,CAAC,CAAC,CACD,UAAU;GACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,2BAA2B;GAE7C,OAAO;IAAE,GAAG;IAAK,MAAM,UAAU,IAAI,IAAI;GAAE;EAC7C,SAAS,KAAK;GACZ,IAAI,kBAAkB,GAAG,GACvB,MAAM,IAAI,cAAc,mDAAmD;GAE7E,MAAM;EACR;CACF;CAEA,MAAM,cACJ,OACA,IACA,OACyB;EACzB,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,IAAI;GACH,GAAI,MAAM,SAAS,KAAA,KAAa,EAAE,MAAM,MAAM,KAAK;GACnD,GAAI,MAAM,WAAW,KAAA,KAAa,EAAE,QAAQ,MAAM,OAAO;EAC3D,CAAC,CAAC,CACD,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1D,UAAU;EACb,OAAO,MAAM;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,IAAI;CACvD;CAEA,MAAM,oBAAoB,QAAoC;EAM5D,QAAO,MALY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,QAAQ,MAAM,GAAG,GAAG,SAAS,MAAM,SAAS,CAAC,CAAC,CAAC,CACrE,QAAQ,SAAS,SAAS,EAAA,CACjB,KAAK,SAAS;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,EAAE;CAClE;CAEA,MAAM,cAAc,OAAe,IAAqC;EACtE,IAAI;GACF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1D,UAAU;GACb,OAAO,OAAO;EAChB,SAAS,KAAK;GACZ,IAAI,cAAc,GAAG,CAAC,EAAE,SAAS,SAC/B,MAAM,OAAO,OACX,IAAI,cACF,2EACF,GACA,EAAE,OAAO,IAAI,CACf;GAEF,MAAM;EACR;CACF;AACF;AACA,kBAAkB,8BAA8B"}

package/dist/repositories/outbox.js

@@ -1,4 +1,5 @@
 import { eventOutbox } from "../schema/outbox.js";
+import { translateDbErrors } from "./pg-errors.js";
 import { and, asc, eq, isNull, lt, lte, sql } from "drizzle-orm";
 import { noopLogger } from "@headless-lms/core/shared/logger";
 //#region src/repositories/outbox.ts
@@ -50,6 +51,8 @@ var DrizzleOutboxStore = class {
 		}).where(eq(eventOutbox.id, id));
 	}
 };
+translateDbErrors(DrizzleOutboxAppender);
+translateDbErrors(DrizzleOutboxStore);
 //#endregion
 export { DrizzleOutboxAppender, DrizzleOutboxStore, OUTBOX_MAX_ATTEMPTS };
 

package/dist/repositories/outbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"outbox.js","names":[],"sources":["../../src/repositories/outbox.ts"],"sourcesContent":["import { and, asc, eq, isNull, lt, lte, sql } from 'drizzle-orm';\nimport type { NodePgDatabase } from 'drizzle-orm/node-postgres';\nimport type {\n  DomainEvent,\n  NewDomainEvent,\n  OutboxAppender,\n  OutboxMessage,\n  OutboxStore,\n  Logger,\n} from '@headless-lms/core/shared/ports';\nimport { noopLogger } from '@headless-lms/core/shared/logger';\nimport type { EventOutbox } from '@headless-lms/core/schemas';\nimport type { DbExecutor } from '../client.js';\nimport { eventOutbox } from '../schema/outbox.js';\n\n/** A message that fails this many dispatches is parked: fetchBatch stops\n *  claiming it, leaving the row (with its last_error) for inspection. */\nexport const OUTBOX_MAX_ATTEMPTS = 10;\n\nexport class DrizzleOutboxAppender implements OutboxAppender {\n  constructor(\n    private readonly tx: DbExecutor,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async append<E extends NewDomainEvent>(events: E[]): Promise<void> {\n    if (events.length === 0) {\n      return;\n    }\n    await this.tx.insert(eventOutbox).values(\n      events.map((event) => ({\n        type: event.type,\n        orgId: event.orgId,\n        payload: event as unknown as EventOutbox['payload'],\n      })),\n    );\n  }\n}\n\nexport class DrizzleOutboxStore implements OutboxStore {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async fetchBatch(limit: number): Promise<OutboxMessage[]> {\n    const rows = await this.db.transaction((tx) =>\n      tx\n        .select()\n        .from(eventOutbox)\n        .where(\n          and(\n            isNull(eventOutbox.processedAt),\n            lte(eventOutbox.nextAttemptAt, new Date()),\n            lt(eventOutbox.attempts, OUTBOX_MAX_ATTEMPTS),\n          ),\n        )\n        .orderBy(asc(eventOutbox.id))\n        .limit(limit)\n        .for('update', { skipLocked: true }),\n    );\n    return rows.map((row) => ({\n      id: row.id,\n      attempts: row.attempts,\n      payload: {\n        ...row.payload,\n        id: row.id,\n        occurredAt: row.createdAt.toISOString(),\n      } as unknown as DomainEvent,\n    }));\n  }\n\n  async markProcessed(id: string): Promise<void> {\n    await this.db\n      .update(eventOutbox)\n      .set({ processedAt: new Date() })\n      .where(eq(eventOutbox.id, id));\n  }\n\n  async markFailed(id: string, error: string, nextAttemptAt: Date): Promise<void> {\n    await this.db\n      .update(eventOutbox)\n      .set({\n        attempts: sql`${eventOutbox.attempts} + 1`,\n        lastError: error,\n        nextAttemptAt,\n      })\n      .where(eq(eventOutbox.id, id));\n  }\n}\n"],"mappings":";;;;;;AAiBA,MAAa,sBAAsB;AAEnC,IAAa,wBAAb,MAA6D;CAExC;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,OAAiC,QAA4B;EACjE,IAAI,OAAO,WAAW,GACpB;EAEF,MAAM,KAAK,GAAG,OAAO,WAAW,CAAC,CAAC,OAChC,OAAO,KAAK,WAAW;GACrB,MAAM,MAAM;GACZ,OAAO,MAAM;GACb,SAAS;EACX,EAAE,CACJ;CACF;AACF;AAEA,IAAa,qBAAb,MAAuD;CAElC;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,WAAW,OAAyC;EAgBxD,QAAO,MAfY,KAAK,GAAG,aAAa,OACtC,GACG,OAAO,CAAC,CACR,KAAK,WAAW,CAAC,CACjB,MACC,IACE,OAAO,YAAY,WAAW,GAC9B,IAAI,YAAY,+BAAe,IAAI,KAAK,CAAC,GACzC,GAAG,YAAY,UAAA,EAA6B,CAC9C,CACF,CAAC,CACA,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,CAC5B,MAAM,KAAK,CAAC,CACZ,IAAI,UAAU,EAAE,YAAY,KAAK,CAAC,CACvC,EAAA,CACY,KAAK,SAAS;GACxB,IAAI,IAAI;GACR,UAAU,IAAI;GACd,SAAS;IACP,GAAG,IAAI;IACP,IAAI,IAAI;IACR,YAAY,IAAI,UAAU,YAAY;GACxC;EACF,EAAE;CACJ;CAEA,MAAM,cAAc,IAA2B;EAC7C,MAAM,KAAK,GACR,OAAO,WAAW,CAAC,CACnB,IAAI,EAAE,6BAAa,IAAI,KAAK,EAAE,CAAC,CAAC,CAChC,MAAM,GAAG,YAAY,IAAI,EAAE,CAAC;CACjC;CAEA,MAAM,WAAW,IAAY,OAAe,eAAoC;EAC9E,MAAM,KAAK,GACR,OAAO,WAAW,CAAC,CACnB,IAAI;GACH,UAAU,GAAG,GAAG,YAAY,SAAS;GACrC,WAAW;GACX;EACF,CAAC,CAAC,CACD,MAAM,GAAG,YAAY,IAAI,EAAE,CAAC;CACjC;AACF"}
+{"version":3,"file":"outbox.js","names":[],"sources":["../../src/repositories/outbox.ts"],"sourcesContent":["import { and, asc, eq, isNull, lt, lte, sql } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport type {\n  DomainEvent,\n  NewDomainEvent,\n  OutboxAppender,\n  OutboxMessage,\n  OutboxStore,\n  Logger,\n} from \"@headless-lms/core/shared/ports\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport type { EventOutbox } from \"@headless-lms/core/schemas\";\nimport type { DbExecutor } from \"../client.js\";\nimport { eventOutbox } from \"../schema/outbox.js\";\nimport { translateDbErrors } from \"./pg-errors.js\";\n\n/** A message that fails this many dispatches is parked: fetchBatch stops\n *  claiming it, leaving the row (with its last_error) for inspection. */\nexport const OUTBOX_MAX_ATTEMPTS = 10;\n\nexport class DrizzleOutboxAppender implements OutboxAppender {\n  constructor(\n    private readonly tx: DbExecutor,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async append<E extends NewDomainEvent>(events: E[]): Promise<void> {\n    if (events.length === 0) {\n      return;\n    }\n    await this.tx.insert(eventOutbox).values(\n      events.map((event) => ({\n        type: event.type,\n        orgId: event.orgId,\n        payload: event as unknown as EventOutbox[\"payload\"],\n      })),\n    );\n  }\n}\n\nexport class DrizzleOutboxStore implements OutboxStore {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async fetchBatch(limit: number): Promise<OutboxMessage[]> {\n    const rows = await this.db.transaction((tx) =>\n      tx\n        .select()\n        .from(eventOutbox)\n        .where(\n          and(\n            isNull(eventOutbox.processedAt),\n            lte(eventOutbox.nextAttemptAt, new Date()),\n            lt(eventOutbox.attempts, OUTBOX_MAX_ATTEMPTS),\n          ),\n        )\n        .orderBy(asc(eventOutbox.id))\n        .limit(limit)\n        .for(\"update\", { skipLocked: true }),\n    );\n    return rows.map((row) => ({\n      id: row.id,\n      attempts: row.attempts,\n      payload: {\n        ...row.payload,\n        id: row.id,\n        occurredAt: row.createdAt.toISOString(),\n      } as unknown as DomainEvent,\n    }));\n  }\n\n  async markProcessed(id: string): Promise<void> {\n    await this.db\n      .update(eventOutbox)\n      .set({ processedAt: new Date() })\n      .where(eq(eventOutbox.id, id));\n  }\n\n  async markFailed(id: string, error: string, nextAttemptAt: Date): Promise<void> {\n    await this.db\n      .update(eventOutbox)\n      .set({\n        attempts: sql`${eventOutbox.attempts} + 1`,\n        lastError: error,\n        nextAttemptAt,\n      })\n      .where(eq(eventOutbox.id, id));\n  }\n}\ntranslateDbErrors(DrizzleOutboxAppender);\ntranslateDbErrors(DrizzleOutboxStore);\n"],"mappings":";;;;;;;AAkBA,MAAa,sBAAsB;AAEnC,IAAa,wBAAb,MAA6D;CAExC;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,OAAiC,QAA4B;EACjE,IAAI,OAAO,WAAW,GACpB;EAEF,MAAM,KAAK,GAAG,OAAO,WAAW,CAAC,CAAC,OAChC,OAAO,KAAK,WAAW;GACrB,MAAM,MAAM;GACZ,OAAO,MAAM;GACb,SAAS;EACX,EAAE,CACJ;CACF;AACF;AAEA,IAAa,qBAAb,MAAuD;CAElC;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,WAAW,OAAyC;EAgBxD,QAAO,MAfY,KAAK,GAAG,aAAa,OACtC,GACG,OAAO,CAAC,CACR,KAAK,WAAW,CAAC,CACjB,MACC,IACE,OAAO,YAAY,WAAW,GAC9B,IAAI,YAAY,+BAAe,IAAI,KAAK,CAAC,GACzC,GAAG,YAAY,UAAA,EAA6B,CAC9C,CACF,CAAC,CACA,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,CAC5B,MAAM,KAAK,CAAC,CACZ,IAAI,UAAU,EAAE,YAAY,KAAK,CAAC,CACvC,EAAA,CACY,KAAK,SAAS;GACxB,IAAI,IAAI;GACR,UAAU,IAAI;GACd,SAAS;IACP,GAAG,IAAI;IACP,IAAI,IAAI;IACR,YAAY,IAAI,UAAU,YAAY;GACxC;EACF,EAAE;CACJ;CAEA,MAAM,cAAc,IAA2B;EAC7C,MAAM,KAAK,GACR,OAAO,WAAW,CAAC,CACnB,IAAI,EAAE,6BAAa,IAAI,KAAK,EAAE,CAAC,CAAC,CAChC,MAAM,GAAG,YAAY,IAAI,EAAE,CAAC;CACjC;CAEA,MAAM,WAAW,IAAY,OAAe,eAAoC;EAC9E,MAAM,KAAK,GACR,OAAO,WAAW,CAAC,CACnB,IAAI;GACH,UAAU,GAAG,GAAG,YAAY,SAAS;GACrC,WAAW;GACX;EACF,CAAC,CAAC,CACD,MAAM,GAAG,YAAY,IAAI,EAAE,CAAC;CACjC;AACF;AACA,kBAAkB,qBAAqB;AACvC,kBAAkB,kBAAkB"}

package/dist/repositories/pg-errors.d.ts

@@ -1,11 +1,59 @@
+import { ConflictError } from "@headless-lms/core/shared/errors";
 //#region src/repositories/pg-errors.d.ts
 /**
- * Postgres unique_violation (23505).
- *
- * The node-postgres driver sometimes wraps the original error (e.g. behind
- * `cause`), so both levels are checked.
+ * Structured fields off a node-postgres DatabaseError. The driver (and
+ * drizzle's DrizzleQueryError) sometimes wraps the original error behind
+ * `cause`, so both levels are checked.
  */
+type PgErrorFields = {
+  code: string;
+  constraint?: string;
+  table?: string;
+  column?: string;
+  detail?: string;
+};
+declare function pgErrorFields(err: unknown): PgErrorFields | undefined;
+/** Postgres unique_violation (23505). */
 declare function isUniqueViolation(err: unknown): boolean;
+/**
+ * A database failure sanitized for logging: the driver's message, the SQL
+ * text, and the structured pg fields — never the bind params, which a
+ * DrizzleQueryError embeds in its message and can carry PII.
+ */
+declare class DbQueryError extends Error {
+  readonly pg?: PgErrorFields;
+  readonly query?: string;
+  constructor(message: string, opts: {
+    pg?: PgErrorFields;
+    query?: string;
+    cause?: Error;
+  });
+}
+/**
+ * What the unit of work rethrows: constraint violations become domain
+ * ConflictErrors, other query failures become sanitized DbQueryErrors, and
+ * anything non-database passes through untouched.
+ */
+declare function translateDbError(err: unknown): unknown;
+/**
+ * Route every method of a repository class through translateDbError, so no
+ * drizzle or pg error ever leaves this package — regardless of whether the
+ * call runs inside a unit of work. Applied once per class, right below its
+ * declaration.
+ */
+declare function translateDbErrors(cls: {
+  prototype: object;
+}): void;
+/**
+ * Only unique violations (23505) become ConflictErrors: a duplicate is the
+ * one constraint failure the caller can act on, so it earns a 409 with a
+ * client-facing message — the offending column and the caller's own value,
+ * never pg's `detail`. Every other constraint failure (foreign keys
+ * included) is a server-side integrity problem: it stays an internal error,
+ * sanitized by translateDbError and logged, and the client sees a generic
+ * 500. The raw error stays on `cause` for server-side logs.
+ */
+declare function translateConstraintViolation(err: unknown): ConflictError | undefined;
 //#endregion
-export { isUniqueViolation };
+export { DbQueryError, PgErrorFields, isUniqueViolation, pgErrorFields, translateConstraintViolation, translateDbError, translateDbErrors };
 //# sourceMappingURL=pg-errors.d.ts.map